$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa File: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (raw, json) Hash identifier: q1o8EEPPg1KniqTzXzX6sAStJDYUbCuecRn8JJpJR0k= Subject key identifier: AF:5C:85:93:C6:B0:DD:1A:B7:FC:06:8A:01:B0:82:66:5E:72:60:F5 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584F0D6CDD30B916B8CFC33F8DA0 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:dd:30:b9:16:b8:cf:c3:3f:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7ac5cea6-a30c-4c6d-8a42-46576f29ac65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:75:23:8e:31:23:c4:03:c5:ac:7f:ed:ee: ed:b5:63:08:2f:bf:ca:48:11:a5:8b:32:05:55:4e: 03:22:83:35:0f:f5:8b:0e:85:98:38:91:fa:c2:e9: 3b:ab:6c:14:dd:19:cd:ab:ec:89:4b:8c:09:17:d5: 91:71:33:d3:81:81:f6:f1:f2:d1:13:56:6f:a4:ae: a6:3c:e1:f7:02:15:ef:90:18:cd:64:54:49:9a:f3: 79:ac:49:f4:5d:d2:b6:88:e2:9b:d7:b6:5b:8d:fa: d2:e7:74:a4:43:5b:34:ba:26:ab:0d:ad:51:a1:5f: 80:97:96:e1:c9:85:1a:99:27:d8:48:0a:5f:72:bd: b1:df:dd:3a:55:bc:46:e3:c6:62:7d:7b:bf:8a:69: 19:88:37:d0:9c:8a:61:13:ea:e7:25:22:bd:69:1f: ee:46:b6:26:3f:54:1a:90:1b:55:e0:2e:c5:6c:e7: 30:06:03:92:09:54:5b:d4:35:06:48:1c:52:17:12: a0:93:d8:ab:40:b9:56:67:7f:9f:8d:7b:81:f1:8c: da:d4:17:bc:84:03:8a:b4:7c:8e:ca:34:0d:2f:57: cc:ec:f0:30:df:0c:a1:91:d5:87:87:f7:d0:d7:87: 17:bc:e9:99:f9:a2:0b:50:97:ba:70:71:b8:91:fe: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:85:93:C6:B0:DD:1A:B7:FC:06:8A:01:B0:82:66:5E:72:60:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:70:7b:69:84:7c:d6:e1:be:18:bc:27:c5:27:28:a1:4c:45: fd:a3:56:dc:64:91:19:ab:d5:b6:a2:c8:6f:48:c0:e8:c9:73: 14:70:3f:9e:94:86:51:d2:cc:2c:c7:0a:77:e0:e5:d0:50:f5: 0c:1c:1c:3e:88:cd:9a:fb:91:07:8a:e8:27:be:c9:b9:c7:7e: 04:d4:2a:b3:c7:5d:6b:59:da:02:76:a8:b3:45:dc:1f:bf:33: ad:c5:fa:0b:6c:45:67:d3:00:b4:d4:22:35:46:27:9c:49:e5: 4d:ae:19:a6:a7:53:2e:20:b3:db:08:f6:2d:df:80:f9:45:fb: de:b6:33:e0:e2:d0:34:ba:87:0e:7d:c4:4d:e3:5a:78:44:e2: 93:bf:9e:23:32:e2:dd:cb:1d:5a:da:bd:ae:a2:65:cc:3e:65: 2b:52:ad:22:a2:82:7f:be:a1:ae:aa:85:e6:7a:8f:b1:06:f7: 82:95:34:a5:6e:98:17:d7:f4:b8:54:b6:c8:d8:2e:73:bb:fe: 91:7e:90:43:fd:83:40:c4:1a:b7:a9:3f:83:c9:cd:75:9d:5b: d8:98:44:07:a9:2b:99:a0:b4:bd:48:d8:ec:26:94:55:b5:d9: d0:a7:74:9a:21:9d:05:2a:78:ff:82:e0:c5:0e:43:a2:b5:e2: b3:a1:6e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN0wuRa4z8M/jaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2FjNWNlYTYtYTMwYy00YzZkLThhNDItNDY1NzZmMjlhYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhB1I44xI8QDxax/7e7ttWMIL7/KSBGlizIF VU4DIoM1D/WLDoWYOJH6wuk7q2wU3RnNq+yJS4wJF9WRcTPTgYH28fLRE1ZvpK6m POH3AhXvkBjNZFRJmvN5rEn0XdK2iOKb17ZbjfrS53SkQ1s0uiarDa1RoV+Al5bh yYUamSfYSApfcr2x3906VbxG48ZifXu/imkZiDfQnIphE+rnJSK9aR/uRrYmP1Qa kBtV4C7FbOcwBgOSCVRb1DUGSBxSFxKgk9irQLlWZ3+fjXuB8Yza1Be8hAOKtHyO yjQNL1fM7PAw3wyhkdWHh/fQ14cXvOmZ+aILUJe6cHG4kf6VZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9chZPGsN0at/wGigGwgmZecmD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDViM2ZhNDctNDdjYi0z NWVjLTk4YTQtNGNiOWE0NmRhMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5we2mEfNbhvhi8J8UnKKFMRf2jVtxkkRmr1baiyG9IwOjJcxRwP56U hlHSzCzHCnfg5dBQ9QwcHD6IzZr7kQeK6Ce+ybnHfgTUKrPHXWtZ2gJ2qLNF3B+/ M63F+gtsRWfTALTUIjVGJ5xJ5U2uGaanUy4gs9sI9i3fgPlF+962M+Di0DS6hw59 xE3jWnhE4pO/niMy4t3LHVrava6iZcw+ZStSrSKign++oa6qheZ6j7EG94KVNKVu mBfX9LhUtsjYLnO7/pF+kEP9g0DEGrepP4PJzXWdW9iYRAepK5mgtL1I2OwmlFW1 2dCndJohnQUqeP+C4MUOQ6K14rOhbqw= -----END CERTIFICATE-----Generated at Tue Sep 29 07:20:59 2026 by rpki-client