$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/78f13497-5a5f-395b-a5db-7c66cb569eab.roa File: 78f13497-5a5f-395b-a5db-7c66cb569eab.roa (raw, json) Hash identifier: ekhDkH9r1V6jkqHfdaUuv4ps5Z9kAaHszcXo7UOhL8k= Subject key identifier: 94:01:F8:D1:B5:5D:49:49:D3:F1:F7:2E:12:EA:AD:46:EA:84:F1:A8 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584F5E62D27B77BDDA413947EA00 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/78f13497-5a5f-395b-a5db-7c66cb569eab.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 125 IP address blocks: 199.64.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d2:7b:77:bd:da:41:39:47:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=afaa5265-86cc-4b65-a5e7-bdd506d2b2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:b9:9b:24:63:a8:bd:0d:6c:36:43:10:31: ad:18:15:6a:51:3f:73:88:bc:0c:6a:65:b6:0d:68: 6e:c7:8d:9a:ae:4a:84:2a:77:bf:6a:a0:b6:d9:e4: cd:a9:ed:61:8e:d7:db:fd:30:d7:85:9d:db:92:89: 56:00:74:e7:8a:b2:6a:cc:7a:cc:4a:f9:9c:99:49: 6c:65:96:46:3e:49:a2:c2:26:58:51:ed:c0:f9:88: bb:58:70:27:92:25:bc:cc:37:e9:8d:54:4f:9d:f2: cc:ae:a8:6b:89:8e:6a:d7:37:42:9c:f1:7e:ad:c9: 62:d5:c6:bb:87:b4:c2:fe:3d:1c:da:1a:54:34:79: 57:92:2d:00:a7:af:83:e1:17:ef:69:74:68:e7:ff: 27:cf:bc:49:f8:0f:04:24:f0:0a:0c:2b:e5:2a:20: 9d:47:3d:ba:1e:53:b1:d2:89:35:51:19:48:67:42: 72:d0:0d:15:67:d6:8a:be:48:db:ec:0e:e4:cd:72: b0:82:a4:09:34:46:3a:23:6d:6b:db:a7:2d:1b:33: d6:41:93:ca:db:7b:37:bd:79:c5:f9:3b:c4:63:ae: 5c:0d:f2:8d:11:72:ff:e3:63:4d:87:c3:06:d3:24: 5a:ae:ad:bb:4b:5a:99:8e:aa:7a:44:58:c8:1f:e5: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:01:F8:D1:B5:5D:49:49:D3:F1:F7:2E:12:EA:AD:46:EA:84:F1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/78f13497-5a5f-395b-a5db-7c66cb569eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3c:63:25:31:e5:43:bd:8a:58:9b:75:fa:2c:e7:13:4d:ec: ff:0b:15:a5:9b:ba:75:fe:b3:eb:2d:83:0d:77:0b:f9:08:6c: 19:a2:d7:22:56:8d:77:5d:03:b4:20:f3:27:bb:55:59:33:60: b0:67:e8:2a:2e:bd:bc:f6:8c:95:26:bc:db:71:ff:58:81:1e: ff:07:f4:52:af:0c:62:73:23:94:eb:83:f6:a5:9c:50:a6:98: 7e:a4:29:7a:4b:b9:1f:d4:18:f9:16:38:d0:cd:cd:30:5a:20: 9e:44:9a:6b:dd:f9:69:a1:2d:f8:77:97:7f:d5:8d:1c:f7:2f: 55:0a:57:03:df:ea:1a:ed:e8:af:1d:43:a4:46:30:d9:47:d8: bb:17:20:0e:17:2e:bc:94:87:d7:a2:51:a5:ec:9e:10:bb:4b: 64:a7:a5:4c:fe:88:5e:cb:50:51:5f:37:c5:18:7f:ea:81:16: f9:9f:fe:9f:0e:bc:41:f5:bd:bd:69:05:56:a1:7e:a8:90:c9: 36:b9:c4:f7:36:3a:78:f0:33:b9:89:b6:3a:cc:b8:37:ac:dd: f4:53:f2:99:ba:9d:02:4b:3a:50:ed:79:e3:62:e1:4f:de:8b: 05:67:97:61:33:15:24:00:b2:47:dc:69:13:00:5d:a0:c6:c9: ca:40:cd:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtJ7d73aQTlH6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YWZhYTUyNjUtODZjYy00YjY1LWE1ZTctYmRkNTA2ZDJiMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5K5myRjqL0NbDZDEDGtGBVqUT9ziLwMamW2 DWhux42arkqEKne/aqC22eTNqe1hjtfb/TDXhZ3bkolWAHTnirJqzHrMSvmcmUls ZZZGPkmiwiZYUe3A+Yi7WHAnkiW8zDfpjVRPnfLMrqhriY5q1zdCnPF+rcli1ca7 h7TC/j0c2hpUNHlXki0Ap6+D4RfvaXRo5/8nz7xJ+A8EJPAKDCvlKiCdRz26HlOx 0ok1URlIZ0Jy0A0VZ9aKvkjb7A7kzXKwgqQJNEY6I21r26ctGzPWQZPK23s3vXnF +TvEY65cDfKNEXL/42NNh8MG0yRarq27S1qZjqp6RFjIH+VvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQB+NG1XUlJ0/H3LhLqrUbqhPGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNzhmMTM0OTctNWE1Zi0z OTViLWE1ZGItN2M2NmNiNTY5ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0DBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE48YyUx5UO9ilibdfos5xNN7P8LFaWbunX+s+stgw13C/kIbBmi1yJW jXddA7Qg8ye7VVkzYLBn6Couvbz2jJUmvNtx/1iBHv8H9FKvDGJzI5Trg/alnFCm mH6kKXpLuR/UGPkWONDNzTBaIJ5Emmvd+WmhLfh3l3/VjRz3L1UKVwPf6hrt6K8d Q6RGMNlH2LsXIA4XLryUh9eiUaXsnhC7S2SnpUz+iF7LUFFfN8UYf+qBFvmf/p8O vEH1vb1pBVahfqiQyTa5xPc2OnjwM7mJtjrMuDes3fRT8pm6nQJLOlDteeNi4U/e iwVnl2EzFSQAskfcaRMAXaDGycpAzSA= -----END CERTIFICATE-----Generated at Mon Oct 5 16:44:58 2026 by rpki-client