$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa File: 499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa (raw, json) Hash identifier: QZPK1vs8Qw+OhvwCxIE7yvG/5YVa+BGvwOu+tmN8Peo= Subject key identifier: F5:8E:33:F0:C5:15:36:2B:2A:42:29:79:54:87:E9:EF:CA:9D:59:94 Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584F20F7AFC2319677E66CDE31C0 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 192.64.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:af:c2:31:96:77:e6:6c:de:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7e75e933-9fa0-4443-a49e-1414ba5f733b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:58:02:fa:fc:d4:f5:32:18:27:9b:21:cd: 74:66:79:85:55:32:aa:66:12:52:56:8f:db:92:1f: 1a:a0:4b:71:ea:15:f7:c8:94:0a:8f:7a:f0:88:13: 72:d6:67:4e:66:ca:69:66:84:d3:d5:5c:9c:30:e4: d9:64:31:9b:6c:9c:48:06:4b:70:2a:e3:ce:4b:26: 8d:5b:95:8c:ee:97:0c:bf:70:d8:29:50:1d:8d:01: 69:47:d6:c9:5c:9a:c0:94:81:76:21:1b:84:91:71: c5:63:17:64:bf:a9:43:93:1f:70:67:2a:8d:34:78: 17:41:42:86:4c:ba:89:2d:2a:f8:43:2b:b6:b2:23: f9:4c:cc:e8:d9:14:2f:3a:ad:22:dc:40:7a:2c:d3: eb:a5:99:bd:d2:f3:06:b0:7f:cb:86:af:60:91:cf: 8c:fa:d7:1c:18:bd:37:83:ca:1a:1e:a4:24:ec:cf: 94:fb:53:8f:83:9e:e0:c7:27:83:73:1a:d3:70:cd: 13:85:57:a5:c4:0b:c9:14:e3:a0:b5:e0:ac:ae:4d: d4:38:cb:08:02:fc:64:52:18:78:37:08:3b:28:3a: 96:4e:25:ec:d9:22:be:c4:33:0f:a9:c3:b6:78:39: 49:2f:89:aa:25:7e:35:df:f1:ce:e6:15:63:2b:82: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8E:33:F0:C5:15:36:2B:2A:42:29:79:54:87:E9:EF:CA:9D:59:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:50:05:39:7a:21:bb:b0:5e:2e:85:30:b9:39:53:f1:18:2a: d1:36:0e:f8:f1:98:4a:7c:06:17:a8:26:57:3d:36:33:b1:74: 7f:63:b3:76:c3:89:3b:8a:a6:b2:f6:43:31:f1:cd:73:77:4c: a7:de:97:f5:84:64:08:29:7c:68:79:33:65:78:80:a5:18:41: 92:1f:23:b4:10:23:d9:e8:e6:5a:f5:76:33:90:64:ab:19:7e: f3:3d:79:7b:df:19:07:d9:45:5c:46:00:14:70:80:1d:28:89: b2:16:51:bf:99:4f:79:45:86:e4:cf:73:93:a0:56:98:45:99: 65:a1:a3:39:50:b9:99:00:e2:c9:41:d7:3d:1d:8e:c7:cb:cb: 47:9e:28:fa:2d:a9:69:35:1c:41:33:c0:b4:1b:0e:f2:36:a6: c7:c0:90:65:5c:ef:a4:f8:f0:71:d6:8c:5a:59:d7:2e:17:ea: 3a:87:9a:37:fa:e6:da:71:cb:c8:86:95:dc:06:70:6b:7e:69: 69:51:84:e4:3e:0d:39:47:aa:b9:4e:fa:81:8a:dc:c2:3b:d8: c0:44:f8:86:6b:b3:cc:ac:df:cb:32:f0:10:a0:8b:96:68:19: 9f:f8:9d:ca:f3:f9:be:0a:9d:3d:d9:9a:99:d9:3c:5f:d3:09: 98:24:1e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96/CMZZ35mzeMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2U3NWU5MzMtOWZhMC00NDQzLWE0OWUtMTQxNGJhNWY3MzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA045YAvr81PUyGCebIc10ZnmFVTKqZhJSVo/b kh8aoEtx6hX3yJQKj3rwiBNy1mdOZsppZoTT1VycMOTZZDGbbJxIBktwKuPOSyaN W5WM7pcMv3DYKVAdjQFpR9bJXJrAlIF2IRuEkXHFYxdkv6lDkx9wZyqNNHgXQUKG TLqJLSr4Qyu2siP5TMzo2RQvOq0i3EB6LNPrpZm90vMGsH/Lhq9gkc+M+tccGL03 g8oaHqQk7M+U+1OPg57gxyeDcxrTcM0ThVelxAvJFOOgteCsrk3UOMsIAvxkUhh4 Nwg7KDqWTiXs2SK+xDMPqcO2eDlJL4mqJX413/HO5hVjK4Lk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWOM/DFFTYrKkIpeVSH6e/KnVmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvNDk5ZjcwOGMtYTNmZC0z YjUzLTlhZTEtOTU4NTVhN2ViZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZQBTl6IbuwXi6FMLk5U/EYKtE2DvjxmEp8BheoJlc9NjOxdH9js3bD iTuKprL2QzHxzXN3TKfel/WEZAgpfGh5M2V4gKUYQZIfI7QQI9no5lr1djOQZKsZ fvM9eXvfGQfZRVxGABRwgB0oibIWUb+ZT3lFhuTPc5OgVphFmWWhozlQuZkA4slB 1z0djsfLy0eeKPotqWk1HEEzwLQbDvI2psfAkGVc76T48HHWjFpZ1y4X6jqHmjf6 5tpxy8iGldwGcGt+aWlRhOQ+DTlHqrlO+oGK3MI72MBE+IZrs8ys38sy8BCgi5Zo GZ/4ncrz+b4KnT3ZmpnZPF/TCZgkHus= -----END CERTIFICATE-----Generated at Tue Sep 22 20:04:29 2026 by rpki-client