$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/22d189e1-e45c-36f8-8326-43556d89f1b5.roa File: 22d189e1-e45c-36f8-8326-43556d89f1b5.roa (raw, json) Hash identifier: cZTssrTK7KJ1IWSG7n9F6/MAawH87O1O2P7eOlLkmAQ= Subject key identifier: 5B:44:1A:46:4A:64:97:6F:A2:54:4A:F7:D8:E7:7C:5A:87:63:20:8A Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df Certificate serial: 010D0C9F4328584F9623CECC0540B083A4936CE0 Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/22d189e1-e45c-36f8-8326-43556d89f1b5.roa Signing time: Thu 22 Oct 2026 12:18:51 +0000 ROA not before: Thu 22 Oct 2026 12:18:51 +0000 ROA not after: Wed 20 Jan 2027 13:18:51 +0000 asID: 402429 IP address blocks: 199.127.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:23:ce:cc:05:40:b0:83:a4:93:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df Validity Not Before: Oct 22 12:18:51 2026 GMT Not After : Jan 20 13:18:51 2027 GMT Subject: CN=c8d3b5b3-39e6-40f5-8aab-5d236f425ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:65:4d:43:ca:81:17:fd:90:3b:de:f7:73: 20:f0:a4:2c:6f:d0:ab:d9:15:67:a2:18:ad:ee:8e: 25:36:68:6c:df:90:d2:df:4a:c3:a5:9f:6f:63:69: 59:7f:a7:36:46:86:01:2a:c9:ce:06:80:50:8d:f9: 5a:05:1e:ea:c3:35:d6:d0:ef:b3:5d:4b:15:eb:06: 46:3d:49:36:03:06:f2:95:bb:02:f4:da:ac:65:b5: d4:f2:7a:bf:d7:ee:c4:59:1d:7e:3f:40:ff:b9:5a: bd:81:5a:9e:4e:0e:51:3c:88:5e:1f:bd:b9:fe:46: 2e:97:e6:12:da:aa:25:01:46:41:40:c5:82:6a:77: 4a:f4:b8:6c:7e:62:75:1c:af:72:68:07:fc:04:76: fb:05:a6:eb:22:c6:04:55:36:f8:5b:19:ee:89:ac: f1:d5:3c:e6:ed:26:25:01:7e:d1:38:e7:39:1e:fe: ef:18:7b:2f:77:9b:b7:2b:ec:5b:c9:25:cf:e7:42: 3b:a0:2a:d2:42:3c:f3:dc:dd:b0:02:58:1b:d1:85: 54:84:03:52:0c:47:55:1a:f4:08:03:5e:d9:25:e3: 8c:8f:28:41:63:27:6f:88:dd:d9:61:eb:d9:ea:4c: 11:38:da:ed:97:3e:8a:b2:c4:f0:ec:89:33:8e:85: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:44:1A:46:4A:64:97:6F:A2:54:4A:F7:D8:E7:7C:5A:87:63:20:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/22d189e1-e45c-36f8-8326-43556d89f1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl X509v3 Authority Key Identifier: keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer sbgp-ipAddrBlock: critical IPv4: 199.127.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ab:fc:7c:6a:cd:20:d1:45:0f:8c:17:03:72:ae:0d:89:29: 8c:b6:5b:22:18:64:ba:7a:3c:a9:40:97:51:07:1a:7d:3e:6b: c6:96:c3:18:a8:79:7b:ce:f8:7e:4c:25:fb:5d:e8:73:10:55: 8a:d2:91:fa:6f:74:1a:b4:84:29:45:23:b3:1c:5e:78:92:0b: 74:a9:ac:57:f9:5b:73:c4:93:d3:9c:a0:b3:06:1f:17:7a:c6: 47:54:1d:a9:7d:77:a6:7d:56:ae:30:49:80:f2:f9:e1:05:53: c0:91:15:48:4e:b5:52:1a:c1:6e:d5:f9:b1:fc:da:3e:7e:ff: db:22:c6:ba:bd:2c:d5:7c:06:2b:65:3f:62:e0:41:4e:d5:c7: 29:52:7a:b3:3d:6f:79:41:2f:45:5a:25:6f:cf:15:8c:0f:a6: 50:0f:e7:15:00:96:3c:a0:3d:19:7c:83:82:bf:a4:ac:bb:3b: 5b:7a:c3:e0:3b:3f:b7:3a:9f:a2:a6:8d:29:a5:2b:db:f0:8b: fd:7e:74:4b:4c:a7:9c:f4:d7:bd:9d:9e:c4:b2:eb:19:65:6b: c3:06:bb:4a:26:31:4c:c7:fe:7b:86:65:81:d3:b8:97:ca:46: 2f:4b:c1:b5:e2:95:f0:d8:7d:b4:f9:52:66:96:45:7a:55:c5: 02:4d:1e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WI87MBUCwg6STbOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4 OGRmMB4XDTI2MTAyMjEyMTg1MVoXDTI3MDEyMDEzMTg1MVowLzEtMCsGA1UEAxMk YzhkM2I1YjMtMzllNi00MGY1LThhYWItNWQyMzZmNDI1YWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUFlTUPKgRf9kDve93Mg8KQsb9Cr2RVnohit 7o4lNmhs35DS30rDpZ9vY2lZf6c2RoYBKsnOBoBQjflaBR7qwzXW0O+zXUsV6wZG PUk2AwbylbsC9NqsZbXU8nq/1+7EWR1+P0D/uVq9gVqeTg5RPIheH725/kYul+YS 2qolAUZBQMWCandK9LhsfmJ1HK9yaAf8BHb7BabrIsYEVTb4Wxnuiazx1Tzm7SYl AX7ROOc5Hv7vGHsvd5u3K+xbySXP50I7oCrSQjzz3N2wAlgb0YVUhANSDEdVGvQI A17ZJeOMjyhBYydviN3ZYevZ6kwRONrtlz6KssTw7IkzjoWmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtEGkZKZJdvolRK99jnfFqHYyCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5 NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvMjJkMTg5ZTEtZTQ1Yy0z NmY4LTgzMjYtNDM1NTZkODlmMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4 OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2 YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqr/HxqzSDRRQ+MFwNyrg2JKYy2WyIYZLp6PKlAl1EHGn0+a8aWwxio eXvO+H5MJftd6HMQVYrSkfpvdBq0hClFI7McXniSC3SprFf5W3PEk9OcoLMGHxd6 xkdUHal9d6Z9Vq4wSYDy+eEFU8CRFUhOtVIawW7V+bH82j5+/9sixrq9LNV8Bitl P2LgQU7VxylSerM9b3lBL0VaJW/PFYwPplAP5xUAljygPRl8g4K/pKy7O1t6w+A7 P7c6n6KmjSmlK9vwi/1+dEtMp5z0172dnsSy6xlla8MGu0omMUzH/nuGZYHTuJfK Ri9LwbXilfDYfbT5UmaWRXpVxQJNHhA= -----END CERTIFICATE-----Generated at Wed Oct 28 03:13:07 2026 by rpki-client