$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/084245ae-f415-3936-a1fa-a35e6bfe0598.roa File: 084245ae-f415-3936-a1fa-a35e6bfe0598.roa (raw, json) Hash identifier: j7d+fyqcXteDCKk1Zf29c1mWgRAOdVxrdB9g0iGMZUc= Subject key identifier: A6:0D:18:DD:0C:B8:0A:E1:BF:E9:28:02:54:E4:51:81:DC:AA:11:B5 Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584F778365D34D31A497B578F580 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/084245ae-f415-3936-a1fa-a35e6bfe0598.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 199.30.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:65:d3:4d:31:a4:97:b5:78:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=63846b4d-d452-4da4-9e3a-25f730698eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:fd:18:ee:77:6c:aa:62:dd:a3:1a:f6:ce: fd:57:67:1e:ac:b9:f6:14:7b:b6:51:58:11:62:cc: e4:48:8e:e9:d6:0a:a7:2e:cc:6d:59:03:95:f9:1d: c9:1e:2b:96:1e:03:c4:8a:ed:65:6f:1e:14:b7:84: 54:d9:e3:ee:14:15:f8:f2:b1:2f:a5:c0:ce:bc:fe: fc:f3:98:1d:6f:a0:da:b3:3d:96:1d:67:1a:d4:1c: e2:aa:31:29:80:13:87:ce:a9:49:38:0a:07:02:00: bf:fe:89:ef:bf:86:f9:a4:4f:79:7f:e0:5c:78:66: 5d:49:ef:75:fe:50:52:cd:fb:a5:48:14:32:94:9d: dc:8d:34:e1:a5:1b:fb:60:71:12:7c:de:08:4c:20: dd:d2:0d:4b:6b:07:f3:23:92:1d:08:b0:97:d1:31: 17:a2:f6:3b:53:72:9e:2e:d1:31:e9:7b:8b:4a:9e: fc:0a:d4:31:e3:2b:ff:ea:ef:43:17:36:48:fd:e7: 03:78:1d:81:0a:ed:6c:98:c5:f3:3b:b5:97:40:60: 8a:ac:99:25:9c:1f:75:5c:58:e6:95:cc:c7:5e:f2: 58:8c:a2:8c:d8:42:0f:1f:d3:11:50:70:4e:6c:64: f0:41:07:fd:cb:af:e9:ce:51:2c:35:da:05:5a:e0: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0D:18:DD:0C:B8:0A:E1:BF:E9:28:02:54:E4:51:81:DC:AA:11:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/084245ae-f415-3936-a1fa-a35e6bfe0598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:3a:01:e3:c9:b3:40:e3:2c:0a:79:88:f1:c5:94:dd:b1:15: 56:b2:75:58:91:da:b8:f6:7a:f5:f6:88:e5:c4:53:ba:e7:7e: c8:03:11:e3:18:20:21:01:af:0b:9c:36:e9:b6:61:52:e5:7d: d1:13:48:09:6a:24:00:1c:0a:38:d1:44:b9:c1:20:fc:8c:99: 5f:34:82:ce:0e:37:b0:6f:79:9d:9e:d8:7d:5c:b1:13:51:78: f7:14:00:87:0f:c1:6f:36:fb:93:1b:31:74:23:92:34:22:ef: 3c:d1:2f:40:e5:60:bb:84:e9:fc:9b:dd:3e:36:25:01:dd:0d: 5c:2d:bb:c9:3a:d6:53:da:37:d1:89:14:db:d6:c7:8e:b8:00: cc:61:c6:af:df:94:c4:a5:fa:6a:f7:5d:d5:83:b3:86:18:80: 4a:0f:6d:d5:3a:f4:51:c6:c1:63:d8:66:75:49:70:03:6d:d9: 09:b2:87:0e:33:1a:38:af:03:81:62:26:7c:64:1f:6a:50:7a: 38:52:b8:2c:19:96:87:45:a2:20:f6:e6:dd:b4:1e:af:24:77: 1d:54:2a:bd:a5:21:9b:01:8c:9e:bc:bb:2e:06:36:43:e4:d7: 62:f1:76:03:ee:56:67:1c:7e:72:8c:13:90:b3:22:33:52:4c: 92:6a:97:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2XTTTGkl7V49YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjM4NDZiNGQtZDQ1Mi00ZGE0LTllM2EtMjVmNzMwNjk4ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikb9GO53bKpi3aMa9s79V2cerLn2FHu2UVgR YszkSI7p1gqnLsxtWQOV+R3JHiuWHgPEiu1lbx4Ut4RU2ePuFBX48rEvpcDOvP78 85gdb6Dasz2WHWca1BziqjEpgBOHzqlJOAoHAgC//onvv4b5pE95f+BceGZdSe91 /lBSzfulSBQylJ3cjTThpRv7YHESfN4ITCDd0g1LawfzI5IdCLCX0TEXovY7U3Ke LtEx6XuLSp78CtQx4yv/6u9DFzZI/ecDeB2BCu1smMXzO7WXQGCKrJklnB91XFjm lczHXvJYjKKM2EIPH9MRUHBObGTwQQf9y6/pzlEsNdoFWuD8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYNGN0MuArhv+koAlTkUYHcqhG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvMDg0MjQ1YWUtZjQxNS0z OTM2LWExZmEtYTM1ZTZiZmUwNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw6AePJs0DjLAp5iPHFlN2xFVaydViR2rj2evX2iOXEU7rnfsgDEeMY ICEBrwucNum2YVLlfdETSAlqJAAcCjjRRLnBIPyMmV80gs4ON7BveZ2e2H1csRNR ePcUAIcPwW82+5MbMXQjkjQi7zzRL0DlYLuE6fyb3T42JQHdDVwtu8k61lPaN9GJ FNvWx464AMxhxq/flMSl+mr3XdWDs4YYgEoPbdU69FHGwWPYZnVJcANt2Qmyhw4z GjivA4FiJnxkH2pQejhSuCwZlodFoiD25t20Hq8kdx1UKr2lIZsBjJ68uy4GNkPk 12LxdgPuVmccfnKME5CzIjNSTJJql48= -----END CERTIFICATE-----Generated at Wed Oct 21 19:43:41 2026 by rpki-client