$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa File: 6fa35cde-5df1-345d-be26-fa0c513a4da8.roa (raw, json) Hash identifier: sxP0vdjaX8B47i/9cdQtOErxIn1Yt834c7bxqtgvdmg= Subject key identifier: 79:B1:FC:64:38:D8:8F:6D:A1:7B:89:D7:8F:51:04:31:07:A0:AE:AA Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F497495C359B6D0213C4C5FC0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397325 IP address blocks: 199.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:95:c3:59:b6:d0:21:3c:4c:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=900893fb-4de1-4d38-acd7-2fd36621fe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f4:22:f1:95:1e:ca:a6:63:e3:0f:cf:f9:61: b6:a9:3a:60:f6:b7:b5:7f:c8:0d:28:df:bf:f2:8c: cf:05:90:6c:04:07:ed:77:50:e8:5a:3f:64:72:cd: 0a:de:e7:b9:bc:c6:57:3b:cb:23:aa:6f:9e:b2:b7: 5e:1a:94:73:12:0b:3f:c9:37:f0:6d:a9:3f:70:d1: 85:69:6f:92:5f:41:2d:77:d0:96:98:3a:6e:0e:92: f6:78:67:6b:da:e9:a7:df:7d:f6:1f:a5:6f:55:59: 2f:7f:2f:e4:3c:47:c3:c1:c0:7d:12:f2:60:12:31: 49:84:0b:8e:ac:69:00:bb:7e:62:a2:9a:2a:59:46: e3:b8:2a:4d:cd:bc:45:b2:b1:e6:4c:41:82:16:93: 14:95:3e:82:bc:af:6d:bc:c1:3e:49:5b:3c:c4:9e: 97:f3:f9:ea:b5:8f:a0:f0:9d:a3:91:ad:aa:2a:d3: de:30:5d:c1:f1:15:e2:2e:b9:8a:e6:45:91:98:8e: 16:69:97:30:cc:a2:87:43:61:79:63:7e:a2:0b:20: bd:96:33:c6:f6:92:05:da:7d:f7:ec:06:3b:04:68: a7:ee:65:ff:a0:db:b5:f2:4c:13:7c:80:9b:94:e4: 90:8e:36:c1:a2:ea:d0:45:b2:2d:56:05:21:b2:b6: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B1:FC:64:38:D8:8F:6D:A1:7B:89:D7:8F:51:04:31:07:A0:AE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e9:58:7a:99:09:01:57:73:86:c8:ba:d6:7d:bd:c6:26:6f: ab:0d:ed:da:61:96:9e:11:e8:16:25:4f:ee:f2:f2:bf:03:8b: 03:15:73:6a:07:79:ba:67:97:b3:51:ef:14:6f:eb:ea:2b:02: 33:91:08:14:8c:b4:ea:3a:6e:45:e8:d5:ae:d3:f0:eb:56:52: b4:52:0d:dd:11:64:9e:5c:7d:3e:87:75:aa:36:44:d1:42:c8: 62:66:82:4b:dd:7f:da:2a:1b:93:af:b0:87:05:cb:12:86:2d: 08:93:08:3b:0d:cd:b7:22:88:cb:c9:8a:0c:ef:76:69:99:8e: 33:c9:92:2b:a0:f2:ce:3b:04:5e:24:d8:9e:00:6f:68:0c:c1: 9e:b2:18:0c:32:05:9d:24:8b:20:25:68:91:6f:13:c8:58:83: c1:a6:85:81:0c:d9:2a:f8:a7:1e:b1:e9:bc:b5:69:24:a3:0b: d3:4d:cb:37:d8:ce:68:45:c5:d1:0e:61:19:69:7e:a2:49:bf: 3c:f5:52:5e:d7:da:3d:d4:69:4a:b7:73:1b:21:ad:ca:c2:b9: b1:1c:1f:2c:58:eb:30:50:40:a6:8d:7f:45:c1:21:5f:33:a9: a2:17:ed:17:9e:f7:44:d3:63:b4:40:e4:97:a5:c3:4e:3e:72: 09:33:6e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJXDWbbQITxMX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTAwODkzZmItNGRlMS00ZDM4LWFjZDctMmZkMzY2MjFmZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPQi8ZUeyqZj4w/P+WG2qTpg9re1f8gNKN+/ 8ozPBZBsBAftd1DoWj9kcs0K3ue5vMZXO8sjqm+esrdeGpRzEgs/yTfwbak/cNGF aW+SX0Etd9CWmDpuDpL2eGdr2umn3332H6VvVVkvfy/kPEfDwcB9EvJgEjFJhAuO rGkAu35iopoqWUbjuCpNzbxFsrHmTEGCFpMUlT6CvK9tvME+SVs8xJ6X8/nqtY+g 8J2jka2qKtPeMF3B8RXiLrmK5kWRmI4WaZcwzKKHQ2F5Y36iCyC9ljPG9pIF2n33 7AY7BGin7mX/oNu18kwTfICblOSQjjbBourQRbItVgUhsrat1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmx/GQ42I9toXuJ149RBDEHoK6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNmZhMzVjZGUtNWRmMS0z NDVkLWJlMjYtZmEwYzUxM2E0ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTpWHqZCQFXc4bIutZ9vcYmb6sN7dphlp4R6BYlT+7y8r8DiwMVc2oH ebpnl7NR7xRv6+orAjORCBSMtOo6bkXo1a7T8OtWUrRSDd0RZJ5cfT6Hdao2RNFC yGJmgkvdf9oqG5OvsIcFyxKGLQiTCDsNzbciiMvJigzvdmmZjjPJkiug8s47BF4k 2J4Ab2gMwZ6yGAwyBZ0kiyAlaJFvE8hYg8GmhYEM2Sr4px6x6by1aSSjC9NNyzfY zmhFxdEOYRlpfqJJvzz1Ul7X2j3UaUq3cxshrcrCubEcHyxY6zBQQKaNf0XBIV8z qaIX7Ree90TTY7RA5Jelw04+cgkzbnU= -----END CERTIFICATE-----Generated at Fri Oct 9 23:28:50 2026 by rpki-client