$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa File: 1ec803cb-f96d-3d90-b088-6d5713ba0049.roa (raw, json) Hash identifier: 3CClA6mlu0EV7QevW+3vLH4KPlST7UrFwv9KRfLQfz4= Subject key identifier: F3:9A:A0:71:6C:EA:36:5A:26:50:77:9B:7D:05:34:F3:7C:41:BD:7D Certificate issuer: /CN=76d8390e-aab4-4081-a682-eebfe9ed3dde Certificate serial: 010D0C9F4328584F655D7FA2E1B6F4717FA5F380 Authority key identifier: 85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 396982 IP address blocks: 199.60.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7f:a2:e1:b6:f4:71:7f:a5:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d8390e-aab4-4081-a682-eebfe9ed3dde Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=606444b2-d14e-45fc-850a-d4e5512be8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:8b:98:2c:e1:25:b5:88:c5:37:24:54:88: 84:3d:cb:98:b9:80:7c:76:f1:e3:ef:71:32:03:1a: c5:8d:1d:8c:4e:95:d7:8a:5a:40:68:76:9b:ed:1d: 1e:58:bf:6a:5a:61:f6:38:d1:4d:8b:b7:21:50:73: 18:12:a6:94:fb:3a:5e:b3:25:13:7f:f8:0f:d4:64: 9c:8f:96:54:03:73:b3:28:a2:6a:fb:e4:0a:81:5f: b3:e3:43:ab:05:0e:30:50:a3:b3:2a:2a:cc:1d:41: a1:23:b2:f0:a0:0a:58:d2:60:be:54:ba:d5:cd:7c: 48:d0:12:e1:44:91:5c:5f:2e:25:b8:6d:6d:7d:26: 1e:2d:ae:aa:d0:67:bb:ff:9c:4f:8e:af:5e:33:82: 73:bc:df:1d:d4:8b:94:07:08:11:14:b7:3b:03:64: 32:28:a4:57:a0:83:31:4d:9e:df:05:1d:7a:bc:f5: c8:30:ca:ac:de:a0:89:57:1c:54:38:42:87:b9:c2: 3c:ad:ee:05:25:b0:75:c0:ec:91:33:73:60:0b:a2: e9:c8:9f:9c:d3:17:b8:51:aa:d3:00:05:d6:4d:4b: ea:fd:d5:4f:1f:e8:22:7b:4e:10:51:ab:06:22:f4: 53:32:51:44:2d:bb:ff:75:19:22:00:71:91:b5:d6: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9A:A0:71:6C:EA:36:5A:26:50:77:9B:7D:05:34:F3:7C:41:BD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl X509v3 Authority Key Identifier: keyid:85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer sbgp-ipAddrBlock: critical IPv4: 199.60.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:15:12:ff:c0:38:2e:b2:3c:91:35:3c:3c:95:d2:17:2c:e0: 6e:9c:f3:70:67:e2:1d:9e:5f:bd:ed:7e:41:55:f9:41:e8:10: c0:7e:8e:e6:f0:96:e9:fd:ea:53:15:06:7c:fc:c1:66:7b:c2: dc:99:32:d6:6f:d3:6c:1f:40:5f:f4:71:e4:19:f0:84:3c:bf: 6b:da:2a:71:7a:de:ad:6a:f4:dd:ad:bd:16:c1:ea:ca:26:dd: 4b:35:1d:70:6c:db:79:d2:16:c1:c7:e4:17:a8:48:cb:c9:4b: 26:89:ee:2d:a8:06:72:5e:a5:39:eb:0a:1b:4e:08:7e:43:b0: 0d:cf:39:23:ea:2b:c8:64:f4:b2:89:c8:6b:60:30:99:f0:03: c1:fe:d1:72:62:59:a8:12:2f:5f:57:dd:97:ec:c1:48:a2:04: f5:c4:5d:42:05:35:0f:dc:91:26:03:df:a6:a4:be:81:6d:45: 80:42:fa:7e:cd:1b:42:cd:de:29:8f:aa:d0:e2:4c:32:55:47: 5e:ee:95:fe:6a:f3:53:74:2a:4b:7c:d0:72:d2:8e:76:c2:7b: e8:90:86:f8:36:78:32:b1:ba:53:0b:56:d2:dd:3d:40:47:59: 0b:ef:f6:8c:84:0f:0d:c8:25:45:15:88:f3:68:7e:37:ab:46: 0f:23:ac:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXX+i4bb0cX+l84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkODM5MGUtYWFiNC00MDgxLWE2ODItZWViZmU5ZWQz ZGRlMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NjA2NDQ0YjItZDE0ZS00NWZjLTg1MGEtZDRlNTUxMmJlOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AyLmCzhJbWIxTckVIiEPcuYuYB8dvHj73Ey AxrFjR2MTpXXilpAaHab7R0eWL9qWmH2ONFNi7chUHMYEqaU+zpesyUTf/gP1GSc j5ZUA3OzKKJq++QKgV+z40OrBQ4wUKOzKirMHUGhI7LwoApY0mC+VLrVzXxI0BLh RJFcXy4luG1tfSYeLa6q0Ge7/5xPjq9eM4JzvN8d1IuUBwgRFLc7A2QyKKRXoIMx TZ7fBR16vPXIMMqs3qCJVxxUOEKHucI8re4FJbB1wOyRM3NgC6LpyJ+c0xe4UarT AAXWTUvq/dVPH+gie04QUasGIvRTMlFELbv/dRkiAHGRtdZbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOaoHFs6jZaJlB3m30FNPN8Qb19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NmQ4 MzkwZS1hYWI0LTQwODEtYTY4Mi1lZWJmZTllZDNkZGUvMWVjODAzY2ItZjk2ZC0z ZDkwLWIwODgtNmQ1NzEzYmEwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzZkODM5MGUtYWFiNC00MDgxLWE2 ODItZWViZmU5ZWQzZGRlLzc2ZDgzOTBlLWFhYjQtNDA4MS1hNjgyLWVlYmZlOWVk M2RkZS5jcmwwHwYDVR0jBBgwFoAUhc4BYrfck7kKV7a0VnvW+JIkiKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NmQ4MzkwZS1hYWI0LTQwODEtYTY4Mi1lZWJm ZTllZDNkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsVEv/AOC6yPJE1PDyV0hcs4G6c83Bn4h2eX73tfkFV+UHoEMB+jubw lun96lMVBnz8wWZ7wtyZMtZv02wfQF/0ceQZ8IQ8v2vaKnF63q1q9N2tvRbB6som 3Us1HXBs23nSFsHH5BeoSMvJSyaJ7i2oBnJepTnrChtOCH5DsA3POSPqK8hk9LKJ yGtgMJnwA8H+0XJiWagSL19X3ZfswUiiBPXEXUIFNQ/ckSYD36akvoFtRYBC+n7N G0LN3imPqtDiTDJVR17ulf5q81N0Kkt80HLSjnbCe+iQhvg2eDKxulMLVtLdPUBH WQvv9oyEDw3IJUUViPNofjerRg8jrE0= -----END CERTIFICATE-----Generated at Sat Oct 31 23:55:51 2026 by rpki-client