$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa File: 5d321907-381d-32af-ad76-b3fd1b984280.roa (raw, json) Hash identifier: D/6kRa/P5ZSguOAamyoGK+bXPnAJTBkyFSsVJr3e8kw= Subject key identifier: 2E:15:7B:5D:E5:12:F2:3D:8D:CE:D2:12:42:6A:F6:0D:39:54:B6:CE Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584F49731631DDA8C87BE79FFB00 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31942 IP address blocks: 199.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:16:31:dd:a8:c8:7b:e7:9f:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4005c524-450b-4b82-85c0-db68557f9b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d1:44:a9:ea:32:e0:53:9c:d3:21:13:59:de: a0:bf:88:b2:2f:59:e5:cf:e2:12:e5:4c:f1:14:2c: d7:69:c1:85:15:55:9d:e4:85:be:40:92:2c:5d:c3: e2:b1:36:32:31:81:ca:93:35:07:42:dd:61:15:6d: 62:ad:ff:12:f4:31:68:02:95:26:e1:d5:bb:78:1e: 11:ef:cc:62:f4:35:9f:85:79:22:38:3f:20:37:b2: b4:e1:2d:0d:ad:92:c2:c1:51:b3:7c:54:d5:63:87: b3:a8:de:4c:51:85:c6:1c:ef:77:a8:fa:c9:63:18: 4f:23:e1:d5:1d:2c:2f:fb:b4:e7:71:f4:37:df:24: c9:bf:cd:dc:c2:5c:48:a3:37:60:f2:19:b4:8f:3f: 9d:05:c0:4d:ce:9e:68:54:c0:5f:82:e4:75:44:ad: b3:29:ed:29:e6:6f:b7:71:1b:97:41:fa:aa:c6:22: a7:6c:71:d7:90:e4:9f:29:33:53:34:ee:3d:f5:5c: 51:f3:8c:6e:80:73:ef:cd:2b:ff:03:12:fb:9c:17: bd:74:bb:9f:b0:50:8d:c3:b3:d4:b9:ac:34:b4:9d: ef:ad:8e:aa:4d:ce:cf:e3:d9:f1:26:26:07:d7:04: 4d:6f:00:71:43:54:d4:cf:48:90:6e:4b:00:32:b1: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:15:7B:5D:E5:12:F2:3D:8D:CE:D2:12:42:6A:F6:0D:39:54:B6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 199.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:75:dd:4d:4f:d5:41:ac:67:24:4d:03:0e:8e:34:14:26:a0: 80:ea:a9:c3:4d:37:79:c4:57:dd:0f:6f:15:ac:8c:d4:b8:fe: 18:d2:3c:ff:73:a0:9a:9d:a7:4f:ee:6c:87:d4:67:32:eb:55: f2:8c:f4:e8:4d:5f:d2:f5:49:c3:bf:57:2e:0c:4c:bf:7c:fa: 20:50:04:29:c5:bc:03:64:8d:ee:28:a3:11:c4:51:c0:11:d5: e7:36:dd:85:dc:a5:5b:a1:ac:74:94:c3:28:03:d5:c1:23:a9: f7:ba:c4:ba:e3:35:5d:a3:45:e3:f0:f6:d7:97:4d:13:41:02: 41:d2:3e:31:20:7e:1e:22:d8:de:6d:72:52:4a:75:7a:24:aa: 5b:e9:0e:2b:e1:71:25:86:32:d2:dc:17:14:6a:8a:62:8b:c6: ad:c5:64:68:07:a5:a3:ba:39:db:08:10:88:4a:5d:a9:4b:a6: 6f:8d:ce:d5:19:cb:df:bc:9b:07:46:3e:86:69:7c:e3:3c:ca: 9d:a6:2d:9e:98:a9:f5:7b:84:a9:cd:6e:8c:47:77:62:15:db: 65:54:79:7f:b0:d0:0c:4c:90:46:57:c2:99:d0:6d:10:17:21: 06:15:f9:8b:5e:a0:22:12:63:66:e7:15:e4:22:e0:3c:22:f3: fc:12:ab:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxYx3ajIe+ef+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDAwNWM1MjQtNDUwYi00YjgyLTg1YzAtZGI2ODU1N2Y5YjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdFEqeoy4FOc0yETWd6gv4iyL1nlz+IS5Uzx FCzXacGFFVWd5IW+QJIsXcPisTYyMYHKkzUHQt1hFW1irf8S9DFoApUm4dW7eB4R 78xi9DWfhXkiOD8gN7K04S0NrZLCwVGzfFTVY4ezqN5MUYXGHO93qPrJYxhPI+HV HSwv+7TncfQ33yTJv83cwlxIozdg8hm0jz+dBcBNzp5oVMBfguR1RK2zKe0p5m+3 cRuXQfqqxiKnbHHXkOSfKTNTNO499VxR84xugHPvzSv/AxL7nBe9dLufsFCNw7PU uaw0tJ3vrY6qTc7P49nxJiYH1wRNbwBxQ1TUz0iQbksAMrHb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4Ve13lEvI9jc7SEkJq9g05VLbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNWQzMjE5MDctMzgxZC0z MmFmLWFkNzYtYjNmZDFiOTg0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN13U1P1UGsZyRNAw6ONBQmoIDqqcNNN3nEV90PbxWsjNS4/hjSPP9z oJqdp0/ubIfUZzLrVfKM9OhNX9L1ScO/Vy4MTL98+iBQBCnFvANkje4ooxHEUcAR 1ec23YXcpVuhrHSUwygD1cEjqfe6xLrjNV2jRePw9teXTRNBAkHSPjEgfh4i2N5t clJKdXokqlvpDivhcSWGMtLcFxRqimKLxq3FZGgHpaO6OdsIEIhKXalLpm+NztUZ y9+8mwdGPoZpfOM8yp2mLZ6YqfV7hKnNboxHd2IV22VUeX+w0AxMkEZXwpnQbRAX IQYV+YteoCISY2bnFeQi4Dwi8/wSq/k= -----END CERTIFICATE-----Generated at Sun Sep 27 05:31:52 2026 by rpki-client