$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa File: 4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa (raw, json) Hash identifier: IrHdI5Ca2AKgIcXtgTkmPevNGUyJ0wpomqi9RPwpqFc= Subject key identifier: 79:A4:44:11:A9:65:02:68:5F:32:D3:D2:6D:3C:EE:ED:8B:03:F9:BA Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584F20F7CEE06584B2BBE26A1880 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 199.7.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ce:e0:65:84:b2:bb:e2:6a:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=fcef0fee-1411-4ac6-8ef5-10b00545c756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:33:de:6f:94:14:34:31:90:ad:eb:7e:02: 13:2e:13:e7:9c:e9:f2:45:f3:91:7a:96:8a:08:c3: 18:a3:94:9d:1d:0e:10:11:3e:c5:ec:7f:27:35:9b: ef:5a:8d:57:ab:4e:86:d2:c4:59:d0:77:06:a6:7b: 79:eb:fb:59:6d:13:c2:d2:05:98:be:ca:66:63:67: bc:d9:40:7a:d4:45:ba:ae:92:25:f9:38:f0:f5:ac: 16:dd:4b:69:66:bd:fb:8b:50:66:64:de:e0:12:22: 37:04:56:83:2f:13:8b:43:6e:d8:4c:b9:54:68:c2: 3c:8b:67:01:eb:7f:f2:65:69:89:59:bc:c6:09:5e: cd:f5:8f:be:d4:fc:71:e1:e6:f2:96:89:15:15:4f: 21:2b:bc:85:e9:1e:a0:24:3f:81:a5:cd:15:62:de: ff:55:26:e1:72:dc:0d:a7:f7:1b:1c:f8:79:cb:b7: bd:90:46:e7:4e:0b:fd:90:ed:04:4f:61:88:ed:55: 94:46:3b:bf:eb:6a:9b:7a:66:9d:07:9d:6c:c8:a5: c3:85:09:b0:2e:58:1d:83:0d:36:a0:ce:f0:38:b6: a8:36:b3:e3:4e:9f:19:a3:d9:0c:9d:bd:56:87:c0: 98:81:2f:72:88:2e:15:a5:12:b4:16:5a:99:4a:9e: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A4:44:11:A9:65:02:68:5F:32:D3:D2:6D:3C:EE:ED:8B:03:F9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/4016ef7e-8a77-3f3e-8fa4-7e614db0db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:43:bb:a5:f6:f6:bd:f8:01:b4:4c:cf:4a:ee:b1:62:a4:b1: ea:aa:09:00:9b:87:1c:01:dc:47:77:7e:b4:92:10:b5:c7:30: c0:c2:3d:30:72:31:b0:7f:10:69:51:a7:d6:7a:dd:6d:9a:1f: 74:4f:3f:2a:ab:89:24:7c:1e:23:74:7d:74:eb:50:06:4b:90: ed:c8:2a:d6:3a:5c:f5:35:10:9a:d8:bf:52:7a:11:8f:7d:a0: c2:81:17:4f:11:d8:fa:79:1d:18:de:f5:9f:74:41:cf:32:18: 53:27:ef:02:18:41:7a:11:d5:26:ab:b5:c8:4f:d4:51:40:b1: 96:b3:7c:df:25:67:c8:27:a5:9a:a4:7d:82:aa:22:8a:dd:cb: 26:12:62:fe:f3:b0:59:8f:8e:fc:f2:ea:3f:3f:e0:f9:d8:11: 55:68:8a:69:2a:1e:f2:db:f1:ba:45:7f:f1:76:06:95:71:1a: d1:03:62:db:e5:05:a3:4b:c3:86:40:a0:3e:26:5a:89:75:42: 79:3d:ff:e0:fa:a0:30:e1:ab:db:46:4a:e7:8d:f7:8f:80:af: 83:9b:89:e5:db:37:41:b3:2f:e7:ed:d6:f5:0c:75:85:37:29: dc:c7:c0:96:92:46:ca:f2:0d:94:cb:01:57:f3:20:90:8b:68: 34:1c:43:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g987gZYSyu+JqGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmNlZjBmZWUtMTQxMS00YWM2LThlZjUtMTBiMDA1NDVjNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Swz3m+UFDQxkK3rfgITLhPnnOnyRfORepaK CMMYo5SdHQ4QET7F7H8nNZvvWo1Xq06G0sRZ0HcGpnt56/tZbRPC0gWYvspmY2e8 2UB61EW6rpIl+Tjw9awW3UtpZr37i1BmZN7gEiI3BFaDLxOLQ27YTLlUaMI8i2cB 63/yZWmJWbzGCV7N9Y++1Pxx4ebylokVFU8hK7yF6R6gJD+Bpc0VYt7/VSbhctwN p/cbHPh5y7e9kEbnTgv9kO0ET2GI7VWURju/62qbemadB51syKXDhQmwLlgdgw02 oM7wOLaoNrPjTp8Zo9kMnb1Wh8CYgS9yiC4VpRK0FlqZSp5t4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmkRBGpZQJoXzLT0m087u2LA/m6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvNDAxNmVmN2UtOGE3Ny0z ZjNlLThmYTQtN2U2MTRkYjBkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBDu6X29r34AbRMz0rusWKkseqqCQCbhxwB3Ed3frSSELXHMMDCPTBy MbB/EGlRp9Z63W2aH3RPPyqriSR8HiN0fXTrUAZLkO3IKtY6XPU1EJrYv1J6EY99 oMKBF08R2Pp5HRje9Z90Qc8yGFMn7wIYQXoR1SartchP1FFAsZazfN8lZ8gnpZqk fYKqIordyyYSYv7zsFmPjvzy6j8/4PnYEVVoimkqHvLb8bpFf/F2BpVxGtEDYtvl BaNLw4ZAoD4mWol1Qnk9/+D6oDDhq9tGSueN94+Ar4ObieXbN0GzL+ft1vUMdYU3 KdzHwJaSRsryDZTLAVfzIJCLaDQcQ8o= -----END CERTIFICATE-----Generated at Mon Sep 21 00:06:51 2026 by rpki-client