$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/b0fb9de3-a842-3f9d-8984-913ee0befe08.roa File: b0fb9de3-a842-3f9d-8984-913ee0befe08.roa (raw, json) Hash identifier: C7Qm32M6+0SpTeUU0jqgQi3THPRljHhY3Z/Yx2VGLG4= Subject key identifier: 4D:8D:5E:BB:7E:D9:BF:57:29:26:1B:25:EB:25:AD:EE:CD:D7:74:A4 Certificate issuer: /CN=4a01ab60-b01a-4c1b-8931-f3722a3633d2 Certificate serial: 010D0C9F4328584F37DE9C6424D1389E2CAD7800 Authority key identifier: A0:9F:B8:1B:BC:81:9B:CE:0E:6A:82:B4:79:AE:46:0B:62:CB:55:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/b0fb9de3-a842-3f9d-8984-913ee0befe08.roa Signing time: Fri 18 Sep 2026 17:53:27 +0000 ROA not before: Fri 18 Sep 2026 17:53:27 +0000 ROA not after: Thu 17 Dec 2026 18:53:27 +0000 asID: 395685 IP address blocks: 199.167.192.0/21 maxlen: 21 199.167.192.0/22 maxlen: 24 199.167.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:de:9c:64:24:d1:38:9e:2c:ad:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a01ab60-b01a-4c1b-8931-f3722a3633d2 Validity Not Before: Sep 18 17:53:27 2026 GMT Not After : Dec 17 18:53:27 2026 GMT Subject: CN=bd6b83ba-2449-4d87-853f-0e72d9755730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:3d:6d:08:f3:c3:97:99:dd:da:a0:a5:6c: 0e:77:8d:bb:10:c9:4f:db:02:c2:28:dd:b9:f4:d2: 28:f1:c8:0c:b8:d9:44:a9:2f:67:e5:8c:ae:81:9a: 6e:39:de:24:09:7d:72:72:99:e0:51:e4:7c:2a:d6: 40:e7:2c:92:3d:19:3c:c7:96:5a:0b:42:69:60:1a: 1f:23:20:17:8f:4e:87:d4:06:f8:0b:02:54:02:98: 20:87:d9:47:3e:1e:fe:33:d6:d3:09:37:b6:df:88: 1b:dd:64:ad:09:4c:95:8f:1d:62:0c:16:c6:2e:85: 7d:c0:70:68:a5:91:72:82:7c:41:58:b1:bd:d5:5a: 11:c2:2f:54:1c:ba:0e:9e:a6:95:31:f7:36:60:63: 1c:90:2c:90:e1:2a:d4:b4:d2:96:f3:27:e0:04:d6: 5f:fb:4d:59:d7:93:3f:60:49:52:44:06:3d:df:f5: 4e:ad:f9:be:04:4b:e3:a8:f5:f0:f4:ea:19:8f:03: 63:70:04:7c:eb:97:9a:ee:0b:50:b8:12:8e:7d:9a: d0:c2:79:76:d4:4c:d1:b0:38:3b:c8:3e:8a:c4:2f: db:bc:0a:b2:c7:88:06:98:4c:b7:b7:f4:b1:85:8c: 50:ce:90:44:fc:8b:77:0f:04:ac:10:9d:0d:20:a2: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:5E:BB:7E:D9:BF:57:29:26:1B:25:EB:25:AD:EE:CD:D7:74:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/b0fb9de3-a842-3f9d-8984-913ee0befe08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2/4a01ab60-b01a-4c1b-8931-f3722a3633d2.crl X509v3 Authority Key Identifier: keyid:A0:9F:B8:1B:BC:81:9B:CE:0E:6A:82:B4:79:AE:46:0B:62:CB:55:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a01ab60-b01a-4c1b-8931-f3722a3633d2.cer sbgp-ipAddrBlock: critical IPv4: 199.167.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a7:ce:92:a2:40:79:09:47:bc:b8:ae:4f:39:51:bf:42:c2: ee:a5:99:39:2f:af:ea:0f:7e:4a:9c:61:e1:fc:4c:25:e9:5a: 6f:03:d1:74:c7:c1:4e:9f:e1:4e:8c:39:6a:d6:d7:3a:e7:be: ad:d7:35:5d:58:fa:61:84:f2:ab:74:1e:34:57:03:bf:e4:93: 9a:ff:af:3c:df:a4:57:63:3e:49:c3:7e:d0:95:41:7b:a6:7e: 8a:03:b3:ee:05:e0:6d:ae:4b:f7:97:87:98:6f:f8:d9:a3:8c: 12:8c:ac:6e:dd:76:61:db:5c:37:db:e4:71:9d:aa:ce:db:fe: cb:45:cf:01:ae:d0:e4:ec:ed:d8:cc:cf:74:7f:ba:7b:9b:ea: 01:bc:13:58:e9:8e:c4:5b:e2:a3:c2:2c:ae:81:d8:bc:ce:64: 6f:c2:e8:9f:e6:27:c0:56:e2:2b:a1:03:1b:69:17:b0:13:9b: 8e:a9:21:55:91:6e:8d:25:d8:9a:84:e3:38:49:e8:3d:29:31: c8:53:cc:a7:33:e4:24:aa:86:b0:14:69:3d:a3:4c:1d:09:23: 4a:75:a6:22:34:1f:f8:34:f9:c2:cb:da:85:ff:be:db:0d:4c: 48:9f:c5:b4:11:9d:52:1a:f7:de:20:94:91:e4:3c:f6:de:a8: 95:9a:d3:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE833pxkJNE4niyteAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwMWFiNjAtYjAxYS00YzFiLTg5MzEtZjM3MjJhMzYz M2QyMB4XDTI2MDkxODE3NTMyN1oXDTI2MTIxNzE4NTMyN1owLzEtMCsGA1UEAxMk YmQ2YjgzYmEtMjQ0OS00ZDg3LTg1M2YtMGU3MmQ5NzU1NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmI9bQjzw5eZ3dqgpWwOd427EMlP2wLCKN25 9NIo8cgMuNlEqS9n5YyugZpuOd4kCX1ycpngUeR8KtZA5yySPRk8x5ZaC0JpYBof IyAXj06H1Ab4CwJUApggh9lHPh7+M9bTCTe234gb3WStCUyVjx1iDBbGLoV9wHBo pZFygnxBWLG91VoRwi9UHLoOnqaVMfc2YGMckCyQ4SrUtNKW8yfgBNZf+01Z15M/ YElSRAY93/VOrfm+BEvjqPXw9OoZjwNjcAR865ea7gtQuBKOfZrQwnl21EzRsDg7 yD6KxC/bvAqyx4gGmEy3t/SxhYxQzpBE/It3DwSsEJ0NIKJTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2NXrt+2b9XKSYbJeslre7N13SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80YTAx YWI2MC1iMDFhLTRjMWItODkzMS1mMzcyMmEzNjMzZDIvYjBmYjlkZTMtYTg0Mi0z ZjlkLTg5ODQtOTEzZWUwYmVmZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGEwMWFiNjAtYjAxYS00YzFiLTg5 MzEtZjM3MjJhMzYzM2QyLzRhMDFhYjYwLWIwMWEtNGMxYi04OTMxLWYzNzIyYTM2 MzNkMi5jcmwwHwYDVR0jBBgwFoAUoJ+4G7yBm84OaoK0ea5GC2LLVV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80YTAxYWI2MC1iMDFhLTRjMWItODkzMS1mMzcy MmEzNjMzZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJynzpKiQHkJR7y4rk85Ub9Cwu6lmTkvr+oPfkqcYeH8TCXpWm8D0XTH wU6f4U6MOWrW1zrnvq3XNV1Y+mGE8qt0HjRXA7/kk5r/rzzfpFdjPknDftCVQXum fooDs+4F4G2uS/eXh5hv+NmjjBKMrG7ddmHbXDfb5HGdqs7b/stFzwGu0OTs7djM z3R/unub6gG8E1jpjsRb4qPCLK6B2LzOZG/C6J/mJ8BW4iuhAxtpF7ATm46pIVWR bo0l2JqE4zhJ6D0pMchTzKcz5CSqhrAUaT2jTB0JI0p1piI0H/g0+cLL2oX/vtsN TEifxbQRnVIa994glJHkPPbeqJWa0zo= -----END CERTIFICATE-----Generated at Tue Sep 22 20:36:07 2026 by rpki-client