$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/6c0a3fd9-366b-3255-ac11-2746d63f34e4.roa File: 6c0a3fd9-366b-3255-ac11-2746d63f34e4.roa (raw, json) Hash identifier: iSJhlpbl+2BeZ740f76A/f0n9VtGkw+xmSo8YMm/Wq8= Subject key identifier: 8D:40:0B:D3:A9:B5:E0:E1:11:CA:58:A8:43:B2:51:7F:52:D6:26:19 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584F07D77CEEC2BA185AE8084C80 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/6c0a3fd9-366b-3255-ac11-2746d63f34e4.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 965 IP address blocks: 199.30.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7c:ee:c2:ba:18:5a:e8:08:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=c8da65a2-5e3d-4868-b024-526bd93c6bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a1:77:a9:97:ca:d3:27:f1:86:04:6a:e7:92: 19:1e:39:26:fd:79:48:81:20:39:5f:69:95:18:96: 5b:9a:a1:90:63:c2:1d:99:78:1a:d7:89:3e:f2:33: 9b:99:c7:4f:05:07:9c:3f:ce:57:6f:5b:fc:6c:4d: d8:e8:28:92:e2:8e:05:cf:31:a8:c4:a3:d1:67:bb: b3:8c:08:83:c4:b6:3a:eb:8c:b6:55:28:1d:3c:56: 0f:f4:39:d1:9c:6c:1b:29:d4:c8:0d:79:b8:83:51: 1c:e5:1c:42:b0:65:59:2e:d6:4f:59:05:a4:36:4a: 50:1e:47:29:a3:f6:46:58:45:4b:fb:99:1f:bf:9a: 49:00:da:9f:96:d8:1d:26:09:3a:6b:c3:12:c0:4f: 35:d0:0f:60:fa:5e:0a:92:d0:7a:c2:8a:05:06:53: a9:d1:1c:87:d4:7b:0e:94:81:4d:a0:ba:e9:e3:47: b5:e8:01:4a:15:01:b4:0a:f8:f5:d4:cb:d4:c4:9b: f3:57:4d:12:de:9a:0a:b7:17:7f:84:6c:9a:a6:b0: 66:98:4b:81:de:c6:ea:c5:ea:72:22:fb:1a:46:0f: ac:30:d8:49:b0:a6:6e:f7:d0:86:07:8b:25:c6:80: f3:ff:e0:5f:f9:64:8d:48:38:3b:12:0c:cd:81:ff: 15:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:40:0B:D3:A9:B5:E0:E1:11:CA:58:A8:43:B2:51:7F:52:D6:26:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/6c0a3fd9-366b-3255-ac11-2746d63f34e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 199.30.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3d:de:f9:13:11:32:62:1a:b7:b4:d6:97:7f:51:2b:9c:c2: 7f:97:0f:a1:81:99:72:36:68:ed:06:c9:ac:4a:a9:0c:21:d7: da:d8:8e:a2:d1:e3:83:bf:9b:3c:92:81:df:49:83:d1:15:b4: 60:fe:f2:1e:66:ca:96:19:e0:69:d7:f0:24:c1:2b:e1:2e:bf: 80:8a:53:ec:87:9d:e2:6a:cb:f8:f4:49:1c:48:f9:a0:1f:f0: 2d:43:c0:59:39:a9:99:da:bb:16:fe:21:e6:18:aa:2a:55:6f: a3:3d:a1:6c:e9:f7:43:05:f2:18:41:13:71:1a:94:3a:ce:de: 92:26:d6:12:40:80:53:25:95:ef:00:f7:37:a2:d4:09:fd:1c: c1:2d:8a:a3:1b:6f:e3:b4:70:c3:fe:7b:e0:04:d7:fc:43:d0: 5e:67:cd:8e:db:8d:b7:61:5f:66:ec:1c:2e:ba:e7:72:bc:14: cb:97:b0:3e:71:31:d7:4a:93:18:5d:3b:e5:34:73:b1:24:20: 7b:89:86:17:67:b7:c9:2a:4d:7f:5a:ba:ae:de:45:a1:23:58: 1e:d0:67:1f:3a:18:fb:70:6c:82:bf:a9:7e:4a:49:1d:28:94: 4b:7e:c5:b4:43:c9:b1:40:81:7d:4b:e1:43:76:95:40:65:00: 56:65:ce:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13zuwroYWugITIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk YzhkYTY1YTItNWUzZC00ODY4LWIwMjQtNTI2YmQ5M2M2YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKF3qZfK0yfxhgRq55IZHjkm/XlIgSA5X2mV GJZbmqGQY8IdmXga14k+8jObmcdPBQecP85Xb1v8bE3Y6CiS4o4FzzGoxKPRZ7uz jAiDxLY664y2VSgdPFYP9DnRnGwbKdTIDXm4g1Ec5RxCsGVZLtZPWQWkNkpQHkcp o/ZGWEVL+5kfv5pJANqfltgdJgk6a8MSwE810A9g+l4KktB6wooFBlOp0RyH1HsO lIFNoLrp40e16AFKFQG0Cvj11MvUxJvzV00S3poKtxd/hGyaprBmmEuB3sbqxepy IvsaRg+sMNhJsKZu99CGB4slxoDz/+Bf+WSNSDg7EgzNgf8ViQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1AC9OpteDhEcpYqEOyUX9S1iYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNmMwYTNmZDktMzY2Yi0z MjU1LWFjMTEtMjc0NmQ2M2YzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF093vkTETJiGre01pd/USucwn+XD6GBmXI2aO0GyaxKqQwh19rYjqLR 44O/mzySgd9Jg9EVtGD+8h5mypYZ4GnX8CTBK+Euv4CKU+yHneJqy/j0SRxI+aAf 8C1DwFk5qZnauxb+IeYYqipVb6M9oWzp90MF8hhBE3EalDrO3pIm1hJAgFMlle8A 9zei1An9HMEtiqMbb+O0cMP+e+AE1/xD0F5nzY7bjbdhX2bsHC6653K8FMuXsD5x MddKkxhdO+U0c7EkIHuJhhdnt8kqTX9auq7eRaEjWB7QZx86GPtwbIK/qX5KSR0o lEt+xbRDybFAgX1L4UN2lUBlAFZlzqQ= -----END CERTIFICATE-----Generated at Mon Sep 21 23:07:09 2026 by rpki-client