$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/fbe15361-db4e-38d6-a484-4d2c610a55e5.roa File: fbe15361-db4e-38d6-a484-4d2c610a55e5.roa (raw, json) Hash identifier: t2HL+eWxqRYF1z/GMTtX6oUVnoQCrg/w1yqysdOyJ7A= Subject key identifier: C9:EC:20:A1:56:FA:33:C5:C7:B1:EE:D3:5A:BF:8C:82:CD:41:2C:23 Certificate issuer: /CN=414cb704-0d20-4248-bc5a-2b33ce66329d Certificate serial: 010D0C9F4328584F03A76E5608F87C876D62F980 Authority key identifier: 05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/fbe15361-db4e-38d6-a484-4d2c610a55e5.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 32181 IP address blocks: 199.85.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:6e:56:08:f8:7c:87:6d:62:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414cb704-0d20-4248-bc5a-2b33ce66329d Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=6570602b-38c4-4614-9294-9b2a55257b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:97:e3:cd:e1:48:8a:b1:b7:72:e3:28:74: b1:07:44:4a:d2:71:e3:d3:6c:a7:1a:e5:ed:3e:e0: 92:84:02:cd:4d:c5:88:c1:b5:c5:d6:57:9a:33:83: 93:74:63:a1:a3:f5:2d:1e:64:b7:75:02:a3:04:aa: 54:6f:89:9d:d3:19:c5:b0:a3:ce:d6:c5:bf:88:f5: 19:99:9d:a3:6f:f8:27:6c:58:fa:c4:b4:aa:ce:2f: b5:84:14:d8:ce:18:ed:d5:6d:e8:81:a1:3c:b1:96: 3a:0c:57:92:01:0b:8c:1c:3c:61:c5:d0:e0:06:43: fe:ec:3b:06:a6:0c:76:f2:92:42:31:36:dc:08:1b: 97:38:1c:0f:9f:08:7e:26:48:c7:96:8e:6a:1e:3e: d8:52:5f:7f:4a:d7:f8:b1:fc:9b:be:c4:dc:ba:43: 7c:2a:09:17:21:83:da:15:ea:f1:82:37:7f:b2:23: 9b:6b:45:52:44:5e:9e:d6:03:f3:35:dc:e9:ea:62: b0:6f:78:d1:50:61:35:9d:fc:94:6b:33:f8:35:47: 4f:2c:98:b8:1d:8a:84:d8:8c:a1:99:f0:eb:74:be: 92:7f:dc:91:e0:60:af:ef:9d:cf:27:d4:d4:fe:9d: 38:c4:52:8e:71:f4:3c:f8:7f:fb:07:a8:5f:32:d5: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EC:20:A1:56:FA:33:C5:C7:B1:EE:D3:5A:BF:8C:82:CD:41:2C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/fbe15361-db4e-38d6-a484-4d2c610a55e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl X509v3 Authority Key Identifier: keyid:05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer sbgp-ipAddrBlock: critical IPv4: 199.85.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d5:f2:b1:3b:f9:ca:0f:ac:3f:02:a9:c6:7f:f1:38:63:c0: 81:2d:af:2c:64:31:4e:fb:a8:ca:96:40:0c:7e:44:19:46:ab: fc:5e:a2:b2:d1:cd:a2:79:0a:8c:04:74:f3:27:ee:11:1b:4c: b0:b3:94:bc:63:a0:c3:f7:64:58:48:10:2a:c4:db:40:5c:fa: 21:df:86:43:96:81:3c:cf:86:b2:d9:f5:63:2a:d3:db:92:53: 03:95:12:14:da:09:d3:19:50:6e:77:86:f7:ee:f3:c6:0a:62: 26:cc:4f:0d:9d:9a:00:f1:d8:30:89:35:e2:05:48:4f:9f:fd: e7:f7:f8:0f:4d:ec:ed:c7:ee:7c:6b:90:e6:ef:6d:81:05:e4: 01:e2:5c:c3:d0:bb:0f:6d:a5:36:aa:58:45:5e:df:cd:97:57: b7:0e:96:0b:86:c1:49:8d:5d:f7:2c:4f:8d:e2:dc:c8:d0:15: 59:d3:51:ea:9c:05:fd:4d:72:10:54:1f:47:70:6b:3c:7a:76: 36:8e:85:71:0b:eb:cc:cf:ae:b3:03:9e:8e:26:e9:06:2d:9f: 2c:02:d8:fa:10:e6:c6:96:5f:41:98:d8:d2:0d:c7:f6:39:42: 40:4f:fd:e1:e5:c1:53:d6:be:d4:ca:eb:1c:f3:cf:70:c4:95: bb:5e:27:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp25WCPh8h21i+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE0Y2I3MDQtMGQyMC00MjQ4LWJjNWEtMmIzM2NlNjYz MjlkMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NjU3MDYwMmItMzhjNC00NjE0LTkyOTQtOWIyYTU1MjU3YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8eX483hSIqxt3LjKHSxB0RK0nHj02ynGuXt PuCShALNTcWIwbXF1leaM4OTdGOho/UtHmS3dQKjBKpUb4md0xnFsKPO1sW/iPUZ mZ2jb/gnbFj6xLSqzi+1hBTYzhjt1W3ogaE8sZY6DFeSAQuMHDxhxdDgBkP+7DsG pgx28pJCMTbcCBuXOBwPnwh+JkjHlo5qHj7YUl9/Stf4sfybvsTcukN8KgkXIYPa Ferxgjd/siOba0VSRF6e1gPzNdzp6mKwb3jRUGE1nfyUazP4NUdPLJi4HYqE2Iyh mfDrdL6Sf9yR4GCv753PJ9TU/p04xFKOcfQ8+H/7B6hfMtVtaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnsIKFW+jPFx7Hu01q/jILNQSwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRj YjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMzY2U2NjMyOWQvZmJlMTUzNjEtZGI0ZS0z OGQ2LWE0ODQtNGQyYzYxMGE1NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDE0Y2I3MDQtMGQyMC00MjQ4LWJj NWEtMmIzM2NlNjYzMjlkLzQxNGNiNzA0LTBkMjAtNDI0OC1iYzVhLTJiMzNjZTY2 MzI5ZC5jcmwwHwYDVR0jBBgwFoAUBdOyDgF3s/B2D2BTpVVwfmhwL0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRjYjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMz Y2U2NjMyOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTV8rE7+coPrD8CqcZ/8ThjwIEtryxkMU77qMqWQAx+RBlGq/xeorLR zaJ5CowEdPMn7hEbTLCzlLxjoMP3ZFhIECrE20Bc+iHfhkOWgTzPhrLZ9WMq09uS UwOVEhTaCdMZUG53hvfu88YKYibMTw2dmgDx2DCJNeIFSE+f/ef3+A9N7O3H7nxr kObvbYEF5AHiXMPQuw9tpTaqWEVe382XV7cOlguGwUmNXfcsT43i3MjQFVnTUeqc Bf1NchBUH0dwazx6djaOhXEL68zPrrMDno4m6QYtnywC2PoQ5saWX0GY2NINx/Y5 QkBP/eHlwVPWvtTK6xzzz3DElbteJ/I= -----END CERTIFICATE-----Generated at Thu Sep 10 10:11:01 2026 by rpki-client