$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa File: bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa (raw, json) Hash identifier: xGeZhhMglGKqHiLPYnf03gv+SJT3qaNVi+sp3dd+gbk= Subject key identifier: C2:FB:B8:18:50:FC:59:F0:6D:03:BC:78:04:FE:2A:4F:4A:96:E9:6E Certificate issuer: /CN=681d813c-8566-4f01-b8f3-989dcf8d983e Certificate serial: 010D0C9F4328584E9EB0196762CF703EAB788E80 Authority key identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 399263 IP address blocks: 199.33.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:19:67:62:cf:70:3e:ab:78:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681d813c-8566-4f01-b8f3-989dcf8d983e Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=fe216949-f072-4d64-b90f-beb55522aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:38:43:6d:24:92:a9:d1:e7:55:06:df:b2: 57:f7:a8:ee:8c:26:7d:30:64:be:5b:54:48:fa:c8: 10:e4:72:29:50:40:cb:96:5b:ec:2e:26:14:b4:92: e2:c1:48:9d:d1:df:b1:a9:0d:9b:f8:bc:91:5c:33: 33:f9:6e:16:c2:7a:78:73:d6:82:c6:0a:59:f5:12: aa:91:20:87:2c:dc:22:2b:a0:30:cc:49:b1:67:f0: 5a:0a:d8:79:13:99:f4:f4:1d:1f:f5:79:9e:9e:66: 3d:de:b5:b5:96:42:a8:3a:51:cb:c1:b7:84:2d:11: e0:21:79:01:2e:6d:bf:d6:08:44:93:c5:c6:c8:63: 58:e7:ff:ed:d3:d2:6a:77:b8:d7:9d:ea:0f:3d:f1: 11:65:68:83:12:35:91:89:60:29:66:79:1d:71:9e: 64:bc:04:bb:1e:87:cb:31:17:77:90:76:df:f0:a1: 76:28:b6:ad:63:f9:6c:62:98:81:05:0b:cd:c3:13: ed:57:be:ff:4c:36:f5:14:bf:1c:f2:f7:d7:9d:b5: c8:2c:41:9a:3a:42:35:25:e4:d5:02:5f:f9:f2:73: 0f:dc:26:02:d3:ef:5d:e6:0f:68:65:56:95:38:f9: 29:69:0e:c7:8b:df:26:56:cf:12:38:4b:f3:41:46: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FB:B8:18:50:FC:59:F0:6D:03:BC:78:04:FE:2A:4F:4A:96:E9:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl X509v3 Authority Key Identifier: keyid:99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2d:4f:92:ba:97:88:65:20:fc:a3:f0:bb:8d:89:a6:56:0b: 75:b7:66:ca:7d:73:8f:cb:ba:c2:3a:50:59:6b:42:29:a7:e5: 65:40:92:67:b3:17:db:d7:7f:e5:a0:e5:8f:0a:9d:7c:e9:11: 01:70:55:43:ed:cd:60:a7:b3:07:12:dc:e2:85:17:76:08:78: 87:e7:20:0b:31:be:39:f3:f7:5f:02:d4:3e:83:7a:0b:01:77: 43:99:30:50:88:75:aa:f4:7f:6e:0c:61:52:8b:51:b1:56:a2: e2:27:aa:f0:36:7e:5b:f3:5a:0f:6e:f8:ea:05:d8:41:e4:1f: 8e:51:41:41:f0:2c:65:d1:f4:82:db:62:6e:e8:21:9b:c6:b8: c4:40:46:5f:a3:42:1a:ef:5d:19:a9:15:8a:5a:58:0a:4e:a4: 8a:ab:ec:c3:d2:f5:04:1d:66:e9:b8:e5:5c:2a:b0:d6:56:c1: fb:7f:29:1e:1d:14:f1:26:e1:63:86:d3:e4:83:01:92:28:e3: 3a:2f:c8:db:34:a0:e9:ba:8b:5c:0f:45:05:07:d8:69:7d:fc: b6:7c:1e:49:97:a2:d0:09:6c:02:0a:35:33:26:e7:9b:ff:a9: 4a:2c:7e:ec:81:c3:0b:6e:69:ba:20:d0:2d:3f:84:91:d9:c7: e3:1d:74:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBlnYs9wPqt4joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgxZDgxM2MtODU2Ni00ZjAxLWI4ZjMtOTg5ZGNmOGQ5 ODNlMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZmUyMTY5NDktZjA3Mi00ZDY0LWI5MGYtYmViNTU1MjJhYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Q4Q20kkqnR51UG37JX96jujCZ9MGS+W1RI +sgQ5HIpUEDLllvsLiYUtJLiwUid0d+xqQ2b+LyRXDMz+W4Wwnp4c9aCxgpZ9RKq kSCHLNwiK6AwzEmxZ/BaCth5E5n09B0f9XmenmY93rW1lkKoOlHLwbeELRHgIXkB Lm2/1ghEk8XGyGNY5//t09Jqd7jXneoPPfERZWiDEjWRiWApZnkdcZ5kvAS7HofL MRd3kHbf8KF2KLatY/lsYpiBBQvNwxPtV77/TDb1FL8c8vfXnbXILEGaOkI1JeTV Al/58nMP3CYC0+9d5g9oZVaVOPkpaQ7Hi98mVs8SOEvzQUagwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML7uBhQ/FnwbQO8eAT+Kk9KluluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ODFk ODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4ZDk4M2UvYmQ0MWI2MjMtYmJjNi0z ZDY5LWFkYjMtYWZhN2Y1ZTdkOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjgxZDgxM2MtODU2Ni00ZjAxLWI4 ZjMtOTg5ZGNmOGQ5ODNlLzY4MWQ4MTNjLTg1NjYtNGYwMS1iOGYzLTk4OWRjZjhk OTgzZS5jcmwwHwYDVR0jBBgwFoAUmaUNdWNKHu/nzQudetpkD/2COHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlk Y2Y4ZDk4M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJctT5K6l4hlIPyj8LuNiaZWC3W3Zsp9c4/LusI6UFlrQimn5WVAkmez F9vXf+Wg5Y8KnXzpEQFwVUPtzWCnswcS3OKFF3YIeIfnIAsxvjnz918C1D6DegsB d0OZMFCIdar0f24MYVKLUbFWouInqvA2flvzWg9u+OoF2EHkH45RQUHwLGXR9ILb Ym7oIZvGuMRARl+jQhrvXRmpFYpaWApOpIqr7MPS9QQdZum45VwqsNZWwft/KR4d FPEm4WOG0+SDAZIo4zovyNs0oOm6i1wPRQUH2Gl9/LZ8HkmXotAJbAIKNTMm55v/ qUosfuyBwwtuabog0C0/hJHZx+MddOc= -----END CERTIFICATE-----Generated at Sat Sep 5 01:09:28 2026 by rpki-client