$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json) Hash identifier: mzM1dNWWQJM7AMnLWJcc4PEkIPoRKDnmFa4yzH80niA= Subject key identifier: 1B:F5:1D:05:E7:AB:16:3F:C1:9D:A4:C6:BA:1F:AF:8F:46:D6:FB:46 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584F4973A34DE0F3A904529C7E80 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a3:4d:e0:f3:a9:04:52:9c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7274db55-9464-4772-9c7d-087a99b6fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:ed:a4:10:ab:7e:83:38:cd:f3:12:95:b7: a1:1c:6c:81:9c:71:e9:0a:f6:e7:4d:10:6d:1e:40: 45:a2:97:2c:6c:02:ab:57:f8:fa:b1:80:70:70:6c: b8:1b:ad:ad:b7:97:c3:5d:ea:80:c6:59:de:c3:38: 4c:96:76:de:03:ad:ec:ea:5f:99:79:c9:bb:de:70: 6e:e9:f9:61:de:27:6b:d8:67:1a:1a:ee:8b:78:6d: dd:29:4d:d6:41:b1:5d:e2:56:79:61:d4:e4:a0:df: 34:66:8b:45:53:3b:af:34:ba:f0:2c:19:a8:75:b3: 24:28:cf:62:1a:a7:46:07:c9:44:fc:f9:1e:9f:19: 28:ea:72:8a:5b:b5:73:d3:f8:b0:e0:11:62:05:4e: 91:2d:05:f4:37:fd:5a:7d:b9:c0:4c:d9:28:e1:91: 55:d8:45:fb:70:4a:ec:ff:93:da:45:4b:0f:94:c9: 5b:1a:0b:e3:ea:8b:6f:ed:77:29:9d:a4:da:b5:c2: 46:ab:8d:b8:5a:0f:02:80:ca:9f:e1:38:5d:3e:b6: 6d:f6:11:90:1f:11:24:08:2c:88:7c:e9:61:38:18: 83:a8:fc:34:8c:47:72:f7:0e:83:2f:6b:59:f3:0e: c9:4c:2a:c3:d0:82:a6:a8:88:96:43:96:fe:33:bc: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F5:1D:05:E7:AB:16:3F:C1:9D:A4:C6:BA:1F:AF:8F:46:D6:FB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6a:93:3c:2c:76:a9:56:b0:2a:d4:0c:bd:9d:d0:95:c2:6e: 14:8a:4e:f9:b1:55:c2:85:66:e3:57:b6:42:92:59:f1:11:78: dd:3e:b7:64:67:3b:13:67:6a:07:aa:31:40:c7:92:65:15:cf: f2:3c:a3:d1:e2:21:35:1f:5d:bf:2c:67:7b:dd:c9:fd:88:c2: cf:2e:a8:99:65:72:d4:4d:12:8d:b0:96:d9:64:f6:98:0f:0d: aa:7d:9f:01:96:cc:6c:fa:a4:50:dd:e9:a4:4e:5b:11:70:b2: e4:7f:70:f2:d3:00:ad:9a:e0:89:4b:3f:af:76:b9:4b:b8:41: b1:89:3d:04:eb:9f:3d:d6:b8:cf:04:e4:7e:1d:3f:f7:0b:b5: 5f:5c:cb:3a:0e:d6:9d:50:7b:57:4a:2e:57:e4:cf:71:30:2b: e4:04:93:02:71:da:01:11:43:7e:78:97:63:ae:19:f1:f2:89: cf:a1:d9:63:b0:d8:df:8c:32:02:b8:f3:6d:d1:90:15:be:dc: b2:a6:62:ae:ea:2a:aa:7f:c0:c5:f7:18:cb:a0:40:a0:f2:35: 6e:5f:12:61:81:35:3a:2b:3c:d2:0f:47:3b:a7:56:f4:ac:88: 79:9a:2d:d9:cc:97:6f:8e:d8:c7:a9:ad:15:ec:1e:71:15:55: 06:09:09:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6NN4POpBFKcfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzI3NGRiNTUtOTQ2NC00NzcyLTljN2QtMDg3YTk5YjZmYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ztpBCrfoM4zfMSlbehHGyBnHHpCvbnTRBt HkBFopcsbAKrV/j6sYBwcGy4G62tt5fDXeqAxlnewzhMlnbeA63s6l+Zecm73nBu 6flh3idr2GcaGu6LeG3dKU3WQbFd4lZ5YdTkoN80ZotFUzuvNLrwLBmodbMkKM9i GqdGB8lE/Pkenxko6nKKW7Vz0/iw4BFiBU6RLQX0N/1afbnATNko4ZFV2EX7cErs /5PaRUsPlMlbGgvj6otv7XcpnaTatcJGq424Wg8CgMqf4ThdPrZt9hGQHxEkCCyI fOlhOBiDqPw0jEdy9w6DL2tZ8w7JTCrD0IKmqIiWQ5b+M7yFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBv1HQXnqxY/wZ2kxrofr49G1vtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvY2E5NDM3YWItM2I0Ny0z YjI4LTliNzEtYjdmNGU0MjEzNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxqkzwsdqlWsCrUDL2d0JXCbhSKTvmxVcKFZuNXtkKSWfEReN0+t2Rn OxNnageqMUDHkmUVz/I8o9HiITUfXb8sZ3vdyf2Iws8uqJllctRNEo2wltlk9pgP Dap9nwGWzGz6pFDd6aROWxFwsuR/cPLTAK2a4IlLP692uUu4QbGJPQTrnz3WuM8E 5H4dP/cLtV9cyzoO1p1Qe1dKLlfkz3EwK+QEkwJx2gERQ354l2OuGfHyic+h2WOw 2N+MMgK4823RkBW+3LKmYq7qKqp/wMX3GMugQKDyNW5fEmGBNTorPNIPRzunVvSs iHmaLdnMl2+O2MeprRXsHnEVVQYJCX0= -----END CERTIFICATE-----Generated at Tue Sep 29 04:57:17 2026 by rpki-client