$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa File: b2bdc569-7ee9-3178-acac-30837a20d2da.roa (raw, json) Hash identifier: VBIKe1jG7G2V3OScMfMk3Sk89KQqf8PxEah55eO8o/U= Subject key identifier: 19:14:F8:D9:30:75:29:66:CE:AA:67:41:9D:DF:B9:4D:6C:8A:4F:C5 Certificate issuer: /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc Certificate serial: 010D0C9F4328584EEA8752E5033EB9780A6F2F40 Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 396982 IP address blocks: 199.47.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:52:e5:03:3e:b9:78:0a:6f:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=f601ad5b-0220-42e1-8bc9-23c080b4eaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:ab:05:a3:84:1c:ed:1f:08:bf:d9:90:a6: 33:9b:24:e8:ed:54:ca:86:ed:ea:16:b6:aa:c6:53: 79:7e:23:fa:b1:15:de:be:d5:a5:5c:97:39:d9:ed: 51:7a:4c:b1:26:46:b2:02:e7:ae:ee:32:a0:85:a0: 50:44:46:46:a4:1c:e6:86:50:da:f0:dd:f1:d4:48: fd:80:b4:09:b3:51:e8:8a:a5:18:1c:f5:ac:d5:ef: 52:6d:a0:ca:89:3d:ff:55:05:c8:e0:5a:4a:fc:61: 4c:40:b5:ff:27:88:d7:12:ea:ea:9d:ad:0a:83:14: 2b:1b:23:4e:0a:3e:d1:13:86:0c:2d:7b:5e:89:dd: fd:50:f3:a8:32:c6:a4:e4:f2:7f:b1:78:d1:04:58: 3c:4c:3f:4d:0f:92:43:15:44:c4:6c:50:45:fe:82: 7b:ab:61:13:04:6c:fe:ca:62:90:11:ce:07:98:90: 52:b4:9c:4f:3e:2a:ec:90:81:0c:3e:ab:f6:20:bc: da:3d:31:39:c5:e7:9b:c4:90:c5:8f:b7:bf:b0:c5: e1:b5:c7:bd:cd:2a:aa:66:b2:9c:b9:d3:62:e1:e4: 90:4d:03:4b:a2:32:47:81:ba:37:f3:45:54:98:2c: 5a:99:5b:bb:dc:ee:d4:7f:cb:f8:bd:7e:8d:58:76: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:14:F8:D9:30:75:29:66:CE:AA:67:41:9D:DF:B9:4D:6C:8A:4F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl X509v3 Authority Key Identifier: keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer sbgp-ipAddrBlock: critical IPv4: 199.47.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:da:47:18:92:e6:a5:aa:eb:55:20:b4:89:f2:16:c2:32:4e: dc:5e:43:a9:51:dd:dc:2f:89:4d:8a:e5:be:c2:42:5e:61:ab: 8b:f8:ef:10:ee:fd:be:b2:05:c9:b6:f4:ff:6a:c3:2e:fa:86: b8:c8:a9:20:f6:04:f2:cb:de:55:ea:02:41:33:63:ee:6c:6c: c8:6a:a8:00:4d:23:4a:f9:a9:a1:81:6a:62:e9:ba:70:9a:55: 7f:fe:5b:f1:fb:f1:b4:27:20:74:a8:59:2a:35:fc:af:71:32: 12:45:a6:51:e7:d9:45:31:1a:ce:1f:ea:e8:f0:11:ec:cd:bb: 80:79:37:e0:3c:85:99:4c:35:21:0a:92:0b:50:b6:8e:db:be: f9:d7:ac:3a:e5:1d:bc:5e:36:93:03:ac:a9:40:65:54:bd:0a: cc:4e:f0:44:7f:88:09:c8:32:e1:27:ff:59:d6:e9:34:dd:9f: b4:fd:99:6e:02:84:7d:a4:c9:6b:31:41:b1:d1:29:f1:8f:69: bb:f9:9c:ea:b1:25:de:12:e9:f7:b5:ec:a1:d3:25:03:df:8b: 57:32:17:70:da:d4:85:0a:4c:c3:34:e9:8e:d5:ea:03:5d:7e: 60:87:03:b2:03:b2:c8:4b:fb:4f:7f:cc:f4:11:c7:79:a8:7c: 03:63:93:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1LlAz65eApvL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIwMjJhYjktZDQzMC00NTBlLWE4MGQtMWE3MTQ4YTdk YmJjMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjYwMWFkNWItMDIyMC00MmUxLThiYzktMjNjMDgwYjRlYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQOrBaOEHO0fCL/ZkKYzmyTo7VTKhu3qFraq xlN5fiP6sRXevtWlXJc52e1RekyxJkayAueu7jKghaBQREZGpBzmhlDa8N3x1Ej9 gLQJs1HoiqUYHPWs1e9SbaDKiT3/VQXI4FpK/GFMQLX/J4jXEurqna0KgxQrGyNO Cj7RE4YMLXteid39UPOoMsak5PJ/sXjRBFg8TD9ND5JDFUTEbFBF/oJ7q2ETBGz+ ymKQEc4HmJBStJxPPirskIEMPqv2ILzaPTE5xeebxJDFj7e/sMXhtce9zSqqZrKc udNi4eSQTQNLojJHgbo380VUmCxamVu73O7Uf8v4vX6NWHaCdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkU+NkwdSlmzqpnQZ3fuU1sik/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAy MmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcxNDhhN2RiYmMvYjJiZGM1NjktN2VlOS0z MTc4LWFjYWMtMzA4MzdhMjBkMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWIwMjJhYjktZDQzMC00NTBlLWE4 MGQtMWE3MTQ4YTdkYmJjLzFiMDIyYWI5LWQ0MzAtNDUwZS1hODBkLTFhNzE0OGE3 ZGJiYy5jcmwwHwYDVR0jBBgwFoAUo8M4iIIgnJn36zfr4FdOUnaHqBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAyMmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcx NDhhN2RiYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTaRxiS5qWq61UgtInyFsIyTtxeQ6lR3dwviU2K5b7CQl5hq4v47xDu /b6yBcm29P9qwy76hrjIqSD2BPLL3lXqAkEzY+5sbMhqqABNI0r5qaGBamLpunCa VX/+W/H78bQnIHSoWSo1/K9xMhJFplHn2UUxGs4f6ujwEezNu4B5N+A8hZlMNSEK kgtQto7bvvnXrDrlHbxeNpMDrKlAZVS9CsxO8ER/iAnIMuEn/1nW6TTdn7T9mW4C hH2kyWsxQbHRKfGPabv5nOqxJd4S6fe17KHTJQPfi1cyF3Da1IUKTMM06Y7V6gNd fmCHA7IDsshL+09/zPQRx3mofANjk+w= -----END CERTIFICATE-----Generated at Mon Sep 21 03:07:54 2026 by rpki-client