$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/dd1b8442-3eb2-35eb-97db-5a687f0b4aeb.roa File: dd1b8442-3eb2-35eb-97db-5a687f0b4aeb.roa (raw, json) Hash identifier: 3Tuj0szBKRtaN3QgFxdPNDFRIHgvLSNttaRTy2suPR4= Subject key identifier: F5:B4:70:C0:72:14:5E:C6:D0:6F:85:F2:F8:5F:A5:38:A9:ED:31:34 Certificate issuer: /CN=ffb67a96-02a3-4447-aa27-0dc385fe3b0f Certificate serial: 010D0C9F4328584F8057DE0B544153CD6724D8F8 Authority key identifier: 32:82:EC:E7:89:80:D9:79:9E:1B:63:A4:53:AD:92:43:3F:09:3C:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/dd1b8442-3eb2-35eb-97db-5a687f0b4aeb.roa Signing time: Wed 14 Oct 2026 16:55:58 +0000 ROA not before: Wed 14 Oct 2026 16:55:58 +0000 ROA not after: Tue 12 Jan 2027 17:55:58 +0000 asID: 11239 IP address blocks: 199.114.252.0/22 maxlen: 22 199.168.248.0/22 maxlen: 22 2607:2700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:57:de:0b:54:41:53:cd:67:24:d8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb67a96-02a3-4447-aa27-0dc385fe3b0f Validity Not Before: Oct 14 16:55:58 2026 GMT Not After : Jan 12 17:55:58 2027 GMT Subject: CN=0612c62d-674d-4d64-aee5-27e70e09f3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:fa:f0:9e:04:22:c4:25:4d:2b:42:19:27: 26:94:2e:bb:0f:81:98:28:a1:09:93:28:c4:45:d2: 29:ff:ed:ef:83:8a:39:e8:25:51:72:9b:ae:67:c0: e0:aa:89:7f:ac:99:08:a8:41:04:8d:95:61:29:e7: e3:6f:c0:e9:6b:3b:73:af:ad:5c:f0:8f:5d:01:3e: 19:8c:a5:84:e1:e7:3d:ca:c1:20:e0:f0:90:0e:f4: 92:c6:6c:e1:c2:f1:2e:09:de:95:dd:3a:24:c9:f6: 41:ee:42:0e:bd:0a:e7:99:6c:32:56:66:de:f0:1c: 7f:94:d8:1f:75:55:c1:ce:2b:99:92:41:ff:40:13: 7c:62:cb:b9:3a:7d:8f:1e:8f:fe:d8:cc:47:c3:04: b7:14:00:f6:0e:71:e9:0a:e6:f7:13:bc:f5:8f:1a: b7:f4:bf:75:38:ee:c0:6d:e8:2d:71:23:01:3e:c7: 55:64:cd:30:13:2a:17:b1:51:96:97:cb:05:86:b0: fe:cf:6c:1e:06:1e:17:d1:68:cf:78:2b:d7:52:1b: 0e:60:73:49:ef:ad:aa:56:41:ce:24:e3:3b:c8:d3: 86:fc:04:94:3c:ec:9d:f8:5f:48:bb:cd:17:bf:25: 47:97:30:c0:42:78:57:12:51:d1:c7:4b:6b:52:1c: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:70:C0:72:14:5E:C6:D0:6F:85:F2:F8:5F:A5:38:A9:ED:31:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/dd1b8442-3eb2-35eb-97db-5a687f0b4aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.crl X509v3 Authority Key Identifier: keyid:32:82:EC:E7:89:80:D9:79:9E:1B:63:A4:53:AD:92:43:3F:09:3C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.cer sbgp-ipAddrBlock: critical IPv4: 199.114.252.0/22 199.168.248.0/22 IPv6: 2607:2700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d8:00:df:80:44:dd:de:74:c6:4b:c1:73:b0:69:9e:86:10: 09:47:21:70:1d:b9:9b:63:d9:3f:50:aa:0b:08:ee:2c:f2:f5: dd:9e:91:f5:2b:60:a7:fc:ef:d7:d3:5d:b3:89:a4:ac:10:19: e1:09:1d:8b:43:f6:ac:5e:90:0b:72:39:94:34:74:66:79:5b: b1:f9:96:91:97:65:a7:d2:29:ae:8e:13:cc:4b:12:1e:8f:81: 6b:39:1b:f6:29:98:2f:94:86:57:20:f9:f3:8e:cb:7f:97:c4: 30:bc:80:f9:f1:5c:49:c3:a7:29:72:e3:bd:c9:bb:30:91:08: 2a:a5:6c:82:e8:86:25:2c:40:01:ec:b6:df:ee:3e:cb:71:ac: 70:01:7f:2a:b6:db:c5:42:a0:ed:64:3e:46:7a:05:90:e2:1e: 65:54:00:c9:d8:64:ed:50:f6:49:47:2e:00:26:6a:0c:69:cc: c4:82:75:2e:67:15:5c:d3:77:49:0a:86:60:26:dd:9b:f3:3a: d4:4b:79:3a:3c:41:76:ff:ae:89:86:0c:fa:c0:93:24:ca:80: e3:d2:57:37:27:f4:72:12:0c:15:d5:cf:32:db:f7:7e:4a:40: 91:56:7d:ee:5d:1c:05:1a:bb:49:ae:39:32:f3:22:09:ee:1d: d7:19:89:f0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE+AV94LVEFTzWck2PgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZiNjdhOTYtMDJhMy00NDQ3LWFhMjctMGRjMzg1ZmUz YjBmMB4XDTI2MTAxNDE2NTU1OFoXDTI3MDExMjE3NTU1OFowLzEtMCsGA1UEAxMk MDYxMmM2MmQtNjc0ZC00ZDY0LWFlZTUtMjdlNzBlMDlmM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3368J4EIsQlTStCGScmlC67D4GYKKEJkyjE RdIp/+3vg4o56CVRcpuuZ8Dgqol/rJkIqEEEjZVhKefjb8Dpaztzr61c8I9dAT4Z jKWE4ec9ysEg4PCQDvSSxmzhwvEuCd6V3TokyfZB7kIOvQrnmWwyVmbe8Bx/lNgf dVXBziuZkkH/QBN8Ysu5On2PHo/+2MxHwwS3FAD2DnHpCub3E7z1jxq39L91OO7A begtcSMBPsdVZM0wEyoXsVGWl8sFhrD+z2weBh4X0WjPeCvXUhsOYHNJ762qVkHO JOM7yNOG/ASUPOyd+F9Iu80XvyVHlzDAQnhXElHRx0trUhwiUQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPW0cMByFF7G0G+F8vhfpTip7TE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9mZmI2 N2E5Ni0wMmEzLTQ0NDctYWEyNy0wZGMzODVmZTNiMGYvZGQxYjg0NDItM2ViMi0z NWViLTk3ZGItNWE2ODdmMGI0YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZmZiNjdhOTYtMDJhMy00NDQ3LWFh MjctMGRjMzg1ZmUzYjBmL2ZmYjY3YTk2LTAyYTMtNDQ0Ny1hYTI3LTBkYzM4NWZl M2IwZi5jcmwwHwYDVR0jBBgwFoAUMoLs54mA2XmeG2OkU62SQz8JPOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9mZmI2N2E5Ni0wMmEzLTQ0NDctYWEyNy0wZGMz ODVmZTNiMGYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCx3L8AwQC x6j4MA0EAgACMAcDBQAmBycAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFHYAN+ARN3edMZLwXOwaZ6GEAlH IXAduZtj2T9QqgsI7izy9d2ekfUrYKf879fTXbOJpKwQGeEJHYtD9qxekAtyOZQ0 dGZ5W7H5lpGXZafSKa6OE8xLEh6PgWs5G/YpmC+Uhlcg+fOOy3+XxDC8gPnxXEnD pyly473JuzCRCCqlbILohiUsQAHstt/uPstxrHABfyq228VCoO1kPkZ6BZDiHmVU AMnYZO1Q9klHLgAmagxpzMSCdS5nFVzTd0kKhmAm3ZvzOtRLeTo8QXb/romGDPrA kyTKgOPSVzcn9HISDBXVzzLb935KQJFWfe5dHAUau0muOTLzIgnuHdcZifA= -----END CERTIFICATE-----Generated at Mon Nov 2 14:28:27 2026 by rpki-client