$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa File: 85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa (raw, json) Hash identifier: X8I7dvuXdiDJV7Fh0bi1J8+JE55nhEw8eDmwuf0m0aA= Subject key identifier: D0:BF:0A:5F:82:31:8A:62:1F:5A:71:01:D7:93:D5:63:E5:08:8C:A6 Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Certificate serial: 010D0C9F4328584ECBD1E067AED0A8C60166F300 Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 16509 IP address blocks: 199.27.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e0:67:ae:d0:a8:c6:01:66:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=a64a75c0-b4b4-4f11-8ab7-666c1fcf7770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:4d:f7:70:9d:6a:c8:d6:bb:4b:de:5c:78: f0:3d:a0:e2:68:af:93:e8:ef:21:0d:9a:35:89:6b: be:b4:84:d7:2f:85:d8:94:81:ef:f7:e5:38:8f:dc: 51:72:be:2c:3c:bb:35:5a:7c:5f:ae:fd:c4:b5:f8: eb:01:c6:8c:ca:62:53:cd:e5:9d:49:2c:17:ff:c8: 47:07:7d:cb:c3:86:f5:63:93:b8:4c:94:6c:b3:75: 92:38:43:33:80:5a:07:d1:41:c0:af:c2:87:ae:5d: 97:ca:e1:a9:ea:03:2f:3b:21:59:a0:63:da:d0:9f: 31:2e:9f:60:03:3e:d8:85:ae:67:4d:0f:c9:6c:ba: cd:00:d4:44:35:fc:3e:97:de:39:96:f0:c8:7a:9d: cb:75:7b:20:d9:36:24:71:39:d0:00:84:30:ed:1f: 22:2a:d8:a9:46:d0:4e:bc:0e:ca:54:96:f4:57:81: 78:04:21:e0:2c:0b:62:06:bf:bc:a3:1d:09:86:4e: ac:35:bf:8d:09:f7:06:1e:ad:ca:cc:85:8f:9d:4b: 9c:71:44:9b:81:ce:32:01:2b:35:9d:8e:4d:7d:c1: 04:07:0c:ff:27:9d:2d:e6:e8:f8:a4:2e:21:d5:4e: e4:78:ee:db:2f:cf:71:fb:dc:dc:6f:02:54:87:32: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BF:0A:5F:82:31:8A:62:1F:5A:71:01:D7:93:D5:63:E5:08:8C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl X509v3 Authority Key Identifier: keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer sbgp-ipAddrBlock: critical IPv4: 199.27.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:db:34:ee:b2:07:57:9f:fa:42:8e:0f:7d:4e:55:71:b8:c8: 79:3c:04:b1:f3:dd:a7:0b:93:69:47:57:bd:09:19:f9:7b:52: 0b:b2:38:82:61:98:e0:6d:a7:e9:24:0b:e9:4d:1d:2e:cf:22: 31:c0:2f:89:de:e6:21:53:02:6d:3c:44:07:35:6a:69:4b:d2: 79:ac:ab:0d:af:83:a5:02:53:22:a2:af:8b:97:b4:1f:0c:6c: 08:a5:0f:66:59:f7:cd:8f:99:bb:24:85:e8:1a:8a:6a:e8:00: cd:ad:b1:af:f5:67:36:ac:b6:ab:86:c7:a5:16:30:3e:cf:56: fc:ae:60:da:b2:56:65:57:07:a9:44:73:58:bb:59:74:5e:3b: 25:45:75:8e:9a:50:74:c8:83:1b:10:98:2a:08:99:1f:dc:3f: 7b:67:77:77:d1:d9:1d:42:a0:2f:dc:39:a7:e2:c4:d4:3c:47: 27:be:ef:4b:c6:3f:24:c2:ea:7d:37:4c:f7:f7:7b:24:22:0f: f7:29:76:ad:71:d8:8c:53:3a:14:65:e5:4a:45:64:2e:d0:5e: 5a:94:5b:bc:87:23:22:47:89:b2:06:5a:2e:b0:73:0b:8a:74: 3d:24:58:f9:a6:19:2c:56:a3:cb:ab:f5:c5:cd:25:86:ed:84: b2:32:11:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eBnrtCoxgFm8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw YzM1MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YTY0YTc1YzAtYjRiNC00ZjExLThhYjctNjY2YzFmY2Y3NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhBN93CdasjWu0veXHjwPaDiaK+T6O8hDZo1 iWu+tITXL4XYlIHv9+U4j9xRcr4sPLs1Wnxfrv3EtfjrAcaMymJTzeWdSSwX/8hH B33Lw4b1Y5O4TJRss3WSOEMzgFoH0UHAr8KHrl2XyuGp6gMvOyFZoGPa0J8xLp9g Az7Yha5nTQ/JbLrNANRENfw+l945lvDIep3LdXsg2TYkcTnQAIQw7R8iKtipRtBO vA7KVJb0V4F4BCHgLAtiBr+8ox0Jhk6sNb+NCfcGHq3KzIWPnUuccUSbgc4yASs1 nY5NfcEEBwz/J50t5uj4pC4h1U7keO7bL89x+9zcbwJUhzK+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC/Cl+CMYpiH1pxAdeT1WPlCIymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5 YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvODViYWMwMWItZDQ0OS0z OGU0LWI5YzQtM2ViYmFiZGY5MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4 YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxtFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHbNO6yB1ef+kKOD31OVXG4yHk8BLHz3acLk2lHV70JGfl7UguyOIJh mOBtp+kkC+lNHS7PIjHAL4ne5iFTAm08RAc1amlL0nmsqw2vg6UCUyKir4uXtB8M bAilD2ZZ982PmbskhegaimroAM2tsa/1ZzastquGx6UWMD7PVvyuYNqyVmVXB6lE c1i7WXReOyVFdY6aUHTIgxsQmCoImR/cP3tnd3fR2R1CoC/cOafixNQ8Rye+70vG PyTC6n03TPf3eyQiD/cpdq1x2IxTOhRl5UpFZC7QXlqUW7yHIyJHibIGWi6wcwuK dD0kWPmmGSxWo8ur9cXNJYbthLIyERc= -----END CERTIFICATE-----Generated at Sun Sep 13 11:00:03 2026 by rpki-client