$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: aPyg+Rn5EZTZkOf0+lBNrJgUXnfCQBPVFdztmQCb/0I= Subject key identifier: D6:C6:3B:F2:49:12:13:7E:A2:7D:02:48:4F:25:16:C8:43:C4:2F:63 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584FB3A66906CC3FC9F5F93D3B00 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:69:06:cc:3f:c9:f5:f9:3d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=25ee86fc-984b-46b8-a84f-0c66ba40331b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:1f:d4:c1:5c:d0:81:af:5c:3a:27:d5:f9: 4f:f3:a6:27:97:b7:02:ce:71:18:23:02:c6:f8:2f: 69:37:e8:f5:71:4a:ac:7e:c7:5c:3b:b1:d9:25:90: 1c:70:35:e5:4d:33:4e:99:9e:f1:0d:8f:d8:21:c8: 7d:17:61:e9:2c:3d:ab:ba:34:b5:f4:f6:ad:7a:b0: 56:1c:2d:c4:6d:fb:05:f4:03:8e:cb:5d:b5:f3:e6: 06:8e:90:6e:74:4d:6e:c8:9a:f1:c9:fe:19:57:cf: 62:39:bc:74:df:2a:33:49:84:05:d7:a6:08:56:9e: 84:9a:ac:32:fe:18:8d:3d:96:65:6b:bb:7d:da:dd: 34:da:c6:1e:29:09:b7:d3:a5:ec:e9:14:88:10:29: f6:71:c5:47:ea:55:e6:ac:4a:1f:f4:3b:57:c4:5b: 82:28:af:6a:80:d3:d1:89:a5:22:08:02:96:da:76: 73:9b:98:4b:2f:e4:72:6f:76:b6:34:0a:3b:02:30: 68:ca:3e:76:ae:bd:90:6d:1f:de:d6:79:5d:59:e0: 0e:cb:a4:4e:c6:ac:16:79:69:50:10:96:1f:77:b0: 9d:f5:9f:14:da:be:46:d9:00:be:cf:9e:de:5b:de: 5a:eb:a5:a0:fa:d8:4d:0b:ac:cb:25:65:6f:d8:c9: 03:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:3B:F2:49:12:13:7E:A2:7D:02:48:4F:25:16:C8:43:C4:2F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:af:17:de:70:2d:12:6d:96:aa:2f:14:b0:a7:a9:c3:87:63: 8f:eb:e5:1b:a6:c7:92:71:6c:2a:19:ed:c5:6d:e8:eb:ec:9b: 3e:9a:60:8a:4c:74:8b:dc:4b:3c:5a:a4:6b:bf:86:9a:3f:51: db:a9:1a:71:90:f0:9b:8a:3d:31:bc:83:64:ae:7d:87:01:87: 0d:86:e4:b9:4b:62:56:7c:80:c1:2d:4c:3e:da:6a:c7:21:fd: 34:42:c5:ac:7a:91:c8:e5:f6:86:c0:56:a3:00:2a:bf:1c:c5: 7e:04:e6:2c:d0:ee:fe:89:5b:3a:5c:84:f1:45:6c:d7:8b:c0: 7e:56:44:6c:01:47:17:ac:2d:d8:03:64:34:a7:a2:5e:8c:c5: 42:8b:c8:30:8e:4f:e7:84:b2:09:86:25:8e:c5:2f:38:ed:c2: d2:ea:77:1f:3a:3a:a3:57:8b:74:33:aa:8f:eb:78:42:3e:77: ba:c2:64:f8:b7:2a:46:44:8f:f9:8a:76:2f:91:20:bb:9e:bb: b8:13:47:6a:d7:ec:24:0c:11:6d:3b:f3:33:59:68:88:e5:b2: 23:84:18:1c:0a:09:8b:71:62:0a:ed:2c:4f:42:91:ed:ca:95: 6b:22:2c:e6:9c:7a:49:83:b4:75:1b:ff:5d:30:56:3f:af:17: a3:fc:ae:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpmkGzD/J9fk9OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MjVlZTg2ZmMtOTg0Yi00NmI4LWE4NGYtMGM2NmJhNDAzMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYEf1MFc0IGvXDon1flP86Ynl7cCznEYIwLG +C9pN+j1cUqsfsdcO7HZJZAccDXlTTNOmZ7xDY/YIch9F2HpLD2rujS19PaterBW HC3EbfsF9AOOy1218+YGjpBudE1uyJrxyf4ZV89iObx03yozSYQF16YIVp6Emqwy /hiNPZZla7t92t002sYeKQm306Xs6RSIECn2ccVH6lXmrEof9DtXxFuCKK9qgNPR iaUiCAKW2nZzm5hLL+Ryb3a2NAo7AjBoyj52rr2QbR/e1nldWeAOy6ROxqwWeWlQ EJYfd7Cd9Z8U2r5G2QC+z57eW95a66Wg+thNC6zLJWVv2MkDwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbGO/JJEhN+on0CSE8lFshDxC9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqvF95wLRJtlqovFLCnqcOHY4/r5Rumx5JxbCoZ7cVt6Ovsmz6aYIpM dIvcSzxapGu/hpo/UdupGnGQ8JuKPTG8g2SufYcBhw2G5LlLYlZ8gMEtTD7aasch /TRCxax6kcjl9obAVqMAKr8cxX4E5izQ7v6JWzpchPFFbNeLwH5WRGwBRxesLdgD ZDSnol6MxUKLyDCOT+eEsgmGJY7FLzjtwtLqdx86OqNXi3Qzqo/reEI+d7rCZPi3 KkZEj/mKdi+RILueu7gTR2rX7CQMEW078zNZaIjlsiOEGBwKCYtxYgrtLE9Cke3K lWsiLOacekmDtHUb/10wVj+vF6P8rt4= -----END CERTIFICATE-----Generated at Tue Nov 3 22:55:01 2026 by rpki-client