$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa File: ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json) Hash identifier: RZgCtqCH+eeu/QLy8u4/SQY+HP3Hqc9x2Jwxb/BQlRE= Subject key identifier: 15:9C:93:04:90:67:9F:72:39:A9:10:6F:A4:08:BA:ED:19:F6:92:D3 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584F4973AAA06F567C0CC414FC80 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13660 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:aa:a0:6f:56:7c:0c:c4:14:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e2b04dbd-3090-401c-bec9-a9776b65e782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:03:e5:19:af:64:d2:6c:7c:7f:65:ec:37: ca:79:9b:45:a2:f1:7b:77:e3:ff:64:0f:cd:4b:d6: eb:74:ac:90:76:88:d1:d3:c2:72:2f:1a:01:3a:b0: 15:9f:20:4a:a7:d0:ff:ac:de:37:ff:bb:90:0f:04: 02:60:37:3b:ae:0a:4d:fa:56:a6:e7:5c:24:4d:59: 64:5d:ba:e9:91:62:35:71:28:ae:5d:f7:f5:41:53: ce:c4:3e:01:c7:22:59:4c:e4:4a:fa:a8:d3:4c:3b: 11:56:11:c1:a1:0f:c0:57:70:0e:bb:e6:69:ba:e2: aa:fa:04:b0:07:4d:59:94:98:ee:6a:9c:d1:8d:de: 3d:f4:29:ed:7e:9b:05:0e:83:18:02:67:64:06:8b: c0:7e:7f:ae:14:b4:c1:7d:87:5d:5e:ef:7e:b3:52: a7:1e:bf:92:4e:21:69:77:fe:30:3d:26:16:a4:36: 68:78:36:0e:cc:ec:ed:00:15:a5:ca:00:ee:9b:d6: c4:2e:75:28:78:4f:f9:75:09:ef:93:28:d1:d8:1a: c7:b4:33:65:bf:0b:ea:2a:b4:da:1c:82:8b:b2:d0: 6f:3e:31:fa:60:33:fd:52:7b:f7:4b:7a:f8:dc:a9: ce:f5:8d:0f:15:4b:94:4d:b3:31:0a:39:ee:db:9a: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9C:93:04:90:67:9F:72:39:A9:10:6F:A4:08:BA:ED:19:F6:92:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cf:4b:33:27:94:2a:ed:b1:cf:41:7e:a7:10:68:5b:c4:ec: 84:19:a0:52:35:f5:fc:43:ba:76:ff:34:78:4c:f7:ef:ef:11: 88:5d:18:28:e5:cf:c8:27:02:fd:f9:e7:25:27:40:aa:3e:8b: 04:67:55:cc:9d:0e:02:69:86:dd:20:50:19:97:02:e1:28:d0: b4:fa:a7:4c:73:bb:b0:cb:18:0c:c9:8e:6d:5c:0d:7a:0b:60: c2:d3:d8:78:b6:d2:9b:70:1b:0f:4b:4a:0c:cf:61:b3:27:4b: 01:24:6d:8e:7e:07:ee:b8:e3:84:88:fb:28:af:28:5b:23:b1: a0:cd:0f:00:29:96:c3:a2:bb:98:b8:44:05:d3:96:74:0a:91: dc:79:8e:50:4e:33:34:17:99:7d:41:e8:c1:07:99:2d:a2:26: 49:10:4a:d2:8d:30:63:49:53:07:a8:52:71:71:09:cb:1e:f6: 42:eb:38:84:c2:c4:2e:79:80:5a:a1:fe:04:ba:b5:c6:69:d8: 78:aa:6d:f3:5a:d9:68:9f:04:5a:81:30:f7:c6:35:be:0a:90: 80:04:11:82:58:b0:22:69:24:22:8e:a6:f0:ee:10:92:1f:0c: 14:6e:5b:eb:8b:7d:be:fd:3e:1c:5a:2f:c5:2c:8b:19:9a:7c: 23:32:31:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6qgb1Z8DMQU/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTJiMDRkYmQtMzA5MC00MDFjLWJlYzktYTk3NzZiNjVlNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxkD5RmvZNJsfH9l7DfKeZtFovF7d+P/ZA/N S9brdKyQdojR08JyLxoBOrAVnyBKp9D/rN43/7uQDwQCYDc7rgpN+lam51wkTVlk XbrpkWI1cSiuXff1QVPOxD4BxyJZTORK+qjTTDsRVhHBoQ/AV3AOu+ZpuuKq+gSw B01ZlJjuapzRjd499CntfpsFDoMYAmdkBovAfn+uFLTBfYddXu9+s1KnHr+STiFp d/4wPSYWpDZoeDYOzOztABWlygDum9bELnUoeE/5dQnvkyjR2BrHtDNlvwvqKrTa HIKLstBvPjH6YDP9Unv3S3r43KnO9Y0PFUuUTbMxCjnu25pkkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWckwSQZ59yOakQb6QIuu0Z9pLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvY2UzNDBhZGEtZjVjNy0z NTZlLThmNmMtYzgxYTZjNzJjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3PSzMnlCrtsc9BfqcQaFvE7IQZoFI19fxDunb/NHhM9+/vEYhdGCjl z8gnAv355yUnQKo+iwRnVcydDgJpht0gUBmXAuEo0LT6p0xzu7DLGAzJjm1cDXoL YMLT2Hi20ptwGw9LSgzPYbMnSwEkbY5+B+6444SI+yivKFsjsaDNDwAplsOiu5i4 RAXTlnQKkdx5jlBOMzQXmX1B6MEHmS2iJkkQStKNMGNJUweoUnFxCcse9kLrOITC xC55gFqh/gS6tcZp2HiqbfNa2WifBFqBMPfGNb4KkIAEEYJYsCJpJCKOpvDuEJIf DBRuW+uLfb79PhxaL8UsixmafCMyMUg= -----END CERTIFICATE-----Generated at Mon Sep 28 12:29:49 2026 by rpki-client