$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/5533faee-1f7e-3b49-92ea-017f20b11c75.roa File: 5533faee-1f7e-3b49-92ea-017f20b11c75.roa (raw, json) Hash identifier: cawal0cSInMRbpCQcbJP+y0D/qL9WDxnFHGwl7nlF/U= Subject key identifier: 43:C1:35:16:EE:0D:BE:40:F6:6D:59:EC:81:49:4D:04:61:BF:53:A8 Certificate issuer: /CN=30af253c-c940-47f2-b5af-bae3d8d908f3 Certificate serial: 010D0C9F4328584F58EE574250C0BB804BDA5200 Authority key identifier: 34:18:6C:44:CA:74:BE:F7:38:EE:68:89:F6:0D:70:6B:6E:AC:37:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/5533faee-1f7e-3b49-92ea-017f20b11c75.roa Signing time: Wed 30 Sep 2026 14:06:49 +0000 ROA not before: Wed 30 Sep 2026 14:06:49 +0000 ROA not after: Tue 29 Dec 2026 15:06:49 +0000 asID: 8075 IP address blocks: 199.83.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/30af253c-c940-47f2-b5af-bae3d8d908f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/30af253c-c940-47f2-b5af-bae3d8d908f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:ee:57:42:50:c0:bb:80:4b:da:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30af253c-c940-47f2-b5af-bae3d8d908f3 Validity Not Before: Sep 30 14:06:49 2026 GMT Not After : Dec 29 15:06:49 2026 GMT Subject: CN=078a737d-73b5-4718-ba85-e166e743022d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:99:59:97:35:bc:51:5e:d9:51:79:6e:29: 28:8b:19:de:91:45:83:c8:db:78:88:44:1b:1b:a6: f9:d0:45:d0:56:f0:21:72:04:09:79:83:73:98:1d: 73:e0:28:55:24:cd:98:9f:aa:36:39:75:05:58:65: 9a:7c:37:00:87:84:74:9c:32:0d:81:6b:ec:44:90: e2:29:a1:5a:61:64:54:13:b5:31:45:66:da:ce:62: 2a:5a:53:70:38:f5:6b:14:b8:8b:3a:ba:59:a1:51: 43:dc:96:e1:1c:23:b7:25:66:4d:bc:fb:21:e4:43: ae:5a:cb:e2:10:09:ef:74:28:4e:17:e0:6c:39:b0: 5a:27:1a:96:03:9a:f7:4c:d6:0f:b4:41:60:37:7e: 3c:47:10:07:02:e4:ed:e3:f0:0d:3c:d8:f2:c7:a3: 19:62:31:a3:12:f6:bf:ee:a4:c9:9d:5b:63:53:89: 56:c7:3e:61:0e:81:a9:f4:ab:c8:4a:82:b2:03:40: 45:99:ad:73:83:5c:08:2c:81:0f:43:0e:38:02:b0: 1f:af:bc:66:6f:28:86:6f:fc:7e:a6:46:9c:62:e8: 59:04:e9:39:eb:04:1e:22:e9:34:c8:b0:4a:bd:68: b5:13:51:28:61:9e:94:51:1f:4b:09:1a:be:90:78: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:35:16:EE:0D:BE:40:F6:6D:59:EC:81:49:4D:04:61:BF:53:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/5533faee-1f7e-3b49-92ea-017f20b11c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/30af253c-c940-47f2-b5af-bae3d8d908f3.crl X509v3 Authority Key Identifier: keyid:34:18:6C:44:CA:74:BE:F7:38:EE:68:89:F6:0D:70:6B:6E:AC:37:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3.cer sbgp-ipAddrBlock: critical IPv4: 199.83.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9f:11:5b:c6:64:59:23:e4:00:9e:23:49:63:35:70:be:bc: 5c:76:ca:33:4b:ca:25:bd:48:01:99:8c:3b:05:f3:65:91:bd: b0:16:9f:77:fd:43:48:4e:01:8d:e3:82:42:ca:6f:35:c2:c8: 15:c1:66:ae:86:45:d9:55:b6:06:87:3e:1c:72:9d:0c:08:06: f2:0e:bb:9c:44:e9:07:57:03:03:6d:c9:68:31:df:25:0e:31: 72:f2:05:d9:e1:d8:2d:1c:42:fe:a7:11:50:2a:4b:f2:33:af: bc:69:4b:2e:13:a4:fc:70:dc:4b:3d:9e:18:e1:cd:6d:1d:29: a3:60:bf:a9:47:70:95:20:bc:e6:e8:1c:91:b0:aa:83:aa:73: cc:6b:92:af:ab:e0:1f:a6:d5:61:3c:1e:f0:ad:a0:58:a9:6a: f1:3e:da:41:ff:8b:f2:e3:1e:73:7f:b0:84:e3:eb:6e:73:df: f2:fe:9d:6f:61:f2:e9:ed:d3:7f:78:a3:c5:1e:e5:a5:48:2d: 47:48:1a:d0:7d:f1:a5:38:38:57:8a:4c:fc:bf:a5:ae:51:5f: 9a:32:3b:81:9b:9d:c3:44:13:b7:43:34:6a:23:06:11:7e:17: a9:9f:25:5e:6e:96:75:4b:10:82:7d:4f:20:0f:08:e9:26:b0: cd:62:b4:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Y7ldCUMC7gEvaUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBhZjI1M2MtYzk0MC00N2YyLWI1YWYtYmFlM2Q4ZDkw OGYzMB4XDTI2MDkzMDE0MDY0OVoXDTI2MTIyOTE1MDY0OVowLzEtMCsGA1UEAxMk MDc4YTczN2QtNzNiNS00NzE4LWJhODUtZTE2NmU3NDMwMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IuZWZc1vFFe2VF5bikoixnekUWDyNt4iEQb G6b50EXQVvAhcgQJeYNzmB1z4ChVJM2Yn6o2OXUFWGWafDcAh4R0nDINgWvsRJDi KaFaYWRUE7UxRWbazmIqWlNwOPVrFLiLOrpZoVFD3JbhHCO3JWZNvPsh5EOuWsvi EAnvdChOF+BsObBaJxqWA5r3TNYPtEFgN348RxAHAuTt4/ANPNjyx6MZYjGjEva/ 7qTJnVtjU4lWxz5hDoGp9KvISoKyA0BFma1zg1wILIEPQw44ArAfr7xmbyiGb/x+ pkacYuhZBOk56wQeIuk0yLBKvWi1E1EoYZ6UUR9LCRq+kHjJLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPBNRbuDb5A9m1Z7IFJTQRhv1OoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zMGFm MjUzYy1jOTQwLTQ3ZjItYjVhZi1iYWUzZDhkOTA4ZjMvNTUzM2ZhZWUtMWY3ZS0z YjQ5LTkyZWEtMDE3ZjIwYjExYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzBhZjI1M2MtYzk0MC00N2YyLWI1 YWYtYmFlM2Q4ZDkwOGYzLzMwYWYyNTNjLWM5NDAtNDdmMi1iNWFmLWJhZTNkOGQ5 MDhmMy5jcmwwHwYDVR0jBBgwFoAUNBhsRMp0vvc47miJ9g1wa26sN4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zMGFmMjUzYy1jOTQwLTQ3ZjItYjVhZi1iYWUz ZDhkOTA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1NOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqfEVvGZFkj5ACeI0ljNXC+vFx2yjNLyiW9SAGZjDsF82WRvbAWn3f9 Q0hOAY3jgkLKbzXCyBXBZq6GRdlVtgaHPhxynQwIBvIOu5xE6QdXAwNtyWgx3yUO MXLyBdnh2C0cQv6nEVAqS/Izr7xpSy4TpPxw3Es9nhjhzW0dKaNgv6lHcJUgvObo HJGwqoOqc8xrkq+r4B+m1WE8HvCtoFipavE+2kH/i/LjHnN/sITj625z3/L+nW9h 8unt0394o8Ue5aVILUdIGtB98aU4OFeKTPy/pa5RX5oyO4GbncNEE7dDNGojBhF+ F6mfJV5ulnVLEIJ9TyAPCOkmsM1itPk= -----END CERTIFICATE-----Generated at Thu Oct 22 20:00:58 2026 by rpki-client