$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa File: aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa (raw, json) Hash identifier: 4FOyl/fJ5JvIdjdsZ1pUHjcwAL0jDttc8bW0uvz38hI= Subject key identifier: 51:3B:F9:3D:71:7E:ED:60:C4:1F:AC:B6:36:EE:7A:01:70:F7:1C:12 Certificate issuer: /CN=327601a5-bd55-430e-ba09-d1da1ebfc6b8 Certificate serial: 010D0C9F4328584F3A17D0EADABD69FFF7DCC380 Authority key identifier: 81:B4:C8:5E:6F:68:E3:19:E1:D3:27:60:47:81:6D:4B:F1:D1:CC:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 26304 IP address blocks: 199.202.114.0/24 maxlen: 24 199.202.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d0:ea:da:bd:69:ff:f7:dc:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327601a5-bd55-430e-ba09-d1da1ebfc6b8 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=1fe44634-a985-4b38-9242-b7a03e2e906f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:2e:91:3b:58:a6:52:22:7e:73:19:fb:1d: 4f:e2:d6:1e:4b:cf:e3:24:55:d7:b1:bf:e3:48:04: 81:0f:50:53:76:02:cf:79:85:1c:94:d7:1c:88:a1: 60:86:d7:86:ae:af:0a:cc:ed:09:d9:99:bd:2f:31: 78:e3:12:81:d3:15:74:c7:c5:22:6f:e8:9e:7f:98: e9:95:b1:e4:24:2f:48:c4:72:fa:fe:9c:b8:f0:2e: 74:f2:5f:7f:dc:37:c2:3a:e7:66:a4:2d:1d:0e:39: 47:f2:d2:6f:35:4a:e1:57:25:39:45:89:70:17:99: 34:83:7d:1f:79:0e:f2:65:c5:17:fc:a4:b8:cd:a5: ba:ac:6e:6e:b5:02:42:8a:dd:6b:3b:d9:a8:5f:9a: 23:ce:cb:6b:ba:d5:9b:05:dd:14:bc:ba:89:b8:08: 93:1f:f0:e8:be:a2:eb:8d:59:b5:5c:2e:c6:80:83: 4a:b8:3c:ab:fb:f2:be:f8:9d:eb:8e:1f:8c:c8:18: 9f:91:9d:fc:20:58:40:5d:34:ea:1c:fe:4d:e3:77: 4a:72:13:b0:f5:ca:98:12:88:0e:28:43:16:40:6c: a7:c2:c7:00:6f:ba:4f:e0:7e:61:fa:76:ff:5d:31: 39:8e:90:12:c8:d2:9a:04:31:f7:69:6e:11:33:fe: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3B:F9:3D:71:7E:ED:60:C4:1F:AC:B6:36:EE:7A:01:70:F7:1C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.crl X509v3 Authority Key Identifier: keyid:81:B4:C8:5E:6F:68:E3:19:E1:D3:27:60:47:81:6D:4B:F1:D1:CC:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer sbgp-ipAddrBlock: critical IPv4: 199.202.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:46:9b:f5:ad:59:ff:ad:97:11:51:e2:ee:bf:a4:57:c3:2b: cd:b3:31:5c:1a:c9:61:bc:49:45:1e:23:f5:57:5e:62:e8:38: a3:21:86:f4:fc:a6:7a:d1:bb:e3:2e:45:0a:23:9b:ff:62:53: d1:07:f4:47:7a:b9:60:89:fa:1d:e0:e2:49:af:b5:45:f8:58: d5:73:37:73:9b:a5:4f:a2:13:de:97:2a:c1:83:e3:4c:34:1d: ad:27:84:d7:c4:52:9c:99:ae:3b:13:2d:11:ce:8c:3a:cf:c7: e3:85:ee:1f:f5:51:d6:12:37:03:6e:eb:54:25:49:1e:8f:25: 41:1b:99:a5:0b:de:d6:6a:35:6b:70:a5:39:7b:4e:fe:17:a5: cc:72:96:63:04:cb:91:3f:cc:86:a5:1c:b0:34:2a:58:e0:fe: 8d:10:88:8a:de:cd:e2:49:7d:99:5f:ef:94:38:60:15:9d:d3: ae:4d:b2:e0:8b:c8:ef:76:22:84:f4:2f:fb:0b:66:9c:9c:8e: 34:76:a5:ed:8e:76:cf:22:d7:04:40:63:d1:50:d5:94:83:af: 7a:e1:03:2c:c1:8d:0c:3a:7f:32:10:ba:8e:a0:df:2e:13:df: 99:5c:8e:3c:ec:cd:fa:95:23:bd:21:4e:f0:7a:07:17:44:a7: d4:ce:a4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9Dq2r1p//fcw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3NjAxYTUtYmQ1NS00MzBlLWJhMDktZDFkYTFlYmZj NmI4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MWZlNDQ2MzQtYTk4NS00YjM4LTkyNDItYjdhMDNlMmU5MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsEukTtYplIifnMZ+x1P4tYeS8/jJFXXsb/j SASBD1BTdgLPeYUclNcciKFghteGrq8KzO0J2Zm9LzF44xKB0xV0x8Uib+ief5jp lbHkJC9IxHL6/py48C508l9/3DfCOudmpC0dDjlH8tJvNUrhVyU5RYlwF5k0g30f eQ7yZcUX/KS4zaW6rG5utQJCit1rO9moX5ojzstrutWbBd0UvLqJuAiTH/DovqLr jVm1XC7GgINKuDyr+/K++J3rjh+MyBifkZ38IFhAXTTqHP5N43dKchOw9cqYEogO KEMWQGynwscAb7pP4H5h+nb/XTE5jpASyNKaBDH3aW4RM/5olwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE7+T1xfu1gxB+stjbuegFw9xwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc2 MDFhNS1iZDU1LTQzMGUtYmEwOS1kMWRhMWViZmM2YjgvYWFhMTBkZWQtYTk2Ni0z MmE0LWJkZjEtYjY3NWQ0NTFkMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3NjAxYTUtYmQ1NS00MzBlLWJh MDktZDFkYTFlYmZjNmI4LzMyNzYwMWE1LWJkNTUtNDMwZS1iYTA5LWQxZGExZWJm YzZiOC5jcmwwHwYDVR0jBBgwFoAUgbTIXm9o4xnh0ydgR4FtS/HRzCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc2MDFhNS1iZDU1LTQzMGUtYmEwOS1kMWRh MWViZmM2YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8pyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtGm/WtWf+tlxFR4u6/pFfDK82zMVwayWG8SUUeI/VXXmLoOKMhhvT8 pnrRu+MuRQojm/9iU9EH9Ed6uWCJ+h3g4kmvtUX4WNVzN3ObpU+iE96XKsGD40w0 Ha0nhNfEUpyZrjsTLRHOjDrPx+OF7h/1UdYSNwNu61QlSR6PJUEbmaUL3tZqNWtw pTl7Tv4XpcxylmMEy5E/zIalHLA0Kljg/o0QiIrezeJJfZlf75Q4YBWd065NsuCL yO92IoT0L/sLZpycjjR2pe2Ods8i1wRAY9FQ1ZSDr3rhAyzBjQw6fzIQuo6g3y4T 35lcjjzszfqVI70hTvB6BxdEp9TOpHU= -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:21 2026 by rpki-client