$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/f1da948a-da06-3d1f-89b8-da25826d135f.roa File: f1da948a-da06-3d1f-89b8-da25826d135f.roa (raw, json) Hash identifier: k9W9LRlLP8p3VuRa1I7v7ubL/prVylPVF7kMrj5imL4= Subject key identifier: A6:A9:0B:28:F2:83:68:36:83:38:AB:D2:95:48:43:9E:CB:57:34:AE Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584F612D62C8A55E9D914083A4C8 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/f1da948a-da06-3d1f-89b8-da25826d135f.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 395807 IP address blocks: 199.60.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:62:c8:a5:5e:9d:91:40:83:a4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=7308ec56-0b7a-46e9-88e0-c73a0ade7fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:39:c1:07:bf:df:e0:eb:f6:fd:33:f5:44: 0d:4c:83:00:e5:c6:35:dd:1a:1b:f0:a4:d6:c0:67: 59:42:b7:e1:00:a3:c5:eb:08:f1:7d:8b:67:1b:46: ab:ce:3f:5a:c6:33:c8:6c:9d:29:45:bc:cc:7c:7d: 22:68:02:39:86:3d:19:da:50:43:c5:1a:ce:18:6b: 2c:97:fe:4f:ec:d4:ca:3e:ef:b7:54:b3:dc:aa:a2: 55:07:08:76:51:0b:8c:d3:d1:00:d7:bb:e1:41:69: d4:a9:ca:5f:fe:01:83:0a:7f:03:e5:87:8c:dd:8e: 56:d7:c9:53:f8:0b:d9:a8:26:29:1e:44:f9:b1:45: d7:da:54:9a:79:04:ef:76:00:5d:02:b7:de:57:9c: 18:78:bf:18:0d:97:88:fd:5c:c2:c2:e2:2e:b1:e5: 73:5a:c3:61:02:a6:42:ea:ab:8f:bc:69:d5:ca:30: 56:1e:5e:70:64:22:a2:2b:fd:29:ac:03:e6:25:6e: 8a:45:a9:36:9d:9f:d2:5e:da:a1:28:6b:3d:2d:e1: 71:e3:de:67:7e:b3:80:b6:af:93:cd:cb:60:75:c0: b8:c5:e2:e2:2f:32:73:1b:bc:51:12:fc:44:39:da: 4c:be:d4:48:1c:e1:29:bf:45:8c:53:6b:39:bb:1f: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:0B:28:F2:83:68:36:83:38:AB:D2:95:48:43:9E:CB:57:34:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/f1da948a-da06-3d1f-89b8-da25826d135f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:c6:a6:8e:55:71:b6:ef:e9:42:0f:d5:e2:51:ca:e4:c8:5b: d4:f1:dd:71:7c:a8:51:b4:05:a7:aa:99:ae:1d:bb:3b:be:e7: d5:7f:03:32:d1:4b:eb:48:67:3e:8e:a4:92:9b:7b:d9:d4:dd: 35:83:fc:52:c7:69:53:cd:33:f9:67:86:56:f7:91:61:1c:92: f9:b1:50:0d:e8:e4:9c:6e:71:b4:76:2d:7a:29:11:26:b8:aa: cf:d3:6b:df:67:b6:a8:6d:50:fd:49:53:31:ad:00:78:c9:dc: a7:ea:d4:1f:51:72:ef:16:df:7c:4e:7f:c4:c5:c3:22:2b:d8: 74:26:e1:7f:18:c4:54:6f:14:7b:7e:37:a4:0b:69:c2:71:60: 73:de:8e:d9:b4:8e:d0:63:20:8a:69:85:b3:6a:54:13:d6:82: 47:93:e4:32:10:b9:0e:db:4f:c5:06:bd:5c:e7:33:58:95:75: 86:e2:9c:62:80:21:fb:f7:e0:23:63:49:36:28:09:65:9d:9c: b2:3f:b6:b0:76:e0:d4:01:a5:f3:0e:77:45:c9:4d:ca:1d:f7: 3c:06:00:d6:12:30:22:83:ac:d9:0c:3d:de:7b:6a:e9:be:b8: 82:32:6c:f2:78:f6:c7:c4:b6:6b:54:d7:10:dd:4b:38:61:da: 93:41:26:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWLIpV6dkUCDpMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NzMwOGVjNTYtMGI3YS00NmU5LTg4ZTAtYzczYTBhZGU3ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjto5wQe/3+Dr9v0z9UQNTIMA5cY13Rob8KTW wGdZQrfhAKPF6wjxfYtnG0arzj9axjPIbJ0pRbzMfH0iaAI5hj0Z2lBDxRrOGGss l/5P7NTKPu+3VLPcqqJVBwh2UQuM09EA17vhQWnUqcpf/gGDCn8D5YeM3Y5W18lT +AvZqCYpHkT5sUXX2lSaeQTvdgBdArfeV5wYeL8YDZeI/VzCwuIuseVzWsNhAqZC 6quPvGnVyjBWHl5wZCKiK/0prAPmJW6KRak2nZ/SXtqhKGs9LeFx495nfrOAtq+T zctgdcC4xeLiLzJzG7xREvxEOdpMvtRIHOEpv0WMU2s5ux9iVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKapCyjyg2g2gzir0pVIQ57LVzSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvZjFkYTk0OGEtZGEwNi0z ZDFmLTg5YjgtZGEyNTgyNmQxMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3Gpo5Vcbbv6UIP1eJRyuTIW9Tx3XF8qFG0Baeqma4duzu+59V/AzLR S+tIZz6OpJKbe9nU3TWD/FLHaVPNM/lnhlb3kWEckvmxUA3o5JxucbR2LXopESa4 qs/Ta99ntqhtUP1JUzGtAHjJ3Kfq1B9Rcu8W33xOf8TFwyIr2HQm4X8YxFRvFHt+ N6QLacJxYHPejtm0jtBjIIpphbNqVBPWgkeT5DIQuQ7bT8UGvVznM1iVdYbinGKA Ifv34CNjSTYoCWWdnLI/trB24NQBpfMOd0XJTcod9zwGANYSMCKDrNkMPd57aum+ uIIybPJ49sfEtmtU1xDdSzhh2pNBJpE= -----END CERTIFICATE-----Generated at Sat Oct 10 13:48:43 2026 by rpki-client