$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa File: 526e36cc-a981-3c59-acbd-26bbb5e64f70.roa (raw, json) Hash identifier: O5Awmq2EmVqVANtEmH5wfMILg3V58imWu2Yf0lvIaqY= Subject key identifier: E4:F0:07:18:F6:30:6A:96:36:0B:13:0F:A8:52:D6:D5:9B:F0:78:C7 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B5669ADD1458A7C517E5B7E00 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa Signing time: Sat 27 Sep 2025 21:20:09 +0000 ROA not before: Sat 27 Sep 2025 21:20:09 +0000 ROA not after: Fri 26 Dec 2025 22:20:09 +0000 asID: 399110 IP address blocks: 199.58.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:69:ad:d1:45:8a:7c:51:7e:5b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 21:20:09 2025 GMT Not After : Dec 26 22:20:09 2025 GMT Subject: CN=ba59659c-87f4-4163-96b4-0f7914e1875e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:54:e9:bf:26:8f:f6:01:43:2c:22:a6:84:c1: f0:8d:01:cd:23:3d:4e:81:9e:be:e9:29:da:43:7f: 1c:38:91:ad:2f:ca:e4:4d:87:26:ec:ca:64:8d:8a: 65:fb:2b:50:92:38:0f:f9:ae:3e:25:1c:26:2c:91: d8:0d:b2:47:d0:9d:d2:4d:55:cf:75:fb:04:d6:63: 1f:68:f6:66:36:a5:fe:c7:ef:dd:44:81:d2:08:92: 54:60:af:3a:79:84:f2:c8:47:24:9f:0a:91:58:97: d1:af:f4:ea:46:32:d9:4b:75:28:d4:52:23:b4:7d: 3b:24:e8:1c:1d:93:f0:cb:27:2f:db:70:52:36:9c: db:0c:a2:7e:05:71:a1:99:3d:65:18:24:4b:ab:92: 83:b7:16:a4:6a:31:a6:06:4a:5a:e8:82:9f:67:cb: a1:86:34:1b:8f:3e:76:08:83:11:dd:3c:e7:be:6a: c0:9e:e1:83:14:0b:53:b6:01:1f:29:68:ed:d5:25: a2:3a:ed:1b:38:18:fc:1e:91:5f:55:e7:ea:c0:30: d7:1d:cb:74:24:b9:34:ee:09:d0:7d:20:15:78:03: 2a:72:b4:8a:fa:35:4c:8f:43:19:03:72:9f:63:51: 63:8a:d4:ef:09:86:51:99:f5:d3:67:98:9a:a9:81: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F0:07:18:F6:30:6A:96:36:0B:13:0F:A8:52:D6:D5:9B:F0:78:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:54:c1:58:03:5c:db:1e:c1:62:9f:17:1f:72:04:ff:22:c2: dd:35:78:1c:22:28:e1:93:b7:b2:36:a3:bb:d9:16:7b:7e:02: 5a:58:76:bd:2e:53:f1:3d:e9:52:d0:22:cd:ba:b7:33:94:35: 59:9e:27:8c:e0:05:f8:c6:63:c4:6a:39:dd:34:39:90:32:6a: a7:c5:79:f3:13:10:bc:38:c0:26:e7:bd:d8:98:f4:85:24:bf: 5f:39:55:63:7f:74:bf:7a:80:54:cd:14:af:7f:a2:0c:38:9d: 6b:1c:ea:50:44:9a:9e:3e:57:db:7a:45:7d:d4:5b:3e:79:79: 21:c4:e0:f3:e4:c8:d3:6e:27:6c:97:a9:db:47:9c:a9:6b:11: 48:bf:21:cf:24:67:c2:df:05:db:eb:a3:49:7f:9d:6d:a6:7d: eb:45:4e:67:cd:01:5f:d1:df:f9:b4:d3:c8:07:e2:dc:b7:92: 23:12:21:92:95:6f:1d:d3:15:79:46:84:60:97:be:d5:82:14: 6f:e7:c0:e5:b3:8e:35:9b:84:97:59:aa:0b:1d:ad:15:f0:77: de:aa:f7:4c:c8:6e:af:ef:19:81:07:cf:11:f9:8a:e1:83:c4: 58:05:e4:28:3f:d5:cb:d7:d3:9b:22:b8:fb:78:5b:68:92:b7: b6:74:47:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWaa3RRYp8UX5bfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIxMjAwOVoXDTI1MTIyNjIyMjAwOVowLzEtMCsGA1UEAxMk YmE1OTY1OWMtODdmNC00MTYzLTk2YjQtMGY3OTE0ZTE4NzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVTpvyaP9gFDLCKmhMHwjQHNIz1OgZ6+6Sna Q38cOJGtL8rkTYcm7MpkjYpl+ytQkjgP+a4+JRwmLJHYDbJH0J3STVXPdfsE1mMf aPZmNqX+x+/dRIHSCJJUYK86eYTyyEcknwqRWJfRr/TqRjLZS3Uo1FIjtH07JOgc HZPwyycv23BSNpzbDKJ+BXGhmT1lGCRLq5KDtxakajGmBkpa6IKfZ8uhhjQbjz52 CIMR3TznvmrAnuGDFAtTtgEfKWjt1SWiOu0bOBj8HpFfVefqwDDXHct0JLk07gnQ fSAVeAMqcrSK+jVMj0MZA3KfY1FjitTvCYZRmfXTZ5iaqYGf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTwBxj2MGqWNgsTD6hS1tWb8HjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNTI2ZTM2Y2MtYTk4MS0z YzU5LWFjYmQtMjZiYmI1ZTY0ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARUwVgDXNsewWKfFx9yBP8iwt01eBwiKOGTt7I2o7vZFnt+AlpYdr0u U/E96VLQIs26tzOUNVmeJ4zgBfjGY8RqOd00OZAyaqfFefMTELw4wCbnvdiY9IUk v185VWN/dL96gFTNFK9/ogw4nWsc6lBEmp4+V9t6RX3UWz55eSHE4PPkyNNuJ2yX qdtHnKlrEUi/Ic8kZ8LfBdvro0l/nW2mfetFTmfNAV/R3/m008gH4ty3kiMSIZKV bx3TFXlGhGCXvtWCFG/nwOWzjjWbhJdZqgsdrRXwd96q90zIbq/vGYEHzxH5iuGD xFgF5Cg/1cvX05siuPt4W2iSt7Z0R9A= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:01 2025 by rpki-client