$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa File: 3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa (raw, json) Hash identifier: Umvmj9Ivhh4IOQgYVbPFyV4T09Q+5qbF8upcXGsEpb0= Subject key identifier: D2:C9:86:EE:68:9D:E7:9C:E2:8A:99:15:E1:4A:70:42:D2:E3:F5:BD Certificate issuer: /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Certificate serial: 010D0C9F4328584F2C2258AA35EDF446B1AE9500 Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 4150 IP address blocks: 199.91.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:58:aa:35:ed:f4:46:b1:ae:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=49dcf155-f6ae-4cec-9248-76f9a73543f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:07:f7:bf:8a:52:ff:03:31:18:2f:6c:60: 95:d2:7f:08:0f:c0:81:75:90:ab:67:9d:02:31:b0: 0f:07:80:34:9f:c7:70:f2:60:5c:fd:ef:f9:3f:ca: 04:e8:3f:91:be:db:65:19:55:aa:3c:20:49:8f:49: 19:57:6d:f9:19:79:1f:d7:d6:e3:4d:47:66:12:a2: 42:a7:85:da:69:e0:aa:b3:8e:9e:46:3d:f5:7b:81: db:77:c6:f1:f3:a9:ae:aa:ec:33:3c:cd:10:7f:eb: 00:fc:6b:cb:c0:08:09:c7:76:08:73:cc:45:32:a9: a4:22:6e:7e:8f:b7:be:6a:1c:bc:2c:a5:c5:28:b6: 76:e0:28:a6:83:cc:0b:c8:23:86:0b:d1:68:07:0c: 36:b1:25:1d:e5:e6:36:c5:71:4d:f4:2e:ca:95:12: 9e:65:a5:02:cc:9d:8e:2a:1c:dc:92:ea:34:ab:63: d5:18:c3:44:03:88:21:85:4e:fc:e6:9f:5f:3d:f4: 5f:76:a3:96:5c:ea:a0:ca:a5:ad:15:a0:48:5e:bf: 99:4f:a1:bd:38:ca:d7:1c:b6:80:2a:59:68:f4:3c: ec:1d:85:c8:54:49:07:ba:a6:38:bd:ab:95:86:3b: 8f:35:3b:ec:3a:40:cf:2b:98:3b:ee:91:3c:14:d5: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:86:EE:68:9D:E7:9C:E2:8A:99:15:E1:4A:70:42:D2:E3:F5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl X509v3 Authority Key Identifier: keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer sbgp-ipAddrBlock: critical IPv4: 199.91.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:61:1b:fd:ab:c3:65:85:d4:0a:a1:75:eb:f3:00:45:fc:83: ce:c1:c7:d4:3b:50:10:67:f3:00:42:84:98:4d:78:b7:97:7d: f4:86:a0:0b:92:30:42:93:22:ed:da:09:6a:77:35:15:d6:51: ad:53:be:92:bc:e7:a4:a5:5c:6a:73:62:c0:7e:6f:8a:f9:56: 4c:a3:9c:9d:0b:05:c2:18:6b:6c:34:8d:df:52:7e:81:ee:4e: eb:f3:57:c1:37:50:03:02:fa:91:8c:19:dd:03:e0:33:f3:46: 69:d9:a9:6f:b0:a4:ba:30:0c:08:a5:67:61:ad:8e:52:d5:a3: f8:fd:f1:ae:9c:3f:da:e7:96:38:cf:06:73:6a:4c:97:82:61: 96:e2:79:19:8a:fc:ca:e1:9b:86:a9:bb:70:4f:07:3f:4b:97: 81:f5:a6:dd:e5:3b:cc:25:92:50:10:d7:ae:0e:61:01:0e:08: d4:1a:84:13:06:37:6e:bd:96:ed:65:9c:34:55:c6:4d:4e:a2: 95:a4:6b:09:2c:b6:5e:81:4b:44:20:be:a3:dc:9c:9c:aa:7b: 8a:16:22:40:3b:93:fe:2f:51:b4:79:b9:b4:74:c7:76:31:fd: a1:25:77:ef:59:58:f2:6f:84:0a:27:49:38:ca:da:be:9a:12: 75:d1:77:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIliqNe30RrGulQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0NzllMTMtNTVhMS00YTVkLWEwMDItMTE3MGEwZmY1 ZmQyMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NDlkY2YxNTUtZjZhZS00Y2VjLTkyNDgtNzZmOWE3MzU0M2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CUH97+KUv8DMRgvbGCV0n8ID8CBdZCrZ50C MbAPB4A0n8dw8mBc/e/5P8oE6D+RvttlGVWqPCBJj0kZV235GXkf19bjTUdmEqJC p4XaaeCqs46eRj31e4Hbd8bx86muquwzPM0Qf+sA/GvLwAgJx3YIc8xFMqmkIm5+ j7e+ahy8LKXFKLZ24Cimg8wLyCOGC9FoBww2sSUd5eY2xXFN9C7KlRKeZaUCzJ2O Khzckuo0q2PVGMNEA4ghhU785p9fPfRfdqOWXOqgyqWtFaBIXr+ZT6G9OMrXHLaA Kllo9DzsHYXIVEkHuqY4vauVhjuPNTvsOkDPK5g77pE8FNVx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLJhu5oneec4oqZFeFKcELS4/W9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3 OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBmZjVmZDIvM2Y5YjZhZjUtODZlYS0z M2ZlLWE1YjYtNDk5NDBiMjAxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWY0NzllMTMtNTVhMS00YTVkLWEw MDItMTE3MGEwZmY1ZmQyLzFmNDc5ZTEzLTU1YTEtNGE1ZC1hMDAyLTExNzBhMGZm NWZkMi5jcmwwHwYDVR0jBBgwFoAUqLXSOrVPs0AvMi4sLER4Y/pWWLAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcw YTBmZjVmZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5hG/2rw2WF1AqhdevzAEX8g87Bx9Q7UBBn8wBChJhNeLeXffSGoAuS MEKTIu3aCWp3NRXWUa1TvpK856SlXGpzYsB+b4r5VkyjnJ0LBcIYa2w0jd9SfoHu TuvzV8E3UAMC+pGMGd0D4DPzRmnZqW+wpLowDAilZ2GtjlLVo/j98a6cP9rnljjP BnNqTJeCYZbieRmK/Mrhm4apu3BPBz9Ll4H1pt3lO8wlklAQ164OYQEOCNQahBMG N269lu1lnDRVxk1OopWkawkstl6BS0QgvqPcnJyqe4oWIkA7k/4vUbR5ubR0x3Yx /aEld+9ZWPJvhAonSTjK2r6aEnXRd6Y= -----END CERTIFICATE-----Generated at Thu Sep 24 11:46:20 2026 by rpki-client