$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/c9a357e8-5b34-3488-aff9-64850d85d2ab.roa File: c9a357e8-5b34-3488-aff9-64850d85d2ab.roa (raw, json) Hash identifier: dnR580swcZLsxOiXAL+6QWYrILf9dfhxuocqSI4qgKM= Subject key identifier: 9F:50:2F:DC:51:B5:DC:0E:B6:79:9A:CD:2D:66:A5:BA:C6:F4:02:E3 Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584EDDF75197659752303A803C80 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/c9a357e8-5b34-3488-aff9-64850d85d2ab.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 206819 IP address blocks: 199.38.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:51:97:65:97:52:30:3a:80:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=9f3ef200-abee-496e-b74e-c8f1e60ce1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:30:5b:c5:dd:3a:c5:7b:8a:10:e6:b2:ab:0b: 43:32:0c:a5:e4:8b:d3:8d:7b:19:fc:37:40:c6:14: 7c:ee:df:97:16:fa:fe:5f:9e:19:56:44:28:be:c5: 57:e5:e8:d0:18:54:57:31:54:38:39:47:3b:19:ca: 71:ff:c9:16:c0:13:0a:be:3a:14:86:c0:47:41:a4: a2:31:03:21:b4:a0:57:30:19:24:d4:14:59:a9:5c: 04:aa:75:90:82:c5:82:69:ff:d9:7c:27:c3:ee:88: 19:43:fd:ea:6a:b4:18:ce:65:62:7c:c9:c2:f3:56: 72:23:3f:d6:3b:1e:3e:c2:26:6f:7f:e2:5b:7b:b8: fc:9a:c4:05:ad:f5:15:a3:4c:e5:59:d2:f6:02:d1: 80:99:88:98:80:a9:59:f1:4d:92:d3:50:37:bc:e5: 78:d9:44:04:88:41:01:1e:7a:0a:41:c7:61:7c:c5: e4:a3:e6:92:cc:89:dd:6a:e1:a6:e9:b0:90:dd:50: 8a:2d:37:d3:41:bf:3c:03:8e:eb:ac:8a:dd:d2:36: a7:87:3d:eb:b3:ce:e8:8b:b7:63:ed:af:f8:f5:5c: 94:11:e6:af:bb:87:bc:64:64:8e:60:18:23:bb:e5: dd:ba:23:4a:b1:97:2b:de:b0:81:85:8d:54:53:96: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:50:2F:DC:51:B5:DC:0E:B6:79:9A:CD:2D:66:A5:BA:C6:F4:02:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/c9a357e8-5b34-3488-aff9-64850d85d2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:38:27:2c:b4:3a:b8:27:5b:bd:c9:2d:5c:0b:5d:34:34:17: 15:6a:35:75:f2:95:13:ba:61:b2:b7:14:ba:b7:ca:31:0f:2a: f5:a0:ee:96:0f:32:cc:d2:e8:cf:83:b2:90:4c:25:cb:3d:d0: bf:b2:26:cb:e4:5e:a5:0c:ec:16:c6:e8:3d:3e:1c:26:07:9b: ac:ac:d5:b7:4d:63:c4:9e:08:1c:53:74:32:12:75:cb:5c:2b: 70:be:6b:02:6e:a3:17:27:5e:74:e8:1c:47:35:a8:2e:40:12: 06:21:09:58:71:ce:34:76:a6:38:c7:25:82:31:d0:f9:a1:a7: e9:40:0d:45:8e:72:62:94:79:77:4a:95:b3:ab:ad:b9:98:3e: 69:3d:8f:c0:81:7f:d0:a4:60:27:1d:24:4f:b8:f9:05:19:11: f8:80:91:b4:1a:1c:c8:e2:db:1a:de:cb:98:95:ac:25:3e:29: 75:6c:05:fd:2d:ac:be:d2:1e:73:23:d6:97:04:93:38:09:09: e4:9c:46:e4:eb:98:e2:df:2d:76:7d:df:ac:e4:c2:46:4d:c0: 83:42:ca:77:4b:0e:2e:36:ff:5e:42:0e:07:45:c7:8c:dd:40: cf:c2:b6:62:8f:b2:c5:df:2f:f8:b4:08:b5:3b:df:36:c7:9c: 6e:74:92:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d91GXZZdSMDqAPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk OWYzZWYyMDAtYWJlZS00OTZlLWI3NGUtYzhmMWU2MGNlMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzBbxd06xXuKEOayqwtDMgyl5IvTjXsZ/DdA xhR87t+XFvr+X54ZVkQovsVX5ejQGFRXMVQ4OUc7Gcpx/8kWwBMKvjoUhsBHQaSi MQMhtKBXMBkk1BRZqVwEqnWQgsWCaf/ZfCfD7ogZQ/3qarQYzmVifMnC81ZyIz/W Ox4+wiZvf+Jbe7j8msQFrfUVo0zlWdL2AtGAmYiYgKlZ8U2S01A3vOV42UQEiEEB HnoKQcdhfMXko+aSzIndauGm6bCQ3VCKLTfTQb88A47rrIrd0janhz3rs87oi7dj 7a/49VyUEeavu4e8ZGSOYBgju+XduiNKsZcr3rCBhY1UU5YE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9QL9xRtdwOtnmazS1mpbrG9ALjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvYzlhMzU3ZTgtNWIzNC0z NDg4LWFmZjktNjQ4NTBkODVkMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU4Jyy0OrgnW73JLVwLXTQ0FxVqNXXylRO6YbK3FLq3yjEPKvWg7pYP MszS6M+DspBMJcs90L+yJsvkXqUM7BbG6D0+HCYHm6ys1bdNY8SeCBxTdDISdctc K3C+awJuoxcnXnToHEc1qC5AEgYhCVhxzjR2pjjHJYIx0Pmhp+lADUWOcmKUeXdK lbOrrbmYPmk9j8CBf9CkYCcdJE+4+QUZEfiAkbQaHMji2xrey5iVrCU+KXVsBf0t rL7SHnMj1pcEkzgJCeScRuTrmOLfLXZ936zkwkZNwINCyndLDi42/15CDgdFx4zd QM/CtmKPssXfL/i0CLU73zbHnG50kt8= -----END CERTIFICATE-----Generated at Thu Aug 27 08:06:24 2026 by rpki-client