$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/5900a5dc-1f8b-3700-a5c1-3abef935ec61.roa File: 5900a5dc-1f8b-3700-a5c1-3abef935ec61.roa (raw, json) Hash identifier: 59iHVSO0TfwWeZ0vdnxxhv2vAYzhijdb3ehtgab2r48= Subject key identifier: 3C:80:EF:B3:AE:66:3B:DA:1C:D2:F0:51:8F:83:B4:FD:50:1E:BC:DC Certificate issuer: /CN=525bd4b1-ca84-434f-9b43-8f0e44bbd2d5 Certificate serial: 010D0C9F4328584F9BCE00A3037D326CE4929000 Authority key identifier: 97:63:49:0F:63:63:DA:51:20:26:F9:78:0D:6C:3F:A6:FB:84:FA:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/5900a5dc-1f8b-3700-a5c1-3abef935ec61.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 6939 IP address blocks: 199.127.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:ce:00:a3:03:7d:32:6c:e4:92:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525bd4b1-ca84-434f-9b43-8f0e44bbd2d5 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=9d938f02-a6a4-46c5-a5a5-ad3df225813b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:74:6c:c5:1b:47:61:eb:ee:d8:fc:11:d4:fc: d7:39:93:ac:cb:c3:d4:f9:d3:f7:99:c5:16:5a:18: 06:49:16:42:a3:72:eb:e5:b6:cb:39:b5:77:95:6a: 74:c9:5a:32:cf:40:f0:b7:7f:d6:fa:f3:ad:9c:94: 13:64:cb:4d:11:a8:21:7b:99:da:8b:b7:c0:20:03: c0:f6:c8:a8:cc:07:5a:94:c1:0f:88:a1:70:0d:c7: 86:37:78:0d:89:3c:87:a0:a7:e3:2d:e9:8b:8f:bf: dc:df:ff:89:ac:fb:a3:52:2e:d5:2e:ff:1b:a9:2d: 1f:09:29:83:5e:2e:04:bf:8f:ed:c0:77:8c:ad:16: ab:d4:05:9f:7a:98:60:3f:0c:2f:b6:3a:d2:3a:ed: 58:e7:3b:26:8f:2e:a3:a4:1d:d2:0d:3e:b7:bf:dc: 6f:09:f3:57:9b:a3:1a:d1:e9:88:e0:31:72:d2:64: d7:5f:34:87:35:85:35:32:20:88:b0:e8:ae:14:36: 88:f2:28:b3:6c:ff:a4:54:84:d5:7a:a1:85:3a:d4: 98:50:b4:21:ba:fc:05:f4:be:d7:92:e2:6c:05:fa: 3a:b4:13:55:36:92:fc:57:89:75:ea:ba:7a:81:08: ed:17:a6:45:71:2d:a1:53:7b:93:81:c1:b8:13:d6: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:80:EF:B3:AE:66:3B:DA:1C:D2:F0:51:8F:83:B4:FD:50:1E:BC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/5900a5dc-1f8b-3700-a5c1-3abef935ec61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.crl X509v3 Authority Key Identifier: keyid:97:63:49:0F:63:63:DA:51:20:26:F9:78:0D:6C:3F:A6:FB:84:FA:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.cer sbgp-ipAddrBlock: critical IPv4: 199.127.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f4:52:51:90:19:b6:f3:7a:48:66:14:30:c0:8e:4a:e6:3b: c7:3a:44:bb:c9:c0:21:88:ce:40:b9:70:db:1a:82:95:36:71: e7:31:33:a0:99:1f:0e:18:78:53:ab:5b:3d:9e:ae:07:90:d2: 41:10:16:34:07:9c:c9:5d:f1:db:bf:30:f0:0f:12:4d:4f:d1: f6:ce:91:a8:5c:47:bc:4c:f7:c5:22:9b:c5:cb:3a:4e:56:ed: 3c:aa:a3:3b:c3:c2:27:5d:d4:70:09:28:08:6d:ed:95:57:63: 9a:a8:bc:92:90:d1:54:8f:05:e2:25:22:8a:04:92:0e:62:84: 3a:07:73:b1:2f:d4:d0:e7:aa:95:05:7e:0a:3a:23:99:86:98: 5e:75:f3:8d:2c:44:61:0e:44:fb:16:19:54:01:48:ed:1a:80: a8:d7:b7:2f:ee:3f:1c:57:ba:dc:5c:53:66:bd:78:3c:0d:5a: 0b:43:25:98:82:ab:ca:15:2e:80:11:71:98:85:ea:da:41:1f: ed:1e:b4:d0:b6:87:d0:53:44:16:df:60:c1:b9:2c:d9:f7:30: 1f:13:3f:28:66:e5:8a:b4:b9:73:f7:52:26:16:2f:74:83:25: 98:ae:8f:a3:58:e8:02:43:36:69:99:30:50:c4:36:d7:1d:ac: ad:b9:71:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzgCjA30ybOSSkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI1YmQ0YjEtY2E4NC00MzRmLTliNDMtOGYwZTQ0YmJk MmQ1MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OWQ5MzhmMDItYTZhNC00NmM1LWE1YTUtYWQzZGYyMjU4MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3RsxRtHYevu2PwR1PzXOZOsy8PU+dP3mcUW WhgGSRZCo3Lr5bbLObV3lWp0yVoyz0Dwt3/W+vOtnJQTZMtNEaghe5nai7fAIAPA 9siozAdalMEPiKFwDceGN3gNiTyHoKfjLemLj7/c3/+JrPujUi7VLv8bqS0fCSmD Xi4Ev4/twHeMrRar1AWfephgPwwvtjrSOu1Y5zsmjy6jpB3SDT63v9xvCfNXm6Ma 0emI4DFy0mTXXzSHNYU1MiCIsOiuFDaI8iizbP+kVITVeqGFOtSYULQhuvwF9L7X kuJsBfo6tBNVNpL8V4l16rp6gQjtF6ZFcS2hU3uTgcG4E9ZYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyA77OuZjvaHNLwUY+DtP1QHrzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MjVi ZDRiMS1jYTg0LTQzNGYtOWI0My04ZjBlNDRiYmQyZDUvNTkwMGE1ZGMtMWY4Yi0z NzAwLWE1YzEtM2FiZWY5MzVlYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTI1YmQ0YjEtY2E4NC00MzRmLTli NDMtOGYwZTQ0YmJkMmQ1LzUyNWJkNGIxLWNhODQtNDM0Zi05YjQzLThmMGU0NGJi ZDJkNS5jcmwwHwYDVR0jBBgwFoAUl2NJD2Nj2lEgJvl4DWw/pvuE+oowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MjViZDRiMS1jYTg0LTQzNGYtOWI0My04ZjBl NDRiYmQyZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb0UlGQGbbzekhmFDDAjkrmO8c6RLvJwCGIzkC5cNsagpU2cecxM6CZ Hw4YeFOrWz2ergeQ0kEQFjQHnMld8du/MPAPEk1P0fbOkahcR7xM98Uim8XLOk5W 7TyqozvDwidd1HAJKAht7ZVXY5qovJKQ0VSPBeIlIooEkg5ihDoHc7Ev1NDnqpUF fgo6I5mGmF51840sRGEORPsWGVQBSO0agKjXty/uPxxXutxcU2a9eDwNWgtDJZiC q8oVLoARcZiF6tpBH+0etNC2h9BTRBbfYMG5LNn3MB8TPyhm5Yq0uXP3UiYWL3SD JZiuj6NY6AJDNmmZMFDENtcdrK25cZA= -----END CERTIFICATE-----Generated at Thu Nov 5 17:51:13 2026 by rpki-client