$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa File: 2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json) Hash identifier: MLtMJwClgI/8lR2wfq+cKRZx8ym5bck8/7RQ7xJ2kRs= Subject key identifier: 16:BB:04:68:70:3E:13:9A:EC:9E:7B:EE:04:E6:C8:71:71:7C:02:B3 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584F612D6139AD52DFCA020E6440 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 46455 IP address blocks: 199.71.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:61:39:ad:52:df:ca:02:0e:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=d15e0add-da51-4942-a81e-44ad2cb6951b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:a6:56:d9:3e:c9:95:40:2f:1a:41:b4:84: dc:1e:31:0c:90:fa:c8:28:92:a3:d0:62:a1:d0:85: 42:c0:dd:96:23:87:71:d0:f3:2b:46:5f:d2:31:3e: bc:50:22:3d:a6:0d:f5:cb:8f:8a:14:31:3c:f2:04: f1:78:7b:11:21:5b:4e:b1:a7:ba:7f:d4:9a:54:70: ed:63:b8:af:8e:2e:e5:32:71:cc:ec:e8:7a:32:df: 00:28:96:aa:65:07:5d:c6:2b:24:06:2e:c5:05:80: 25:65:2c:df:2c:62:49:43:49:be:73:87:9b:22:94: fc:2a:d8:87:89:79:2a:63:ab:f0:af:39:64:e1:62: ed:b3:c9:02:ba:ad:24:55:fa:17:02:42:6c:a2:70: 43:c9:f4:f6:10:48:af:77:ff:d0:5c:f6:9a:3e:7b: cb:cc:f0:3d:95:c3:5b:95:5c:ac:01:85:8a:6f:b5: 28:bc:37:fa:3c:7f:85:ee:19:6e:9f:72:98:aa:f4: f3:3c:55:00:64:65:89:d1:a6:6c:d3:57:64:de:e4: 7a:60:30:e2:0b:a0:6c:72:1a:6e:ea:4f:a7:17:72: 35:39:44:f8:4b:7a:58:e0:2b:20:09:4b:65:7b:85: 81:de:f7:34:eb:70:e3:60:4e:9d:da:34:17:95:3a: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BB:04:68:70:3E:13:9A:EC:9E:7B:EE:04:E6:C8:71:71:7C:02:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.71.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:8d:31:58:f6:5b:db:be:a9:20:c1:90:6c:12:d5:b6:75:c4: 2b:e2:ce:45:92:55:b0:0a:9a:9f:7b:a5:3e:bc:48:73:44:0f: 5e:70:90:9e:df:6c:85:b9:86:93:94:09:e1:29:e9:b2:90:1f: 27:c1:01:43:e4:52:61:d1:fc:10:6f:2b:5d:c3:ca:17:ad:3c: 9b:8b:79:51:f4:e3:fd:4e:96:9d:ed:bb:74:cb:50:03:f5:49: 5c:3e:e0:09:38:89:4a:4e:a7:d3:1c:57:0c:a0:f1:24:ed:c1: 5d:31:f6:82:78:a3:c3:6e:10:dd:4a:8f:a8:1f:67:ca:5c:ef: e6:4c:19:0f:d8:d6:2a:84:23:59:a9:0c:45:30:53:9a:06:77: 35:52:c3:d3:f7:a3:c8:7c:21:15:c9:59:5a:8f:56:e3:38:b5: fc:10:45:82:33:df:32:4c:95:bd:ab:84:18:60:5a:ac:19:26: c1:b7:46:45:20:4b:f1:f2:d0:4b:86:ec:d6:06:21:d1:56:64: 99:1f:64:fe:9b:cc:eb:ed:40:e0:03:6f:ee:40:a4:c8:c6:bd: 5c:44:0b:99:e2:3c:1d:fe:50:6e:4b:3d:a7:40:5f:ba:f5:fc: 69:c3:28:77:e4:a7:fd:27:d9:36:95:4f:51:c2:a1:3c:7b:2b: 9b:c6:51:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWE5rVLfygIOZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDE1ZTBhZGQtZGE1MS00OTQyLWE4MWUtNDRhZDJjYjY5NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWKmVtk+yZVALxpBtITcHjEMkPrIKJKj0GKh 0IVCwN2WI4dx0PMrRl/SMT68UCI9pg31y4+KFDE88gTxeHsRIVtOsae6f9SaVHDt Y7ivji7lMnHM7Oh6Mt8AKJaqZQddxiskBi7FBYAlZSzfLGJJQ0m+c4ebIpT8KtiH iXkqY6vwrzlk4WLts8kCuq0kVfoXAkJsonBDyfT2EEivd//QXPaaPnvLzPA9lcNb lVysAYWKb7UovDf6PH+F7hlun3KYqvTzPFUAZGWJ0aZs01dk3uR6YDDiC6Bschpu 6k+nF3I1OUT4S3pY4CsgCUtle4WB3vc063DjYE6d2jQXlTr2jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa7BGhwPhOa7J577gTmyHFxfAKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMjg2M2NkOGQtZTkzMi0z NzNmLWJmZjUtNTAzYzQwNmQ4MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0fmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaNMVj2W9u+qSDBkGwS1bZ1xCvizkWSVbAKmp97pT68SHNED15wkJ7f bIW5hpOUCeEp6bKQHyfBAUPkUmHR/BBvK13DyhetPJuLeVH04/1Olp3tu3TLUAP1 SVw+4Ak4iUpOp9McVwyg8STtwV0x9oJ4o8NuEN1Kj6gfZ8pc7+ZMGQ/Y1iqEI1mp DEUwU5oGdzVSw9P3o8h8IRXJWVqPVuM4tfwQRYIz3zJMlb2rhBhgWqwZJsG3RkUg S/Hy0EuG7NYGIdFWZJkfZP6bzOvtQOADb+5ApMjGvVxEC5niPB3+UG5LPadAX7r1 /GnDKHfkp/0n2TaVT1HCoTx7K5vGUQI= -----END CERTIFICATE-----Generated at Wed Oct 28 15:34:04 2026 by rpki-client