$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3bddc884-c944-33a8-a019-efeb3df4f624.roa File: 3bddc884-c944-33a8-a019-efeb3df4f624.roa (raw, json) Hash identifier: AQsnXXz28DD0RHYyYDyYQMZ28wVNxparWWJ8tU94Eqs= Subject key identifier: D6:22:6F:3A:B0:28:5F:4B:6E:DF:1E:6B:6F:C0:89:4A:AC:29:11:C9 Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584F4972A26A7C5DA93B0753C6C0 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3bddc884-c944-33a8-a019-efeb3df4f624.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 199.30.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a2:6a:7c:5d:a9:3b:07:53:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c71afd6-a9b3-4e54-ad66-5890bec2c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:9f:67:c3:cb:fb:55:78:e0:9e:e0:4a:ca: 6d:31:73:9e:e9:2c:45:ec:88:61:20:c7:34:b9:d3: 57:2d:fc:c6:72:61:46:f5:f0:6e:71:8e:03:f7:a4: c8:23:74:a7:e5:0c:19:0e:b2:49:3a:23:8b:f9:b1: 6b:30:17:8a:a1:45:81:9a:21:99:26:6b:d2:e5:54: 9b:5a:e7:b1:e0:e9:cc:fb:aa:04:ed:56:31:2f:b1: 66:96:75:ec:69:fd:dd:28:2d:ea:b1:6d:cb:54:82: 85:59:cc:f7:a7:a1:f9:f2:c5:22:17:c2:39:fa:5d: 2d:38:b2:2c:13:31:e9:26:60:86:73:e4:11:8a:cd: d8:b6:70:f4:cd:a2:27:0c:d8:31:f6:e9:32:29:08: 78:37:17:53:21:ae:dd:a5:f1:f8:28:15:62:da:85: 82:4b:92:18:a3:70:cf:e7:f9:c2:a5:35:95:14:7d: 72:c1:77:0f:9a:e6:8e:70:a0:33:76:ba:ab:c4:95: 8f:5b:7e:a5:75:dd:99:cb:fa:75:4e:cd:3b:33:7e: 3a:c3:2f:9b:3c:f9:a5:be:31:34:8e:93:93:15:01: cb:d1:b0:75:05:d3:cb:13:65:95:6c:46:7e:58:b1: ff:fd:56:01:1d:17:01:47:7f:a6:03:52:ab:47:db: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:22:6F:3A:B0:28:5F:4B:6E:DF:1E:6B:6F:C0:89:4A:AC:29:11:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3bddc884-c944-33a8-a019-efeb3df4f624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:9f:b2:c2:fb:e5:4c:4c:fa:20:b8:cb:02:14:f3:bf:8c:c3: 34:f0:45:07:46:2f:f5:95:e2:28:5a:ff:03:02:5f:4a:04:4e: 8b:d4:d7:f4:67:d5:1f:ef:32:d8:3b:ee:78:bf:b2:7f:5e:bf: 11:2f:2b:9f:a2:08:62:60:cc:76:a1:61:4c:40:7d:2c:70:1c: 65:6a:25:d2:e7:7f:6d:be:70:dc:b2:30:29:96:ec:32:64:cb: 01:97:d5:f3:6c:93:41:40:64:38:a6:2c:ee:f9:0e:fa:f7:c7: 4c:bf:62:42:3b:c1:1a:8a:e4:ec:35:16:84:f3:63:0e:be:0f: 78:42:22:43:1c:d1:87:f8:15:7d:61:99:73:d5:f5:9f:e2:6f: 1f:61:70:a9:10:9f:ba:74:f3:22:4f:30:07:8d:0b:b7:57:f4: d5:8d:c7:ed:7b:b4:ef:9b:cf:a8:42:4c:ba:9c:1c:e0:31:a4: 31:05:b4:af:f4:65:91:ff:19:69:f8:46:bf:ed:f4:74:a5:5b: b4:07:88:86:03:32:ac:0d:c6:d0:49:ab:ad:cb:3c:a0:46:6e: 37:a0:35:1f:6e:34:83:41:17:ab:81:83:42:06:2c:de:63:99: bf:5b:77:ce:e7:4e:28:ff:a2:dc:6a:26:92:89:cb:c2:0d:c9: 8d:dd:00:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqJqfF2pOwdTxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWM3MWFmZDYtYTliMy00ZTU0LWFkNjYtNTg5MGJlYzJjNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdCfZ8PL+1V44J7gSsptMXOe6SxF7IhhIMc0 udNXLfzGcmFG9fBucY4D96TII3Sn5QwZDrJJOiOL+bFrMBeKoUWBmiGZJmvS5VSb Wuex4OnM+6oE7VYxL7FmlnXsaf3dKC3qsW3LVIKFWcz3p6H58sUiF8I5+l0tOLIs EzHpJmCGc+QRis3YtnD0zaInDNgx9ukyKQh4NxdTIa7dpfH4KBVi2oWCS5IYo3DP 5/nCpTWVFH1ywXcPmuaOcKAzdrqrxJWPW36ldd2Zy/p1Ts07M346wy+bPPmlvjE0 jpOTFQHL0bB1BdPLE2WVbEZ+WLH//VYBHRcBR3+mA1KrR9tyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYibzqwKF9Lbt8ea2/AiUqsKRHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvM2JkZGM4ODQtYzk0NC0z M2E4LWEwMTktZWZlYjNkZjRmNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGfssL75UxM+iC4ywIU87+MwzTwRQdGL/WV4iha/wMCX0oETovU1/Rn 1R/vMtg77ni/sn9evxEvK5+iCGJgzHahYUxAfSxwHGVqJdLnf22+cNyyMCmW7DJk ywGX1fNsk0FAZDimLO75Dvr3x0y/YkI7wRqK5Ow1FoTzYw6+D3hCIkMc0Yf4FX1h mXPV9Z/ibx9hcKkQn7p08yJPMAeNC7dX9NWNx+17tO+bz6hCTLqcHOAxpDEFtK/0 ZZH/GWn4Rr/t9HSlW7QHiIYDMqwNxtBJq63LPKBGbjegNR9uNINBF6uBg0IGLN5j mb9bd87nTij/otxqJpKJy8INyY3dAD8= -----END CERTIFICATE-----Generated at Sat Oct 10 08:09:10 2026 by rpki-client