$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa File: 23d95a46-a535-30ef-8cc4-386ad17abeb9.roa (raw, json) Hash identifier: dyeWmHWq0tcPsrhdMNh952NS4tL8fQzJTbAhkA36rFY= Subject key identifier: E1:D0:DC:7B:3E:A8:0B:BE:CB:A2:1A:58:61:F5:38:CD:E2:CE:D6:A0 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584F093D103AF0BA05F15F7B5080 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 21782 IP address blocks: 199.45.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:10:3a:f0:ba:05:f1:5f:7b:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3a9a4442-9499-4c04-a913-ce56322e1987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:98:1e:25:88:c6:a5:87:87:14:d1:3f:3c: 3f:38:9c:24:09:7e:62:6d:02:0e:7b:75:1d:d8:ab: b0:8e:ab:c1:49:8f:69:b4:51:ac:d1:87:ca:68:60: 5c:ac:dd:95:5f:f0:19:b4:aa:b0:68:4d:4a:61:05: e9:3b:d3:36:6f:66:5a:a5:43:07:31:4d:39:52:33: da:db:01:23:96:fc:c5:2e:65:be:01:4f:ae:0c:2a: 0e:81:c2:a9:97:d0:b0:cd:24:80:be:30:6c:37:37: cb:3d:9b:69:74:1f:47:93:f9:fa:41:ed:68:c5:9b: 2c:d7:a2:84:e1:4b:e5:5f:6f:e8:5b:59:89:d2:95: 3d:f1:80:fa:51:2d:0a:ed:ef:00:09:4c:08:5d:a1: 84:37:e0:d7:94:b2:4d:31:02:2c:38:c1:01:cc:58: 6c:67:41:b6:e5:ec:68:7b:6a:bf:5d:76:aa:03:01: 19:df:96:0a:4d:6d:4a:34:c5:93:67:ce:c2:2c:1c: 75:f5:17:25:01:d7:e4:a8:63:ea:67:69:15:7c:f5: 8c:5b:a2:78:39:85:df:71:9e:51:67:7b:c1:fe:e1: 31:e9:ac:ec:ef:ea:d1:0b:dd:34:65:9a:a0:47:6d: 06:8c:84:29:57:94:e9:6c:b6:24:fe:ff:f3:6c:23: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D0:DC:7B:3E:A8:0B:BE:CB:A2:1A:58:61:F5:38:CD:E2:CE:D6:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 199.45.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:91:66:39:7c:7c:fd:c8:92:40:10:29:7f:e6:08:3a:fa:e6: 3b:9e:02:2a:d8:85:ae:d6:8b:5f:b2:e9:38:ee:5a:85:b0:e8: 40:ad:b1:67:cb:9a:25:b5:87:7e:96:8a:e8:c0:ce:54:15:94: 1b:76:aa:32:84:ae:fa:8d:c1:6a:6c:7c:c8:e3:c9:c4:91:dd: 27:7d:2c:89:a7:3a:f6:4d:50:ab:a1:f1:52:37:82:22:06:41: c2:ee:e9:a1:cb:de:7c:e3:54:74:5c:01:13:dd:b1:17:07:6b: 45:d3:10:1d:ed:38:d4:3b:ec:eb:13:30:1a:56:20:28:40:8d: ac:dc:71:d1:1f:60:58:f9:3d:56:d5:b5:8a:3d:28:7b:d8:71: 31:00:6e:8e:41:7d:e5:f6:d4:e0:19:2a:55:3d:61:a6:5e:5c: 96:27:e2:aa:96:33:e6:c8:fe:f0:9a:88:92:a8:dc:01:0d:5a: b6:85:8c:84:65:4a:67:a7:68:42:cb:c9:21:70:a6:5e:a3:f2: 09:24:f7:85:f0:23:6c:1a:ee:57:04:f9:7f:0e:b0:ed:44:c5: d3:f9:8b:5c:29:f8:4d:e5:a2:f1:a7:97:09:f8:e5:fd:66:20: e2:27:35:d1:b9:28:d6:c4:12:23:5f:f5:a7:89:66:c6:13:fd: f7:53:4d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPRA68LoF8V97UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk M2E5YTQ0NDItOTQ5OS00YzA0LWE5MTMtY2U1NjMyMmUxOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEKYHiWIxqWHhxTRPzw/OJwkCX5ibQIOe3Ud 2KuwjqvBSY9ptFGs0YfKaGBcrN2VX/AZtKqwaE1KYQXpO9M2b2ZapUMHMU05UjPa 2wEjlvzFLmW+AU+uDCoOgcKpl9CwzSSAvjBsNzfLPZtpdB9Hk/n6Qe1oxZss16KE 4UvlX2/oW1mJ0pU98YD6US0K7e8ACUwIXaGEN+DXlLJNMQIsOMEBzFhsZ0G25exo e2q/XXaqAwEZ35YKTW1KNMWTZ87CLBx19RclAdfkqGPqZ2kVfPWMW6J4OYXfcZ5R Z3vB/uEx6azs7+rRC900ZZqgR20GjIQpV5TpbLYk/v/zbCN4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHQ3Hs+qAu+y6IaWGH1OM3iztagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMjNkOTVhNDYtYTUzNS0z MGVmLThjYzQtMzg2YWQxN2FiZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExy2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHORZjl8fP3IkkAQKX/mCDr65jueAirYha7Wi1+y6TjuWoWw6ECtsWfL miW1h36WiujAzlQVlBt2qjKErvqNwWpsfMjjycSR3Sd9LImnOvZNUKuh8VI3giIG QcLu6aHL3nzjVHRcARPdsRcHa0XTEB3tONQ77OsTMBpWIChAjazccdEfYFj5PVbV tYo9KHvYcTEAbo5BfeX21OAZKlU9YaZeXJYn4qqWM+bI/vCaiJKo3AENWraFjIRl SmenaELLySFwpl6j8gkk94XwI2wa7lcE+X8OsO1ExdP5i1wp+E3lovGnlwn45f1m IOInNdG5KNbEEiNf9aeJZsYT/fdTTXo= -----END CERTIFICATE-----Generated at Mon Sep 21 18:54:03 2026 by rpki-client