$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/8ffbbe28-de06-3b7e-8c63-5b024db0dab9.roa File: 8ffbbe28-de06-3b7e-8c63-5b024db0dab9.roa (raw, json) Hash identifier: rrKAOAqDbxsfoTuLS06hHIrtyN2qKYhyyqyCsm/9Vbs= Subject key identifier: 73:E0:92:3C:04:DA:4C:C1:A0:BA:67:07:40:3A:A1:AA:6E:0B:AC:86 Certificate issuer: /CN=6d36385f-7427-4130-8bf6-9e2a1e89b1f3 Certificate serial: 010D0C9F4328584F9BCDEAB477E0150716A62380 Authority key identifier: BA:14:A8:F1:39:74:61:8A:EB:63:3C:1B:1A:9A:61:AD:91:16:C9:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/8ffbbe28-de06-3b7e-8c63-5b024db0dab9.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 395954 IP address blocks: 199.34.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ea:b4:77:e0:15:07:16:a6:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d36385f-7427-4130-8bf6-9e2a1e89b1f3 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=1141847c-db2f-45f7-a016-6bf6b66f2ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:b7:4b:e9:0d:85:6e:14:a5:40:96:3c:59: b4:ab:2c:e1:25:0e:7d:69:4a:0f:5b:0a:2f:1a:6b: a0:74:d8:d4:81:cf:12:83:7a:01:8f:94:d0:b5:64: e5:b5:ef:42:5d:31:1c:3d:9a:b5:0a:9b:cd:32:f9: be:47:0b:d6:c7:b1:3c:53:7d:da:7e:ba:20:ce:2f: 29:f7:32:ab:d4:84:2f:87:3a:9b:b7:1e:16:3b:e3: ff:32:73:a2:97:2c:c4:dc:fe:9f:08:54:36:23:59: e5:4b:da:d1:2a:64:c0:5c:62:e3:54:95:21:fa:ff: 7c:2d:0e:4e:ac:3f:6c:af:a4:70:10:77:91:a7:28: 13:cb:b1:3c:6c:e5:8b:f2:2c:bb:f8:1b:64:9e:86: bb:4a:39:07:21:c6:49:f3:8b:0b:ca:c7:cd:ec:92: 14:27:8b:fb:8f:cd:85:99:f3:eb:34:a4:0d:f4:b1: 61:fb:27:52:ba:45:48:a1:bd:11:c3:a9:02:35:55: 5c:bd:41:7a:90:9a:00:32:18:34:f2:c4:83:62:57: 4b:8a:45:3c:3d:20:a3:48:e6:e5:a7:ee:6d:25:a6: e6:aa:37:cf:e3:bc:92:5e:89:4c:d3:6f:dc:db:1d: a1:54:f4:02:67:1d:dd:bc:fc:42:5c:57:c4:7b:8a: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E0:92:3C:04:DA:4C:C1:A0:BA:67:07:40:3A:A1:AA:6E:0B:AC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/8ffbbe28-de06-3b7e-8c63-5b024db0dab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.crl X509v3 Authority Key Identifier: keyid:BA:14:A8:F1:39:74:61:8A:EB:63:3C:1B:1A:9A:61:AD:91:16:C9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer sbgp-ipAddrBlock: critical IPv4: 199.34.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1e:58:be:7b:9b:e6:1b:e9:6e:2a:ff:8f:60:b3:98:73:60: 21:fa:3b:d0:89:14:67:aa:30:32:0d:f5:d4:03:91:23:7a:a2: 3a:4b:21:22:89:6c:73:fc:e6:eb:5b:de:22:6e:4c:d2:dc:cb: ec:57:37:79:db:c2:af:54:7e:f9:71:b2:80:68:4c:42:7f:cc: 1e:e3:53:c6:ec:35:31:0e:af:52:93:dc:68:2a:b5:f6:f3:e6: db:7d:9e:d1:ab:bc:52:f3:a4:d3:a9:ee:d4:cc:0b:db:c6:8f: fd:06:df:be:ad:04:2f:c1:b4:34:36:a7:94:a8:ef:4f:e6:45: 40:60:70:36:36:5a:e3:7e:f2:05:bb:b5:7a:d0:da:0b:9d:64: be:e3:6b:95:f6:90:e4:56:0a:7f:f7:50:a4:7f:e7:16:fe:7c: d1:63:6a:6e:f0:f1:48:cc:e4:5b:54:08:3f:1d:a8:65:2e:f5: 39:54:20:25:ae:cc:78:d0:8b:db:ab:4b:fa:4f:cb:5c:e5:e4: 30:7f:52:36:c2:0f:00:f9:9e:30:76:43:bb:2b:9a:d2:78:f1: 99:62:ac:c0:e5:43:48:f8:7a:52:7a:8a:78:d2:a8:d8:a3:1f: ab:c2:bd:33:86:94:87:13:f6:aa:d8:a7:59:bc:70:b3:77:11: 00:db:98:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeq0d+AVBxamI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQzNjM4NWYtNzQyNy00MTMwLThiZjYtOWUyYTFlODli MWYzMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MTE0MTg0N2MtZGIyZi00NWY3LWEwMTYtNmJmNmI2NmYyZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrG3S+kNhW4UpUCWPFm0qyzhJQ59aUoPWwov GmugdNjUgc8Sg3oBj5TQtWTlte9CXTEcPZq1CpvNMvm+RwvWx7E8U33afrogzi8p 9zKr1IQvhzqbtx4WO+P/MnOilyzE3P6fCFQ2I1nlS9rRKmTAXGLjVJUh+v98LQ5O rD9sr6RwEHeRpygTy7E8bOWL8iy7+Btknoa7SjkHIcZJ84sLysfN7JIUJ4v7j82F mfPrNKQN9LFh+ydSukVIob0Rw6kCNVVcvUF6kJoAMhg08sSDYldLikU8PSCjSObl p+5tJabmqjfP47ySXolM02/c2x2hVPQCZx3dvPxCXFfEe4qx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPgkjwE2kzBoLpnB0A6oapuC6yGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZDM2 Mzg1Zi03NDI3LTQxMzAtOGJmNi05ZTJhMWU4OWIxZjMvOGZmYmJlMjgtZGUwNi0z YjdlLThjNjMtNWIwMjRkYjBkYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmQzNjM4NWYtNzQyNy00MTMwLThi ZjYtOWUyYTFlODliMWYzLzZkMzYzODVmLTc0MjctNDEzMC04YmY2LTllMmExZTg5 YjFmMy5jcmwwHwYDVR0jBBgwFoAUuhSo8Tl0YYrrYzwbGpphrZEWydQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZDM2Mzg1Zi03NDI3LTQxMzAtOGJmNi05ZTJh MWU4OWIxZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoeWL57m+Yb6W4q/49gs5hzYCH6O9CJFGeqMDIN9dQDkSN6ojpLISKJ bHP85utb3iJuTNLcy+xXN3nbwq9UfvlxsoBoTEJ/zB7jU8bsNTEOr1KT3Ggqtfbz 5tt9ntGrvFLzpNOp7tTMC9vGj/0G376tBC/BtDQ2p5So70/mRUBgcDY2WuN+8gW7 tXrQ2gudZL7ja5X2kORWCn/3UKR/5xb+fNFjam7w8UjM5FtUCD8dqGUu9TlUICWu zHjQi9urS/pPy1zl5DB/UjbCDwD5njB2Q7srmtJ48ZlirMDlQ0j4elJ6injSqNij H6vCvTOGlIcT9qrYp1m8cLN3EQDbmG8= -----END CERTIFICATE-----Generated at Mon Oct 26 21:22:51 2026 by rpki-client