$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa File: 8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json) Hash identifier: zYOD2mt5xpfWoBgePht4AC9IQQpFREIasdUKFi1Rq1g= Subject key identifier: 24:2A:64:A5:7F:E3:24:DE:5E:9F:BC:85:2A:FF:8B:86:04:41:52:42 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F655E69EFA272356116535D40 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 398395 IP address blocks: 199.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:69:ef:a2:72:35:61:16:53:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=ad6cf400-4031-48ed-a800-955824baddf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:c0:a1:43:3c:44:92:8c:2b:d0:96:30:2c: 29:2c:5e:d4:c7:35:3d:a6:a6:95:0e:42:66:5a:60: df:2c:7a:6b:21:c9:7c:fe:5b:46:c5:f3:49:9f:64: ce:c0:fd:c5:ae:95:c1:58:a2:3e:64:b8:43:b8:13: 28:e7:38:ec:eb:8b:dc:68:0a:1e:be:7d:56:4d:6f: 02:69:38:c4:60:02:2f:24:8c:63:bb:55:b8:b6:24: 58:63:c5:14:8b:1f:c5:1b:46:43:da:c6:1e:b8:0a: 92:1b:ae:2a:99:83:3d:e7:7f:0f:ba:05:76:e6:43: f5:fa:dd:35:48:04:fa:2d:22:c3:90:d1:62:bd:69: a7:96:2d:8c:d0:45:9c:08:eb:7e:46:7b:4e:95:b8: 85:54:f2:8a:cf:1f:e7:04:30:04:61:3d:a6:c0:70: df:53:c4:a8:05:5f:05:d3:9d:c4:29:b0:99:b0:ba: 4e:8c:eb:c5:63:c2:85:fd:66:2c:b4:37:b9:79:e6: 50:7f:8b:b2:d4:7c:97:f0:37:62:59:a2:2a:21:49: d8:79:ac:04:1d:88:4e:c0:9f:ca:b6:91:30:d6:17: 10:b1:7a:db:be:04:1a:34:35:71:3c:fa:a5:a8:e4: d8:32:bd:2b:af:b6:ee:e2:d4:80:95:94:65:73:83: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2A:64:A5:7F:E3:24:DE:5E:9F:BC:85:2A:FF:8B:86:04:41:52:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:09:2f:95:ad:b2:56:32:35:b5:b5:79:b8:27:57:06:bd:c3: ba:cb:40:01:e9:da:b7:14:32:6a:4f:1b:e2:52:f3:81:c7:d2: 4a:df:1b:89:0c:e1:91:bc:6c:d0:80:35:ea:46:20:1a:be:aa: 6d:7d:08:d8:cb:b4:56:da:56:4d:45:f5:71:61:d4:b6:c1:b1: c2:f1:46:8c:01:3a:df:e8:08:55:68:fc:45:e8:8b:89:07:25: d9:11:02:36:5e:bd:91:5e:c5:2f:64:d5:d8:69:76:48:19:34: 4f:69:f1:d3:2b:f6:7d:e7:6e:dd:3e:57:ab:84:95:32:25:d0: 2d:65:2e:5b:c5:a5:92:38:a7:0d:b6:46:3a:fe:da:3d:70:e2: 0d:f2:70:5d:4b:99:b5:70:46:06:3d:11:cb:54:7e:57:c5:4f: d4:e9:32:6e:13:3a:85:5d:d9:6f:74:c2:ad:05:d5:f0:19:26: b8:98:58:5f:d0:96:9e:b6:9e:37:8d:11:5e:41:78:c7:40:4d: 85:f2:79:e5:6f:c2:78:6e:2e:42:17:fe:aa:28:b8:70:23:d3: bc:01:fd:5e:56:3e:cb:9f:4c:85:30:aa:40:94:87:4d:bb:4d: 5a:c6:68:00:ad:bb:53:ab:16:b0:f9:62:9d:84:49:00:ab:a1: 8a:5b:8c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmnvonI1YRZTXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YWQ2Y2Y0MDAtNDAzMS00OGVkLWE4MDAtOTU1ODI0YmFkZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho3AoUM8RJKMK9CWMCwpLF7UxzU9pqaVDkJm WmDfLHprIcl8/ltGxfNJn2TOwP3FrpXBWKI+ZLhDuBMo5zjs64vcaAoevn1WTW8C aTjEYAIvJIxju1W4tiRYY8UUix/FG0ZD2sYeuAqSG64qmYM9538PugV25kP1+t01 SAT6LSLDkNFivWmnli2M0EWcCOt+RntOlbiFVPKKzx/nBDAEYT2mwHDfU8SoBV8F 053EKbCZsLpOjOvFY8KF/WYstDe5eeZQf4uy1HyX8DdiWaIqIUnYeawEHYhOwJ/K tpEw1hcQsXrbvgQaNDVxPPqlqOTYMr0rr7bu4tSAlZRlc4PqiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQqZKV/4yTeXp+8hSr/i4YEQVJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGQzNmEzY2EtNjYwYy0z N2I4LTkzMGItMDRiZDNiMjY3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0JL5WtslYyNbW1ebgnVwa9w7rLQAHp2rcUMmpPG+JS84HH0krfG4kM 4ZG8bNCANepGIBq+qm19CNjLtFbaVk1F9XFh1LbBscLxRowBOt/oCFVo/EXoi4kH JdkRAjZevZFexS9k1dhpdkgZNE9p8dMr9n3nbt0+V6uElTIl0C1lLlvFpZI4pw22 Rjr+2j1w4g3ycF1LmbVwRgY9EctUflfFT9TpMm4TOoVd2W90wq0F1fAZJriYWF/Q lp62njeNEV5BeMdATYXyeeVvwnhuLkIX/qoouHAj07wB/V5WPsufTIUwqkCUh027 TVrGaACtu1OrFrD5Yp2ESQCroYpbjJE= -----END CERTIFICATE-----Generated at Thu Oct 22 11:58:46 2026 by rpki-client