$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa File: 526e36cc-a981-3c59-acbd-26bbb5e64f70.roa (raw, json) Hash identifier: oVNfguDsvlf7up2yNoJhVLhXL1Gq9B2qIKl82QQmYJQ= Subject key identifier: 18:12:A5:E9:02:67:02:CD:FD:F3:5B:47:0D:42:0C:C5:D3:F5:4E:84 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F498B693441EA2F0535F9C100 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399110 IP address blocks: 199.58.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:69:34:41:ea:2f:05:35:f9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67de663f-1804-42b0-8e1e-f846ae5b98a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:ab:f9:b2:e6:52:8b:5f:84:4f:9b:8b:0f: ab:d4:c6:8a:d1:02:c1:ec:6e:e8:ce:bf:0d:68:f7: 11:d8:77:fb:6c:5c:0e:a5:da:59:8d:62:f8:a4:7c: d9:14:6e:39:ae:81:4e:93:76:4a:43:c4:6a:17:22: 96:2b:b5:6a:b1:86:1d:9a:12:40:a0:c5:a3:a2:0d: 0b:c1:99:78:89:6e:0b:ab:ce:be:92:94:5e:64:f0: fe:62:b9:27:a1:6d:bc:e8:21:0f:07:d6:1e:b4:c8: 18:b7:46:60:dd:e5:4d:3c:6b:0c:ab:e7:02:9b:f2: 2f:1e:82:5a:07:4d:f2:a0:63:a5:37:39:32:b7:f3: 6a:32:2e:ec:4a:ae:cb:4d:c8:4e:2f:5c:fa:1f:a5: f3:62:72:83:50:9e:ff:9c:a8:16:80:e6:65:07:89: 5c:c0:c7:18:54:e7:f0:45:e4:da:33:41:92:a1:09: 1c:3b:c7:eb:7c:8d:39:af:cf:bf:00:f5:d4:11:bd: a4:0c:77:92:68:17:79:66:70:b3:ad:21:ff:32:4f: 52:3a:4a:a8:c0:d0:c2:c2:d3:86:c3:8d:e8:bf:66: 99:63:ec:3b:2f:fe:06:05:c7:74:2d:2e:9a:e4:83: 14:8f:83:4c:5f:cc:fe:38:c8:0d:00:11:6c:7f:0b: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:12:A5:E9:02:67:02:CD:FD:F3:5B:47:0D:42:0C:C5:D3:F5:4E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e9:90:ce:1c:26:b7:e0:f6:b2:da:2f:aa:52:7c:4c:1a:c2: aa:0c:2d:da:de:db:12:fa:73:2c:3c:2e:1a:6a:92:51:8f:e4: f0:5f:d9:b6:ca:d3:9d:72:0d:bd:6e:b7:00:a0:da:17:80:a9: 13:73:5a:d0:84:f2:40:36:5c:3b:9c:8d:f8:b6:ee:33:c2:a1: 60:e6:98:89:de:5d:13:83:2d:00:14:4b:33:f4:b9:7e:47:2d: e5:87:4c:49:ee:f0:b0:9d:94:43:5d:e9:32:2f:cc:f2:38:34: 51:d8:dd:29:eb:9a:b6:69:72:da:9f:44:c1:3b:ea:db:04:43: 36:41:bc:88:3d:c9:91:45:e1:d6:69:11:cb:83:dd:61:22:60: c5:35:f2:04:d6:c2:1d:06:a4:18:a8:0e:d6:5a:20:a0:0a:97: d2:ec:a2:ef:4a:16:74:df:52:c3:95:7a:69:40:d9:30:01:c9: fd:6e:1b:cc:ea:aa:e8:01:20:04:87:ac:95:a9:21:94:a8:e6: 60:ec:a1:64:51:be:a7:9c:d3:7f:95:11:d0:55:57:ff:2a:cf: 5d:42:44:31:7d:75:7a:1f:03:18:5b:49:1c:f7:31:0f:93:cc: 46:9b:33:aa:34:33:47:d8:cb:04:6d:0d:3f:7e:ae:0b:7c:27: a4:ee:3b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2k0QeovBTX5wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdkZTY2M2YtMTgwNC00MmIwLThlMWUtZjg0NmFlNWI5OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuKr+bLmUotfhE+biw+r1MaK0QLB7G7ozr8N aPcR2Hf7bFwOpdpZjWL4pHzZFG45roFOk3ZKQ8RqFyKWK7VqsYYdmhJAoMWjog0L wZl4iW4Lq86+kpReZPD+YrknoW286CEPB9YetMgYt0Zg3eVNPGsMq+cCm/IvHoJa B03yoGOlNzkyt/NqMi7sSq7LTchOL1z6H6XzYnKDUJ7/nKgWgOZlB4lcwMcYVOfw ReTaM0GSoQkcO8frfI05r8+/APXUEb2kDHeSaBd5ZnCzrSH/Mk9SOkqowNDCwtOG w43ov2aZY+w7L/4GBcd0LS6a5IMUj4NMX8z+OMgNABFsfwtzYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgSpekCZwLN/fNbRw1CDMXT9U6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNTI2ZTM2Y2MtYTk4MS0z YzU5LWFjYmQtMjZiYmI1ZTY0ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvpkM4cJrfg9rLaL6pSfEwawqoMLdre2xL6cyw8LhpqklGP5PBf2bbK 051yDb1utwCg2heAqRNzWtCE8kA2XDucjfi27jPCoWDmmIneXRODLQAUSzP0uX5H LeWHTEnu8LCdlENd6TIvzPI4NFHY3SnrmrZpctqfRME76tsEQzZBvIg9yZFF4dZp EcuD3WEiYMU18gTWwh0GpBioDtZaIKAKl9Lsou9KFnTfUsOVemlA2TAByf1uG8zq qugBIASHrJWpIZSo5mDsoWRRvqec03+VEdBVV/8qz11CRDF9dXofAxhbSRz3MQ+T zEabM6o0M0fYywRtDT9+rgt8J6TuO04= -----END CERTIFICATE-----Generated at Fri Oct 9 17:39:54 2026 by rpki-client