$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b5c4473e-670c-32f9-86b3-3cd1199c778d.roa File: b5c4473e-670c-32f9-86b3-3cd1199c778d.roa (raw, json) Hash identifier: nGCOTu6gv7wJgaW+BcHmTz5gp4Q5fEBQShnR9U/ZXrc= Subject key identifier: 2D:96:46:5E:AC:92:9E:66:3F:03:57:22:8F:8C:C1:5E:CF:30:D9:41 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FA570F89823A477ED2F6B00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b5c4473e-670c-32f9-86b3-3cd1199c778d.roa Signing time: Fri 04 Sep 2026 08:05:55 +0000 ROA not before: Fri 04 Sep 2026 08:05:55 +0000 ROA not after: Thu 03 Dec 2026 09:05:55 +0000 asID: 30633 IP address blocks: 199.102.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:a5:70:f8:98:23:a4:77:ed:2f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:05:55 2026 GMT Not After : Dec 3 09:05:55 2026 GMT Subject: CN=206636e4-c78e-4106-8819-40a658a8ddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:4a:34:3e:58:79:32:b7:4a:55:04:e8:ce: 2d:90:53:ab:ce:d6:7b:a0:5f:d9:0b:ab:69:7f:40: 41:91:14:15:41:12:55:7f:d1:ad:56:f5:1e:60:22: 3b:49:6a:99:e7:d8:5b:27:1e:90:36:37:c3:41:87: f8:f7:30:d0:cc:1b:f4:26:a0:d1:4b:94:5f:92:50: 9a:64:97:95:75:c3:e0:29:74:cb:21:3b:48:5a:40: a8:79:77:67:dd:af:b9:5e:15:34:88:64:a2:c6:b7: a1:35:2b:42:9e:6c:f3:01:78:89:10:fc:9b:8f:36: 84:a3:1d:11:a4:34:7d:21:a2:f0:b3:ce:28:d2:00: bc:67:fe:65:d7:6f:4f:d5:83:4a:de:0c:38:27:47: cc:85:67:2a:42:60:ab:8b:35:64:18:68:28:1a:df: c6:66:81:75:71:b3:a3:c8:ce:db:d7:48:0a:1f:18: de:8b:27:6b:cf:09:31:83:c5:f6:a8:4f:43:96:93: c3:3a:2a:cc:d0:b0:b0:52:d3:9c:9c:89:14:c7:8a: af:f9:a5:24:0c:c0:28:17:a4:41:21:ca:56:bf:90: b3:8a:5f:cf:73:85:62:c5:88:f8:8d:88:59:58:cb: 08:ea:ec:cb:82:3e:80:54:42:27:0d:1e:1c:6b:83: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:96:46:5E:AC:92:9E:66:3F:03:57:22:8F:8C:C1:5E:CF:30:D9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b5c4473e-670c-32f9-86b3-3cd1199c778d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 199.102.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:3b:b0:07:96:ca:cb:90:1b:ed:22:c1:9e:5a:91:9e:4a:00: fd:a8:2d:94:56:2a:76:15:3d:fb:e1:91:fe:e1:b6:56:2d:61: 1e:da:f4:f7:f9:ab:37:17:d1:de:d5:48:22:f2:d4:73:e3:23: 32:c5:73:ee:3e:90:2d:3a:01:7e:5f:e9:dd:d6:0e:26:78:d1: 18:a5:81:b4:0c:91:26:a4:0b:ec:63:ce:ba:27:a0:65:48:20: be:a1:0b:e7:1a:a7:03:2c:a7:52:bf:c4:cc:0a:f4:58:52:09: cf:48:77:45:f6:44:c7:62:37:37:22:60:8b:b0:07:1d:ce:e0: 97:44:fc:ef:73:6d:9a:e3:af:4c:0a:df:79:55:8f:3c:1b:04: fe:59:20:f4:ea:a8:10:d9:68:91:51:91:4b:83:91:5b:00:fa: 7c:6e:92:88:a7:43:56:ab:3e:8b:53:5e:88:b7:dd:f7:18:93: e1:f3:40:55:54:da:12:44:b4:7b:8a:c1:b5:0c:02:c5:a8:4c: cf:8c:fd:4c:db:4a:88:15:fd:10:29:83:c3:05:cf:6b:bd:f0: 5e:9c:8f:4f:e9:48:32:bf:16:94:28:af:64:4d:8a:9d:4c:9f: f2:d2:80:e2:65:42:14:4b:0b:86:3d:8d:ac:4e:c1:98:14:a1: af:15:79:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PpXD4mCOkd+0vawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4MDU1NVoXDTI2MTIwMzA5MDU1NVowLzEtMCsGA1UEAxMk MjA2NjM2ZTQtYzc4ZS00MTA2LTg4MTktNDBhNjU4YThkZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxKND5YeTK3SlUE6M4tkFOrztZ7oF/ZC6tp f0BBkRQVQRJVf9GtVvUeYCI7SWqZ59hbJx6QNjfDQYf49zDQzBv0JqDRS5RfklCa ZJeVdcPgKXTLITtIWkCoeXdn3a+5XhU0iGSixrehNStCnmzzAXiJEPybjzaEox0R pDR9IaLws84o0gC8Z/5l129P1YNK3gw4J0fMhWcqQmCrizVkGGgoGt/GZoF1cbOj yM7b10gKHxjeiydrzwkxg8X2qE9DlpPDOirM0LCwUtOcnIkUx4qv+aUkDMAoF6RB IcpWv5Czil/Pc4VixYj4jYhZWMsI6uzLgj6AVEInDR4ca4Ox9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2WRl6skp5mPwNXIo+MwV7PMNlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjVjNDQ3M2UtNjcwYy0z MmY5LTg2YjMtM2NkMTE5OWM3NzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ7sAeWysuQG+0iwZ5akZ5KAP2oLZRWKnYVPfvhkf7htlYtYR7a9Pf5 qzcX0d7VSCLy1HPjIzLFc+4+kC06AX5f6d3WDiZ40RilgbQMkSakC+xjzronoGVI IL6hC+capwMsp1K/xMwK9FhSCc9Id0X2RMdiNzciYIuwBx3O4JdE/O9zbZrjr0wK 33lVjzwbBP5ZIPTqqBDZaJFRkUuDkVsA+nxukoinQ1arPotTXoi33fcYk+HzQFVU 2hJEtHuKwbUMAsWoTM+M/UzbSogV/RApg8MFz2u98F6cj0/pSDK/FpQor2RNip1M n/LSgOJlQhRLC4Y9jaxOwZgUoa8Veeg= -----END CERTIFICATE-----Generated at Fri Sep 4 22:18:03 2026 by rpki-client