$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa File: 518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa (raw, json) Hash identifier: pAQYr1FwFR4WHWlCgWURhcXV0rd1HmSE+xpmMMseWoA= Subject key identifier: D4:8B:35:DB:42:6B:32:E0:8C:C3:CD:C6:54:16:5C:0C:DA:DF:C3:F7 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584F374D5720337DA106193BD040 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 64267 IP address blocks: 199.189.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:57:20:33:7d:a1:06:19:3b:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=d0b28f1a-bfc5-44c3-a5b0-77655407aad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:33:b6:3a:10:1f:2e:ee:41:c1:07:23:fb: 86:39:7f:3f:0f:2e:d6:3a:de:a3:11:9b:06:b0:3f: d6:17:cf:2d:c8:ef:9e:fa:43:08:95:5b:a7:76:65: 69:bd:c2:aa:78:fc:f6:4f:ff:9c:5b:52:cc:3b:df: 9e:87:1e:cd:9b:13:07:b3:e3:b2:2c:79:2c:4a:fa: cb:f3:ff:17:fe:83:f3:d6:f3:4b:0d:13:fd:82:df: 86:8a:db:00:49:ce:3c:6c:8f:69:09:b1:f7:b3:2d: e6:4a:23:3a:79:cd:b4:64:2d:60:0c:41:dc:2a:05: b4:b3:69:4c:66:1f:2a:63:8a:62:7a:0e:44:31:3a: d9:91:85:25:7f:08:ec:1e:c4:3d:04:c7:84:2c:2d: 03:5f:f0:20:2c:eb:a4:e4:f9:49:ca:2a:ce:3f:83: 73:2d:46:26:f7:73:53:78:2b:db:8b:54:d7:0e:1e: 94:3e:79:73:45:26:e2:b1:84:8e:5d:31:8d:87:a5: b9:ea:5d:ad:c3:3a:17:d3:af:8c:17:33:03:73:e8: b4:5a:39:4e:3d:f9:cf:29:67:9c:48:90:ec:80:37: 7c:9a:87:0e:5d:7a:8b:5b:c2:38:52:cb:b4:04:fa: e6:88:30:6d:ae:22:df:69:ef:f8:e4:c9:4b:6c:5f: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8B:35:DB:42:6B:32:E0:8C:C3:CD:C6:54:16:5C:0C:DA:DF:C3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/518323b2-52f9-3d56-a9ef-166dc4cfe39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 199.189.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2f:66:e6:da:ed:1a:9b:32:ea:c2:c9:2d:80:3d:57:06:12: 10:0d:88:5a:de:ef:42:f6:87:d9:cf:3a:28:4f:7c:40:49:b5: 6e:37:ed:cb:48:75:72:e0:67:6d:60:ad:89:12:1c:5c:5d:da: 37:e4:9f:a8:ed:29:d2:d7:a2:1e:14:b5:7e:0c:76:00:f0:49: bc:dd:a5:ac:1a:f0:18:04:1d:9d:c4:32:dd:ec:6d:ce:77:c5: 9a:1f:00:db:7a:ba:02:fc:f4:08:45:21:cf:04:b4:23:b6:89: 40:c0:dd:50:37:d2:2a:13:9e:5f:61:7f:a2:38:b3:94:df:a6: f3:cd:50:7d:ae:c0:c6:a0:45:ff:1d:5f:fd:ea:37:da:35:b7: 69:2a:da:7e:cd:5d:59:26:5b:43:d6:bf:e1:35:95:f5:0f:d3: b1:d4:5b:c7:00:bd:83:11:f7:de:3b:79:76:3b:31:73:18:3d: 69:6e:3f:13:86:4a:fc:29:b5:3b:6b:b3:92:76:a6:b6:88:39: 82:6c:88:62:d8:c1:53:a6:ec:92:5a:eb:79:bc:25:17:9b:6c: 03:18:46:a6:47:29:88:2f:7a:99:61:d0:5c:91:40:ee:51:ff: b5:5b:85:d6:91:20:ba:fd:b9:fa:b1:38:2a:88:5d:21:e2:8c: 1f:55:8f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVcgM32hBhk70EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDBiMjhmMWEtYmZjNS00NGMzLWE1YjAtNzc2NTU0MDdhYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhwztjoQHy7uQcEHI/uGOX8/Dy7WOt6jEZsG sD/WF88tyO+e+kMIlVundmVpvcKqePz2T/+cW1LMO9+ehx7NmxMHs+OyLHksSvrL 8/8X/oPz1vNLDRP9gt+GitsASc48bI9pCbH3sy3mSiM6ec20ZC1gDEHcKgW0s2lM Zh8qY4pieg5EMTrZkYUlfwjsHsQ9BMeELC0DX/AgLOuk5PlJyirOP4NzLUYm93NT eCvbi1TXDh6UPnlzRSbisYSOXTGNh6W56l2twzoX06+MFzMDc+i0WjlOPfnPKWec SJDsgDd8mocOXXqLW8I4Usu0BPrmiDBtriLfae/45MlLbF8ZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSLNdtCazLgjMPNxlQWXAza38P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvNTE4MzIzYjItNTJmOS0z ZDU2LWE5ZWYtMTY2ZGM0Y2ZlMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx72UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcvZuba7RqbMurCyS2APVcGEhANiFre70L2h9nPOihPfEBJtW437ctI dXLgZ21grYkSHFxd2jfkn6jtKdLXoh4UtX4MdgDwSbzdpawa8BgEHZ3EMt3sbc53 xZofANt6ugL89AhFIc8EtCO2iUDA3VA30ioTnl9hf6I4s5TfpvPNUH2uwMagRf8d X/3qN9o1t2kq2n7NXVkmW0PWv+E1lfUP07HUW8cAvYMR9947eXY7MXMYPWluPxOG SvwptTtrs5J2praIOYJsiGLYwVOm7JJa63m8JRebbAMYRqZHKYgveplh0FyRQO5R /7VbhdaRILr9ufqxOCqIXSHijB9Vj58= -----END CERTIFICATE-----Generated at Tue Sep 22 16:37:04 2026 by rpki-client