$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa File: 11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa (raw, json) Hash identifier: NCK7t8J3JLUXVVG3DkGTNsV+zGwHWM6biEmDUgLco0k= Subject key identifier: 59:F7:7F:63:04:A5:85:50:61:C2:9F:AD:9D:C5:0E:10:4C:21:E4:B6 Certificate issuer: /CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Certificate serial: 010D0C9F4328584EA78893BB306458C0FF8A9BC0 Authority key identifier: D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 199.189.36.0/24 maxlen: 24 199.189.37.0/24 maxlen: 24 199.189.38.0/24 maxlen: 24 199.189.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:93:bb:30:64:58:c0:ff:8a:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8f4a869d-4350-4ff2-b7e0-5292bdad4ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:7a:69:71:34:ee:14:e0:79:98:3d:b3:fc: 41:7c:63:d7:4d:e4:9a:f6:d6:a8:e7:f2:9c:12:ec: 3e:bc:a5:2a:03:70:66:ac:c7:d5:ff:7c:8e:b6:b3: 1e:ef:3f:b0:03:e6:bd:2d:5f:56:c3:8b:be:50:59: e1:c3:17:b3:45:87:e6:a8:c0:4c:19:de:b8:d6:ef: 9d:73:03:b9:a7:90:3f:8c:8a:d0:4b:75:44:53:31: ef:c1:1f:18:0a:59:d3:8c:db:76:9e:4c:b6:ef:1a: cb:0f:25:75:4e:af:0f:5f:c7:65:05:ba:50:5f:f9: 05:08:a4:a2:22:f2:bb:49:a9:39:18:5d:c5:56:7d: 3d:5a:9f:65:2b:5a:38:87:f9:d3:de:30:38:d5:38: 90:86:4b:d6:5f:84:d0:60:7e:7e:64:24:f1:b3:17: 96:16:0a:76:92:d2:22:c4:d8:91:6b:06:f0:0e:c0: b5:ff:d1:13:7b:2b:28:e9:57:30:31:8e:d9:4f:07: 5b:f0:82:2a:a8:77:8f:c1:d5:32:32:ad:6e:a9:48: ea:bf:ac:02:db:ee:4c:8e:61:4c:f7:b2:51:43:a5: 0c:58:65:f5:74:9a:e7:1d:8a:26:ea:6b:a1:01:b0: c4:dd:39:1f:da:39:fc:01:a1:96:d6:b9:df:5d:ba: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F7:7F:63:04:A5:85:50:61:C2:9F:AD:9D:C5:0E:10:4C:21:E4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl X509v3 Authority Key Identifier: keyid:D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer sbgp-ipAddrBlock: critical IPv4: 199.189.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0f:81:79:3d:31:1a:d9:6b:d7:b2:1f:15:1b:4a:9c:00:f1: 0f:b1:3c:80:8d:0a:08:3b:8b:73:09:9f:c5:28:d3:8f:7b:bb: 0b:a0:cd:ec:30:6a:df:81:70:e5:dc:17:68:a6:25:33:e9:1c: 1d:04:10:9d:8f:ec:bf:01:94:90:f2:2a:33:08:9c:27:7a:4c: 96:a7:1f:96:dc:75:ac:f0:ea:63:70:82:ab:01:94:d8:3b:9f: bc:a9:87:bb:bc:dd:15:07:75:42:9c:95:b0:25:45:a8:ef:14: 0b:55:c2:52:58:5b:1f:d9:15:eb:aa:89:be:04:c4:ef:cb:55: 6d:c2:10:61:40:b2:af:27:ee:9d:9a:a2:e5:2b:7c:2c:2b:d4: ec:8d:4f:95:44:a8:ee:ad:20:c1:af:60:a4:5a:d0:9e:14:cc: 6b:37:05:be:2e:d4:00:1b:b8:9e:e7:d6:57:9a:e5:ff:cd:01: 0c:5d:29:e6:c7:d4:e5:d2:18:54:54:a7:96:28:04:2d:d2:cc: 70:d1:8c:c5:ec:34:8d:37:c3:b6:14:0e:3c:c3:a3:15:7b:2b: ac:79:f1:9e:46:d7:f6:a9:0c:97:74:56:84:04:25:41:3e:f7: 48:50:da:c6:13:1b:ab:c5:6d:da:e4:fb:dc:4a:2d:d1:52:44: e9:b7:18:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJO7MGRYwP+Km8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwMjViZTEtZWI0Yi00Y2Y3LThjZmUtOWU0ZjUzMTE4 MDJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGY0YTg2OWQtNDM1MC00ZmYyLWI3ZTAtNTI5MmJkYWQ0YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5l6aXE07hTgeZg9s/xBfGPXTeSa9tao5/Kc Euw+vKUqA3BmrMfV/3yOtrMe7z+wA+a9LV9Ww4u+UFnhwxezRYfmqMBMGd641u+d cwO5p5A/jIrQS3VEUzHvwR8YClnTjNt2nky27xrLDyV1Tq8PX8dlBbpQX/kFCKSi IvK7Sak5GF3FVn09Wp9lK1o4h/nT3jA41TiQhkvWX4TQYH5+ZCTxsxeWFgp2ktIi xNiRawbwDsC1/9ETeyso6VcwMY7ZTwdb8IIqqHePwdUyMq1uqUjqv6wC2+5MjmFM 97JRQ6UMWGX1dJrnHYom6muhAbDE3Tkf2jn8AaGW1rnfXbrLiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn3f2MEpYVQYcKfrZ3FDhBMIeS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NjAy NWJlMS1lYjRiLTRjZjctOGNmZS05ZTRmNTMxMTgwMmQvMTFhYTdlZTYtMGViMy0z MzkwLTg0ODUtMWIyYzI5YjRjYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODYwMjViZTEtZWI0Yi00Y2Y3LThj ZmUtOWU0ZjUzMTE4MDJkLzg2MDI1YmUxLWViNGItNGNmNy04Y2ZlLTllNGY1MzEx ODAyZC5jcmwwHwYDVR0jBBgwFoAU2XU6rAwfy7QGAKlPNOGWXH2j5BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjAyNWJlMS1lYjRiLTRjZjctOGNmZS05ZTRm NTMxMTgwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx70kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwPgXk9MRrZa9eyHxUbSpwA8Q+xPICNCgg7i3MJn8Uo0497uwugzeww at+BcOXcF2imJTPpHB0EEJ2P7L8BlJDyKjMInCd6TJanH5bcdazw6mNwgqsBlNg7 n7yph7u83RUHdUKclbAlRajvFAtVwlJYWx/ZFeuqib4ExO/LVW3CEGFAsq8n7p2a ouUrfCwr1OyNT5VEqO6tIMGvYKRa0J4UzGs3Bb4u1AAbuJ7n1lea5f/NAQxdKebH 1OXSGFRUp5YoBC3SzHDRjMXsNI03w7YUDjzDoxV7K6x58Z5G1/apDJd0VoQEJUE+ 90hQ2sYTG6vFbdrk+9xKLdFSROm3GE0= -----END CERTIFICATE-----Generated at Fri Sep 4 23:51:24 2026 by rpki-client