$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa File: 3ccb2ccd-6776-345a-bf6d-3805674a638a.roa (raw, json) Hash identifier: klgLJmEskigPz5beTwcf0mWEKF4ZiHNHy60sJlSy4B0= Subject key identifier: 33:92:82:7F:5C:4A:36:E6:49:ED:7F:20:94:9D:0A:B9:98:DE:26:A7 Certificate issuer: /CN=61b23514-b37d-4216-9f76-1988ace05318 Certificate serial: 010D0C9F4328584EB416FB44F82BFCD4EEEC11E0 Authority key identifier: 46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 32329 IP address blocks: 199.4.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:16:fb:44:f8:2b:fc:d4:ee:ec:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b23514-b37d-4216-9f76-1988ace05318 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=3a6ff0f2-12c1-420a-8b8f-0eb6d84e3a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:2f:a5:6f:39:06:63:22:85:e1:99:6c:f9: 94:11:2d:9f:ea:12:17:2b:48:ae:44:ce:dc:7f:5e: 38:e1:ca:36:98:97:64:a2:85:2f:2d:24:1f:67:09: d9:6e:de:62:3a:75:5a:ee:3c:c4:de:d5:96:e2:c4: 98:b7:ca:3c:49:35:20:a6:5e:7a:ac:5a:9a:74:ff: b5:3c:2b:dd:f0:49:22:b2:0a:5b:36:9b:64:c6:37: 2b:5c:a5:78:07:ef:8a:90:7d:c9:54:57:94:c2:68: 83:0c:ac:7b:c2:1f:7a:10:55:d7:1e:14:1d:07:d1: df:f1:61:60:70:bc:48:75:74:05:4e:ea:2c:02:96: 9a:e3:ca:4b:e7:9e:ec:bf:2e:ce:54:e9:61:79:58: ad:63:42:0b:ef:fd:8a:39:af:c8:48:0b:ac:36:65: 34:75:65:fa:65:67:d9:fc:ea:89:5f:a3:cf:56:e6: 96:0f:31:c9:3b:64:39:33:95:9e:28:99:87:56:6e: 67:00:04:60:14:80:3a:9d:75:78:b2:c4:8b:72:d0: a9:92:43:4a:25:16:21:1a:3a:94:ab:e5:ce:19:7e: 1a:b5:d5:24:4d:ff:2e:3f:1b:0c:eb:00:07:92:18: 22:8b:c5:a5:b6:6b:7f:0c:53:2e:31:f6:29:91:49: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:92:82:7F:5C:4A:36:E6:49:ED:7F:20:94:9D:0A:B9:98:DE:26:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl X509v3 Authority Key Identifier: keyid:46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer sbgp-ipAddrBlock: critical IPv4: 199.4.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:04:fc:9a:5a:89:d2:1b:ab:e1:47:f5:6b:53:7c:b5:bf:4e: f8:13:16:4f:e5:b0:35:06:fa:21:1b:82:e8:10:76:d3:8f:95: b8:b7:7d:42:e9:7e:ee:d6:07:9f:80:ab:78:d7:b7:69:51:57: 82:b1:3b:ee:9f:d0:da:f1:5c:5a:f8:2a:03:21:40:5f:f0:a1: b5:f5:31:0a:65:50:69:a2:84:81:10:f6:a7:40:2a:61:da:44: bc:5e:d0:fa:a6:9d:07:53:24:a2:5c:0e:b5:6d:c1:aa:f7:e4: 90:75:26:43:7e:d6:3c:2e:ab:71:4f:77:d2:8a:55:e0:8a:57: 01:87:e5:78:c1:2b:89:e4:93:77:59:f3:b8:52:cd:5b:cc:36: 14:a1:f8:f4:16:ad:28:77:7f:31:cb:d6:77:5d:e7:72:3c:35: ee:f4:13:b3:ae:87:d8:ad:be:a8:9a:5e:95:32:8f:d5:de:a5: 71:f4:35:db:4d:38:01:20:e1:bb:06:24:b2:a6:87:fa:86:be: 45:90:54:59:3e:07:fb:aa:10:66:43:cc:c0:df:a8:45:16:b0: 99:e0:9a:45:4d:7f:69:59:ec:25:9a:11:af:7c:75:0b:ad:67: 9a:41:d5:b7:76:a1:5b:27:19:e3:c4:df:53:96:99:35:4d:6c: 2e:55:c4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FvtE+Cv81O7sEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFiMjM1MTQtYjM3ZC00MjE2LTlmNzYtMTk4OGFjZTA1 MzE4MB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk M2E2ZmYwZjItMTJjMS00MjBhLThiOGYtMGViNmQ4NGUzYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyusvpW85BmMiheGZbPmUES2f6hIXK0iuRM7c f1444co2mJdkooUvLSQfZwnZbt5iOnVa7jzE3tWW4sSYt8o8STUgpl56rFqadP+1 PCvd8EkisgpbNptkxjcrXKV4B++KkH3JVFeUwmiDDKx7wh96EFXXHhQdB9Hf8WFg cLxIdXQFTuosApaa48pL557svy7OVOlheVitY0IL7/2KOa/ISAusNmU0dWX6ZWfZ /OqJX6PPVuaWDzHJO2Q5M5WeKJmHVm5nAARgFIA6nXV4ssSLctCpkkNKJRYhGjqU q+XOGX4atdUkTf8uPxsM6wAHkhgii8Wltmt/DFMuMfYpkUlpAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOSgn9cSjbmSe1/IJSdCrmY3ianMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWIy MzUxNC1iMzdkLTQyMTYtOWY3Ni0xOTg4YWNlMDUzMTgvM2NjYjJjY2QtNjc3Ni0z NDVhLWJmNmQtMzgwNTY3NGE2MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFiMjM1MTQtYjM3ZC00MjE2LTlm NzYtMTk4OGFjZTA1MzE4LzYxYjIzNTE0LWIzN2QtNDIxNi05Zjc2LTE5ODhhY2Uw NTMxOC5jcmwwHwYDVR0jBBgwFoAURn5H4OAsDT/oqxF3S4L+Jy40br4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWIyMzUxNC1iMzdkLTQyMTYtOWY3Ni0xOTg4 YWNlMDUzMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAE/JpaidIbq+FH9WtTfLW/TvgTFk/lsDUG+iEbgugQdtOPlbi3fULp fu7WB5+Aq3jXt2lRV4KxO+6f0NrxXFr4KgMhQF/wobX1MQplUGmihIEQ9qdAKmHa RLxe0PqmnQdTJKJcDrVtwar35JB1JkN+1jwuq3FPd9KKVeCKVwGH5XjBK4nkk3dZ 87hSzVvMNhSh+PQWrSh3fzHL1ndd53I8Ne70E7Ouh9itvqiaXpUyj9XepXH0NdtN OAEg4bsGJLKmh/qGvkWQVFk+B/uqEGZDzMDfqEUWsJngmkVNf2lZ7CWaEa98dQut Z5pB1bd2oVsnGePE31OWmTVNbC5VxPQ= -----END CERTIFICATE-----Generated at Sat Aug 22 18:16:50 2026 by rpki-client