$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c1763e9-8b59-3c02-953f-942c97723a9b.roa File: 0c1763e9-8b59-3c02-953f-942c97723a9b.roa (raw, json) Hash identifier: TFHeteFjgt9oyTS4aqPW1qDmPy/SecpiBqACIn9qaXc= Subject key identifier: 48:51:17:9E:53:11:84:D8:30:CB:53:CE:51:62:C4:7C:14:82:99:51 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F5E62C0540C131892C03B53C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c1763e9-8b59-3c02-953f-942c97723a9b.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 397422 IP address blocks: 199.91.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c0:54:0c:13:18:92:c0:3b:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=118ebdea-eaa6-4ca6-8a62-e7808a46fd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:c1:58:52:24:de:cb:fd:47:6f:d7:b8:68: 43:ef:b6:ac:da:44:2b:d3:b7:ce:de:73:e7:92:37: 72:a7:9e:81:16:b1:91:44:d4:8d:71:c7:72:d0:de: ee:9e:ff:46:dd:68:33:ec:89:aa:60:df:df:37:ab: cf:1b:7f:08:40:9c:1d:e9:b1:92:bb:a2:74:a3:9f: a5:a0:65:3c:0b:3d:30:7d:28:58:68:c0:50:e8:f9: a2:e0:3f:70:6d:ec:91:06:72:c1:48:96:79:5d:52: 1c:c4:01:14:6f:c6:11:35:23:66:3c:2e:b2:a3:60: f2:f5:e6:da:2f:59:5f:55:a7:2b:e6:48:d0:de:7c: 31:f3:95:7a:be:a9:ff:6c:8a:fa:67:7b:c6:f2:a6: 5f:49:65:fe:ee:e9:05:e2:08:28:d6:80:71:4a:9d: cf:f0:ee:f4:73:23:ad:d0:62:62:aa:ee:4a:be:bb: 14:f8:fb:80:62:c3:94:d9:6f:40:1f:0b:a0:d3:40: 5d:39:84:07:53:3d:c4:cb:94:af:b6:d2:7a:aa:50: 67:1f:a2:ee:51:89:f1:7c:17:d2:6f:4c:ed:c2:83: 99:28:6a:28:06:96:c1:1d:41:6a:92:af:61:a4:ba: 1c:c4:23:19:62:95:4f:b8:c8:3e:fe:35:6b:46:ff: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:51:17:9E:53:11:84:D8:30:CB:53:CE:51:62:C4:7C:14:82:99:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c1763e9-8b59-3c02-953f-942c97723a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:a6:f9:a9:0f:dd:0b:98:0f:b5:9e:54:07:77:e6:83:8a: 51:ba:5d:01:ae:8c:bb:97:34:0f:79:4a:c7:51:d5:23:8e:51: 2c:3b:98:e5:18:27:d9:cd:6e:57:2c:0d:a5:9b:da:11:fc:f1: c5:e7:1f:a8:6d:9b:ca:d9:64:56:ca:1c:49:8e:9f:65:37:2f: 40:8d:e3:73:a7:8e:d4:70:8b:d7:cf:8a:01:56:b6:ea:a4:55: 9c:32:84:aa:e6:57:84:cd:40:a5:9f:01:db:15:ef:95:8d:66: 09:2b:c5:75:45:89:1b:e4:41:71:85:59:63:06:a3:bd:97:47: e7:73:46:20:8e:a4:df:e6:2d:06:65:ce:74:c2:fe:84:9e:1d: f2:a6:a8:31:24:df:01:77:c0:fb:e4:b3:b3:2c:c1:d9:74:b1: bf:6a:39:11:4d:1c:8f:dc:78:c8:33:62:2d:22:b0:ac:03:61: 13:b8:60:27:fe:42:66:b6:94:2c:db:65:60:e4:df:e7:eb:91: 52:0f:8d:6f:56:0a:8d:b4:67:42:e3:31:2f:bb:1a:ef:16:6a: 45:21:f9:f2:f8:b9:cc:a1:57:4d:95:f6:24:84:e6:08:cf:8c: 8e:82:7f:81:3c:8e:2b:60:eb:b3:c8:12:6f:48:8e:43:34:15: b9:4b:0b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsBUDBMYksA7U8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MTE4ZWJkZWEtZWFhNi00Y2E2LThhNjItZTc4MDhhNDZmZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM3BWFIk3sv9R2/XuGhD77as2kQr07fO3nPn kjdyp56BFrGRRNSNccdy0N7unv9G3Wgz7ImqYN/fN6vPG38IQJwd6bGSu6J0o5+l oGU8Cz0wfShYaMBQ6Pmi4D9wbeyRBnLBSJZ5XVIcxAEUb8YRNSNmPC6yo2Dy9eba L1lfVacr5kjQ3nwx85V6vqn/bIr6Z3vG8qZfSWX+7ukF4ggo1oBxSp3P8O70cyOt 0GJiqu5KvrsU+PuAYsOU2W9AHwug00BdOYQHUz3Ey5SvttJ6qlBnH6LuUYnxfBfS b0ztwoOZKGooBpbBHUFqkq9hpLocxCMZYpVPuMg+/jVrRv95OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhRF55TEYTYMMtTzlFixHwUgplRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGMxNzYzZTktOGI1OS0z YzAyLTk1M2YtOTQyYzk3NzIzYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB9pvmpD90LmA+1nlQHd+aDilG6XQGujLuXNA95SsdR1SOOUSw7mOUY J9nNblcsDaWb2hH88cXnH6htm8rZZFbKHEmOn2U3L0CN43OnjtRwi9fPigFWtuqk VZwyhKrmV4TNQKWfAdsV75WNZgkrxXVFiRvkQXGFWWMGo72XR+dzRiCOpN/mLQZl znTC/oSeHfKmqDEk3wF3wPvks7Mswdl0sb9qORFNHI/ceMgzYi0isKwDYRO4YCf+ Qma2lCzbZWDk3+frkVIPjW9WCo20Z0LjMS+7Gu8WakUh+fL4ucyhV02V9iSE5gjP jI6Cf4E8jitg67PIEm9IjkM0FblLC2I= -----END CERTIFICATE-----Generated at Wed Oct 21 10:14:39 2026 by rpki-client