$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa File: 299cd2db-655a-3cdd-9cad-92d013df4297.roa (raw, json) Hash identifier: uk870Ka8llxl/to6KqTcFSmAtnVQvTHwCf6RJmWGyqo= Subject key identifier: 03:FF:2A:D8:FD:E0:30:12:09:59:B8:BB:11:EC:87:8E:9E:A8:29:F4 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584F2ABD11CB980F1C7DF09C6300 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 803 IP address blocks: 96.125.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:11:cb:98:0f:1c:7d:f0:9c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=1102fbe0-4b65-4ac0-917b-a337b8a98d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:0e:69:8a:15:b5:5d:d1:09:76:cb:83:60: ad:01:c6:91:c7:1f:db:8c:3f:4e:bd:88:9c:bf:89: 9c:1c:2b:ff:6c:b4:ac:1b:6d:a6:03:73:00:29:a4: a0:a6:92:dc:37:07:8d:a8:48:b2:3f:53:f7:9a:4a: 06:db:74:04:7f:31:f7:4a:0b:7f:47:0e:2d:15:29: 5e:a3:23:f2:31:94:68:49:f3:26:2e:25:fd:5a:52: 41:3d:c7:af:66:80:4d:91:80:af:62:62:bf:45:5f: 44:eb:ea:9c:09:66:5c:12:68:a8:6f:70:86:9b:44: 47:66:a0:01:d5:df:e7:3b:e8:ae:3c:f0:6f:3a:af: 3d:21:20:73:b4:d6:e5:40:09:b2:6f:c5:4d:f2:07: 7f:41:c1:08:ee:92:d9:ae:66:31:d8:08:41:dc:64: 83:4e:3e:9f:81:ae:31:67:b7:56:c2:79:b1:d3:5e: f9:b6:bd:11:1d:3f:a2:9e:7c:6f:d1:5e:22:8b:45: e4:dc:c1:9b:40:86:4b:54:8d:b2:40:bc:24:94:20: 69:e0:68:a3:50:7d:e2:02:b7:ff:f9:40:63:b7:f1: 9d:55:da:a9:ce:84:74:f7:51:17:c5:21:69:9c:c2: 0d:2c:91:2d:8c:32:81:17:79:fe:cf:e7:49:29:65: c4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FF:2A:D8:FD:E0:30:12:09:59:B8:BB:11:EC:87:8E:9E:A8:29:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 96.125.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:50:eb:a6:fe:bb:69:4d:7a:90:fd:ba:00:0e:0d:7c:24:00: dc:93:3f:d7:f8:bd:30:8c:0d:1a:0b:10:6f:d1:7d:4c:04:a2: cc:48:d5:28:fe:e9:44:75:fc:1e:59:d7:b0:e2:46:98:1e:64: 75:86:b9:e8:2c:aa:e7:e5:58:27:11:f8:23:9f:97:c3:b6:07: 05:86:1b:df:ea:11:46:1f:c5:e6:37:49:ca:e4:00:50:a3:a7: 9b:55:71:2e:6a:55:b3:a1:f3:14:bd:04:04:99:fd:d7:51:e8: 50:22:e0:20:5f:f0:5a:c1:7b:60:9f:3b:1f:d9:62:6e:c8:f6: 37:15:f0:f0:0f:f6:e4:fa:86:16:2b:21:b7:8c:f9:ed:c8:e2: 93:58:d9:df:1e:d1:98:70:e1:e6:36:42:02:6f:55:09:be:a4: 2c:49:2a:63:78:3d:b8:60:0e:ee:28:6c:d3:be:a9:bf:3d:0d: a1:f5:e3:bb:ea:8f:3d:37:4a:9c:c4:de:17:40:ba:26:b3:60: 27:40:b0:43:3a:4c:d7:f8:ad:09:51:ee:3f:53:99:f5:0e:8a: dd:79:1b:dc:df:3f:ab:c5:dd:6a:7a:8d:46:53:62:cb:ef:93: 65:71:2f:44:08:b5:d6:5b:d1:f3:45:10:ba:e0:e8:24:50:1b: 8f:59:33:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRHLmA8cffCcYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MTEwMmZiZTAtNGI2NS00YWMwLTkxN2ItYTMzN2I4YTk4ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qQOaYoVtV3RCXbLg2CtAcaRxx/bjD9OvYic v4mcHCv/bLSsG22mA3MAKaSgppLcNweNqEiyP1P3mkoG23QEfzH3Sgt/Rw4tFSle oyPyMZRoSfMmLiX9WlJBPcevZoBNkYCvYmK/RV9E6+qcCWZcEmiob3CGm0RHZqAB 1d/nO+iuPPBvOq89ISBztNblQAmyb8VN8gd/QcEI7pLZrmYx2AhB3GSDTj6fga4x Z7dWwnmx0175tr0RHT+innxv0V4ii0Xk3MGbQIZLVI2yQLwklCBp4GijUH3iArf/ +UBjt/GdVdqpzoR091EXxSFpnMINLJEtjDKBF3n+z+dJKWXEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP/Ktj94DASCVm4uxHsh46eqCn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMjk5Y2QyZGItNjU1YS0z Y2RkLTljYWQtOTJkMDEzZGY0Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdQ66b+u2lNepD9ugAODXwkANyTP9f4vTCMDRoLEG/RfUwEosxI1Sj+ 6UR1/B5Z17DiRpgeZHWGuegsquflWCcR+COfl8O2BwWGG9/qEUYfxeY3ScrkAFCj p5tVcS5qVbOh8xS9BASZ/ddR6FAi4CBf8FrBe2CfOx/ZYm7I9jcV8PAP9uT6hhYr IbeM+e3I4pNY2d8e0Zhw4eY2QgJvVQm+pCxJKmN4PbhgDu4obNO+qb89DaH147vq jz03SpzE3hdAuiazYCdAsEM6TNf4rQlR7j9TmfUOit15G9zfP6vF3Wp6jUZTYsvv k2VxL0QItdZb0fNFELrg6CRQG49ZMzc= -----END CERTIFICATE-----Generated at Mon Sep 21 20:34:11 2026 by rpki-client