$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/d901d450-859c-353e-9847-847173ae25f4.roa File: d901d450-859c-353e-9847-847173ae25f4.roa (raw, json) Hash identifier: f4H/IJoVS3ASVsDFiySmhT7pHhR8i/eqvh6qqbnZhy8= Subject key identifier: CF:D8:35:68:C9:41:AE:FB:E1:94:59:F3:2F:BF:BE:F9:60:16:98:34 Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584F4F0807B3EAC7AE373B74D3C0 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/d901d450-859c-353e-9847-847173ae25f4.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 30277 IP address blocks: 199.26.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:07:b3:ea:c7:ae:37:3b:74:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=d0750431-9fd4-4136-9ab8-325f2bc5a63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:fd:f7:93:57:9c:22:1a:7d:8f:82:e9:f1: 32:20:45:d0:bc:b7:15:fa:a3:50:2e:6e:f0:c5:51: 57:c1:b7:6c:0d:19:db:5d:fb:64:2e:d2:81:ec:e3: 46:42:c4:a4:ec:b6:d4:42:fd:38:ec:69:ee:3e:4e: a5:f4:61:82:07:83:11:1b:d8:46:50:8b:0b:08:f7: 49:2e:c4:ae:48:18:52:13:b3:83:9f:4c:9c:42:3d: 70:2f:28:7e:88:ad:f9:1c:b1:84:0a:3d:ec:e5:12: e9:d8:42:4c:51:80:ff:7f:00:b4:f2:69:17:3f:fc: ef:d0:b0:44:f0:98:5f:45:d2:c4:fa:7d:39:ac:00: a9:0c:c8:9e:3e:89:fe:34:1f:91:5a:e3:73:46:32: 73:90:c0:69:cb:2c:60:7f:9c:e4:17:6a:ce:29:cb: 5b:30:30:5b:b6:c6:fd:39:70:90:e1:35:34:b9:8e: e3:c0:21:ea:78:66:12:9c:0e:19:5e:25:df:8f:b9: 3c:d8:f3:52:c6:22:cd:73:64:43:b6:54:ee:f5:ff: d9:6c:5e:2f:b9:46:33:b8:57:e1:78:f9:ce:3f:3d: eb:20:c4:99:44:46:52:eb:02:59:c0:f1:85:2b:d8: 88:38:3c:c0:99:c6:4a:ec:ab:3a:89:21:03:06:27: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D8:35:68:C9:41:AE:FB:E1:94:59:F3:2F:BF:BE:F9:60:16:98:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/d901d450-859c-353e-9847-847173ae25f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 199.26.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7c:f6:61:ad:59:4d:4a:75:05:7f:b2:05:85:00:18:c2:30: 8c:a8:f0:16:5d:ee:d0:d0:d5:94:c1:b1:f2:88:0c:ef:9a:5a: 90:a5:d6:d0:27:f0:7e:5d:76:14:26:0c:5c:ef:7b:92:7e:4b: fb:a7:31:bc:97:65:1f:db:83:3c:0a:64:7a:d8:76:9d:43:cd: 11:ea:87:e0:f9:c9:df:65:ca:16:a5:d8:44:c3:84:be:39:1b: c3:bc:c5:53:f6:3c:48:e0:a6:29:f9:0e:80:c3:06:2d:b6:1b: 4f:16:78:2b:2f:53:ca:76:c1:de:8f:80:bb:da:94:2f:63:06: 84:ef:dd:ca:f1:03:e1:3f:67:5d:59:06:67:2b:7a:cb:2a:43: 6d:4e:97:d1:a3:6b:24:25:f6:14:c6:39:fc:08:2e:ba:5c:c7: 98:2b:0d:8c:62:9b:6c:a8:09:16:02:0c:81:b5:a6:08:d6:2e: 5e:b7:66:b6:9b:ef:fe:8a:f7:04:7d:99:95:97:c8:80:0b:a7: 50:60:a8:d2:be:bf:39:ec:03:1c:16:97:b5:2f:f5:f2:12:36: fc:45:21:2a:68:ea:f3:fa:5e:f4:07:17:b4:bd:76:fe:70:10: 5f:a3:fa:48:8f:2b:c8:f7:d8:e2:10:1c:6c:ee:5d:49:e3:7b: 96:12:6f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAez6seuNzt008AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZDA3NTA0MzEtOWZkNC00MTM2LTlhYjgtMzI1ZjJiYzVhNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIb995NXnCIafY+C6fEyIEXQvLcV+qNQLm7w xVFXwbdsDRnbXftkLtKB7ONGQsSk7LbUQv047GnuPk6l9GGCB4MRG9hGUIsLCPdJ LsSuSBhSE7ODn0ycQj1wLyh+iK35HLGECj3s5RLp2EJMUYD/fwC08mkXP/zv0LBE 8JhfRdLE+n05rACpDMiePon+NB+RWuNzRjJzkMBpyyxgf5zkF2rOKctbMDBbtsb9 OXCQ4TU0uY7jwCHqeGYSnA4ZXiXfj7k82PNSxiLNc2RDtlTu9f/ZbF4vuUYzuFfh ePnOPz3rIMSZREZS6wJZwPGFK9iIODzAmcZK7Ks6iSEDBido+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/YNWjJQa774ZRZ8y+/vvlgFpg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvZDkwMWQ0NTAtODU5Yy0z NTNlLTk4NDctODQ3MTczYWUyNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF989mGtWU1KdQV/sgWFABjCMIyo8BZd7tDQ1ZTBsfKIDO+aWpCl1tAn 8H5ddhQmDFzve5J+S/unMbyXZR/bgzwKZHrYdp1DzRHqh+D5yd9lyhal2ETDhL45 G8O8xVP2PEjgpin5DoDDBi22G08WeCsvU8p2wd6PgLvalC9jBoTv3crxA+E/Z11Z BmcressqQ21Ol9GjayQl9hTGOfwILrpcx5grDYxim2yoCRYCDIG1pgjWLl63Zrab 7/6K9wR9mZWXyIALp1BgqNK+vznsAxwWl7Uv9fISNvxFISpo6vP6XvQHF7S9dv5w EF+j+kiPK8j32OIQHGzuXUnje5YSbwc= -----END CERTIFICATE-----Generated at Mon Oct 12 01:59:32 2026 by rpki-client