$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: hc3tBTkv1vjXpSJLSUjYTaIsA0QszE6mRpBQuHB56BQ= Subject key identifier: CD:1B:CC:8E:ED:B8:63:55:BD:27:F7:3F:D8:4B:CD:D0:7F:01:60:B5 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584F119CF08636CA75784195AF80 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f0:86:36:ca:75:78:41:95:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=81b33e25-5bdc-4150-8ea3-d1e291b1c56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:b0:10:f6:f5:fa:1b:2f:1f:7f:78:da:ea: 38:4c:10:03:2b:c0:23:38:c7:bb:2b:4e:4d:a0:ed: 75:23:e8:40:22:6e:a4:8c:18:a0:4e:f2:e8:b7:51: 3e:8d:9b:e6:07:ab:03:95:a5:c0:67:db:f3:46:0e: 23:40:71:d1:2a:ce:98:c0:bf:f7:84:3e:cc:92:19: cc:08:35:39:48:83:2b:13:01:72:7a:5b:d2:d1:9d: ed:e9:96:87:17:4d:1e:73:c6:41:18:ed:34:36:07: 11:7d:a8:b6:68:d3:4c:fc:ae:7f:4a:ff:cc:0c:83: 07:f8:02:0c:e4:be:80:89:3e:1b:3d:9d:8f:88:00: c1:0e:e9:e7:50:21:21:ad:52:5b:34:b6:c2:6a:80: 97:dc:93:e1:09:8c:38:fa:fc:54:ba:05:44:ac:52: 7f:45:69:d4:c3:4a:54:96:52:45:b5:65:41:12:01: f2:10:48:ff:b7:88:72:ce:43:a4:3c:12:78:77:87: 69:ae:e9:2a:14:28:0e:60:4a:bb:27:cc:b6:3c:79: bf:71:66:ff:c8:bc:d6:d0:01:1c:d7:36:70:a3:a6: f9:e1:db:82:c4:fd:cf:d9:81:cf:de:68:78:1c:9a: dc:66:eb:4f:79:8d:08:4d:fb:fb:28:78:ba:43:2d: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1B:CC:8E:ED:B8:63:55:BD:27:F7:3F:D8:4B:CD:D0:7F:01:60:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:f5:6e:2c:95:d2:54:d5:e2:6c:96:64:b4:a7:87:b3:d4:76: 01:45:0b:70:e2:e6:b5:07:0a:97:e3:a1:ae:4f:23:2c:ec:95: be:c4:af:44:4b:61:f1:c5:69:f8:b9:f3:9f:44:f4:22:10:a6: b1:88:55:63:87:12:bf:37:e9:70:dd:70:d5:ef:83:97:d6:f4: 77:64:1c:87:f8:92:f1:03:d4:e6:db:87:d0:a8:51:b8:bc:47: 3a:ab:e5:96:9b:0a:9f:9a:9b:60:39:98:a6:8d:47:5f:f5:07: a2:66:71:49:ae:db:69:01:dc:8a:72:03:0a:74:c4:81:5d:a3: 3d:07:b0:77:5d:e2:29:ae:8c:a4:f1:49:4f:da:5a:74:8c:bd: a7:66:78:a8:d3:cc:12:d2:ef:be:c7:72:c5:8a:f9:de:57:3c: a9:14:ca:8d:90:1c:15:4b:2f:0e:eb:11:65:2e:e3:f7:39:f7: 26:6f:23:7d:fc:3b:a0:c0:6a:76:a6:98:e0:db:77:47:6a:a3: ee:54:00:79:7b:cb:85:2d:d1:84:f5:dc:98:1e:a1:f3:86:35: 1f:0a:bd:ee:56:f1:79:01:59:8c:d5:95:13:e2:2f:20:ff:b1: 48:30:ef:40:0d:ee:90:74:5e:51:89:14:96:f5:47:92:a0:d5: 6f:79:47:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPCGNsp1eEGVr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFiMzNlMjUtNWJkYy00MTUwLThlYTMtZDFlMjkxYjFjNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgewEPb1+hsvH3942uo4TBADK8AjOMe7K05N oO11I+hAIm6kjBigTvLot1E+jZvmB6sDlaXAZ9vzRg4jQHHRKs6YwL/3hD7MkhnM CDU5SIMrEwFyelvS0Z3t6ZaHF00ec8ZBGO00NgcRfai2aNNM/K5/Sv/MDIMH+AIM 5L6AiT4bPZ2PiADBDunnUCEhrVJbNLbCaoCX3JPhCYw4+vxUugVErFJ/RWnUw0pU llJFtWVBEgHyEEj/t4hyzkOkPBJ4d4dprukqFCgOYEq7J8y2PHm/cWb/yLzW0AEc 1zZwo6b54duCxP3P2YHP3mh4HJrcZutPeY0ITfv7KHi6Qy3A/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0bzI7tuGNVvSf3P9hLzdB/AWC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANj1biyV0lTV4myWZLSnh7PUdgFFC3Di5rUHCpfjoa5PIyzslb7Er0RL YfHFafi5859E9CIQprGIVWOHEr836XDdcNXvg5fW9HdkHIf4kvED1Obbh9CoUbi8 Rzqr5ZabCp+am2A5mKaNR1/1B6JmcUmu22kB3IpyAwp0xIFdoz0HsHdd4imujKTx SU/aWnSMvadmeKjTzBLS777HcsWK+d5XPKkUyo2QHBVLLw7rEWUu4/c59yZvI338 O6DAanammODbd0dqo+5UAHl7y4Ut0YT13JgeofOGNR8Kve5W8XkBWYzVlRPiLyD/ sUgw70AN7pB0XlGJFJb1R5Kg1W95R8U= -----END CERTIFICATE-----Generated at Sat Sep 12 09:03:11 2026 by rpki-client