$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/1a10c1e8-a73e-3df4-92d6-cf4973858891.roa File: 1a10c1e8-a73e-3df4-92d6-cf4973858891.roa (raw, json) Hash identifier: h+Y33m52ibzeCLDIHzwxfjGBTGsmITAVl3tuCylNb1c= Subject key identifier: 33:5E:E5:59:C0:C8:D9:C2:EB:5C:EA:F9:65:CE:18:00:26:5A:91:23 Certificate issuer: /CN=c9789d30-0da1-46bb-89d2-2d887198f2b9 Certificate serial: 010D0C9F4328584F91E46666C04835D8C67A29C8 Authority key identifier: 22:33:94:58:F7:3B:3E:D1:F0:98:5E:73:90:DE:3E:32:CE:F1:EB:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/1a10c1e8-a73e-3df4-92d6-cf4973858891.roa Signing time: Tue 20 Oct 2026 23:47:51 +0000 ROA not before: Tue 20 Oct 2026 23:47:51 +0000 ROA not after: Mon 18 Jan 2027 23:08:58 +0000 asID: 3548 IP address blocks: 199.5.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:e4:66:66:c0:48:35:d8:c6:7a:29:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9789d30-0da1-46bb-89d2-2d887198f2b9 Validity Not Before: Oct 20 23:47:51 2026 GMT Not After : Jan 18 23:08:58 2027 GMT Subject: CN=138bf0cd-3c7f-4f89-be2a-d3b5f248e29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:7d:07:a8:ff:39:f8:94:e1:56:a0:d9:97: 62:f1:0e:04:95:01:d4:4c:be:c0:03:29:10:65:b5: 7b:89:2a:7a:50:12:87:26:66:0f:c2:01:d8:8a:b2: 17:f4:af:5e:c5:48:15:dd:e9:92:e1:9a:98:41:09: 76:03:b5:d2:8d:c1:65:dd:46:19:45:f7:14:29:91: 9d:b2:05:df:02:3a:1a:5d:5c:ab:78:14:ac:7d:a7: 93:59:7a:f9:61:d1:90:ed:84:75:9e:12:2d:8f:06: 89:2b:81:5a:05:16:84:cf:61:3e:ea:20:82:da:87: 53:58:62:3c:86:47:5a:a8:53:82:0c:62:4e:43:f4: 24:d8:25:df:db:1e:f9:b4:ff:a8:ed:f9:b0:c7:6a: 39:96:00:ea:54:be:41:03:b6:99:65:9c:e9:a7:d6: d5:c2:15:4d:ce:05:7c:fb:f5:dd:76:88:7e:e7:5e: c1:63:73:82:dc:06:41:7a:49:63:f7:76:d4:cb:56: 0c:79:54:ff:e3:3b:32:60:c2:88:d8:e3:cd:d4:1b: 5f:bf:a9:5c:3b:cc:81:bf:7d:89:29:6c:c4:8a:26: 27:11:28:76:c3:07:da:6f:e4:14:fd:e1:9e:95:ac: df:0c:dd:29:ca:f5:0b:19:48:bf:9e:ae:68:10:6b: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:E5:59:C0:C8:D9:C2:EB:5C:EA:F9:65:CE:18:00:26:5A:91:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/1a10c1e8-a73e-3df4-92d6-cf4973858891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.crl X509v3 Authority Key Identifier: keyid:22:33:94:58:F7:3B:3E:D1:F0:98:5E:73:90:DE:3E:32:CE:F1:EB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer sbgp-ipAddrBlock: critical IPv4: 199.5.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:16:9c:15:9a:f3:f9:c0:19:1f:4d:9b:ad:29:00:2b:2c:7d: 3f:6c:b6:0f:76:d4:e7:bf:9d:3f:e0:2e:7f:ab:99:86:c9:61: 5a:33:8a:24:54:84:57:cc:b8:c5:59:05:f0:95:b8:24:81:a4: 1c:16:8b:77:e1:59:25:c2:cd:3c:2a:6c:74:32:73:63:31:90: 87:f3:bf:5b:43:c4:70:d3:1b:52:f9:ec:78:df:34:18:33:45: dd:8f:c3:b8:e6:89:f8:4f:8f:78:45:2b:ea:53:e9:91:18:a1: 59:86:7c:3a:73:a9:cb:5a:26:03:a3:a2:c3:dd:3f:03:a7:72: a4:ab:4c:3f:ba:bf:56:aa:1f:60:46:66:a8:d9:41:3c:5b:83: 88:11:da:a4:7e:c2:6a:c9:bc:1a:8b:3c:b1:cb:77:7d:35:38: f5:68:a3:45:e7:cb:9c:59:01:fe:e2:f0:e8:bb:9b:30:a3:ba: 91:d2:7f:3f:68:45:ca:83:0e:0c:82:a4:81:98:dd:f0:e4:aa: 3f:66:ac:ff:79:c8:1d:e9:e6:c2:1f:aa:3b:a5:22:2d:e5:f0: f3:b3:3d:57:23:bf:d4:5e:09:b5:78:64:fa:a3:30:46:b9:34: bd:67:22:43:6b:da:24:66:f4:e3:90:ba:21:32:50:39:58:c0: 26:86:e5:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+R5GZmwEg12MZ6KcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk3ODlkMzAtMGRhMS00NmJiLTg5ZDItMmQ4ODcxOThm MmI5MB4XDTI2MTAyMDIzNDc1MVoXDTI3MDExODIzMDg1OFowLzEtMCsGA1UEAxMk MTM4YmYwY2QtM2M3Zi00Zjg5LWJlMmEtZDNiNWYyNDhlMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/t9B6j/OfiU4Vag2Zdi8Q4ElQHUTL7AAykQ ZbV7iSp6UBKHJmYPwgHYirIX9K9exUgV3emS4ZqYQQl2A7XSjcFl3UYZRfcUKZGd sgXfAjoaXVyreBSsfaeTWXr5YdGQ7YR1nhItjwaJK4FaBRaEz2E+6iCC2odTWGI8 hkdaqFOCDGJOQ/Qk2CXf2x75tP+o7fmwx2o5lgDqVL5BA7aZZZzpp9bVwhVNzgV8 +/Xddoh+517BY3OC3AZBeklj93bUy1YMeVT/4zsyYMKI2OPN1Btfv6lcO8yBv32J KWzEiiYnESh2wwfab+QU/eGelazfDN0pyvULGUi/nq5oEGv8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNe5VnAyNnC61zq+WXOGAAmWpEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTc4 OWQzMC0wZGExLTQ2YmItODlkMi0yZDg4NzE5OGYyYjkvMWExMGMxZTgtYTczZS0z ZGY0LTkyZDYtY2Y0OTczODU4ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk3ODlkMzAtMGRhMS00NmJiLTg5 ZDItMmQ4ODcxOThmMmI5L2M5Nzg5ZDMwLTBkYTEtNDZiYi04OWQyLTJkODg3MTk4 ZjJiOS5jcmwwHwYDVR0jBBgwFoAUIjOUWPc7PtHwmF5zkN4+Ms7x6zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTc4OWQzMC0wZGExLTQ2YmItODlkMi0yZDg4 NzE5OGYyYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxwUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsWnBWa8/nAGR9Nm60pACssfT9stg921Oe/nT/gLn+rmYbJYVoziiRU hFfMuMVZBfCVuCSBpBwWi3fhWSXCzTwqbHQyc2MxkIfzv1tDxHDTG1L57HjfNBgz Rd2Pw7jmifhPj3hFK+pT6ZEYoVmGfDpzqctaJgOjosPdPwOncqSrTD+6v1aqH2BG ZqjZQTxbg4gR2qR+wmrJvBqLPLHLd301OPVoo0Xny5xZAf7i8Oi7mzCjupHSfz9o RcqDDgyCpIGY3fDkqj9mrP95yB3p5sIfqjulIi3l8POzPVcjv9ReCbV4ZPqjMEa5 NL1nIkNr2iRm9OOQuiEyUDlYwCaG5d0= -----END CERTIFICATE-----Generated at Thu Oct 22 11:54:05 2026 by rpki-client