$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/4a3aa493-27dc-3af6-be42-c09cde7b35ec.roa File: 4a3aa493-27dc-3af6-be42-c09cde7b35ec.roa (raw, json) Hash identifier: zWl48RLZO9qN25wiHb9Q0xGxmNLGki56Sdi8alWIqNQ= Subject key identifier: B2:DD:0D:B0:B3:D8:91:77:32:96:FC:02:59:9C:1A:CC:2A:A2:18:2A Certificate issuer: /CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d Certificate serial: 010D0C9F4328584F4F0815FE09CD3B98B89A0C00 Authority key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/4a3aa493-27dc-3af6-be42-c09cde7b35ec.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 21529 IP address blocks: 199.195.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:15:fe:09:cd:3b:98:b8:9a:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=c9161ad8-03f1-4281-ab66-afd9c9b37c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:7f:fc:6a:50:16:f9:ec:ef:68:e9:62:d6: 1d:ac:42:ab:17:dc:22:eb:8f:58:38:e6:08:91:f2: 3f:91:33:72:4a:fd:1b:14:bc:a2:89:01:cb:2c:fa: 6c:72:7f:5f:d3:46:68:90:22:61:65:d5:cc:ee:7e: 69:49:db:20:24:b6:e5:94:ef:17:b1:96:84:e1:dd: ac:a7:50:00:93:a5:9c:6f:7d:3f:bf:c5:fb:59:a5: 1c:77:a0:e9:f7:9f:03:7d:ae:3f:73:67:f8:25:ae: d3:d4:87:c7:73:8f:29:5e:ed:70:98:4e:10:26:4e: 01:5c:f4:5e:63:47:05:b4:db:fa:b9:1e:ed:4c:b1: 71:ba:03:b6:d0:96:3a:d0:6e:55:57:38:2d:cc:2b: 5d:44:3e:ca:f4:86:32:c1:21:f3:17:2c:91:2e:99: 7d:ad:10:31:d4:d8:a5:62:0c:56:16:1d:ee:d5:3d: 34:86:d7:65:b4:4a:f8:27:fc:c4:1b:38:2a:08:8c: 5f:30:33:91:8c:b3:2a:5c:f6:ed:18:56:93:51:5a: 66:0e:06:3c:ed:72:29:ad:a2:6e:b0:d2:7e:97:11: 7a:c1:ba:48:12:34:3a:58:d4:ea:1e:aa:01:a2:cc: 5a:1a:e7:70:01:78:54:a3:57:38:f1:b1:b8:92:46: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:0D:B0:B3:D8:91:77:32:96:FC:02:59:9C:1A:CC:2A:A2:18:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/4a3aa493-27dc-3af6-be42-c09cde7b35ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl X509v3 Authority Key Identifier: keyid:38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer sbgp-ipAddrBlock: critical IPv4: 199.195.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:75:f9:2a:cf:78:86:14:35:30:77:83:0d:ae:7c:90:a6:c8: e5:e2:59:7e:65:e0:fd:6c:a6:05:dd:cf:6a:bd:cc:54:f5:74: cc:84:41:3e:8b:c3:be:8e:16:17:f8:80:32:d7:87:15:55:5c: 64:d0:89:e6:a2:b2:3b:d1:bd:f6:65:54:57:c2:9c:1a:6e:c4: 77:75:18:cb:c9:40:6f:60:d0:80:e6:d9:f8:b3:ad:5f:8d:71: 77:cc:45:98:dc:46:6f:43:74:b5:f6:85:95:9e:4f:65:16:62: 7d:f7:51:a6:45:85:17:b4:99:d9:b8:02:64:ba:23:7e:3e:15: 5a:e0:3b:64:a4:61:16:82:26:36:aa:0f:8c:d6:d5:5a:fd:ba: 85:0b:66:e5:8e:ce:a7:0d:1f:19:ae:35:90:82:56:6d:e2:de: b9:1f:95:01:70:ee:9e:9d:0b:2a:47:21:9c:4e:ad:11:d3:2d: 73:75:9f:98:a3:bc:39:2a:aa:39:f7:bb:d8:63:4d:e8:81:a1: 45:b6:87:7a:ea:7d:8a:af:91:57:ed:25:72:20:c9:2e:86:03: 32:4c:55:22:cd:e3:3d:39:2a:16:8b:bf:08:c8:f3:16:70:89: f8:98:c7:7f:49:69:5f:94:3c:0a:d7:af:8b:e6:4a:27:72:91: bb:85:55:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBX+Cc07mLiaDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkzNGZhMDUtZDdhMy00YjdkLWJlNWQtZGM4M2Q0YTcx OTlkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YzkxNjFhZDgtMDNmMS00MjgxLWFiNjYtYWZkOWM5YjM3YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdB//GpQFvns72jpYtYdrEKrF9wi649YOOYI kfI/kTNySv0bFLyiiQHLLPpscn9f00ZokCJhZdXM7n5pSdsgJLbllO8XsZaE4d2s p1AAk6Wcb30/v8X7WaUcd6Dp958Dfa4/c2f4Ja7T1IfHc48pXu1wmE4QJk4BXPRe Y0cFtNv6uR7tTLFxugO20JY60G5VVzgtzCtdRD7K9IYywSHzFyyRLpl9rRAx1Nil YgxWFh3u1T00htdltEr4J/zEGzgqCIxfMDORjLMqXPbtGFaTUVpmDgY87XIpraJu sNJ+lxF6wbpIEjQ6WNTqHqoBosxaGudwAXhUo1c48bG4kkYdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLdDbCz2JF3Mpb8AlmcGswqohgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTM0 ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRhNzE5OWQvNGEzYWE0OTMtMjdkYy0z YWY2LWJlNDItYzA5Y2RlN2IzNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkzNGZhMDUtZDdhMy00YjdkLWJl NWQtZGM4M2Q0YTcxOTlkLzE5MzRmYTA1LWQ3YTMtNGI3ZC1iZTVkLWRjODNkNGE3 MTk5ZC5jcmwwHwYDVR0jBBgwFoAUOIuVNSytrzzuaOApRYYPJ0jQ1MEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xOTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgz ZDRhNzE5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8OOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl1+SrPeIYUNTB3gw2ufJCmyOXiWX5l4P1spgXdz2q9zFT1dMyEQT6L w76OFhf4gDLXhxVVXGTQieaisjvRvfZlVFfCnBpuxHd1GMvJQG9g0IDm2fizrV+N cXfMRZjcRm9DdLX2hZWeT2UWYn33UaZFhRe0mdm4AmS6I34+FVrgO2SkYRaCJjaq D4zW1Vr9uoULZuWOzqcNHxmuNZCCVm3i3rkflQFw7p6dCypHIZxOrRHTLXN1n5ij vDkqqjn3u9hjTeiBoUW2h3rqfYqvkVftJXIgyS6GAzJMVSLN4z05KhaLvwjI8xZw ifiYx39JaV+UPArXr4vmSidykbuFVXg= -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:05 2026 by rpki-client