$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2924a138-6edb-3b08-bea9-706c5263bd5a.roa File: 2924a138-6edb-3b08-bea9-706c5263bd5a.roa (raw, json) Hash identifier: TT1yg36UpWF019nKIprpLgXhk91m57rJNgxyU3Djeq4= Subject key identifier: F9:18:F2:6D:8A:11:7B:67:45:1E:B1:3C:DF:82:F5:4E:7E:19:24:BB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE42336400941038732C6DA2C Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2924a138-6edb-3b08-bea9-706c5263bd5a.roa Signing time: Wed 19 Aug 2026 18:03:46 +0000 ROA not before: Wed 19 Aug 2026 18:03:46 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 199.27.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:36:40:09:41:03:87:32:c6:da:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:46 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=4a43f89f-0824-4b01-bf2d-ef2138a1f861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:50:f9:4e:5b:99:2c:22:7e:81:73:8c:b3: 7b:33:5c:6f:9c:bc:d8:ea:0f:8f:79:5d:a8:47:e6: b4:bb:7d:bd:33:ca:22:03:78:30:b5:c6:b4:ba:52: 06:ef:24:39:4e:a4:6f:8b:f2:54:46:78:40:77:a1: dd:c9:31:aa:52:4e:4f:db:a3:5b:f8:20:f9:0c:b7: e6:f7:8a:33:78:66:9e:1c:5e:03:10:03:c1:e0:b3: b1:59:18:33:d0:d6:11:5d:fe:68:8b:92:08:c5:b1: 02:41:22:26:df:ba:c8:7d:76:c3:60:64:25:88:0b: 97:28:ff:74:43:1d:c3:ab:38:25:5f:91:b0:f2:90: 98:af:c6:a5:44:cf:c6:91:09:89:a6:5e:eb:a7:d8: 41:9e:65:0a:b2:8d:f5:d2:5f:37:6c:0f:65:c9:76: 5b:26:59:c3:b5:b5:f7:d9:9d:22:19:7e:56:d4:3c: 6b:f2:a2:94:27:6f:3a:b4:14:4f:54:c2:e3:1e:29: 13:95:0b:47:4e:1f:8d:a3:44:8b:69:99:f7:68:86: 44:2c:3c:82:55:96:6c:53:1a:87:be:6e:95:5f:d8: 48:64:3a:24:f0:f9:8a:9f:cb:55:fe:4d:8a:c9:c5: 90:1c:69:ed:38:d4:b9:56:a5:cb:3a:5d:a9:38:db: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:18:F2:6D:8A:11:7B:67:45:1E:B1:3C:DF:82:F5:4E:7E:19:24:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2924a138-6edb-3b08-bea9-706c5263bd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 199.27.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c7:91:3e:13:4e:53:ab:fc:d0:0a:25:00:25:9e:d1:d5:b6: 5c:8f:89:dc:bd:ef:a0:62:2b:e5:23:c7:f0:1d:74:28:95:b3: d2:92:b8:12:e5:3f:39:70:33:eb:1c:e4:71:0b:6c:5e:2c:ee: 11:ce:51:1a:ea:56:0b:f6:0b:fd:e9:f0:15:72:67:41:5b:c5: 3a:6b:d4:24:ec:9a:2c:ba:a8:5a:ad:ef:54:1b:b3:f9:d0:11: ad:7e:62:17:1b:06:d7:98:50:25:57:d5:40:f5:d5:2c:04:d0: 61:bc:ff:1c:94:11:0c:ad:96:65:46:c2:dc:e8:65:31:25:72: 88:7a:c2:0f:e8:3e:ee:f5:2d:9e:fc:bd:a3:ce:7f:5a:e5:ae: 1f:85:a9:38:a3:bb:46:0b:c7:67:12:7f:46:3c:4c:26:b4:61: 87:bd:93:5b:56:6e:6f:9c:60:ba:39:44:93:2b:9b:81:81:ba: 31:96:29:74:6b:ac:20:3c:af:31:23:d8:fd:c6:b8:be:67:85: bd:fb:c3:5f:1e:f1:e8:e9:36:67:93:8c:51:7b:0a:e4:09:52: 39:8d:10:c6:40:ad:6a:98:0c:be:11:a9:a0:15:63:fe:71:86: 02:b3:3c:f1:c8:64:5e:99:99:1f:dd:b6:96:40:a1:30:cc:3c: ad:c4:53:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzZACUEDhzLG2iwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NloXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NGE0M2Y4OWYtMDgyNC00YjAxLWJmMmQtZWYyMTM4YTFmODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkotQ+U5bmSwifoFzjLN7M1xvnLzY6g+PeV2o R+a0u329M8oiA3gwtca0ulIG7yQ5TqRvi/JURnhAd6HdyTGqUk5P26Nb+CD5DLfm 94ozeGaeHF4DEAPB4LOxWRgz0NYRXf5oi5IIxbECQSIm37rIfXbDYGQliAuXKP90 Qx3DqzglX5Gw8pCYr8alRM/GkQmJpl7rp9hBnmUKso310l83bA9lyXZbJlnDtbX3 2Z0iGX5W1Dxr8qKUJ286tBRPVMLjHikTlQtHTh+No0SLaZn3aIZELDyCVZZsUxqH vm6VX9hIZDok8PmKn8tV/k2KycWQHGntONS5VqXLOl2pONtmGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkY8m2KEXtnRR6xPN+C9U5+GSS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjkyNGExMzgtNmVkYi0z YjA4LWJlYTktNzA2YzUyNjNiZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATHkT4TTlOr/NAKJQAlntHVtlyPidy976BiK+Ujx/AddCiVs9KSuBLl PzlwM+sc5HELbF4s7hHOURrqVgv2C/3p8BVyZ0FbxTpr1CTsmiy6qFqt71Qbs/nQ Ea1+YhcbBteYUCVX1UD11SwE0GG8/xyUEQytlmVGwtzoZTElcoh6wg/oPu71LZ78 vaPOf1rlrh+FqTiju0YLx2cSf0Y8TCa0YYe9k1tWbm+cYLo5RJMrm4GBujGWKXRr rCA8rzEj2P3GuL5nhb37w18e8ejpNmeTjFF7CuQJUjmNEMZArWqYDL4RqaAVY/5x hgKzPPHIZF6ZmR/dtpZAoTDMPK3EU5Y= -----END CERTIFICATE-----Generated at Tue Sep 1 04:09:05 2026 by rpki-client