$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: v0E8tc4anu8qrtY3J6pqvcwetOylZKzCrtGcYKmGgns= Subject key identifier: 52:BD:F7:BC:95:44:AE:B1:BD:29:D0:87:C6:B7:38:74:F0:A5:E7:CF Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4973A588B4B36959ADFED280 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a5:88:b4:b3:69:59:ad:fe:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=549235cb-edd1-4942-a64b-07b6829a1828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ae:39:06:71:84:60:f2:17:fa:05:d2:49:a8: 93:9b:25:3f:2c:4a:ce:ed:ba:82:24:da:7c:85:1b: 6a:9f:95:29:04:d8:08:06:2d:e6:ee:21:aa:2f:94: 37:3c:e4:7c:21:8c:4a:09:d1:3d:6e:8d:33:61:e1: ec:ec:31:f9:a0:72:33:19:ee:35:a8:9b:66:1f:24: 1b:87:8b:5d:9a:b8:f7:c0:da:a6:dc:d2:15:d6:28: 1b:50:80:c9:eb:7a:c3:0c:32:7c:71:f8:b1:ca:ae: 4f:e0:c3:f0:ad:b2:ad:fa:f3:77:35:d5:e6:1b:0e: f8:e3:78:4b:09:fd:7a:3d:d0:df:da:a1:9b:3c:31: b8:db:f7:d6:75:06:32:f2:49:89:dc:55:6c:3b:65: a4:5b:5a:af:99:2b:cf:4e:a9:eb:cb:09:01:9a:08: 97:a8:9a:e3:47:e4:20:e1:91:22:51:2d:c3:cb:cf: dd:b2:1a:04:9e:fb:80:59:9e:26:6e:ce:b0:64:22: 2a:04:1f:05:3d:f6:31:bd:5c:6e:1c:f2:99:6d:d2: 66:be:ea:dd:cf:cb:8a:71:24:46:16:05:a0:e4:d0: 6e:b5:38:60:95:a9:4f:d9:02:df:63:2a:78:ff:a9: 65:97:70:84:bd:4c:22:f4:cb:1e:7e:80:ea:77:03: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BD:F7:BC:95:44:AE:B1:BD:29:D0:87:C6:B7:38:74:F0:A5:E7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:cb:c5:95:98:16:be:6a:ee:35:b3:16:f2:d6:95:1a:0c:35: f4:c3:e7:20:fe:47:22:5d:74:e6:c5:de:50:80:b6:f7:ae:f2: 64:f0:fe:b7:1c:64:c8:fb:52:3b:a2:95:ba:d4:5b:91:e0:74: e0:21:4b:78:37:98:0b:40:37:16:3b:bb:79:6b:45:41:e1:12: ed:b1:cc:c4:c0:54:19:f4:11:9b:d8:30:b0:1d:10:d8:89:ef: b8:ac:ac:3f:18:47:22:14:b4:45:e1:2a:53:ea:d5:0a:d2:0b: c9:81:27:10:92:91:61:49:67:d7:3d:2c:e7:58:30:ea:63:7a: 62:b1:e8:e3:59:6b:4e:15:46:51:d6:58:0d:d1:28:c5:e2:b0: d9:8d:e6:f4:dd:d5:45:cf:83:9b:44:8b:49:58:75:4c:f1:cd: 90:88:88:28:dc:bd:e7:6b:1a:db:b6:b4:8c:78:63:6c:64:7e: 3b:fe:ee:94:20:5c:f6:5d:4d:d4:30:1e:f0:59:d9:23:cc:5b: d1:30:a0:dc:a3:96:d1:a8:e3:b8:aa:72:bd:77:e0:7e:ef:cb: 0c:45:f4:0f:e5:ce:e0:57:d0:93:99:70:50:07:a4:33:f7:2f: 8c:fe:a6:da:af:3a:56:95:81:92:94:84:1a:2a:38:85:48:1f: 90:bf:13:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6WItLNpWa3+0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTQ5MjM1Y2ItZWRkMS00OTQyLWE2NGItMDdiNjgyOWExODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5645BnGEYPIX+gXSSaiTmyU/LErO7bqCJNp8 hRtqn5UpBNgIBi3m7iGqL5Q3POR8IYxKCdE9bo0zYeHs7DH5oHIzGe41qJtmHyQb h4tdmrj3wNqm3NIV1igbUIDJ63rDDDJ8cfixyq5P4MPwrbKt+vN3NdXmGw7443hL Cf16PdDf2qGbPDG42/fWdQYy8kmJ3FVsO2WkW1qvmSvPTqnrywkBmgiXqJrjR+Qg 4ZEiUS3Dy8/dshoEnvuAWZ4mbs6wZCIqBB8FPfYxvVxuHPKZbdJmvurdz8uKcSRG FgWg5NButThglalP2QLfYyp4/6lll3CEvUwi9MsefoDqdwN7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK997yVRK6xvSnQh8a3OHTwpefPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3LxZWYFr5q7jWzFvLWlRoMNfTD5yD+RyJddObF3lCAtveu8mTw/rcc ZMj7UjuilbrUW5HgdOAhS3g3mAtANxY7u3lrRUHhEu2xzMTAVBn0EZvYMLAdENiJ 77isrD8YRyIUtEXhKlPq1QrSC8mBJxCSkWFJZ9c9LOdYMOpjemKx6ONZa04VRlHW WA3RKMXisNmN5vTd1UXPg5tEi0lYdUzxzZCIiCjcvedrGtu2tIx4Y2xkfjv+7pQg XPZdTdQwHvBZ2SPMW9EwoNyjltGo47iqcr134H7vywxF9A/lzuBX0JOZcFAHpDP3 L4z+ptqvOlaVgZKUhBoqOIVIH5C/EzA= -----END CERTIFICATE-----Generated at Sat Oct 10 18:01:45 2026 by rpki-client