$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa File: ce3942cf-da09-348f-8f5b-ea408d9b3772.roa (raw, json) Hash identifier: SWkhpnvTOobqyEcAg8/x2h9WG9jPMHiKAAwwTdCMwbU= Subject key identifier: D1:CA:02:17:2C:70:DC:41:09:B4:65:1F:1A:66:FA:8A:E3:92:5D:9E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DDC8AF19BDC56574F9E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12008 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:dc:8a:f1:9b:dc:56:57:4f:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f8e39d8-f790-46ef-85de-8dc4828eaa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:77:fd:eb:65:35:d3:47:e8:b0:b6:69:bf: c9:48:c4:d1:bd:6d:78:ba:d8:8f:99:85:e9:04:06: 36:96:1b:ad:76:c3:d3:cf:b5:66:20:8c:c7:39:5c: 5c:16:11:e4:a1:01:d5:51:d6:e4:90:2f:67:ab:6b: 85:3f:1a:ed:75:16:22:85:ec:ed:ec:60:34:95:78: 70:f1:25:27:1d:7a:c6:41:49:de:cf:b2:6a:04:de: a2:54:34:a4:68:11:9f:a3:57:27:82:21:ac:c3:99: 8d:19:14:d9:8d:a6:af:76:4d:89:3a:8f:10:85:e8: c1:b1:21:c9:65:f3:ea:fd:b3:56:5f:4b:0b:e0:f7: 91:0a:0d:d4:c0:e1:f7:65:d1:6c:19:38:ba:57:f6: f9:6f:27:0b:60:61:14:90:8a:f1:69:1d:e4:94:0a: be:e2:3d:ac:04:77:81:a1:09:dc:d0:d2:1a:35:b7: b1:ec:b7:fd:a3:3e:b3:e0:8e:6b:1a:7a:9a:ea:6a: 5a:a3:57:2f:0d:f2:64:5d:ec:f1:13:d7:2e:67:2e: 61:6c:aa:04:61:08:94:62:82:25:31:26:6d:db:20: 0b:ac:4c:86:ea:73:72:93:22:19:f1:8f:2d:2c:23: d9:90:71:ad:1e:19:72:be:d3:f9:a4:15:20:d6:3f: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CA:02:17:2C:70:DC:41:09:B4:65:1F:1A:66:FA:8A:E3:92:5D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4b:08:43:52:51:e0:53:4e:b1:f1:9a:ed:7e:63:de:8c:b0: cb:b8:2d:7d:d5:09:0b:49:2c:c6:28:ed:44:fe:fc:6a:ca:84: 31:69:03:8d:b8:d5:e5:4f:0f:a9:71:12:ab:05:97:c2:ca:8d: 3d:f2:6e:a3:46:c7:8e:06:d8:74:0e:dd:ae:18:54:12:64:59: 52:7a:07:4c:c3:c4:87:4e:9b:38:6e:ba:01:b4:25:e0:2a:1c: 63:3f:5a:39:56:73:56:ea:de:3d:d7:a6:99:03:41:48:31:79: db:63:97:a7:f7:1b:4c:31:ad:cb:9b:9c:aa:12:d4:31:1c:a1: 46:82:a6:bb:a8:4d:9d:c9:c4:4c:2b:64:3a:77:07:7e:27:7b: 0f:ec:89:95:9f:1f:86:d9:3d:0d:0f:48:d3:0b:45:bc:27:6f: b9:39:04:ff:20:7e:a5:8b:60:88:4b:a4:3c:fa:11:7e:36:fa: 6e:24:48:15:23:56:d5:59:04:95:5f:0d:60:07:40:52:4c:7d: 31:08:54:a5:35:29:85:59:11:22:7c:51:6e:04:dd:b1:72:fa: 11:89:47:bf:45:fb:55:75:8c:98:0b:e6:8a:88:bc:26:37:db: cb:1e:a8:78:58:ec:37:6c:f3:1b:cd:03:fb:17:23:2d:19:f8: 5f:d0:03:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfdyK8ZvcVldPnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmY4ZTM5ZDgtZjc5MC00NmVmLTg1ZGUtOGRjNDgyOGVhYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu193/etlNdNH6LC2ab/JSMTRvW14utiPmYXp BAY2lhutdsPTz7VmIIzHOVxcFhHkoQHVUdbkkC9nq2uFPxrtdRYihezt7GA0lXhw 8SUnHXrGQUnez7JqBN6iVDSkaBGfo1cngiGsw5mNGRTZjaavdk2JOo8QhejBsSHJ ZfPq/bNWX0sL4PeRCg3UwOH3ZdFsGTi6V/b5bycLYGEUkIrxaR3klAq+4j2sBHeB oQnc0NIaNbex7Lf9oz6z4I5rGnqa6mpao1cvDfJkXezxE9cuZy5hbKoEYQiUYoIl MSZt2yALrEyG6nNykyIZ8Y8tLCPZkHGtHhlyvtP5pBUg1j+FXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHKAhcscNxBCbRlHxpm+orjkl2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2UzOTQyY2YtZGEwOS0z NDhmLThmNWItZWE0MDhkOWIzNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxLCENSUeBTTrHxmu1+Y96MsMu4LX3VCQtJLMYo7UT+/GrKhDFpA424 1eVPD6lxEqsFl8LKjT3ybqNGx44G2HQO3a4YVBJkWVJ6B0zDxIdOmzhuugG0JeAq HGM/WjlWc1bq3j3XppkDQUgxedtjl6f3G0wxrcubnKoS1DEcoUaCpruoTZ3JxEwr ZDp3B34new/siZWfH4bZPQ0PSNMLRbwnb7k5BP8gfqWLYIhLpDz6EX42+m4kSBUj VtVZBJVfDWAHQFJMfTEIVKU1KYVZESJ8UW4E3bFy+hGJR79F+1V1jJgL5oqIvCY3 28seqHhY7Dds8xvNA/sXIy0Z+F/QA8Q= -----END CERTIFICATE-----Generated at Sat Sep 26 04:51:41 2026 by rpki-client