$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa File: ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa (raw, json) Hash identifier: t56Gsdj/eAK9Yoiykb9FarhXv9+V6k57uVesG9o0UUU= Subject key identifier: AB:44:23:06:93:81:31:17:47:D4:E5:8D:F3:16:4E:55:79:7A:D0:CF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACBBD993A0F5B3E989C200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 22691 IP address blocks: 199.224.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bb:d9:93:a0:f5:b3:e9:89:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=f876a782-5b7a-4d41-8333-2d42b98834a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:de:93:91:c7:90:8e:ac:31:11:6e:26:94: 47:c5:06:5a:b3:ce:c7:39:2e:5e:ff:f2:72:cc:63: ff:57:5e:a3:31:0a:64:42:e9:29:2c:e6:c6:d4:9f: 0f:23:bf:15:24:27:91:26:20:60:58:ee:4b:20:23: 49:f6:bb:1c:1a:75:92:13:72:32:6d:a0:2f:8d:d1: c9:8a:db:c3:30:38:08:05:4a:9e:e0:f4:b4:92:d0: 9e:43:d3:0e:79:3d:a0:c3:d8:74:a4:86:2b:5b:b0: 92:66:ad:60:71:44:a3:21:30:91:7f:9e:f7:7f:26: 8a:08:d3:88:05:fa:67:c3:fa:e3:6c:40:d7:a7:4b: 1d:32:79:f3:14:14:16:fe:b3:4c:e0:e3:0b:dc:cd: b4:ca:d3:de:56:f2:84:e3:1c:fe:f4:84:78:ab:38: 1f:2a:9c:d3:03:4f:80:3a:a6:f5:6f:65:bf:6f:03: ae:13:00:53:d4:c3:7f:35:c6:47:e1:bf:ce:f7:b6: 08:8c:2f:8f:58:1e:58:23:5c:d6:7b:f1:e1:5c:d4: fe:4c:70:02:51:f5:04:51:60:98:3f:72:7f:2c:f7: 7d:47:9b:b0:ed:43:ee:44:c5:1b:fa:5c:a2:b3:c7: 82:fc:6d:8f:0f:aa:10:5a:08:5a:8e:b8:bd:81:cf: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:44:23:06:93:81:31:17:47:D4:E5:8D:F3:16:4E:55:79:7A:D0:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.224.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:39:dd:7f:63:e1:c8:ac:d7:71:ea:1d:91:cc:86:ce:b9:eb: df:39:56:b7:6a:f0:d8:8b:fe:d8:08:24:e9:44:01:7a:4d:b0: a3:bb:20:fe:73:93:03:a1:10:0c:0b:e9:49:06:12:5d:09:99: f2:b6:12:be:cb:b6:80:3f:64:d4:68:92:92:5f:d0:c9:e6:4d: 00:83:d9:88:15:8f:71:eb:de:7f:58:46:0b:60:d6:25:7c:00: 38:bb:91:db:da:50:42:6f:64:7f:01:9f:70:78:a0:23:4b:d9: aa:de:e1:47:d9:fd:68:a0:f0:e2:04:77:9a:6c:ba:7f:ef:f7: d7:ba:3d:ed:dd:d6:4a:22:f5:73:c7:63:49:16:f0:0c:6d:53: d3:d3:8c:8d:34:c9:5d:df:82:9f:f2:68:d6:4f:61:de:cf:20: 9f:8b:b4:57:86:b8:af:39:f1:5e:9d:8b:13:2a:23:4c:22:65: e9:92:58:2f:bf:a6:55:e7:78:e4:56:29:fe:56:7f:c0:c8:fa: d0:d1:1a:eb:5b:dc:98:3a:17:77:f1:dd:e1:1b:aa:07:d0:fb: 62:87:19:b6:1f:5d:50:a4:eb:02:1b:9b:95:5c:79:54:77:6b: 8b:3e:fb:92:3f:2a:99:97:8b:d9:e4:bc:1e:8d:3b:a2:c2:22: 92:62:b9:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLvZk6D1s+mJwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Zjg3NmE3ODItNWI3YS00ZDQxLTgzMzMtMmQ0MmI5ODgzNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicHek5HHkI6sMRFuJpRHxQZas87HOS5e//Jy zGP/V16jMQpkQukpLObG1J8PI78VJCeRJiBgWO5LICNJ9rscGnWSE3IybaAvjdHJ itvDMDgIBUqe4PS0ktCeQ9MOeT2gw9h0pIYrW7CSZq1gcUSjITCRf573fyaKCNOI Bfpnw/rjbEDXp0sdMnnzFBQW/rNM4OML3M20ytPeVvKE4xz+9IR4qzgfKpzTA0+A Oqb1b2W/bwOuEwBT1MN/NcZH4b/O97YIjC+PWB5YI1zWe/HhXNT+THACUfUEUWCY P3J/LPd9R5uw7UPuRMUb+lyis8eC/G2PD6oQWghajri9gc9hEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtEIwaTgTEXR9TljfMWTlV5etDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmZhODVmZjAtODE5Yi0z MDkwLWI1MmEtZTlmNWE3MTlkN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+AJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK853X9j4cis13HqHZHMhs656985Vrdq8NiL/tgIJOlEAXpNsKO7IP5z kwOhEAwL6UkGEl0JmfK2Er7LtoA/ZNRokpJf0MnmTQCD2YgVj3Hr3n9YRgtg1iV8 ADi7kdvaUEJvZH8Bn3B4oCNL2are4UfZ/Wig8OIEd5psun/v99e6Pe3d1koi9XPH Y0kW8AxtU9PTjI00yV3fgp/yaNZPYd7PIJ+LtFeGuK858V6dixMqI0wiZemSWC+/ plXneORWKf5Wf8DI+tDRGutb3Jg6F3fx3eEbqgfQ+2KHGbYfXVCk6wIbm5VceVR3 a4s++5I/KpmXi9nkvB6NO6LCIpJiucw= -----END CERTIFICATE-----Generated at Thu Sep 17 16:46:50 2026 by rpki-client