$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa File: 6fa35cde-5df1-345d-be26-fa0c513a4da8.roa (raw, json) Hash identifier: dxCr6aV3QbqQm08++VGitfh0OhDGTm2uu8Ciwdne3Oc= Subject key identifier: DD:2C:D1:1E:31:F8:91:9E:25:ED:A6:B1:C3:33:8B:76:B1:4E:5E:0E Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584EA7973CDFF3E20656D396B1F0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397325 IP address blocks: 199.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:3c:df:f3:e2:06:56:d3:96:b1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f809b53b-3372-4b31-abae-aa65db715ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:3b:a8:9e:62:27:ea:3c:94:6a:23:7a:ae: c3:d8:70:0e:3b:00:d7:25:28:bf:05:20:7a:3e:65: f3:4a:83:c0:a4:9f:1d:44:a0:11:47:10:c0:dc:53: 10:7f:f4:8c:c9:ae:63:f5:7d:92:44:11:37:cd:c2: 83:d0:bc:33:66:0b:44:07:d0:e3:04:67:57:39:a2: 78:b5:54:1a:88:c7:9a:1d:97:45:80:d8:d3:12:66: b5:24:93:b4:c6:80:de:3c:85:f5:5d:8e:1b:30:c0: ac:2f:f0:64:57:a4:05:d7:25:5b:8a:30:59:9f:0c: d7:24:43:41:47:e3:67:3d:51:6c:47:e4:7a:0e:0f: eb:03:23:9e:47:ac:a8:3c:06:7b:2e:84:fb:74:d9: b4:13:10:67:27:dd:55:38:1c:6c:09:4b:40:9d:d2: 1e:19:52:20:7f:b3:24:94:f4:17:5f:14:ef:f5:53: 78:e2:4e:bb:7c:38:21:3f:5e:d2:23:14:9f:e5:59: 38:fb:e6:08:f2:13:68:9a:05:f3:bc:6b:b3:27:33: 15:ff:bc:e8:0c:8a:d1:bc:0c:f8:5d:ab:25:13:68: c2:5d:6b:7a:b7:4e:72:47:d9:07:6b:39:da:58:62: 9c:58:d8:a6:fe:b3:22:7c:47:45:34:34:df:52:44: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2C:D1:1E:31:F8:91:9E:25:ED:A6:B1:C3:33:8B:76:B1:4E:5E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:ba:03:29:dc:1b:3e:b1:8a:b5:c7:2f:d5:48:e5:13:2e: b4:3a:61:49:32:8b:d0:6d:5e:03:ac:59:1d:53:d7:f0:1e:de: 47:20:22:e7:84:bf:66:36:c9:34:58:7c:9b:c4:15:d4:77:2d: d3:59:fd:f5:a9:ca:2f:1e:cc:aa:24:86:dd:fd:46:4c:c1:f7: 3f:33:67:76:43:4b:3c:f8:83:f9:ea:13:d7:7f:0e:22:96:7f: 16:f9:6f:01:aa:0b:a4:e6:f3:22:bf:ca:b3:08:7c:1d:e5:db: 0b:46:22:d5:0b:58:74:b7:30:eb:77:a3:d7:b4:32:71:f8:f7: f3:2c:fd:e8:56:41:fc:0e:32:94:00:aa:e0:00:90:96:9d:98: f9:51:29:a8:60:83:92:22:fe:bd:5e:37:8e:03:20:99:c7:d6: fc:c8:d7:9f:2e:b8:8d:83:34:96:0a:51:9f:93:34:89:30:b5: 9e:a0:22:e8:6b:b4:f5:8f:a0:e0:7e:27:16:29:26:c9:ff:5d: dc:b8:1f:cf:1f:c7:b1:7c:d8:c7:1a:88:96:09:45:6d:f8:26: 63:5b:05:01:20:41:65:5b:45:31:6d:25:2c:44:e6:6e:a9:f4: 2f:31:29:66:34:53:6c:26:96:6e:2a:95:dc:58:b6:af:46:ff: a4:0e:94:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlzzf8+IGVtOWsfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjgwOWI1M2ItMzM3Mi00YjMxLWFiYWUtYWE2NWRiNzE1ZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2s7qJ5iJ+o8lGojeq7D2HAOOwDXJSi/BSB6 PmXzSoPApJ8dRKARRxDA3FMQf/SMya5j9X2SRBE3zcKD0LwzZgtEB9DjBGdXOaJ4 tVQaiMeaHZdFgNjTEma1JJO0xoDePIX1XY4bMMCsL/BkV6QF1yVbijBZnwzXJENB R+NnPVFsR+R6Dg/rAyOeR6yoPAZ7LoT7dNm0ExBnJ91VOBxsCUtAndIeGVIgf7Mk lPQXXxTv9VN44k67fDghP17SIxSf5Vk4++YI8hNomgXzvGuzJzMV/7zoDIrRvAz4 XaslE2jCXWt6t05yR9kHaznaWGKcWNim/rMifEdFNDTfUkSE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0s0R4x+JGeJe2mscMzi3axTl4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNmZhMzVjZGUtNWRmMS0z NDVkLWJlMjYtZmEwYzUxM2E0ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHTugMp3Bs+sYq1xy/VSOUTLrQ6YUkyi9BtXgOsWR1T1/Ae3kcgIueE v2Y2yTRYfJvEFdR3LdNZ/fWpyi8ezKokht39RkzB9z8zZ3ZDSzz4g/nqE9d/DiKW fxb5bwGqC6Tm8yK/yrMIfB3l2wtGItULWHS3MOt3o9e0MnH49/Ms/ehWQfwOMpQA quAAkJadmPlRKahgg5Ii/r1eN44DIJnH1vzI158uuI2DNJYKUZ+TNIkwtZ6gIuhr tPWPoOB+JxYpJsn/Xdy4H88fx7F82McaiJYJRW34JmNbBQEgQWVbRTFtJSxE5m6p 9C8xKWY0U2wmlm4qldxYtq9G/6QOlAk= -----END CERTIFICATE-----Generated at Fri Aug 21 01:00:59 2026 by rpki-client