$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa File: 7722da27-45e1-3732-a4d4-8186e8994e5d.roa (raw, json) Hash identifier: vmIxERCKRqUP43PAgxL6+LI4T+UxHuvj64LeenD1fdo= Subject key identifier: 32:09:14:7B:E0:42:B2:FF:FB:6A:A8:43:AF:DB:BB:7D:E0:A1:98:93 Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584EF87CC35A351FA9AAFED91A00 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 22748 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c3:5a:35:1f:a9:aa:fe:d9:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=ead266d2-d903-436e-ae16-a2a82a79c6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5d:2d:00:d6:fb:0a:c5:3a:0f:30:89:2e:2d: 69:38:20:83:d9:e6:d1:2a:02:58:f4:54:97:eb:ac: d0:89:9f:f3:57:d8:37:4e:69:f7:1a:94:99:f7:5c: aa:22:b8:92:f9:20:3d:e3:69:ea:d1:94:5f:c7:2e: 78:62:66:89:a9:29:65:e3:26:f5:33:53:1b:8b:b1: aa:bf:51:b0:ed:19:b1:8c:cb:19:ef:db:9a:cc:e3: 84:2e:c8:84:79:94:93:c0:70:c9:cf:1a:b4:e3:21: 18:af:54:75:e2:e1:e3:2f:8d:8d:33:ce:36:c8:bc: 1a:61:25:ee:08:ed:e8:cd:79:b1:cf:f4:06:da:d0: c8:37:eb:22:5c:ad:51:57:de:42:ab:52:aa:62:7d: 8f:5c:4a:43:ff:22:f6:d4:c8:34:c1:43:d6:73:cb: 21:78:60:ef:57:63:70:af:c0:51:29:0d:03:39:b9: aa:22:18:1c:e8:a5:81:73:5c:10:fe:32:ef:34:42: 42:55:4f:17:12:cb:3f:83:e8:44:4a:39:99:d8:35: 3b:45:b0:27:82:72:39:c7:d5:25:bb:8a:b2:3b:9a: 54:1d:3b:97:d3:82:a1:f4:63:ed:1d:56:ac:42:75: e2:d1:e9:cd:0a:7b:8e:de:93:eb:6f:e9:01:ca:37: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:14:7B:E0:42:B2:FF:FB:6A:A8:43:AF:DB:BB:7D:E0:A1:98:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:49:81:38:9f:f0:4e:d8:45:69:7b:6d:f6:d9:07:42:44:54: 14:0c:d0:9a:f7:0e:41:12:6a:4c:1e:2a:57:cb:37:26:57:b6: a7:fc:ad:95:16:dc:57:f3:ea:f3:0f:27:28:de:41:40:d3:37: c5:ad:fa:2a:75:ed:34:ec:c9:94:5f:a4:5a:d0:03:1a:97:ef: ad:39:fa:0e:47:76:dd:c0:d0:7f:de:08:4a:e6:99:a4:e7:ba: 3c:39:58:30:57:08:14:52:0c:3e:8b:bc:36:ba:dd:34:9d:02: a2:93:89:8c:8e:13:3e:3e:b3:34:6c:10:dc:45:94:ca:a1:8c: 0b:02:9b:01:f1:35:90:46:48:4d:07:8e:09:0f:a8:3a:1b:73: f1:e7:77:3c:48:69:8b:ba:59:80:1e:0a:4f:56:f3:64:e4:62: e7:6a:b6:4c:46:80:6f:43:af:50:c3:54:4c:bd:d9:03:2c:11: e9:2a:f2:18:40:df:10:d0:38:07:21:1e:c5:39:ee:f6:5b:b9: 20:9b:03:97:4f:c2:45:f9:32:5f:94:4c:88:a8:63:bf:38:ff: 5e:53:0b:c8:56:bf:a2:ab:e2:c1:24:83:8f:50:7b:07:84:04: b9:86:b8:af:27:27:3a:0b:72:0e:d2:21:58:92:68:7f:13:d5: 14:4b:f4:63 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE74fMNaNR+pqv7ZGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZWFkMjY2ZDItZDkwMy00MzZlLWFlMTYtYTJhODJhNzljNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh10tANb7CsU6DzCJLi1pOCCD2ebRKgJY9FSX 66zQiZ/zV9g3Tmn3GpSZ91yqIriS+SA942nq0ZRfxy54YmaJqSll4yb1M1Mbi7Gq v1Gw7RmxjMsZ79uazOOELsiEeZSTwHDJzxq04yEYr1R14uHjL42NM842yLwaYSXu CO3ozXmxz/QG2tDIN+siXK1RV95Cq1KqYn2PXEpD/yL21Mg0wUPWc8sheGDvV2Nw r8BRKQ0DObmqIhgc6KWBc1wQ/jLvNEJCVU8XEss/g+hESjmZ2DU7RbAngnI5x9Ul u4qyO5pUHTuX04Kh9GPtHVasQnXi0enNCnuO3pPrb+kByjcM6wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDIJFHvgQrL/+2qoQ6/bu33goZiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNzcyMmRhMjctNDVlMS0z NzMyLWE0ZDQtODE4NmU4OTk0ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFlJgTif8E7YRWl7bfbZB0JEVBQM0Jr3DkES akweKlfLNyZXtqf8rZUW3Ffz6vMPJyjeQUDTN8Wt+ip17TTsyZRfpFrQAxqX7605 +g5Hdt3A0H/eCErmmaTnujw5WDBXCBRSDD6LvDa63TSdAqKTiYyOEz4+szRsENxF lMqhjAsCmwHxNZBGSE0HjgkPqDobc/HndzxIaYu6WYAeCk9W82TkYudqtkxGgG9D r1DDVEy92QMsEekq8hhA3xDQOAchHsU57vZbuSCbA5dPwkX5Ml+UTIioY784/15T C8hWv6Kr4sEkg49QeweEBLmGuK8nJzoLcg7SIViSaH8T1RRL9GM= -----END CERTIFICATE-----Generated at Tue Sep 22 22:57:43 2026 by rpki-client