$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa File: 2938d50c-8e48-36b6-993b-1b4431994e3b.roa (raw, json) Hash identifier: FMQaZn1PIslybCHZSSyom58O0qh3qphKIjc6uRxJ5NU= Subject key identifier: 1F:6E:28:5C:8B:1D:44:56:09:42:3D:DC:3D:DD:F3:E3:AE:C6:29:11 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584F9FFDCC57E1BFD23716D7AD40 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 53589 IP address blocks: 199.188.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:cc:57:e1:bf:d2:37:16:d7:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=26c87436-f561-4bca-8037-cbbaa33bc662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:2f:dc:a9:fe:b4:c3:92:2e:de:76:44:b6: 8b:c7:91:01:0d:04:82:36:c0:04:16:37:96:d4:fd: 60:4d:41:77:e7:90:ed:96:1f:13:32:2f:6d:c7:e4: e9:d3:6f:10:7c:04:5a:05:ce:8d:fa:2f:97:1c:8a: 25:86:21:0d:6b:0f:92:f8:0b:a7:59:66:7c:aa:2f: 58:8f:6c:81:4a:33:47:9a:fe:da:3f:17:24:03:55: e8:d3:d7:ff:d6:61:75:cb:9b:0f:74:f0:c0:8d:bf: e1:3d:81:8e:9c:8d:43:8d:26:25:ef:db:97:a3:f3: a7:ba:3d:f5:4e:fe:5c:44:a4:16:e1:47:e5:38:9b: be:0a:d6:28:ed:2a:e7:b7:2f:2d:c0:f5:7c:02:3a: e7:e7:e9:aa:6a:06:0f:40:21:1b:4c:bc:56:38:08: 5f:15:08:78:2f:82:11:f3:5a:fd:e3:9e:56:c0:42: a5:a3:0d:34:31:ff:e7:f3:50:cd:92:51:da:73:21: f1:62:57:57:de:0c:d7:97:4b:85:27:9d:11:0e:9d: 03:fe:84:fb:c5:9b:f3:ba:73:4e:15:b8:85:75:d7: 64:09:cd:ff:99:72:1a:65:3e:f5:c4:42:37:48:1b: be:4a:ae:68:34:41:90:72:21:2e:58:0a:08:ef:7b: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:28:5C:8B:1D:44:56:09:42:3D:DC:3D:DD:F3:E3:AE:C6:29:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.188.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:41:a3:72:9e:ec:22:35:52:a5:bf:27:04:39:75:55:33:b0: 7e:47:9f:c0:07:68:eb:44:48:51:5a:aa:06:8a:e6:d1:70:71: 02:cc:ad:de:e6:c0:d9:c5:ae:83:3c:a9:c2:54:d6:8f:a7:ac: 7a:7b:e4:0f:b1:28:5c:e5:59:00:8d:f9:22:70:d0:ee:0e:22: fa:61:84:15:a7:68:93:92:54:3d:8a:d4:45:61:56:85:c4:c2: 9a:fc:81:ab:a4:ef:01:1a:1a:45:e2:b4:fd:2c:7c:23:7c:25: 16:77:16:06:50:76:c5:ec:ec:5e:fe:2c:41:74:25:4f:dd:d9: 35:f4:bd:14:23:ae:48:a3:e1:27:92:35:e0:68:ba:71:83:f2: f0:ae:60:74:18:9c:1c:84:de:9b:e9:5f:1a:3c:a8:e6:1f:b8: d4:20:6a:98:d7:1c:b3:f4:f3:da:32:6b:8a:6e:e2:e3:7a:4c: 5d:fb:a6:e1:08:8f:f1:fa:32:44:a7:e1:4e:33:e3:3a:c1:1a: 61:e9:7e:c8:bf:a2:b9:c9:15:89:f6:44:ff:48:75:c6:78:c7: 43:46:13:4e:77:cc:0a:3b:a4:c5:8a:69:89:22:f8:3e:91:03: 5a:e5:a2:ee:5b:40:07:20:9a:ab:a2:6e:f4:51:89:8c:53:1d: 52:3b:5d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/cxX4b/SNxbXrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk MjZjODc0MzYtZjU2MS00YmNhLTgwMzctY2JiYWEzM2JjNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEgv3Kn+tMOSLt52RLaLx5EBDQSCNsAEFjeW 1P1gTUF355Dtlh8TMi9tx+Tp028QfARaBc6N+i+XHIolhiENaw+S+AunWWZ8qi9Y j2yBSjNHmv7aPxckA1Xo09f/1mF1y5sPdPDAjb/hPYGOnI1DjSYl79uXo/Onuj31 Tv5cRKQW4UflOJu+CtYo7Srnty8twPV8Ajrn5+mqagYPQCEbTLxWOAhfFQh4L4IR 81r9455WwEKlow00Mf/n81DNklHacyHxYldX3gzXl0uFJ50RDp0D/oT7xZvzunNO FbiFdddkCc3/mXIaZT71xEI3SBu+Sq5oNEGQciEuWAoI73s1PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9uKFyLHURWCUI93D3d8+OuxikRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMjkzOGQ1MGMtOGU0OC0z NmI2LTk5M2ItMWI0NDMxOTk0ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApBo3Ke7CI1UqW/JwQ5dVUzsH5Hn8AHaOtESFFaqgaK5tFwcQLMrd7m wNnFroM8qcJU1o+nrHp75A+xKFzlWQCN+SJw0O4OIvphhBWnaJOSVD2K1EVhVoXE wpr8gauk7wEaGkXitP0sfCN8JRZ3FgZQdsXs7F7+LEF0JU/d2TX0vRQjrkij4SeS NeBounGD8vCuYHQYnByE3pvpXxo8qOYfuNQgapjXHLP089oya4pu4uN6TF37puEI j/H6MkSn4U4z4zrBGmHpfsi/ornJFYn2RP9IdcZ4x0NGE053zAo7pMWKaYki+D6R A1rlou5bQAcgmquibvRRiYxTHVI7XSE= -----END CERTIFICATE-----Generated at Sat Oct 31 23:57:54 2026 by rpki-client