$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa File: 08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa (raw, json) Hash identifier: aWe4/3f7UTWudP0E2CYv0S8i9yuFogxGBnJCLEv8p7M= Subject key identifier: 87:51:12:98:F6:BC:EA:1E:1E:96:8F:7A:F5:6C:E5:AE:B4:28:1C:AA Certificate issuer: /CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863 Certificate serial: 010D0C9F4328584F612D6AED91E774E1606B72D8 Authority key identifier: 39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 400463 IP address blocks: 199.16.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6a:ed:91:e7:74:e1:60:6b:72:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=986975a0-e29a-4e06-ae7b-5417f67d742b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:64:59:51:03:e8:08:77:53:60:8e:38:bc:c9: 82:2c:9a:c9:ae:19:37:ec:8c:27:67:bd:31:19:64: e3:9d:59:91:db:2f:96:21:c5:87:e6:78:bb:b3:04: f9:52:d1:71:6f:3c:8e:0a:9b:c8:d5:8f:c6:11:84: e6:24:35:9a:de:0f:5a:33:96:4d:5a:8d:ca:65:ac: 22:45:d4:ed:85:b0:1e:4e:4c:5e:c2:66:e7:b5:53: 10:af:c0:1e:b7:6c:a3:99:e8:65:31:19:08:52:a7: c5:10:2c:d4:04:c0:d8:c2:48:62:2b:29:de:4c:94: ca:69:ac:af:bf:08:35:8a:23:9c:09:a6:2b:f0:12: 53:f2:70:c4:95:ac:42:d1:04:87:59:06:36:10:1c: c9:3e:4e:fb:ee:cc:c6:a0:4a:ee:2d:e6:7a:bd:df: 93:6e:65:fd:57:2f:8d:80:98:ee:7e:74:9e:9c:d2: fb:58:4b:76:90:a2:e5:37:9e:c7:f4:99:f8:72:31: b7:17:89:37:b4:3a:10:82:c4:bf:bd:e4:73:7d:50: 68:96:d1:37:fb:7e:53:cb:fe:98:ad:72:58:aa:e7: 50:71:e0:82:9e:17:14:35:b0:40:66:80:a5:a8:0f: 35:be:8c:be:e1:5a:65:6d:4b:bc:ff:fa:cb:05:95: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:12:98:F6:BC:EA:1E:1E:96:8F:7A:F5:6C:E5:AE:B4:28:1C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl X509v3 Authority Key Identifier: keyid:39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer sbgp-ipAddrBlock: critical IPv4: 199.16.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f1:2d:7d:d1:ee:29:2f:aa:ff:9b:fa:e0:8a:6c:48:c6:8a: 89:88:89:d9:34:e2:64:0f:db:48:5e:79:33:62:5d:b7:86:76: 74:e3:ee:4f:28:55:e8:69:54:7a:a6:55:0f:0c:d2:f1:58:f8: da:f8:9d:6d:0b:f0:9a:de:6d:74:c5:8e:ec:17:46:e4:8a:84: fe:46:d0:e8:15:73:8b:0c:f6:e5:60:07:5c:e7:8a:d6:57:0f: c3:1a:59:0a:1b:89:fc:ab:44:2f:6c:e5:0e:8a:95:2c:bd:1d: 71:6d:1c:73:16:82:96:91:09:3e:60:f7:56:d4:65:05:d5:16: 0b:3d:76:8b:ef:f4:54:a7:f3:a8:1d:c1:96:1a:11:14:ba:7c: ae:06:84:e8:96:cd:22:e5:37:04:32:e2:11:70:85:85:1c:2b: 8f:3a:c9:cc:40:b1:be:df:a6:05:47:41:8b:33:6c:9b:a1:f8: fb:d9:4d:67:f9:8c:df:87:cc:06:34:b2:22:25:49:b2:39:f8: 9a:bb:e6:be:9d:19:a8:e2:fe:96:2a:ef:27:8d:9e:63:9c:ec: 81:00:c8:65:61:67:13:4e:98:0d:05:ac:22:df:24:dd:4e:a5: 64:e6:59:88:3f:bb:66:74:0f:78:ae:ea:f2:66:51:10:be:dd: 5f:b1:52:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWrtked04WBrctgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlMWJiYWUtNGM0NS00MDhmLWI1ZTEtNjYxOGYxZWMx ODYzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk OTg2OTc1YTAtZTI5YS00ZTA2LWFlN2ItNTQxN2Y2N2Q3NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmRZUQPoCHdTYI44vMmCLJrJrhk37IwnZ70x GWTjnVmR2y+WIcWH5ni7swT5UtFxbzyOCpvI1Y/GEYTmJDWa3g9aM5ZNWo3KZawi RdTthbAeTkxewmbntVMQr8Aet2yjmehlMRkIUqfFECzUBMDYwkhiKyneTJTKaayv vwg1iiOcCaYr8BJT8nDElaxC0QSHWQY2EBzJPk777szGoEruLeZ6vd+TbmX9Vy+N gJjufnSenNL7WEt2kKLlN57H9Jn4cjG3F4k3tDoQgsS/veRzfVBoltE3+35Ty/6Y rXJYqudQceCCnhcUNbBAZoClqA81voy+4VplbUu8//rLBZXnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdREpj2vOoeHpaPevVs5a60KByqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83YmUx YmJhZS00YzQ1LTQwOGYtYjVlMS02NjE4ZjFlYzE4NjMvMDhmY2UzZWItYmMyZC0z MDg1LThmZTktNjNlOGE4MGYyZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2JlMWJiYWUtNGM0NS00MDhmLWI1 ZTEtNjYxOGYxZWMxODYzLzdiZTFiYmFlLTRjNDUtNDA4Zi1iNWUxLTY2MThmMWVj MTg2My5jcmwwHwYDVR0jBBgwFoAUOXsej1CJGPCurxtv2wcTmqjPDL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83YmUxYmJhZS00YzQ1LTQwOGYtYjVlMS02NjE4 ZjFlYzE4NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHxLX3R7ikvqv+b+uCKbEjGiomIidk04mQP20heeTNiXbeGdnTj7k8o VehpVHqmVQ8M0vFY+Nr4nW0L8JrebXTFjuwXRuSKhP5G0OgVc4sM9uVgB1znitZX D8MaWQobifyrRC9s5Q6KlSy9HXFtHHMWgpaRCT5g91bUZQXVFgs9dovv9FSn86gd wZYaERS6fK4GhOiWzSLlNwQy4hFwhYUcK486ycxAsb7fpgVHQYszbJuh+PvZTWf5 jN+HzAY0siIlSbI5+Jq75r6dGaji/pYq7yeNnmOc7IEAyGVhZxNOmA0FrCLfJN1O pWTmWYg/u2Z0D3iu6vJmURC+3V+xUuA= -----END CERTIFICATE-----Generated at Mon Oct 19 04:41:23 2026 by rpki-client