$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/3402335c-cb8f-3cc6-a51b-48ca0bb5605c.roa File: 3402335c-cb8f-3cc6-a51b-48ca0bb5605c.roa (raw, json) Hash identifier: oijwa0jyRe8eCURePPRzhGoGzdYN7kbQVt5Y82Sh2/8= Subject key identifier: FE:A9:97:EB:8E:34:38:3A:E3:F6:06:86:FF:13:7F:9C:C1:47:DB:E2 Certificate issuer: /CN=4a01ab60-b01a-4c1b-8931-f3722a3633d2 Certificate serial: 010D0C9F4328584F37DEA19CEEDB4E7ADAD4C780 Authority key identifier: A0:9F:B8:1B:BC:81:9B:CE:0E:6A:82:B4:79:AE:46:0B:62:CB:55:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/3402335c-cb8f-3cc6-a51b-48ca0bb5605c.roa Signing time: Fri 18 Sep 2026 17:53:29 +0000 ROA not before: Fri 18 Sep 2026 17:53:29 +0000 ROA not after: Thu 17 Dec 2026 18:53:29 +0000 asID: 399220 IP address blocks: 199.167.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:de:a1:9c:ee:db:4e:7a:da:d4:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a01ab60-b01a-4c1b-8931-f3722a3633d2 Validity Not Before: Sep 18 17:53:29 2026 GMT Not After : Dec 17 18:53:29 2026 GMT Subject: CN=4296be9d-d019-424c-93c4-aa4c8ae892e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:55:9a:8a:e1:2e:a7:49:19:ba:ae:d6:bb: f2:1d:bf:20:28:d5:b2:18:88:e2:91:11:9a:6e:c4: 4f:26:82:b0:03:6e:f2:c5:39:a5:2e:3b:3e:98:55: f0:39:d8:42:0b:e1:d1:e6:f2:a4:1c:35:ac:02:78: f4:f9:91:73:8c:a8:d3:25:c9:c1:55:3e:e4:f5:ec: bd:76:ed:8b:03:bd:87:60:50:8b:44:3a:54:d9:60: e5:97:4f:b1:d2:ef:63:cc:bc:36:1c:23:c7:46:1b: cd:95:9e:90:6f:98:af:57:12:83:6d:80:ea:b1:1b: e5:82:d0:01:9f:12:6b:01:39:ba:40:13:0c:60:d3: d1:b3:16:95:b8:5b:81:e7:39:9b:f7:c6:5b:45:79: 83:fc:7b:06:8d:7a:c2:08:49:7d:f0:09:82:c1:7b: a9:12:52:e1:5a:49:49:be:2c:90:f8:28:85:a9:49: 4e:ce:f5:1e:a7:00:ad:a5:8e:be:47:31:41:12:cd: 55:4b:b5:4c:2f:71:49:97:e2:52:19:ac:c6:88:72: c6:28:0c:38:66:e4:12:0e:e2:b7:74:35:b0:78:f7: 2a:4d:50:4d:f5:36:3f:ea:c4:21:6b:71:10:ad:66: e7:fe:29:68:11:9e:ff:07:29:53:34:97:63:6f:4c: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:97:EB:8E:34:38:3A:E3:F6:06:86:FF:13:7F:9C:C1:47:DB:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/3402335c-cb8f-3cc6-a51b-48ca0bb5605c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.crl X509v3 Authority Key Identifier: keyid:A0:9F:B8:1B:BC:81:9B:CE:0E:6A:82:B4:79:AE:46:0B:62:CB:55:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer sbgp-ipAddrBlock: critical IPv4: 199.167.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b2:a4:a0:87:65:38:e3:8d:d1:83:45:e7:2c:0a:b0:f6:45: 18:0a:18:fb:43:cd:26:75:59:04:23:67:10:a6:f8:15:79:87: 34:1e:43:03:01:8c:38:bd:50:6b:93:66:62:49:ca:b8:f1:d5: 4d:23:16:54:13:b1:b3:8c:e7:81:4f:b5:02:af:72:27:ba:45: f4:ce:cc:21:1a:79:16:c4:0b:89:45:e0:eb:f4:e3:95:e5:54: ae:1b:ef:e2:8d:b6:56:27:da:6e:cc:cd:39:c0:b1:b9:21:d3: 46:27:cd:db:c8:3c:53:4d:70:22:3c:5f:3a:32:17:aa:d0:ba: f2:bd:f1:7b:a1:dd:2a:4a:c6:f6:71:92:81:25:04:c2:6b:52: d7:81:d3:f6:db:4d:eb:3c:69:6d:f4:50:5b:13:c2:2d:c9:fc: 9b:97:6e:fe:1d:9d:39:42:2f:d8:75:7d:03:15:d5:4e:5d:15: 7d:34:f2:cc:04:02:d7:56:92:60:72:9e:c0:82:13:2f:6a:e9: 49:64:4a:c4:b9:f5:e4:e9:0b:0e:60:87:ce:68:a7:f1:bc:19: ff:49:12:04:e0:86:90:4b:c9:03:3e:11:1b:c5:0b:c7:92:5d: 49:11:21:76:51:17:41:18:aa:a9:f8:3d:c6:10:c8:03:10:96: 6e:9b:7e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE833qGc7ttOetrUx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwMWFiNjAtYjAxYS00YzFiLTg5MzEtZjM3MjJhMzYz M2QyMB4XDTI2MDkxODE3NTMyOVoXDTI2MTIxNzE4NTMyOVowLzEtMCsGA1UEAxMk NDI5NmJlOWQtZDAxOS00MjRjLTkzYzQtYWE0YzhhZTg5MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwpVmorhLqdJGbqu1rvyHb8gKNWyGIjikRGa bsRPJoKwA27yxTmlLjs+mFXwOdhCC+HR5vKkHDWsAnj0+ZFzjKjTJcnBVT7k9ey9 du2LA72HYFCLRDpU2WDll0+x0u9jzLw2HCPHRhvNlZ6Qb5ivVxKDbYDqsRvlgtAB nxJrATm6QBMMYNPRsxaVuFuB5zmb98ZbRXmD/HsGjXrCCEl98AmCwXupElLhWklJ viyQ+CiFqUlOzvUepwCtpY6+RzFBEs1VS7VML3FJl+JSGazGiHLGKAw4ZuQSDuK3 dDWwePcqTVBN9TY/6sQha3EQrWbn/iloEZ7/BylTNJdjb0y6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6pl+uONDg64/YGhv8Tf5zBR9viMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80YTAx YWI2MC1iMDFhLTRjMWItODkzMS1mMzcyMmEzNjMzZDIvMzQwMjMzNWMtY2I4Zi0z Y2M2LWE1MWItNDhjYTBiYjU2MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGEwMWFiNjAtYjAxYS00YzFiLTg5 MzEtZjM3MjJhMzYzM2QyLzRhMDFhYjYwLWIwMWEtNGMxYi04OTMxLWYzNzIyYTM2 MzNkMi5jcmwwHwYDVR0jBBgwFoAUoJ+4G7yBm84OaoK0ea5GC2LLVV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80YTAxYWI2MC1iMDFhLTRjMWItODkzMS1mMzcy MmEzNjMzZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOypKCHZTjjjdGDRecsCrD2RRgKGPtDzSZ1WQQjZxCm+BV5hzQeQwMB jDi9UGuTZmJJyrjx1U0jFlQTsbOM54FPtQKvcie6RfTOzCEaeRbEC4lF4Ov045Xl VK4b7+KNtlYn2m7MzTnAsbkh00YnzdvIPFNNcCI8XzoyF6rQuvK98Xuh3SpKxvZx koElBMJrUteB0/bbTes8aW30UFsTwi3J/JuXbv4dnTlCL9h1fQMV1U5dFX008swE AtdWkmBynsCCEy9q6UlkSsS59eTpCw5gh85op/G8Gf9JEgTghpBLyQM+ERvFC8eS XUkRIXZRF0EYqqn4PcYQyAMQlm6bfmQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:36:10 2026 by rpki-client