$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa File: 1bb5e9fb-e064-3b69-9c68-01484d39d937.roa (raw, json) Hash identifier: aUkdx1QYYDSkH8OLJir12phntTbZucNOubqaWIeKreM= Subject key identifier: FB:1B:AD:2A:90:F4:4D:1F:E3:31:3D:3A:43:61:3D:F4:49:79:8F:E6 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584F8B0DA87B9C197A63C1F28C80 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa Signing time: Sun 18 Oct 2026 13:00:12 +0000 ROA not before: Sun 18 Oct 2026 13:00:12 +0000 ROA not after: Sat 16 Jan 2027 14:00:12 +0000 asID: 834 IP address blocks: 199.101.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:0d:a8:7b:9c:19:7a:63:c1:f2:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Oct 18 13:00:12 2026 GMT Not After : Jan 16 14:00:12 2027 GMT Subject: CN=e487e3ee-19b0-4669-8619-67394a59451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:59:2a:e9:d5:30:15:0b:f8:a9:10:ed:c4: 62:a1:e6:21:0a:6a:cf:ad:e0:7c:5c:02:ab:6b:f3: 25:ab:25:fb:42:82:1a:43:c4:7c:5d:e3:34:97:19: e1:f5:50:c5:54:23:53:57:37:37:34:71:80:0f:fb: 15:13:f9:e9:b1:b4:45:6b:cb:14:9e:d8:40:cf:cb: 99:47:a3:52:11:5e:9e:6e:df:cf:ca:28:fd:86:fd: 14:93:f7:cd:f3:81:15:01:1f:bb:f6:ff:1f:ef:54: fc:b2:ae:ca:c4:92:f1:fd:c1:02:ce:ce:5c:21:db: 8a:d7:46:3f:46:82:0e:51:46:c2:3b:05:cd:71:38: 40:51:ee:73:1d:ce:a9:f3:bf:bc:cf:a0:3c:1e:08: e6:11:b6:dd:2c:7f:e0:de:8e:54:23:0c:33:14:bf: 3f:dd:0c:55:19:c5:93:85:17:72:fc:1a:59:29:e4: 92:a3:77:2a:3c:54:d9:19:ac:f2:ad:75:1f:1d:f1: 88:6b:1d:c8:f7:a1:56:2e:f4:26:3e:5a:16:b8:3a: c1:a6:e6:48:55:a8:26:46:72:e4:75:54:f8:79:41: da:6d:fc:9a:e7:19:e5:66:99:eb:7d:e7:7a:12:d8: 19:52:a5:fe:52:43:4c:20:f5:fe:02:c0:be:31:2b: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:AD:2A:90:F4:4D:1F:E3:31:3D:3A:43:61:3D:F4:49:79:8F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ac:e3:cd:48:63:ec:73:e8:21:25:c2:39:a9:fb:18:48:c6: d1:ea:52:ba:09:42:9a:a5:da:0f:76:e3:08:9a:3d:12:b4:20: 6a:4b:5a:f5:03:fa:15:9a:5d:98:8b:8d:f5:d8:96:51:c0:c4: ad:8c:62:c6:97:1f:18:07:94:a9:20:c0:40:31:1e:4b:eb:97: 99:02:b3:a8:74:b9:90:fd:a6:56:77:05:65:a9:f5:ab:31:93: 87:35:5b:91:47:ac:be:aa:88:a1:0e:74:7c:3e:8c:1c:f0:94: 24:35:28:52:b2:4c:47:2d:83:0b:88:63:8b:95:20:2e:34:1b: b0:d4:7c:39:8e:ff:61:d5:0f:72:e7:b6:54:f0:ea:55:2b:17: 8e:e1:13:ea:aa:54:7a:69:07:67:ce:7a:a9:39:bd:b0:dd:8c: 98:4d:d4:fb:66:df:8f:63:e1:43:29:b1:cb:91:96:c0:cd:c4: aa:5d:fc:35:10:ad:6f:ed:af:d2:76:cc:bf:5a:7b:d6:13:07: c2:d2:05:52:25:0f:6e:14:e7:88:b3:e1:74:d5:3c:bb:8f:93: 24:83:67:36:0b:43:e4:85:28:85:37:78:28:cc:77:3b:90:56: bb:15:93:08:4b:66:8e:a8:41:70:e9:3c:27:20:cf:47:4e:46: c6:9b:36:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+LDah7nBl6Y8HyjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTQ4N2UzZWUtMTliMC00NjY5LTg2MTktNjczOTRhNTk0NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlJZKunVMBUL+KkQ7cRioeYhCmrPreB8XAKr a/MlqyX7QoIaQ8R8XeM0lxnh9VDFVCNTVzc3NHGAD/sVE/npsbRFa8sUnthAz8uZ R6NSEV6ebt/Pyij9hv0Uk/fN84EVAR+79v8f71T8sq7KxJLx/cECzs5cIduK10Y/ RoIOUUbCOwXNcThAUe5zHc6p87+8z6A8HgjmEbbdLH/g3o5UIwwzFL8/3QxVGcWT hRdy/BpZKeSSo3cqPFTZGazyrXUfHfGIax3I96FWLvQmPloWuDrBpuZIVagmRnLk dVT4eUHabfya5xnlZpnrfed6EtgZUqX+UkNMIPX+AsC+MSv6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsbrSqQ9E0f4zE9OkNhPfRJeY/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMWJiNWU5ZmItZTA2NC0z YjY5LTljNjgtMDE0ODRkMzlkOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqs481IY+xz6CElwjmp+xhIxtHqUroJQpql2g924wiaPRK0IGpLWvUD +hWaXZiLjfXYllHAxK2MYsaXHxgHlKkgwEAxHkvrl5kCs6h0uZD9plZ3BWWp9asx k4c1W5FHrL6qiKEOdHw+jBzwlCQ1KFKyTEctgwuIY4uVIC40G7DUfDmO/2HVD3Ln tlTw6lUrF47hE+qqVHppB2fOeqk5vbDdjJhN1Ptm349j4UMpscuRlsDNxKpd/DUQ rW/tr9J2zL9ae9YTB8LSBVIlD24U54iz4XTVPLuPkySDZzYLQ+SFKIU3eCjMdzuQ VrsVkwhLZo6oQXDpPCcgz0dORsabNik= -----END CERTIFICATE-----Generated at Sun Oct 18 17:45:06 2026 by rpki-client