$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json) Hash identifier: HmowmYNVNpq38KqO+G+qTCRjLtyxYOBmdhn6d6++j6s= Subject key identifier: F1:D6:FF:3D:E4:B2:26:15:E8:1A:F1:A5:C6:4A:C1:99:13:03:E2:50 Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F4328584F119CEA7B98968278B02AEF80 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 397681 IP address blocks: 192.219.99.0/24 maxlen: 24 198.168.2.0/24 maxlen: 24 199.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ea:7b:98:96:82:78:b0:2a:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f6d64637-1fa4-4db7-a8b3-fe5e22473e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:35:cb:8c:5f:0a:a7:e0:d6:0b:1c:6e:dd: fa:0f:83:6d:2b:51:10:67:5e:94:30:8d:d4:93:46: af:27:4e:5d:d4:85:f4:75:5a:4d:5e:c2:b4:f2:0a: 9a:29:c4:28:a8:ee:ab:10:68:bb:03:aa:36:1f:4b: f9:af:de:db:bc:40:c5:cb:db:a0:b3:4c:29:4b:63: bb:63:d0:59:3e:33:2d:c2:84:49:6e:7f:fc:da:33: bc:46:89:20:bb:89:c4:c2:c9:2e:6f:64:07:5f:8a: b8:3a:72:6d:e1:de:60:6b:5f:a4:38:90:bb:f3:bd: 6a:ea:53:a2:d3:1a:2b:28:d0:4f:eb:98:9b:47:35: 39:95:3f:08:65:6d:2e:4b:17:77:92:1c:0a:53:0c: c2:27:26:fb:f1:c5:83:63:30:88:98:ab:4c:61:d1: e5:c7:71:12:30:47:22:da:e6:5b:ec:03:06:a5:fe: 5c:2b:50:11:4a:e4:1b:c8:5f:44:01:16:aa:8f:17: 84:d7:35:30:08:c1:19:07:60:5b:28:a6:8d:53:2c: 1a:5b:0f:6e:73:d5:69:dc:26:47:0a:62:bc:8c:c9: c6:a3:b6:e0:ac:1f:b0:50:d6:a8:0d:71:95:81:70: 77:d6:73:e6:02:dc:f6:5e:d8:37:b8:9a:94:e9:24: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D6:FF:3D:E4:B2:26:15:E8:1A:F1:A5:C6:4A:C1:99:13:03:E2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: 192.219.99.0/24 198.168.2.0/24 199.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:10:9c:9f:d1:6f:48:65:92:84:a4:1b:09:14:2b:86:94:ee: 54:0f:d7:b6:42:2b:0a:ea:7d:90:09:5e:6a:68:4e:05:83:cc: 0c:34:c8:3c:d5:35:b1:3b:31:92:9b:58:c0:14:26:26:ac:c9: 6e:07:1d:c8:31:63:dd:ef:d0:9c:de:eb:10:89:60:3b:37:45: cb:0d:51:f2:0d:1f:ba:e5:2c:0f:af:0a:dc:40:d5:37:a6:82: ed:8b:1d:01:f8:c7:46:74:c3:ac:82:82:d8:d0:05:f0:12:7a: 48:09:ab:a9:76:70:6d:89:28:1b:16:e3:ce:ce:d1:2b:06:62: af:16:03:b6:ca:22:1a:3a:be:0f:15:c6:09:17:25:88:74:77: d9:74:69:51:2e:7f:0e:07:86:f0:76:dc:85:e8:36:ea:c8:56: a6:72:e0:4d:eb:88:81:02:3a:59:c6:3d:c1:6a:4e:37:ff:4e: 51:54:ba:85:5a:85:c7:26:64:e6:de:bb:1e:c1:b5:9c:bd:3a: 79:e3:a2:89:ad:8a:cf:c7:a6:83:0d:af:f1:fa:ed:46:41:e3: 96:8d:02:cb:ac:e8:84:c6:ec:2a:3c:7e:f2:6e:8d:71:6d:dd: 86:60:50:ba:65:a6:9b:33:c1:96:6e:6f:fe:fd:9e:20:48:00: d9:a8:1e:71 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8RnOp7mJaCeLAq74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjZkNjQ2MzctMWZhNC00ZGI3LWE4YjMtZmU1ZTIyNDczZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCE1y4xfCqfg1gscbt36D4NtK1EQZ16UMI3U k0avJ05d1IX0dVpNXsK08gqaKcQoqO6rEGi7A6o2H0v5r97bvEDFy9ugs0wpS2O7 Y9BZPjMtwoRJbn/82jO8Rokgu4nEwskub2QHX4q4OnJt4d5ga1+kOJC7871q6lOi 0xorKNBP65ibRzU5lT8IZW0uSxd3khwKUwzCJyb78cWDYzCImKtMYdHlx3ESMEci 2uZb7AMGpf5cK1ARSuQbyF9EARaqjxeE1zUwCMEZB2BbKKaNUywaWw9uc9Vp3CZH CmK8jMnGo7bgrB+wUNaoDXGVgXB31nPmAtz2Xtg3uJqU6SRMMQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPHW/z3ksiYV6BrxpcZKwZkTA+JQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvODM4NjQzZDUtN2ZmZS0z OGJmLWI1MWYtNWFmZGNkMmE1NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwNtjAwQA xqgCAwQAx8pbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADgQnJ/Rb0hlkoSkGwkUK4aU7lQP17ZCKwrqfZAJ XmpoTgWDzAw0yDzVNbE7MZKbWMAUJiasyW4HHcgxY93v0Jze6xCJYDs3RcsNUfIN H7rlLA+vCtxA1Temgu2LHQH4x0Z0w6yCgtjQBfASekgJq6l2cG2JKBsW487O0SsG Yq8WA7bKIho6vg8VxgkXJYh0d9l0aVEufw4HhvB23IXoNurIVqZy4E3riIECOlnG PcFqTjf/TlFUuoVahccmZObeux7BtZy9Onnjoomtis/HpoMNr/H67UZB45aNAsus 6ITG7Co8fvJujXFt3YZgULplppszwZZub/79niBIANmoHnE= -----END CERTIFICATE-----Generated at Fri Sep 25 03:38:10 2026 by rpki-client