$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3234302e302f32342d3234203d3e20343032363731.roa File: 3139392e3233352e3234302e302f32342d3234203d3e20343032363731.roa (raw, json) Hash identifier: 4V8pk708XIFs/0oXldcUCX25NWpqD/UIqDQk3j42zsw= Subject key identifier: 41:88:0F:95:68:9F:F1:FA:5C:BA:9C:41:19:74:8F:4F:5E:C8:5A:A7 Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e Certificate serial: 44AEC6FBEEA41AF131745E37BB361D3B3EFBB37B Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3234302e302f32342d3234203d3e20343032363731.roa Signing time: Mon 05 Oct 2026 15:02:33 +0000 ROA not before: Mon 05 Oct 2026 14:57:33 +0000 ROA not after: Mon 04 Oct 2027 15:02:33 +0000 asID: 402671 IP address blocks: 199.235.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ae:c6:fb:ee:a4:1a:f1:31:74:5e:37:bb:36:1d:3b:3e:fb:b3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e Validity Not Before: Oct 5 14:57:33 2026 GMT Not After : Oct 4 15:02:33 2027 GMT Subject: CN=41880F95689FF1FA5CBA9C4119748F4F5EC85AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:8d:7a:55:c7:f4:50:df:5e:96:b8:33:13: b9:cb:8a:cb:36:fe:d5:f3:2c:ad:12:cc:42:d4:bf: af:1e:b8:18:f7:34:6b:0e:58:48:0e:96:ce:eb:72: 30:21:1b:2f:5c:55:f5:26:1b:de:dc:d2:98:1d:cb: 64:10:a7:46:f8:17:17:97:fa:a5:e1:1e:0c:69:7a: 96:e4:e7:6a:3a:ac:dc:4a:d6:5f:fa:36:aa:ed:2e: 3c:c4:58:9d:0e:28:5e:a1:37:58:e1:32:ac:fe:01: 90:4a:b9:09:a0:bc:c3:c4:7b:3b:7d:b4:0a:ef:07: 84:72:c9:ab:19:71:6c:15:9b:e3:2e:0d:49:4e:2e: db:94:29:8e:b2:f8:20:a0:4f:f5:f8:b0:c5:11:38: 68:e5:1b:6d:f3:e9:38:6f:42:ab:60:67:36:17:4f: 82:d4:d0:1b:2a:3f:ef:ce:8f:a2:28:56:e8:dd:94: 03:66:8b:85:fe:dd:86:b6:3d:98:eb:60:31:a3:a1: 3e:eb:ce:d9:c3:cc:cd:e5:8d:5d:f7:bb:d9:d3:0d: 4e:0b:3f:16:56:ba:35:d7:60:b7:23:d1:c5:0c:55: 4f:0d:09:b8:52:b8:ff:58:0d:d9:c8:6a:4a:44:0e: fe:e2:24:ca:10:48:6b:8d:f6:0c:6d:d3:b7:b0:d2: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:88:0F:95:68:9F:F1:FA:5C:BA:9C:41:19:74:8F:4F:5E:C8:5A:A7 X509v3 Authority Key Identifier: keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3234302e302f32342d3234203d3e20343032363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.235.240.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c5:42:cd:0e:b1:fc:98:77:29:08:8d:80:d0:fd:68:2e:14: 30:6a:11:c9:f6:db:f0:13:f5:dd:84:c3:3c:e1:dd:66:3a:cb: 39:ec:f5:21:dd:92:f2:4e:20:a5:60:d7:53:e3:45:8e:3c:20: 51:66:ef:ac:55:32:a5:a2:29:55:19:27:39:1b:0d:a3:a9:5f: e5:ab:86:52:a7:6d:5c:d6:79:3a:e3:f0:aa:6e:9c:de:2a:ac: 74:11:92:02:45:b2:c4:8d:f5:2e:1e:25:1f:dd:b3:cb:ad:4b: da:a6:8b:72:32:38:a1:d7:6b:76:f8:37:ab:60:13:fe:90:47: 63:0f:cc:54:71:fa:71:a0:46:83:94:cd:52:db:fe:e0:00:cd: 6f:1c:5b:22:3b:8c:50:6e:57:bd:cf:94:50:94:35:69:6f:f6: 7c:6d:31:8e:59:d2:ef:f7:5c:30:5d:5d:2a:8a:7a:55:15:2a: 5c:e1:ad:8a:a8:07:b1:8b:8e:6b:b4:fb:44:15:42:09:a1:20: 38:af:ea:0a:75:85:2a:30:0e:70:76:34:ed:f7:cd:56:7b:d5: e0:c2:91:50:e8:d9:bf:ad:d1:07:81:5a:4c:1c:e0:20:0d:fe: 15:1f:f8:d2:9d:0c:db:0e:ae:c3:8d:12:1d:6e:d3:6c:49:be: 8d:c3:ae:a4 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIURK7G++6kGvExdF43uzYdOz77s3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYxMDA1MTQ1NzMzWhcNMjcxMDA0MTUwMjMz WjAzMTEwLwYDVQQDEyg0MTg4MEY5NTY4OUZGMUZBNUNCQTlDNDExOTc0OEY0RjVF Qzg1QUE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSWNelXH9FDf Xpa4MxO5y4rLNv7V8yytEsxC1L+vHrgY9zRrDlhIDpbO63IwIRsvXFX1Jhve3NKY HctkEKdG+BcXl/ql4R4MaXqW5OdqOqzcStZf+jaq7S48xFidDiheoTdY4TKs/gGQ SrkJoLzDxHs7fbQK7weEcsmrGXFsFZvjLg1JTi7blCmOsvggoE/1+LDFETho5Rtt 8+k4b0KrYGc2F0+C1NAbKj/vzo+iKFbo3ZQDZouF/t2Gtj2Y62Axo6E+687Zw8zN 5Y1d97vZ0w1OCz8WVro112C3I9HFDFVPDQm4Urj/WA3ZyGpKRA7+4iTKEEhrjfYM bdO3sNJgxwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEGID5Von/H6XLqcQRl0j09e yFqnMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMjM0MzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNDMwMzIzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH6/AwDQYJKoZIhvcN AQELBQADggEBAD3FQs0OsfyYdykIjYDQ/WguFDBqEcn22/AT9d2Ewzzh3WY6yzns 9SHdkvJOIKVg11PjRY48IFFm76xVMqWiKVUZJzkbDaOpX+WrhlKnbVzWeTrj8Kpu nN4qrHQRkgJFssSN9S4eJR/ds8utS9qmi3IyOKHXa3b4N6tgE/6QR2MPzFRx+nGg RoOUzVLb/uAAzW8cWyI7jFBuV73PlFCUNWlv9nxtMY5Z0u/3XDBdXSqKelUVKlzh rYqoB7GLjmu0+0QVQgmhIDiv6gp1hSowDnB2NO33zVZ71eDCkVDo2b+t0QeBWkwc 4CAN/hUf+NKdDNsOrsONEh1u02xJvo3DrqQ= -----END CERTIFICATE-----Generated at Tue Oct 27 16:32:49 2026 by rpki-client