$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa File: 09ddca0c-00ea-3e20-b685-50e6b951950b.roa (raw, json) Hash identifier: HsIRab70lLBNDqS7qqXhjTd87MgoAO8MTFO+X2rM3YI= Subject key identifier: 3D:9E:F2:C3:E7:A7:D4:86:C0:9D:22:88:8C:72:52:D8:6F:7A:48:DD Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584F03A78F513C5999E996A40680 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:8f:51:3c:59:99:e9:96:a4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=a6cc5b7a-5832-474f-961f-e56bab9c714b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:36:d9:f4:1c:f0:8d:2b:66:3a:0b:ca:75: 5c:6c:4e:21:6f:26:01:c7:0f:af:af:43:c8:c6:b7: 95:3a:05:0b:ec:1d:82:5f:0b:64:f6:73:49:61:e1: 48:31:a3:85:12:71:d9:aa:53:33:23:bf:f0:25:e5: 2d:02:51:64:b1:57:38:07:93:2d:c8:39:f2:ec:5b: 18:1d:98:f6:3c:1a:13:a1:63:57:a3:64:6d:ef:52: d4:f8:af:06:50:d2:9f:e4:26:8b:9a:b2:22:e7:7f: 21:3e:d2:04:1b:a4:e6:e1:f9:dc:44:fc:c5:84:36: b7:3c:56:d6:0f:0d:fc:e0:69:a2:d4:88:11:53:37: ac:a8:f3:d5:bd:b0:d6:57:ca:2e:29:c1:36:7b:da: db:38:f7:3d:18:eb:4a:97:33:90:57:a9:da:cb:19: 45:ea:77:ff:8d:5f:04:b8:09:0e:d0:8d:2d:34:9f: 60:c5:fb:3f:02:86:8a:b5:c7:f2:1d:e2:c1:ad:5f: 4e:40:8e:2e:72:95:2e:8d:55:4e:c0:f8:83:a3:84: e7:28:52:8b:21:f3:9f:72:f3:ce:5a:a7:d5:d2:d2: f0:b5:b6:59:ec:55:0a:b4:af:76:da:e5:bc:c5:d2: eb:fd:2a:25:2c:14:55:fd:02:97:14:c5:7a:33:6b: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:F2:C3:E7:A7:D4:86:C0:9D:22:88:8C:72:52:D8:6F:7A:48:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:75:39:fb:ed:7f:d1:b7:71:8d:81:dd:ef:6b:8f:98:bd:34: 93:c3:7a:fa:39:0c:25:a1:0a:5c:e1:45:69:fd:23:71:9f:35: c6:ff:ac:8b:43:47:c6:0d:25:77:ff:c3:7b:30:99:71:4b:d0: 7f:46:6d:53:05:b2:ba:a7:81:65:94:93:2d:74:b2:46:aa:82: 98:89:15:10:3c:e0:5e:28:c9:9a:b4:62:84:9c:cc:bb:4c:9a: f7:65:ec:34:07:23:50:47:2f:a5:1a:8c:ad:7d:b9:eb:de:37: d7:93:90:a2:2a:51:88:3b:ee:bd:02:ed:be:10:60:4c:58:7e: a9:e4:d7:b5:bd:37:af:25:04:b2:7a:b8:d4:d6:fa:d0:05:a9: 07:e4:58:16:26:8a:c6:e9:81:77:8e:57:b2:9a:cf:0a:8c:33: b6:f4:3e:29:36:a2:a4:9f:61:c2:f5:09:40:16:b3:06:da:fe: 3f:e9:46:49:42:d5:16:cc:44:09:71:78:51:3a:33:a5:fc:55: 66:e3:a3:d6:be:be:f9:05:cb:33:86:23:52:d9:c5:33:78:a2: ec:14:b5:bc:09:02:f4:8c:a9:fc:d9:ee:9b:a8:41:82:3f:47: ee:9d:d2:bd:5c:94:70:b0:e2:80:94:24:5e:9c:58:b5:df:66: 91:00:6e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp49RPFmZ6ZakBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YTZjYzViN2EtNTgzMi00NzRmLTk2MWYtZTU2YmFiOWM3MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgck22fQc8I0rZjoLynVcbE4hbyYBxw+vr0PI xreVOgUL7B2CXwtk9nNJYeFIMaOFEnHZqlMzI7/wJeUtAlFksVc4B5MtyDny7FsY HZj2PBoToWNXo2Rt71LU+K8GUNKf5CaLmrIi538hPtIEG6Tm4fncRPzFhDa3PFbW Dw384Gmi1IgRUzesqPPVvbDWV8ouKcE2e9rbOPc9GOtKlzOQV6nayxlF6nf/jV8E uAkO0I0tNJ9gxfs/AoaKtcfyHeLBrV9OQI4ucpUujVVOwPiDo4TnKFKLIfOfcvPO WqfV0tLwtbZZ7FUKtK922uW8xdLr/SolLBRV/QKXFMV6M2vHWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2e8sPnp9SGwJ0iiIxyUthvekjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMDlkZGNhMGMtMDBlYS0z ZTIwLWI2ODUtNTBlNmI5NTE5NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ1Ofvtf9G3cY2B3e9rj5i9NJPDevo5DCWhClzhRWn9I3GfNcb/rItD R8YNJXf/w3swmXFL0H9GbVMFsrqngWWUky10skaqgpiJFRA84F4oyZq0YoSczLtM mvdl7DQHI1BHL6UajK19ueveN9eTkKIqUYg77r0C7b4QYExYfqnk17W9N68lBLJ6 uNTW+tAFqQfkWBYmisbpgXeOV7KazwqMM7b0Pik2oqSfYcL1CUAWswba/j/pRklC 1RbMRAlxeFE6M6X8VWbjo9a+vvkFyzOGI1LZxTN4ouwUtbwJAvSMqfzZ7puoQYI/ R+6d0r1clHCw4oCUJF6cWLXfZpEAbt0= -----END CERTIFICATE-----Generated at Wed Sep 9 00:50:21 2026 by rpki-client