$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa File: a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json) Hash identifier: 4/vOh5lGdBRALyyxDF2nMTd9WT0U94dX/jbK4LwnJTs= Subject key identifier: 78:A8:D4:39:53:19:B0:5E:CD:E9:5D:D9:4D:0C:E0:7B:F0:BD:FA:81 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F49753FE6758DC295FF8631C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 199.91.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:3f:e6:75:8d:c2:95:ff:86:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5979fc58-7c46-49b4-9436-a494fdb8fc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:34:e2:d9:17:d4:c1:6e:0c:cc:6d:d2:de: e9:14:49:ba:58:c5:4f:fc:55:bd:91:2b:55:52:aa: 7b:82:7f:2b:01:d7:ff:39:98:3f:ec:96:34:ab:5a: 2d:42:17:c3:8c:87:60:00:14:9f:04:a7:a6:88:9f: 2d:dd:81:26:09:f3:81:a7:99:60:73:ae:ab:7b:07: cb:26:46:99:54:41:17:92:d0:8c:d4:75:b4:f4:05: 5e:13:98:b9:1a:37:6c:33:79:8b:05:3d:13:e7:c7: 7f:cb:63:50:20:26:bb:a8:e9:0a:b6:6c:a5:d8:0e: 03:41:e0:fc:2b:a8:26:56:82:2f:93:2b:8e:98:8e: 0d:79:13:eb:67:10:1e:d0:17:16:a1:ef:bf:27:0c: 5b:ad:1f:c5:08:12:94:93:35:b1:8c:51:c4:8a:84: 83:d4:ac:9e:1c:50:9a:66:8f:2b:c7:4c:e9:4a:36: d5:1d:63:c3:f5:41:ab:7e:f8:b4:1b:55:39:82:e5: 81:28:03:28:2b:c9:ba:c6:5c:c7:89:9c:16:2c:de: 52:1c:db:a7:32:4a:0a:b4:da:1f:f4:d1:18:c5:8d: ed:18:a5:a9:b3:d5:a3:65:43:00:b1:3d:83:b0:44: 31:3f:eb:fc:d1:f0:77:6d:09:ee:94:66:ad:d2:93: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A8:D4:39:53:19:B0:5E:CD:E9:5D:D9:4D:0C:E0:7B:F0:BD:FA:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:68:65:cd:2e:6e:30:e7:57:7c:00:fa:bd:93:23:7f:63:01: 06:e3:69:42:16:5e:07:df:5f:50:92:bb:f2:2f:8a:df:d0:92: 31:ca:ca:0a:f8:dd:cc:48:9d:8a:d3:75:5c:16:b5:6c:17:c4: b4:9a:da:04:44:86:44:0e:00:c3:b8:e8:ad:b2:57:56:1e:0b: 23:6d:46:83:14:76:65:1b:be:b8:ff:89:e1:17:2c:7c:f7:96: 68:82:7a:30:0b:43:62:f9:c0:81:33:4a:b1:f2:85:63:28:cd: 7c:cd:84:09:59:ea:c1:5a:bc:90:dc:18:2f:23:5f:b3:a1:0e: 42:cb:c4:32:db:80:6e:8d:7a:8b:05:ad:f8:be:11:e7:55:84: 55:c6:ac:02:17:7b:d5:e8:2a:02:22:75:3f:3f:f2:a6:7e:5e: 70:0a:13:5c:a6:81:db:ca:c3:b7:81:6d:b5:18:80:77:44:32: b6:b4:b2:f3:74:36:33:b9:0b:25:64:e5:72:56:01:f3:58:d1: 62:90:42:44:ca:dd:94:a4:13:fa:cf:40:55:0e:4f:aa:f6:c7: 0f:61:37:5b:98:55:06:6a:88:32:01:fe:f8:11:6b:92:6e:3c: 8f:4f:90:8d:a6:b5:05:e5:e7:93:3c:e5:0f:1b:27:a9:6d:34: 48:11:80:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdT/mdY3Clf+GMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTk3OWZjNTgtN2M0Ni00OWI0LTk0MzYtYTQ5NGZkYjhmYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD804tkX1MFuDMxt0t7pFEm6WMVP/FW9kStV Uqp7gn8rAdf/OZg/7JY0q1otQhfDjIdgABSfBKemiJ8t3YEmCfOBp5lgc66rewfL JkaZVEEXktCM1HW09AVeE5i5GjdsM3mLBT0T58d/y2NQICa7qOkKtmyl2A4DQeD8 K6gmVoIvkyuOmI4NeRPrZxAe0BcWoe+/JwxbrR/FCBKUkzWxjFHEioSD1KyeHFCa Zo8rx0zpSjbVHWPD9UGrfvi0G1U5guWBKAMoK8m6xlzHiZwWLN5SHNunMkoKtNof 9NEYxY3tGKWps9WjZUMAsT2DsEQxP+v80fB3bQnulGat0pMitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHio1DlTGbBezeld2U0M4HvwvfqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTlhMDJkYTMtMTA0NC0z NWY0LTkwOTUtZTQwYWEzNTBhMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJoZc0ubjDnV3wA+r2TI39jAQbjaUIWXgffX1CSu/Ivit/QkjHKygr4 3cxInYrTdVwWtWwXxLSa2gREhkQOAMO46K2yV1YeCyNtRoMUdmUbvrj/ieEXLHz3 lmiCejALQ2L5wIEzSrHyhWMozXzNhAlZ6sFavJDcGC8jX7OhDkLLxDLbgG6NeosF rfi+EedVhFXGrAIXe9XoKgIidT8/8qZ+XnAKE1ymgdvKw7eBbbUYgHdEMra0svN0 NjO5CyVk5XJWAfNY0WKQQkTK3ZSkE/rPQFUOT6r2xw9hN1uYVQZqiDIB/vgRa5Ju PI9PkI2mtQXl55M85Q8bJ6ltNEgRgEo= -----END CERTIFICATE-----Generated at Mon Oct 19 07:39:52 2026 by rpki-client