$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa File: 06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json) Hash identifier: O9aSilWqeXT7wPI/rr6A/al1hP+3yMnrWDj8QmEF+Qk= Subject key identifier: 61:B2:AB:0D:CB:7D:AB:ED:E8:B7:03:DE:4A:12:90:17:D7:F0:4E:F9 Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F4328584F89A8792B4C205F7CB1BC6C40 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 209 IP address blocks: 199.191.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:79:2b:4c:20:5f:7c:b1:bc:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=4d40399c-85a9-493e-94ac-4dd7a0c622c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:77:cf:c9:1f:af:ad:65:77:8a:c2:41:57: 7e:af:3b:24:40:a2:57:ee:e4:4d:4a:f4:6d:61:70: 13:58:6e:08:fd:35:86:35:af:68:f8:a6:9d:09:a5: 33:18:7e:4b:ea:7c:f7:6e:f4:89:ac:5f:d3:d5:80: 50:3b:b0:1c:01:47:10:6d:07:bb:1a:6c:2d:a0:6d: dd:cc:45:48:69:26:69:c1:f0:49:7f:b3:23:f0:49: 27:be:5e:d6:9e:94:ef:55:16:7b:da:47:7d:44:34: 25:f4:f2:54:30:59:ae:62:a7:f4:9d:63:bf:92:3e: 8d:7f:4c:a6:04:60:b8:c2:d2:df:f5:52:16:0a:d0: ad:ff:98:26:df:20:d5:48:df:b8:f7:ff:ed:eb:6d: b5:fe:ca:9b:05:ac:23:6c:46:61:08:38:4b:46:2c: 41:3b:a4:35:f4:77:b9:e0:95:ea:ec:e9:37:15:41: 7e:dd:d6:92:d7:d4:76:ed:d5:49:5e:d3:7a:e1:e1: 02:d5:96:19:ed:fd:78:cb:29:35:ca:31:23:66:50: 0d:a3:81:e7:fd:f0:24:31:00:f4:b6:3d:1e:f9:d3: a0:4c:b6:f7:86:4a:e4:a2:df:f7:67:bf:39:18:03: 2f:bd:bb:38:aa:7a:6b:35:2e:68:43:d5:48:60:17: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B2:AB:0D:CB:7D:AB:ED:E8:B7:03:DE:4A:12:90:17:D7:F0:4E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:14:06:92:01:9c:2e:5f:46:02:7b:d2:00:2d:81:88:94:f8: 1d:bc:c3:d8:f8:bf:84:52:7c:6d:59:dc:17:14:eb:ff:b5:ec: 78:40:b3:79:41:8f:cb:43:89:f8:38:e9:1e:ee:79:93:2c:9a: 0a:db:4c:d5:ef:00:56:bd:16:98:8b:8f:a9:5e:41:2b:45:5d: 54:f0:6b:87:f2:d8:ce:25:3d:e9:90:a1:7b:95:6b:96:74:9e: 24:b3:a1:a6:53:9d:e8:5e:4a:0c:d9:c4:4a:00:dd:10:ba:f3: 2f:be:46:ab:a8:9a:a2:56:04:89:4a:4f:c8:37:d0:d4:a7:0f: da:70:17:97:3b:9a:78:a7:14:60:6a:36:74:07:e2:06:59:ec: ad:e9:ac:d9:da:16:0d:ae:b4:61:a1:4d:55:19:fb:32:a1:33: 4a:63:01:9e:fd:32:7d:2f:c4:fe:c5:45:6b:80:72:97:8c:22: 6b:b0:88:bf:c5:49:1b:9b:b7:0c:af:e0:45:5b:1c:dc:92:8b: a8:97:d7:68:0a:80:a1:3e:6b:0a:d4:9c:dc:9b:ad:9e:2a:ff: 02:a9:4b:15:79:88:3f:15:a8:b5:2f:57:6b:24:6e:74:7a:3b: 80:bb:dc:5b:59:ef:54:c9:a7:5e:a0:15:9d:69:8f:2d:f7:95: cd:3f:74:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqHkrTCBffLG8bEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk NGQ0MDM5OWMtODVhOS00OTNlLTk0YWMtNGRkN2EwYzYyMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnd3z8kfr61ld4rCQVd+rzskQKJX7uRNSvRt YXATWG4I/TWGNa9o+KadCaUzGH5L6nz3bvSJrF/T1YBQO7AcAUcQbQe7GmwtoG3d zEVIaSZpwfBJf7Mj8Eknvl7WnpTvVRZ72kd9RDQl9PJUMFmuYqf0nWO/kj6Nf0ym BGC4wtLf9VIWCtCt/5gm3yDVSN+49//t6221/sqbBawjbEZhCDhLRixBO6Q19He5 4JXq7Ok3FUF+3daS19R27dVJXtN64eEC1ZYZ7f14yyk1yjEjZlANo4Hn/fAkMQD0 tj0e+dOgTLb3hkrkot/3Z785GAMvvbs4qnprNS5oQ9VIYBeiLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGyqw3Lfavt6LcD3koSkBfX8E75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMDZjOWY5YTAtZmUwMS0z OGM5LWJiZGYtMzA5ZGE0MDAyODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAUBpIBnC5fRgJ70gAtgYiU+B28w9j4v4RSfG1Z3BcU6/+17HhAs3lB j8tDifg46R7ueZMsmgrbTNXvAFa9FpiLj6leQStFXVTwa4fy2M4lPemQoXuVa5Z0 niSzoaZTneheSgzZxEoA3RC68y++RquomqJWBIlKT8g30NSnD9pwF5c7mninFGBq NnQH4gZZ7K3prNnaFg2utGGhTVUZ+zKhM0pjAZ79Mn0vxP7FRWuAcpeMImuwiL/F SRubtwyv4EVbHNySi6iX12gKgKE+awrUnNybrZ4q/wKpSxV5iD8VqLUvV2skbnR6 O4C73FtZ71TJp16gFZ1pjy33lc0/dJs= -----END CERTIFICATE-----Generated at Sun Nov 15 13:13:29 2026 by rpki-client