$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/995c290c-8d21-3fa5-9dff-fa306586e4a3.roa File: 995c290c-8d21-3fa5-9dff-fa306586e4a3.roa (raw, json) Hash identifier: +e6wYrCCspJoRaHsK/pOhsy5WL668Ya2KD0eaQd8j9Q= Subject key identifier: 54:A9:28:26:06:62:DD:49:B9:8B:52:36:26:C7:F1:C6:6B:E1:2E:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE38C94FE1D32E76F44B70620 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/995c290c-8d21-3fa5-9dff-fa306586e4a3.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 213120 IP address blocks: 199.46.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:94:fe:1d:32:e7:6f:44:b7:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=60f4810c-e986-4649-8cb0-ace9896861e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:66:70:8c:c4:f5:e3:de:0f:e1:cc:87:4f: 84:90:d0:2b:ec:c8:a2:88:c5:67:02:80:8c:be:41: 26:84:fe:87:1c:17:20:b0:69:8c:ea:5b:bf:84:43: 48:cc:56:72:54:56:a2:b4:cc:0f:36:fb:93:5e:44: 65:10:b4:07:5a:6d:1d:2b:89:77:d8:8d:92:b5:16: d0:2e:43:ab:62:52:32:16:cf:04:db:82:a9:33:d7: b7:61:2a:83:0c:89:28:75:c9:98:a5:43:86:77:df: 52:a7:1d:21:f0:71:51:0d:d4:67:d3:7d:b2:67:39: a7:6d:86:f4:00:80:b2:d9:77:c0:d2:56:8a:87:3b: 48:74:1b:62:4a:ec:cc:d8:cc:94:18:68:bb:1d:a7: 9a:11:7e:da:9a:84:b2:67:29:6c:5d:02:03:c4:ad: e7:31:9f:f3:0b:cc:b3:6a:0e:fd:8d:1d:ad:f1:fe: 0b:60:32:3a:46:0e:3f:d9:6e:e8:7c:9d:a2:1e:ad: e6:3d:38:6f:27:b7:05:e3:4e:79:eb:25:ca:4c:fa: ca:99:6b:ae:bc:7e:bd:a8:85:0a:ee:cd:e4:13:f0: 3c:c8:cd:ad:30:1c:e6:d7:e0:e8:b6:12:7c:49:f0: 54:10:54:24:0a:c3:d1:2f:46:00:13:44:47:d5:f8: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A9:28:26:06:62:DD:49:B9:8B:52:36:26:C7:F1:C6:6B:E1:2E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/995c290c-8d21-3fa5-9dff-fa306586e4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 199.46.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:60:ab:d5:96:15:3b:56:36:c3:15:7d:9f:46:b8:9e:7e:87: 67:b3:65:fe:a3:d1:d3:6a:12:f5:23:2a:8f:b2:3f:0d:03:6d: a6:36:8f:38:fa:46:2d:db:01:d0:82:0b:c0:3b:82:9f:13:f9: a2:bc:a1:fc:98:a1:fb:a7:4e:e7:98:83:82:77:48:79:f4:78: 8f:fd:f7:6d:3d:b0:e0:a1:24:86:07:96:77:fe:be:8e:12:01: 44:2d:38:82:71:9b:6e:c8:55:38:3b:ec:ce:0e:06:a6:13:9d: e9:dd:1d:99:ae:ae:6a:16:52:a6:37:ad:f7:32:0f:61:2c:f5: 26:b8:9d:ad:1b:9b:99:77:bb:90:c8:24:2d:09:64:c4:00:4a: 68:10:57:b8:58:1b:12:5a:3c:d2:36:33:76:5b:b3:64:f2:a2: 07:4f:31:05:1b:7e:47:e1:bf:ee:a6:4e:c3:01:e5:9e:bd:40: cc:6c:44:6a:1b:c3:82:33:78:82:1a:8f:5e:ba:4c:54:cd:08: 18:a9:73:74:f7:07:3d:ab:92:61:92:da:78:62:03:3b:51:e8: 71:ff:e5:8a:6e:4f:7c:0e:36:d9:57:61:d2:30:3f:7f:32:56: 4d:b8:fe:35:d3:91:c4:ad:06:43:53:f2:0f:43:61:f0:0f:95: 7d:4d:d3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJT+HTLnb0S3BiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NjBmNDgxMGMtZTk4Ni00NjQ5LThjYjAtYWNlOTg5Njg2MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQFmcIzE9ePeD+HMh0+EkNAr7MiiiMVnAoCM vkEmhP6HHBcgsGmM6lu/hENIzFZyVFaitMwPNvuTXkRlELQHWm0dK4l32I2StRbQ LkOrYlIyFs8E24KpM9e3YSqDDIkodcmYpUOGd99Spx0h8HFRDdRn032yZzmnbYb0 AICy2XfA0laKhztIdBtiSuzM2MyUGGi7HaeaEX7amoSyZylsXQIDxK3nMZ/zC8yz ag79jR2t8f4LYDI6Rg4/2W7ofJ2iHq3mPThvJ7cF40556yXKTPrKmWuuvH69qIUK 7s3kE/A8yM2tMBzm1+DothJ8SfBUEFQkCsPRL0YAE0RH1fhUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSpKCYGYt1JuYtSNibH8cZr4S5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk1YzI5MGMtOGQyMS0z ZmE1LTlkZmYtZmEzMDY1ODZlNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxy4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdgq9WWFTtWNsMVfZ9GuJ5+h2ezZf6j0dNqEvUjKo+yPw0DbaY2jzj6 Ri3bAdCCC8A7gp8T+aK8ofyYofunTueYg4J3SHn0eI/99209sOChJIYHlnf+vo4S AUQtOIJxm27IVTg77M4OBqYTnendHZmurmoWUqY3rfcyD2Es9Sa4na0bm5l3u5DI JC0JZMQASmgQV7hYGxJaPNI2M3Zbs2TyogdPMQUbfkfhv+6mTsMB5Z69QMxsRGob w4IzeIIaj166TFTNCBipc3T3Bz2rkmGS2nhiAztR6HH/5YpuT3wONtlXYdIwP38y Vk24/jXTkcStBkNT8g9DYfAPlX1N0/s= -----END CERTIFICATE-----Generated at Sat Sep 5 02:08:45 2026 by rpki-client