$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa File: d92df1bc-9773-35dd-bdd7-aadba8945c62.roa (raw, json) Hash identifier: L7ZbTCZebrQz3G5zy2nqFYTBHUaT2X/f0jXmatBpG5Q= Subject key identifier: 51:19:CF:0C:20:98:3C:F5:07:64:61:01:65:47:DB:B3:5C:8E:27:29 Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Certificate serial: 010D0C9F4328584F8F3DCDC4F80B3F6650CC4240 Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16509 IP address blocks: 67.199.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:cd:c4:f8:0b:3f:66:50:cc:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=41f5a51d-3057-45eb-9d11-075db642e99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:5a:fc:15:cf:ac:c2:3e:37:3a:fe:8f:6b: 54:f1:24:ae:dd:37:13:3a:4e:c9:86:f7:ea:ac:79: 83:d3:44:f4:21:04:ca:8a:e5:45:62:da:5b:5a:1e: 43:1b:07:09:11:53:45:45:09:e4:e9:9f:3b:8e:89: f4:18:64:63:33:ed:10:af:c3:7d:3c:bd:5c:e0:08: e5:67:f3:33:c0:9c:ed:12:1b:97:9a:57:9a:b4:ce: 90:60:af:01:7a:fb:0c:b6:3f:e1:d3:3c:42:c9:1b: d5:2e:d0:46:8d:17:a6:a5:41:0c:39:a2:75:7f:8f: 41:cb:ec:be:97:6e:20:3a:63:20:ff:81:c7:3c:bd: 60:a4:f5:56:f6:73:e5:03:96:87:7a:e5:6d:53:4e: 0a:13:5e:f7:0f:99:09:39:2f:14:b6:a9:d1:8c:51: 98:66:42:10:ee:99:8f:14:2c:ed:de:34:f8:cd:a1: 64:ff:72:3c:80:f1:0a:03:6b:87:a7:82:fd:64:f2: 3c:59:12:a5:83:ce:e6:a1:1c:65:a6:c0:e3:9d:a1: 70:55:18:dd:f9:25:a7:20:bc:d4:31:a8:3f:70:40: 1a:1d:12:4d:c4:89:de:31:da:c1:10:77:e7:18:1d: b6:17:4b:d0:06:44:b2:cf:ae:fa:db:59:59:38:f0: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:CF:0C:20:98:3C:F5:07:64:61:01:65:47:DB:B3:5C:8E:27:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl X509v3 Authority Key Identifier: keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer sbgp-ipAddrBlock: critical IPv4: 67.199.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b8:be:be:b4:98:58:af:d2:dd:a3:d2:86:9f:09:be:e2:99: ee:04:99:59:e6:63:9b:34:0b:2e:f0:44:59:fe:39:b3:0b:35: b7:e6:62:e7:3d:e0:b0:55:ee:12:35:a1:e0:e1:a6:8e:50:fc: a5:82:19:3f:94:28:4b:94:68:e1:52:b1:fd:c2:d5:8a:4f:e4: eb:65:ff:00:05:ed:d6:8f:59:fe:f9:21:a5:53:0e:74:29:f6: 1d:41:c4:20:23:4b:bb:91:20:94:c8:ab:14:cd:1d:75:ee:7d: 0c:51:a2:4a:16:ad:0b:0b:63:bb:c3:2e:34:00:83:8c:f1:c7: 13:c5:38:ed:82:d3:ba:08:a8:a2:f6:1d:ea:a2:6e:47:70:9d: 89:c5:d3:77:e9:9b:f0:35:f3:c6:cd:38:0c:b4:33:20:ca:3c: 22:84:41:13:d9:48:b6:14:5a:8a:4e:d7:2e:57:b4:7a:e2:a7: 04:50:fb:53:ab:62:d2:83:ad:7e:82:d1:54:23:7b:42:3a:9b: 83:3d:a6:05:41:44:a8:20:8d:01:1a:40:96:3b:59:3b:20:0a: 33:81:ae:ca:d5:9f:c5:29:81:e3:32:6e:aa:0a:60:bf:0b:da: 62:d1:80:26:45:18:6c:01:43:59:9a:b6:18:fc:33:27:51:a3: 46:d6:6c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPc3E+As/ZlDMQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw YzM1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NDFmNWE1MWQtMzA1Ny00NWViLTlkMTEtMDc1ZGI2NDJlOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX9a/BXPrMI+Nzr+j2tU8SSu3TcTOk7Jhvfq rHmD00T0IQTKiuVFYtpbWh5DGwcJEVNFRQnk6Z87jon0GGRjM+0Qr8N9PL1c4Ajl Z/MzwJztEhuXmleatM6QYK8BevsMtj/h0zxCyRvVLtBGjRempUEMOaJ1f49By+y+ l24gOmMg/4HHPL1gpPVW9nPlA5aHeuVtU04KE173D5kJOS8UtqnRjFGYZkIQ7pmP FCzt3jT4zaFk/3I8gPEKA2uHp4L9ZPI8WRKlg87moRxlpsDjnaFwVRjd+SWnILzU Mag/cEAaHRJNxIneMdrBEHfnGB22F0vQBkSyz67621lZOPDXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEZzwwgmDz1B2RhAWVH27NcjicpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5 YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvZDkyZGYxYmMtOTc3My0z NWRkLWJkZDctYWFkYmE4OTQ1YzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4 YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8f5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa4vr60mFiv0t2j0oafCb7ime4EmVnmY5s0Cy7wRFn+ObMLNbfmYuc9 4LBV7hI1oeDhpo5Q/KWCGT+UKEuUaOFSsf3C1YpP5Otl/wAF7daPWf75IaVTDnQp 9h1BxCAjS7uRIJTIqxTNHXXufQxRokoWrQsLY7vDLjQAg4zxxxPFOO2C07oIqKL2 HeqibkdwnYnF03fpm/A188bNOAy0MyDKPCKEQRPZSLYUWopO1y5XtHripwRQ+1Or YtKDrX6C0VQje0I6m4M9pgVBRKggjQEaQJY7WTsgCjOBrsrVn8UpgeMybqoKYL8L 2mLRgCZFGGwBQ1mathj8MydRo0bWbNE= -----END CERTIFICATE-----Generated at Sun Nov 1 17:37:43 2026 by rpki-client