$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa File: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (raw, json) Hash identifier: ZTL9o9VXnwUSowRIc/Dxk/KSaifc0dQeal7KeJ1Ubcs= Subject key identifier: A7:E1:9E:13:3D:CA:84:FE:C2:DD:E1:22:22:1A:8B:74:71:82:14:FB Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F4328584F4973A4343F296AE1CC82EE80 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26661 IP address blocks: 199.96.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a4:34:3f:29:6a:e1:cc:82:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c67ef4b-1f36-4401-b68a-f73f125df5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:a2:34:0b:9d:cc:04:b0:0b:99:31:a4:64: b4:cb:62:e1:ad:84:a2:dd:7f:1d:3a:2f:cd:87:32: 7a:24:e3:53:09:be:52:96:7d:4d:76:9d:c1:78:a0: d8:7b:30:68:ef:74:1f:41:51:74:ba:b7:42:58:71: 17:45:64:5b:5a:86:af:9f:c4:c3:c5:28:29:92:1c: ae:bb:01:8c:21:9f:0d:f3:84:5b:60:0c:a4:f1:56: 03:a8:e5:ce:5b:b4:95:38:08:52:e2:62:3e:7d:61: 5b:a8:5f:4d:ad:61:c9:49:c1:cc:93:90:4a:67:b0: ad:6c:61:48:ee:3d:cb:6e:04:60:1a:de:36:e5:9b: 30:02:10:ad:c4:cd:d0:e5:ea:b1:83:1c:b6:bc:91: ca:6e:53:9d:b0:76:cf:ed:a0:9f:2e:1a:5c:ff:80: 95:bf:db:f4:c5:73:f6:23:02:87:7f:7a:1c:c1:04: 98:83:f5:0b:bb:67:28:53:82:25:a9:c7:46:ae:a4: c0:6d:fc:50:2f:66:02:7f:45:1b:96:f6:bc:6c:35: 9d:9c:0f:2c:c7:ae:09:b6:dd:a1:47:c8:ac:f7:52: 29:45:a2:aa:07:ff:09:06:9e:1d:cc:65:11:7a:de: be:99:9f:f9:80:e2:5f:c8:3f:fd:61:ab:75:ef:e0: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:9E:13:3D:CA:84:FE:C2:DD:E1:22:22:1A:8B:74:71:82:14:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: 199.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:92:17:22:7a:3f:5b:3d:fe:d4:0d:ab:70:d3:ce:34:2b:bb: 7b:33:3a:c9:00:57:c2:84:e8:34:4c:bd:1c:28:80:11:07:c3: 2c:74:d0:6a:a7:f5:a5:5a:b3:c2:61:15:4a:7b:b0:ad:e2:7b: 0f:63:73:2a:8e:a9:35:e6:82:54:ce:cf:c3:f9:2c:68:56:ed: 19:75:d4:2d:94:2b:e6:59:ac:9e:3a:8a:41:ef:7d:a1:f3:78: 74:ec:7a:34:e5:16:08:3a:dd:38:f6:84:2a:26:c3:e0:cd:d8: da:17:c6:33:50:56:bf:c0:3d:b4:ae:2a:85:0f:4b:a8:d1:94: e3:33:04:4f:2d:93:c1:c8:fc:9c:49:6b:b7:81:7e:08:fd:cd: 27:d5:15:90:ed:30:d0:ec:37:e2:f3:0c:61:0b:23:c2:9e:24: d8:73:0f:15:2b:83:8e:a7:b5:15:56:df:23:cb:69:7e:33:8a: dd:70:67:27:89:78:45:79:e5:57:77:e9:18:5d:d7:4d:43:41: 27:9a:19:07:c2:a8:92:23:3b:56:35:ea:e1:65:8b:22:10:73: 80:d6:6a:29:1e:97:b3:b4:3d:81:2c:ba:bc:a2:4a:93:eb:9b: 6f:e6:3c:79:72:56:fb:a8:13:03:63:87:72:b2:d8:4d:87:46: a9:9d:1c:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6Q0Pylq4cyC7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM2N2VmNGItMWYzNi00NDAxLWI2OGEtZjczZjEyNWRmNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjeiNAudzASwC5kxpGS0y2LhrYSi3X8dOi/N hzJ6JONTCb5Sln1Ndp3BeKDYezBo73QfQVF0urdCWHEXRWRbWoavn8TDxSgpkhyu uwGMIZ8N84RbYAyk8VYDqOXOW7SVOAhS4mI+fWFbqF9NrWHJScHMk5BKZ7CtbGFI 7j3LbgRgGt425ZswAhCtxM3Q5eqxgxy2vJHKblOdsHbP7aCfLhpc/4CVv9v0xXP2 IwKHf3ocwQSYg/ULu2coU4IlqcdGrqTAbfxQL2YCf0Ublva8bDWdnA8sx64Jtt2h R8is91IpRaKqB/8JBp4dzGURet6+mZ/5gOJfyD/9Yat17+A1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfhnhM9yoT+wt3hIiIai3RxghT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvZjQwZTBlNDctOTQxYS0z MjExLTkwMTgtZWEzYTViYjMzODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2C4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmSFyJ6P1s9/tQNq3DTzjQru3szOskAV8KE6DRMvRwogBEHwyx00Gqn 9aVas8JhFUp7sK3iew9jcyqOqTXmglTOz8P5LGhW7Rl11C2UK+ZZrJ46ikHvfaHz eHTsejTlFgg63Tj2hComw+DN2NoXxjNQVr/APbSuKoUPS6jRlOMzBE8tk8HI/JxJ a7eBfgj9zSfVFZDtMNDsN+LzDGELI8KeJNhzDxUrg46ntRVW3yPLaX4zit1wZyeJ eEV55Vd36Rhd101DQSeaGQfCqJIjO1Y16uFliyIQc4DWaikel7O0PYEsuryiSpPr m2/mPHlyVvuoEwNjh3Ky2E2HRqmdHE8= -----END CERTIFICATE-----Generated at Mon Sep 28 17:31:52 2026 by rpki-client