$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa File: ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa (raw, json) Hash identifier: cViS1Ldas973TmKhSGOQkhbKO9U00HRr3YGW3KxCqjA= Subject key identifier: 9B:42:C5:BB:43:AA:11:50:53:31:E9:54:D0:04:40:75:C6:8D:6A:E5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584ED861E4DC7A2C9D49F49ADC00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 36352 IP address blocks: 199.127.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e4:dc:7a:2c:9d:49:f4:9a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=58308ea4-11eb-4130-b2a3-0335c1fdb299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:a4:ed:74:14:62:aa:4d:ac:1c:4b:a7:92: a2:21:75:82:60:16:13:01:36:44:64:4f:29:b9:be: 67:18:f6:df:0e:38:51:96:d7:f0:42:84:81:32:e4: 65:e7:97:ec:7c:57:25:a8:66:0a:f5:aa:65:01:23: 28:2a:db:64:f3:1f:73:8c:0a:31:ac:ae:24:27:17: 1b:5d:e5:e7:f9:d2:d7:d9:3b:81:7d:be:00:79:ca: 08:42:b8:1b:09:d7:9e:b0:d1:7a:7a:de:de:fc:82: 21:f4:59:d8:7f:f3:11:f3:30:2d:93:d9:c4:38:8e: f5:65:20:9b:9f:fa:e4:d3:ed:7b:8c:d0:39:6b:66: 07:b1:9e:cf:91:40:66:a3:73:25:7b:98:ed:90:a9: a5:b9:30:2a:84:f4:4e:97:74:2d:db:5c:16:b6:e9: 6c:d4:f4:48:64:c6:7e:70:96:84:bd:55:67:c5:9a: d9:b6:84:3a:2f:c9:9e:fd:8f:42:18:c4:33:51:a5: 57:08:25:f1:56:ab:6d:ec:7f:d5:ee:71:91:94:85: ca:07:7e:87:5c:54:fe:3c:a6:6c:35:28:3d:86:64: 45:d7:a5:76:3f:b7:8e:3f:ee:3e:95:86:7a:45:93: d1:da:3c:23:f0:65:d0:bb:54:b8:42:93:60:bb:51: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:42:C5:BB:43:AA:11:50:53:31:E9:54:D0:04:40:75:C6:8D:6A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 199.127.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:64:34:42:42:68:04:30:da:24:0e:6d:cd:02:3f:2a:fe:df: 20:71:7e:b5:8a:32:d2:4b:7f:c3:55:76:e8:e7:af:47:f7:d4: 38:32:ad:1b:17:e3:5d:8e:1b:e8:7c:27:9b:51:39:d2:22:9d: d0:df:c9:4d:12:41:b5:a4:2d:d1:e8:54:02:d7:64:fd:31:60: 0a:36:54:33:86:e4:64:b9:4c:7f:d2:42:8b:68:eb:7c:00:9f: 95:54:a3:76:89:a2:ad:f8:fd:eb:be:41:1d:55:f1:f3:7a:bb: 45:ff:99:5c:36:3b:77:ae:70:a5:db:01:1a:a1:3f:fe:a4:49: a8:2d:35:d1:5c:ed:58:01:12:90:34:9f:30:9d:3b:bc:d0:65: 7e:83:b3:2f:96:84:46:c4:38:bd:f1:8b:ef:71:7d:6f:b8:f4: 6d:62:c9:d2:7b:b5:ba:3c:a9:70:07:0a:1e:03:a5:68:55:b7: 1d:48:00:0b:df:82:82:b3:cb:62:ea:c5:f7:c6:ec:54:b1:f6: dc:2d:a3:bf:46:e7:7d:60:4d:12:f7:bf:f5:af:01:fa:a6:7e: 47:95:f7:3b:5c:11:50:36:7d:ee:85:e6:33:2a:9d:5e:83:33: 7a:b8:13:4d:cf:12:2f:81:79:bf:c7:af:eb:5d:d3:71:72:06: 3a:95:c9:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeTceiydSfSa3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NTgzMDhlYTQtMTFlYi00MTMwLWIyYTMtMDMzNWMxZmRiMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXak7XQUYqpNrBxLp5KiIXWCYBYTATZEZE8p ub5nGPbfDjhRltfwQoSBMuRl55fsfFclqGYK9aplASMoKttk8x9zjAoxrK4kJxcb XeXn+dLX2TuBfb4AecoIQrgbCdeesNF6et7e/IIh9FnYf/MR8zAtk9nEOI71ZSCb n/rk0+17jNA5a2YHsZ7PkUBmo3Mle5jtkKmluTAqhPROl3Qt21wWtuls1PRIZMZ+ cJaEvVVnxZrZtoQ6L8me/Y9CGMQzUaVXCCXxVqtt7H/V7nGRlIXKB36HXFT+PKZs NSg9hmRF16V2P7eOP+4+lYZ6RZPR2jwj8GXQu1S4QpNgu1F8GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtCxbtDqhFQUzHpVNAEQHXGjWrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvY2U4OWY5N2ItMWY0Yy0z NTk4LWFjNjAtMDljZmY4ZmZjODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVkNEJCaAQw2iQObc0CPyr+3yBxfrWKMtJLf8NVdujnr0f31DgyrRsX 412OG+h8J5tROdIindDfyU0SQbWkLdHoVALXZP0xYAo2VDOG5GS5TH/SQoto63wA n5VUo3aJoq34/eu+QR1V8fN6u0X/mVw2O3eucKXbARqhP/6kSagtNdFc7VgBEpA0 nzCdO7zQZX6Dsy+WhEbEOL3xi+9xfW+49G1iydJ7tbo8qXAHCh4DpWhVtx1IAAvf goKzy2LqxffG7FSx9twto79G531gTRL3v/WvAfqmfkeV9ztcEVA2fe6F5jMqnV6D M3q4E03PEi+Beb/Hr+td03FyBjqVyZU= -----END CERTIFICATE-----Generated at Sat Sep 5 03:05:10 2026 by rpki-client