$ rpki-client -vvvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e382e302f32342d3234203d3e203138383534.roa File: 3139392e3234392e382e302f32342d3234203d3e203138383534.roa (raw, json) Hash identifier: BDZMnQFH3n7bAzM1SCMZISlkjjIyBDbep4vNYPFFXZY= Subject key identifier: 1C:6B:19:BB:26:AD:6C:CA:0D:76:78:40:7F:FB:38:5D:2A:7C:9C:84 Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90 Certificate serial: 091AEB712F647020E719F19E0CF8565C8B7D44C5 Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e382e302f32342d3234203d3e203138383534.roa Signing time: Sat 03 Oct 2026 15:25:13 +0000 ROA not before: Sat 03 Oct 2026 15:20:13 +0000 ROA not after: Sat 02 Oct 2027 15:25:13 +0000 asID: 18854 IP address blocks: 199.249.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1a:eb:71:2f:64:70:20:e7:19:f1:9e:0c:f8:56:5c:8b:7d:44:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90 Validity Not Before: Oct 3 15:20:13 2026 GMT Not After : Oct 2 15:25:13 2027 GMT Subject: CN=1C6B19BB26AD6CCA0D7678407FFB385D2A7C9C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:9a:52:14:94:9f:01:40:00:5a:8b:0c:50: e2:b3:94:d0:e5:d8:dd:76:13:04:a6:d6:64:d2:57: 76:b4:a6:26:0a:67:7f:31:a2:76:96:b2:e7:94:b5: 94:fd:2f:a0:8d:24:aa:6b:60:28:03:57:01:65:5a: 69:7e:f3:a0:ab:7c:cf:ae:b3:c6:89:8e:38:02:2d: e8:e3:73:b9:0a:7e:88:a3:56:3e:32:e8:09:f5:80: af:35:8d:e9:af:81:fd:cd:d3:1b:4f:a5:84:c2:28: 1f:96:54:04:8b:99:ad:65:fb:2a:e2:4e:3d:e9:f1: 96:fb:ee:84:6e:2f:65:18:2f:83:d9:d3:cf:af:de: eb:55:a2:24:13:73:46:b6:94:64:df:74:15:04:db: c5:aa:ae:ba:c6:8e:a2:3e:e6:81:8e:62:bf:6b:33: 5e:d4:2f:48:56:e4:67:20:64:e2:25:ad:69:e5:16: b9:73:f6:86:06:e6:32:83:7a:9b:29:a0:48:cf:69: b3:a9:db:2d:9a:64:36:b4:43:c6:77:22:f3:11:02: 79:a1:f0:c8:98:09:cb:c8:33:73:9c:a3:b4:9e:c5: f5:e5:2d:e3:42:f6:23:72:69:93:fa:a3:58:c7:d1: 40:ec:dc:05:58:04:e5:f8:d0:60:3d:36:db:5d:de: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6B:19:BB:26:AD:6C:CA:0D:76:78:40:7F:FB:38:5D:2A:7C:9C:84 X509v3 Authority Key Identifier: keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e382e302f32342d3234203d3e203138383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.249.8.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:cc:a8:57:ed:de:43:72:8f:87:88:20:20:ef:7d:da:a6:27: 21:17:02:84:53:3a:22:c6:dd:46:10:39:08:23:ab:0f:97:c3: 9d:75:36:b7:1a:a3:15:f9:1a:04:d2:30:11:9c:73:1f:ae:f5: 36:8c:d1:6a:51:f9:6e:5b:e8:ad:34:5d:83:25:65:49:38:b0: 71:ab:8f:2f:2d:6d:bf:e5:ae:59:0e:ac:43:98:9b:d9:24:d3: d5:2e:6d:1b:40:1f:bc:c9:ea:18:ec:e1:ad:7b:dd:2f:7a:a3: 6e:8a:e0:af:eb:38:3e:95:d9:a5:9e:ad:1a:6a:d3:65:26:f8: 1e:c3:a0:7a:e0:45:f9:d0:04:0f:fb:be:29:c3:ce:e0:5e:e5: bc:50:99:ab:b9:55:45:e6:c6:1a:14:f5:3f:e5:b8:8a:66:b4: d6:58:27:51:91:85:c4:3b:eb:fb:d3:2d:30:81:33:40:0e:c4: 71:0d:69:4d:39:41:f3:ae:33:35:a8:be:ea:f9:be:de:fc:15: 7b:b0:47:70:3e:c2:a7:17:86:6f:73:0b:8d:8f:49:2b:de:d2: 6f:6a:13:49:ab:0b:91:05:8a:b5:81:9c:98:f2:58:89:95:32: ca:8c:ee:cb:b5:81:72:93:27:a6:df:60:64:30:26:9d:09:b1: 15:b0:20:03 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUCRrrcS9kcCDnGfGeDPhWXIt9RMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjUyODc5ZDI4M2M3YTM4Y2QyOThiYzUzZWM2NzA0YjI5 YjYxZmNmYmRhZmU4ZWJlOTAwHhcNMjYxMDAzMTUyMDEzWhcNMjcxMDAyMTUyNTEz WjAzMTEwLwYDVQQDEygxQzZCMTlCQjI2QUQ2Q0NBMEQ3Njc4NDA3RkZCMzg1RDJB N0M5Qzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydaaUhSUnwFA AFqLDFDis5TQ5djddhMEptZk0ld2tKYmCmd/MaJ2lrLnlLWU/S+gjSSqa2AoA1cB ZVppfvOgq3zPrrPGiY44Ai3o43O5Cn6Io1Y+MugJ9YCvNY3pr4H9zdMbT6WEwigf llQEi5mtZfsq4k496fGW++6Ebi9lGC+D2dPPr97rVaIkE3NGtpRk33QVBNvFqq66 xo6iPuaBjmK/azNe1C9IVuRnIGTiJa1p5Ra5c/aGBuYyg3qbKaBIz2mzqdstmmQ2 tEPGdyLzEQJ5ofDImAnLyDNznKO0nsX15S3jQvYjcmmT+qNYx9FA7NwFWATl+NBg PTbbXd6pXwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBxrGbsmrWzKDXZ4QH/7OF0q fJyEMB8GA1UdIwQYMBaAFMmMiSrQ4NgriSUaHxdzMTmDG3iXMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5Lzg1M2NiNDg0NmVlMzQzMTNiYWMwNjk1NGI1YWI4NmJiLzAv Qzk4Qzg5MkFEMEUwRDgyQjg5MjUxQTFGMTc3MzMxMzk4MzFCNzg5Ny5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll ZjFiNGUyLzVlMTRlNzM3LTc3YjktNGVmYi1hNWVhLWUzMTE5NTk0YTY2Ni82NTI4 NzlkMjgzYzdhMzhjZDI5OGJjNTNlYzY3MDRiMjliNjFmY2ZiZGFmZThlYmU5MC5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84NTNjYjQ4NDZlZTM0MzEzYmFjMDY5 NTRiNWFiODZiYi8wLzMxMzkzOTJlMzIzNDM5MmUzODJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMxMzgzODM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH+QgwDQYJKoZIhvcNAQELBQAD ggEBAJ7MqFft3kNyj4eIICDvfdqmJyEXAoRTOiLG3UYQOQgjqw+Xw511NrcaoxX5 GgTSMBGccx+u9TaM0WpR+W5b6K00XYMlZUk4sHGrjy8tbb/lrlkOrEOYm9kk09Uu bRtAH7zJ6hjs4a173S96o26K4K/rOD6V2aWerRpq02Um+B7DoHrgRfnQBA/7vinD zuBe5bxQmau5VUXmxhoU9T/luIpmtNZYJ1GRhcQ76/vTLTCBM0AOxHENaU05QfOu MzWovur5vt78FXuwR3A+wqcXhm9zC42PSSve0m9qE0mrC5EFirWBnJjyWImVMsqM 7su1gXKTJ6bfYGQwJp0JsRWwIAM= -----END CERTIFICATE-----Generated at Wed Oct 14 04:51:15 2026 by rpki-client