$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/25afd3e8-f197-3114-bba2-1972cfba234b.roa File: 25afd3e8-f197-3114-bba2-1972cfba234b.roa (raw, json) Hash identifier: M3v4wqeNr9zljM5+p4jvR//4lBuWNafQX3h8kwUckDk= Subject key identifier: D8:C4:5B:0D:D4:E0:07:1E:9B:96:D5:53:F1:24:32:47:41:88:86:81 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584EEA17C8AB257A10D92696F840 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/25afd3e8-f197-3114-bba2-1972cfba234b.roa Signing time: Fri 21 Aug 2026 21:15:35 +0000 ROA not before: Fri 21 Aug 2026 21:15:35 +0000 ROA not after: Thu 19 Nov 2026 22:15:35 +0000 asID: 16509 IP address blocks: 199.212.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:17:c8:ab:25:7a:10:d9:26:96:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Aug 21 21:15:35 2026 GMT Not After : Nov 19 22:15:35 2026 GMT Subject: CN=f0b554e2-e889-4fed-9926-3c18af8f3bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:d1:86:0b:5e:df:ac:d9:c1:aa:f4:ca:f5: 3b:6b:e0:cb:04:f9:80:58:a2:dc:91:20:bd:ba:e6: 6b:e9:e9:a5:0b:59:e2:65:00:9e:92:ba:a9:c4:7a: 44:78:63:cd:c3:fc:a5:05:78:fd:e8:af:03:45:a4: 6b:e0:1e:61:3a:2c:9c:76:b4:45:a8:cd:b0:cd:00: 53:79:01:3c:6a:20:b5:d7:1e:c1:27:68:00:8b:7c: e2:36:79:27:8a:f9:ab:42:0c:54:a4:e1:67:b8:52: a0:ac:36:82:c5:68:69:f0:31:ff:7c:ed:28:18:bd: 4a:fb:82:5b:5e:24:fd:41:4e:83:3f:02:37:1e:07: 69:51:68:2f:c4:91:a1:e6:c4:74:61:46:dc:14:76: 29:e4:90:40:6c:14:b9:f3:41:43:fe:c6:d2:83:b2: 79:0f:e0:73:82:8d:ce:d0:4a:6f:58:9d:85:64:3d: 56:ed:41:cd:4f:55:86:7b:40:9f:41:b9:78:18:7e: 0a:4e:fa:40:bd:db:62:30:be:e5:c1:a7:55:33:dc: ba:f1:50:76:13:60:1c:96:a4:bf:0e:d9:5e:50:b5: 79:bb:7f:c2:d0:4f:ca:a7:4d:8c:ba:ce:86:4b:cb: f1:4a:51:7c:d4:c7:7f:19:e3:71:a9:db:44:e8:7e: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C4:5B:0D:D4:E0:07:1E:9B:96:D5:53:F1:24:32:47:41:88:86:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/25afd3e8-f197-3114-bba2-1972cfba234b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv4: 199.212.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4a:ea:28:5b:f6:26:a0:14:30:c0:f3:aa:3f:69:7a:73:81: 50:c1:18:d0:f2:5b:56:7b:22:9b:01:e0:b1:ef:56:e9:12:2a: d0:a8:de:f4:58:35:14:bb:c8:89:5a:9b:31:fc:8d:9d:65:66: 7c:60:5d:eb:40:58:58:f8:67:d1:07:80:e4:26:8c:dc:01:5d: 56:63:86:9c:49:41:ae:9c:72:cb:be:fe:54:52:54:1f:b9:c5: dd:85:19:91:4e:3f:2e:fd:87:37:92:0c:71:1a:84:60:1d:33: 15:21:e3:aa:38:00:bb:af:b9:e7:a6:a3:f4:d8:87:e7:48:7a: 1d:9d:3f:36:b9:62:00:4d:ea:90:f1:86:a1:32:15:f1:1d:a9: 9e:08:6c:d9:06:9b:84:9e:a1:57:03:a7:a4:72:0c:48:e4:ef: 2b:27:87:2a:cf:42:d8:77:c7:02:49:98:fd:7a:7b:52:46:95: 4c:a2:46:8d:06:46:ce:70:7b:ee:3e:4a:8f:84:eb:b8:5e:a7: ee:35:0f:1b:98:02:bc:e9:de:09:e5:ab:cf:c1:87:ad:ca:77: 52:18:57:20:f1:61:b8:ca:e8:bb:40:f3:84:71:e2:8b:4f:88: aa:c0:bb:30:71:93:57:a6:2b:61:97:6c:68:1c:2f:45:99:d7: 76:8b:d3:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qF8irJXoQ2SaW+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDgyMTIxMTUzNVoXDTI2MTExOTIyMTUzNVowLzEtMCsGA1UEAxMk ZjBiNTU0ZTItZTg4OS00ZmVkLTk5MjYtM2MxOGFmOGYzYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/DRhgte36zZwar0yvU7a+DLBPmAWKLckSC9 uuZr6emlC1niZQCekrqpxHpEeGPNw/ylBXj96K8DRaRr4B5hOiycdrRFqM2wzQBT eQE8aiC11x7BJ2gAi3ziNnknivmrQgxUpOFnuFKgrDaCxWhp8DH/fO0oGL1K+4Jb XiT9QU6DPwI3HgdpUWgvxJGh5sR0YUbcFHYp5JBAbBS580FD/sbSg7J5D+Bzgo3O 0EpvWJ2FZD1W7UHNT1WGe0CfQbl4GH4KTvpAvdtiML7lwadVM9y68VB2E2AclqS/ DtleULV5u3/C0E/Kp02Mus6GS8vxSlF81Md/GeNxqdtE6H5UowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjEWw3U4Acem5bVU/EkMkdBiIaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMjVhZmQzZTgtZjE5Ny0z MTE0LWJiYTItMTk3MmNmYmEyMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABK6ihb9iagFDDA86o/aXpzgVDBGNDyW1Z7IpsB4LHvVukSKtCo3vRY NRS7yIlamzH8jZ1lZnxgXetAWFj4Z9EHgOQmjNwBXVZjhpxJQa6ccsu+/lRSVB+5 xd2FGZFOPy79hzeSDHEahGAdMxUh46o4ALuvueemo/TYh+dIeh2dPza5YgBN6pDx hqEyFfEdqZ4IbNkGm4SeoVcDp6RyDEjk7ysnhyrPQth3xwJJmP16e1JGlUyiRo0G Rs5we+4+So+E67hep+41DxuYArzp3gnlq8/Bh63Kd1IYVyDxYbjK6LtA84Rx4otP iKrAuzBxk1emK2GXbGgcL0WZ13aL09Q= -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:45 2026 by rpki-client