$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa File: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (raw, json) Hash identifier: 1VzgTiryJ4i3c1Fg4sxZTXRkKLAYV0svyD7+cfQAMzI= Subject key identifier: DA:50:DA:25:AC:89:4B:30:1E:FF:86:C1:71:05:B3:97:C3:F7:82:D8 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584F119CFC8DE3DA2F750C8B1680 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 395644 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fc:8d:e3:da:2f:75:0c:8b:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d407df63-d9d6-4cab-a2da-f03480192b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:8a:f6:9a:c2:01:61:87:76:d6:fb:a4:0d: 49:05:0d:85:f6:62:5e:f0:ea:84:f0:db:51:29:eb: b0:e8:db:87:bf:e0:97:26:8a:6d:51:4e:e8:20:ff: 75:03:f7:8f:56:36:1f:5c:b7:5e:40:79:82:89:c0: f9:e1:d4:54:81:32:ca:f4:c0:47:43:ca:45:4b:22: aa:a4:39:46:91:9a:45:35:2a:af:b1:9d:99:64:60: a9:6c:cd:f4:35:59:ef:3b:bd:d7:7a:29:7c:47:26: c6:bd:9c:3e:5d:8d:1c:e1:ed:d6:03:18:55:1a:57: a9:c0:13:57:8e:84:92:0c:4a:f7:c3:f7:f3:db:47: fd:33:62:07:0b:43:00:6c:f4:ff:63:70:e8:f6:6f: 1a:2c:2b:d5:59:6e:4a:16:f5:46:5d:6c:15:02:17: a3:71:fc:82:de:6a:9b:9c:f2:5f:a0:f2:48:e4:2b: d2:80:60:d2:96:8b:7d:4d:9b:93:2e:46:0c:c0:42: 23:85:db:45:7f:92:9b:44:d9:7f:8b:ef:ac:c0:d7: 78:ce:eb:ab:58:f4:10:15:3d:fd:4e:26:6c:7d:5d: 9a:bb:08:ec:cb:30:04:84:c6:12:d7:e0:a7:cb:6e: c9:a4:b8:38:5a:63:d0:eb:5c:81:59:22:ad:ed:01: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:50:DA:25:AC:89:4B:30:1E:FF:86:C1:71:05:B3:97:C3:F7:82:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:02:f7:14:44:20:37:e0:44:7d:62:92:1c:72:f2:99:4e:d2: b9:ca:c0:e5:4f:81:82:85:6b:3b:e5:cb:0d:a2:2b:7a:eb:02: 9c:90:fc:9d:73:eb:15:e4:ed:35:83:74:d1:3c:36:ad:97:37: bc:d6:f8:f7:ad:1a:22:5f:b3:b3:fd:ca:57:df:44:85:35:25: 9d:a7:b6:13:de:8c:77:03:34:72:c5:32:a3:f7:57:51:fc:76: 2a:0b:76:9d:a6:76:fa:24:36:b8:55:74:e2:f4:9e:5c:d5:2a: af:af:0f:2f:81:27:b4:81:70:a7:03:05:c3:5d:ec:10:07:2b: b1:b9:5b:7d:34:57:a4:99:e5:a6:10:b5:94:66:16:8d:66:1d: 2b:60:16:c6:52:b9:72:ea:aa:08:91:02:9a:e2:fc:80:d4:be: 64:d5:87:f6:12:cd:f2:6e:3b:a2:ab:4b:66:9b:51:94:24:f0: eb:17:2e:3c:68:69:fe:5e:81:bb:1d:df:40:71:03:e9:04:40: da:d0:e8:ec:4d:69:48:72:97:99:ce:86:a8:d0:14:fb:db:b6: 9f:1d:ed:89:c7:2f:09:78:be:7c:f8:42:0e:0a:9b:30:89:b8: d8:2e:54:55:70:22:b2:28:8d:1b:2f:40:3b:35:5c:ea:05:89: 0c:1f:9e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPyN49ovdQyLFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQwN2RmNjMtZDlkNi00Y2FiLWEyZGEtZjAzNDgwMTkyYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUeK9prCAWGHdtb7pA1JBQ2F9mJe8OqE8NtR Keuw6NuHv+CXJoptUU7oIP91A/ePVjYfXLdeQHmCicD54dRUgTLK9MBHQ8pFSyKq pDlGkZpFNSqvsZ2ZZGCpbM30NVnvO73Xeil8RybGvZw+XY0c4e3WAxhVGlepwBNX joSSDEr3w/fz20f9M2IHC0MAbPT/Y3Do9m8aLCvVWW5KFvVGXWwVAhejcfyC3mqb nPJfoPJI5CvSgGDSlot9TZuTLkYMwEIjhdtFf5KbRNl/i++swNd4zuurWPQQFT39 TiZsfV2auwjsyzAEhMYS1+Cny27JpLg4WmPQ61yBWSKt7QGMWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpQ2iWsiUswHv+GwXEFs5fD94LYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMWY1ZmFiMjQtNmFlMy0z NjlhLTg0NWItMmI1ODc5NDg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsC9xREIDfgRH1ikhxy8plO0rnKwOVPgYKFazvlyw2iK3rrApyQ/J1z 6xXk7TWDdNE8Nq2XN7zW+PetGiJfs7P9ylffRIU1JZ2nthPejHcDNHLFMqP3V1H8 dioLdp2mdvokNrhVdOL0nlzVKq+vDy+BJ7SBcKcDBcNd7BAHK7G5W300V6SZ5aYQ tZRmFo1mHStgFsZSuXLqqgiRApri/IDUvmTVh/YSzfJuO6KrS2abUZQk8OsXLjxo af5egbsd30BxA+kEQNrQ6OxNaUhyl5nOhqjQFPvbtp8d7YnHLwl4vnz4Qg4KmzCJ uNguVFVwIrIojRsvQDs1XOoFiQwfnpE= -----END CERTIFICATE-----Generated at Wed Sep 23 10:06:00 2026 by rpki-client