$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/a1e8a46b-559f-3e06-b83d-c999472ef340.roa File: a1e8a46b-559f-3e06-b83d-c999472ef340.roa (raw, json) Hash identifier: FEt0rNXAMAeoXGGcnT8+9gkjifMPhgX8vmfYzslQaD8= Subject key identifier: AE:03:35:D7:50:FC:69:67:0D:1F:42:7E:01:6F:B6:14:61:9D:FF:79 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584F7BB2F0C8F285EA94A66A6100 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/a1e8a46b-559f-3e06-b83d-c999472ef340.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 852 IP address blocks: 199.58.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f0:c8:f2:85:ea:94:a6:6a:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=b1216f87-57bc-44b7-825b-d7c9fd943754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:6b:4c:d4:d6:c4:e0:19:f1:46:24:66:a6: 35:a6:f8:e9:6c:3a:81:ed:b0:5d:30:12:1f:6f:43: 16:ac:ff:fd:04:6b:9b:d5:62:ae:80:b1:e7:8e:32: cb:de:03:a7:f3:c0:9c:ad:ea:74:14:48:9e:58:97: 74:14:90:6b:6e:49:2a:9f:31:88:e5:fc:6c:90:1a: c8:16:44:45:9a:59:26:6d:57:d4:5e:16:da:4d:9e: 1e:39:d0:16:a5:f0:de:98:5d:c6:e1:8a:bc:57:dc: 72:d3:1a:b7:af:d0:98:26:fb:9c:3f:bc:12:47:26: 27:05:77:45:1a:35:08:a3:50:70:13:73:1a:b4:2b: 15:2d:ea:05:87:84:8f:8c:f2:64:eb:20:0f:d4:7b: 2d:6d:6a:89:a5:91:4e:e7:52:5f:13:4d:03:31:9c: 98:10:c6:27:92:66:aa:49:ba:85:9a:54:ad:8e:0a: cf:de:76:89:07:02:58:40:0d:ed:ba:66:fb:c3:1c: 17:98:72:52:ef:a3:59:cf:90:39:08:5c:0f:ea:73: 3a:72:3e:26:e0:93:7c:13:21:3c:bb:4d:0b:0f:9b: e6:03:1a:c8:d1:ca:4f:14:e4:77:81:c9:ac:9c:53: 64:3e:a1:bd:9a:17:0a:c3:0a:0e:02:b2:a6:19:6f: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:03:35:D7:50:FC:69:67:0D:1F:42:7E:01:6F:B6:14:61:9D:FF:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/a1e8a46b-559f-3e06-b83d-c999472ef340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 199.58.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0b:cc:0f:64:a0:32:7c:e2:29:d8:36:1f:a4:4b:64:29:2b: d7:a5:51:f5:bf:d3:f4:c2:88:7e:a8:15:3e:01:56:e6:76:27: 17:31:a6:a4:00:93:0d:80:2e:5e:a3:20:d4:4b:ef:6c:ea:19: 88:53:15:dd:43:42:19:06:e0:d4:3c:99:29:d4:b8:d1:53:66: 53:ce:1d:df:0b:28:46:a7:35:fb:df:ba:1c:fa:55:ca:75:f1: df:45:77:36:98:f3:45:42:7c:09:e7:7e:9f:e4:4d:55:23:65: ea:1c:6a:98:03:70:d0:64:ac:cf:e0:f9:ff:d7:e6:06:f2:7d: 8c:af:de:66:e9:08:bd:a3:f1:50:f6:aa:be:81:45:a9:cf:b1: cf:c5:93:96:3b:7c:92:5c:51:b6:70:00:82:51:b9:90:c7:37: 6a:64:2e:d7:dc:0d:7a:c7:27:23:c9:f6:d0:88:c8:1d:ad:c7: 29:8b:f5:a2:23:88:ff:b6:37:19:5f:b9:30:63:b5:a7:d0:72: 18:b9:e6:69:6e:b8:8d:dd:a2:b0:21:12:e8:d7:44:de:bc:82: c5:98:02:4d:a6:6b:99:63:8c:3a:88:8e:1c:14:e8:93:85:d7: e9:f0:e1:81:ae:30:e6:4d:ab:35:10:1d:4d:50:49:db:f7:3e: 30:84:af:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svDI8oXqlKZqYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YjEyMTZmODctNTdiYy00NGI3LTgyNWItZDdjOWZkOTQzNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgxrTNTWxOAZ8UYkZqY1pvjpbDqB7bBdMBIf b0MWrP/9BGub1WKugLHnjjLL3gOn88Ccrep0FEieWJd0FJBrbkkqnzGI5fxskBrI FkRFmlkmbVfUXhbaTZ4eOdAWpfDemF3G4Yq8V9xy0xq3r9CYJvucP7wSRyYnBXdF GjUIo1BwE3MatCsVLeoFh4SPjPJk6yAP1HstbWqJpZFO51JfE00DMZyYEMYnkmaq SbqFmlStjgrP3naJBwJYQA3tumb7wxwXmHJS76NZz5A5CFwP6nM6cj4m4JN8EyE8 u00LD5vmAxrI0cpPFOR3gcmsnFNkPqG9mhcKwwoOArKmGW///wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4DNddQ/GlnDR9CfgFvthRhnf95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvYTFlOGE0NmItNTU5Zi0z ZTA2LWI4M2QtYzk5OTQ3MmVmMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0LzA9koDJ84inYNh+kS2QpK9elUfW/0/TCiH6oFT4BVuZ2JxcxpqQA kw2ALl6jINRL72zqGYhTFd1DQhkG4NQ8mSnUuNFTZlPOHd8LKEanNfvfuhz6Vcp1 8d9FdzaY80VCfAnnfp/kTVUjZeocapgDcNBkrM/g+f/X5gbyfYyv3mbpCL2j8VD2 qr6BRanPsc/Fk5Y7fJJcUbZwAIJRuZDHN2pkLtfcDXrHJyPJ9tCIyB2txymL9aIj iP+2NxlfuTBjtafQchi55mluuI3dorAhEujXRN68gsWYAk2ma5ljjDqIjhwU6JOF 1+nw4YGuMOZNqzUQHU1QSdv3PjCEr5M= -----END CERTIFICATE-----Generated at Tue Nov 10 21:00:49 2026 by rpki-client