$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0b223c08-a189-3515-852e-cff5e3b8da2f.roa File: 0b223c08-a189-3515-852e-cff5e3b8da2f.roa (raw, json) Hash identifier: IxBTe3jEE9c906SBlP7tnsBq6F5/pVbCkDJyu4Be4jc= Subject key identifier: 86:D2:C6:79:DE:9F:A6:51:B5:F6:0E:14:68:04:D6:8A:BD:21:B2:AC Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F374D508E0EFB6A76DCF5FF00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0b223c08-a189-3515-852e-cff5e3b8da2f.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 199.232.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:50:8e:0e:fb:6a:76:dc:f5:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=86c0ddda-bc7e-4766-80ee-d572c98a68cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:dd:af:34:b9:38:8a:aa:13:45:50:a4:a6: 96:cd:05:24:75:27:83:c3:a7:84:d0:de:fc:54:4e: 43:3e:06:c4:f4:c5:3a:af:38:d6:ed:a6:6d:bf:eb: d1:d3:40:52:c3:14:c2:63:16:c3:58:ed:11:2d:53: 00:27:0d:a4:57:8a:a2:b9:c4:85:7a:f3:ab:23:da: 4c:63:7c:25:c5:a2:86:fb:5e:30:01:01:64:af:38: e9:5a:2a:02:f4:93:4a:b1:81:4c:1d:c3:7f:16:ad: f7:b0:99:63:d1:be:6d:77:2a:4b:7d:8e:b3:d4:12: 27:1d:83:d4:a5:31:87:75:b8:ae:b4:f9:4f:9a:e3: d3:f8:40:4f:c5:95:fb:9d:5d:d5:d5:c5:c5:c4:7a: 31:71:02:08:dc:61:ff:0f:51:6d:31:fe:83:80:99: ba:dc:78:c7:a5:13:ab:18:1d:4d:5b:3d:f0:4b:71: be:dd:04:ab:da:49:13:4b:cd:cc:83:b6:17:08:c0: 83:26:e0:0d:26:6f:2d:d0:5a:2a:b7:8b:6f:fe:b4: 9e:0f:55:aa:84:15:9d:26:37:fa:f5:a9:8e:9b:5d: a3:aa:2d:58:65:c5:c6:f5:c2:f5:72:70:64:09:4b: 50:a0:85:66:22:4e:cc:bf:ad:f4:a2:1f:47:bf:31: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:C6:79:DE:9F:A6:51:B5:F6:0E:14:68:04:D6:8A:BD:21:B2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0b223c08-a189-3515-852e-cff5e3b8da2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:23:37:55:00:2a:a6:b9:85:ee:45:ad:7d:c8:c9:71:f2:ed: 57:74:b6:95:e4:a0:e5:bf:40:1c:51:0a:89:73:81:5e:d8:a8: 9b:a3:a9:c3:d5:64:01:29:dc:c6:70:16:d8:08:be:31:ea:a2: 66:92:74:0d:3e:8f:fe:32:41:84:59:ea:0e:54:35:53:89:51: 1b:48:fb:e2:d0:c7:b5:17:4d:02:b7:1a:0a:0e:b7:71:42:22: c9:65:b2:29:16:bb:7c:c4:82:13:cb:5b:10:fa:0b:60:73:58: 17:03:0a:b8:ab:5b:7d:5c:1f:f3:68:ca:6c:32:d0:f6:a9:a7: 55:14:23:96:5d:85:57:02:67:32:16:5b:94:c2:e2:65:fa:62: 14:e4:bc:e5:dd:87:ee:50:87:8e:72:7f:59:25:78:8c:cc:b9: 76:42:ca:08:55:e4:68:d6:2a:64:e7:da:fb:5d:4f:cd:bb:d8: b1:02:87:d3:0c:8b:09:ce:66:6b:bb:ba:c5:89:14:9f:a8:ab: d4:1c:7b:12:cd:e1:b8:b0:7c:d0:bf:a3:cd:c4:89:44:89:e5: 79:51:cb:c0:40:04:8c:8b:a4:18:36:3c:d8:ba:66:97:e3:5a: 30:4a:53:3f:e6:8a:1c:4f:63:2d:26:8c:a0:a3:93:30:15:43: 13:00:71:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVCODvtqdtz1/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ODZjMGRkZGEtYmM3ZS00NzY2LTgwZWUtZDU3MmM5OGE2OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8rdrzS5OIqqE0VQpKaWzQUkdSeDw6eE0N78 VE5DPgbE9MU6rzjW7aZtv+vR00BSwxTCYxbDWO0RLVMAJw2kV4qiucSFevOrI9pM Y3wlxaKG+14wAQFkrzjpWioC9JNKsYFMHcN/Fq33sJlj0b5tdypLfY6z1BInHYPU pTGHdbiutPlPmuPT+EBPxZX7nV3V1cXFxHoxcQII3GH/D1FtMf6DgJm63HjHpROr GB1NWz3wS3G+3QSr2kkTS83Mg7YXCMCDJuANJm8t0Foqt4tv/rSeD1WqhBWdJjf6 9amOm12jqi1YZcXG9cL1cnBkCUtQoIVmIk7Mv630oh9HvzFOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbSxnnen6ZRtfYOFGgE1oq9IbKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMGIyMjNjMDgtYTE4OS0z NTE1LTg1MmUtY2ZmNWUzYjhkYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIjN1UAKqa5he5FrX3IyXHy7Vd0tpXkoOW/QBxRColzgV7YqJujqcPV ZAEp3MZwFtgIvjHqomaSdA0+j/4yQYRZ6g5UNVOJURtI++LQx7UXTQK3GgoOt3FC IsllsikWu3zEghPLWxD6C2BzWBcDCrirW31cH/Noymwy0Papp1UUI5ZdhVcCZzIW W5TC4mX6YhTkvOXdh+5Qh45yf1kleIzMuXZCyghV5GjWKmTn2vtdT8272LECh9MM iwnOZmu7usWJFJ+oq9QcexLN4biwfNC/o83EiUSJ5XlRy8BABIyLpBg2PNi6Zpfj WjBKUz/mihxPYy0mjKCjkzAVQxMAcSA= -----END CERTIFICATE-----Generated at Sat Sep 26 13:46:11 2026 by rpki-client