$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa File: 59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa (raw, json) Hash identifier: f93fj74UrP+yhJHIWB4ud6H211jkGK8eI4SIY7syJZo= Subject key identifier: 1D:D1:A9:65:58:9C:B7:FC:15:D9:C7:3D:06:45:39:A9:8E:18:32:C6 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584F498A37839BE4809915631CE0 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 199.43.48.0/23 maxlen: 23 199.43.48.0/24 maxlen: 24 199.43.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:37:83:9b:e4:80:99:15:63:1c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78c201ee-5c48-4980-b879-dfb31096c1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:05:18:04:65:58:bc:bc:87:dd:bf:75:6f: a1:c9:91:c9:7e:95:16:0c:b6:32:5d:e9:e0:ee:d5: 60:14:ee:76:8a:01:c1:a2:c7:8c:c1:df:90:c3:c8: 53:09:26:eb:6d:4d:af:d4:96:52:64:9c:84:a2:a6: 87:7b:68:8d:6e:f3:91:5e:65:f5:0b:36:bd:59:b3: d4:7f:44:f3:52:53:f0:f4:f4:9a:c4:51:48:db:25: 94:59:f6:26:f9:9a:87:30:56:b7:dd:85:a8:98:bb: 85:e9:d3:03:5f:59:fa:e8:08:7e:80:18:41:05:4a: 66:7b:3a:ad:aa:7f:e8:87:1a:ea:25:d7:18:e0:5e: 8c:45:58:eb:52:33:55:05:f2:9f:3e:a3:41:ef:98: e2:99:58:a5:0c:38:b6:80:ed:80:d4:ee:a5:55:b1: e1:75:0c:ec:eb:b7:f2:ba:64:49:d1:a3:f7:13:7a: cb:5a:af:de:02:9c:fb:4e:77:17:98:7b:83:83:1c: 6f:7d:b8:54:4b:05:d7:04:92:23:81:30:38:9b:09: e1:64:e6:19:61:b0:6f:1d:db:a5:60:7b:e4:01:1b: 28:1f:e5:59:0b:07:dd:66:e7:b1:8a:c2:26:8d:be: fd:0c:77:be:50:b6:6e:e2:fd:38:70:45:88:48:d9: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D1:A9:65:58:9C:B7:FC:15:D9:C7:3D:06:45:39:A9:8E:18:32:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a6:9f:e3:b2:e9:ad:e8:dd:91:45:81:25:0e:f0:f1:5c:ba: 7e:44:98:0b:5b:74:ed:00:b2:b3:37:47:b3:af:11:0f:69:e8: 0a:73:7e:4f:1d:4f:28:09:2f:cb:a4:4b:12:3d:04:54:e2:5d: be:95:0b:3c:26:6d:d7:67:ce:9f:fc:80:a5:05:29:09:11:c5: 41:97:0e:e2:30:51:64:97:92:9d:0d:ab:9b:ad:6a:3e:ec:90: e0:81:1e:d0:62:e5:a3:ec:c6:cc:c2:ca:7f:0d:c7:01:5e:49: 79:b8:21:1e:4e:92:51:6c:f6:c9:9e:c0:a3:8b:ec:8f:b2:d3: b3:d8:69:10:ee:81:a8:44:dd:ac:f7:c7:a1:dd:ff:0a:a8:5f: e1:1e:51:69:ad:97:6b:d1:e0:dd:43:29:5e:45:f7:5f:cf:4c: e1:45:a1:3c:f5:56:53:ae:a5:cd:b3:a7:cb:0f:2c:f3:e0:79: a9:84:69:fc:21:7e:0c:7b:2f:f0:ca:0e:fc:61:8f:95:1d:fd: 02:c9:e2:0e:c5:79:27:e5:11:22:1e:3b:60:42:57:1f:cc:53: 5e:91:08:f4:b2:3e:86:cc:e2:6e:4a:2e:0c:51:f9:20:89:34: 62:47:13:0d:30:a2:a0:9c:8b:94:27:06:2d:28:e4:15:13:3f: 80:3f:72:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JijeDm+SAmRVjHOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhjMjAxZWUtNWM0OC00OTgwLWI4NzktZGZiMzEwOTZjMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fgFGARlWLy8h92/dW+hyZHJfpUWDLYyXeng 7tVgFO52igHBoseMwd+Qw8hTCSbrbU2v1JZSZJyEoqaHe2iNbvORXmX1Cza9WbPU f0TzUlPw9PSaxFFI2yWUWfYm+ZqHMFa33YWomLuF6dMDX1n66Ah+gBhBBUpmezqt qn/ohxrqJdcY4F6MRVjrUjNVBfKfPqNB75jimVilDDi2gO2A1O6lVbHhdQzs67fy umRJ0aP3E3rLWq/eApz7TncXmHuDgxxvfbhUSwXXBJIjgTA4mwnhZOYZYbBvHdul YHvkARsoH+VZCwfdZuexisImjb79DHe+ULZu4v04cEWISNkjbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3RqWVYnLf8FdnHPQZFOamOGDLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvNTljNGE4YjktNzVmYi0z NmFiLWExOTgtMjM5YmIxZjdkNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADemn+Oy6a3o3ZFFgSUO8PFcun5EmAtbdO0AsrM3R7OvEQ9p6Apzfk8d TygJL8ukSxI9BFTiXb6VCzwmbddnzp/8gKUFKQkRxUGXDuIwUWSXkp0Nq5utaj7s kOCBHtBi5aPsxszCyn8NxwFeSXm4IR5OklFs9smewKOL7I+y07PYaRDugahE3az3 x6Hd/wqoX+EeUWmtl2vR4N1DKV5F91/PTOFFoTz1VlOupc2zp8sPLPPgeamEafwh fgx7L/DKDvxhj5Ud/QLJ4g7FeSflESIeO2BCVx/MU16RCPSyPobM4m5KLgxR+SCJ NGJHEw0woqCci5QnBi0o5BUTP4A/ckI= -----END CERTIFICATE-----Generated at Mon Sep 28 19:13:52 2026 by rpki-client