$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa File: 9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa (raw, json) Hash identifier: 1ItfFZb5eqWycglacVUoyNs+/pQ4wxfpoZR+PKHIOXE= Subject key identifier: 08:B9:ED:DD:AA:A1:52:BA:AD:E0:11:00:B5:03:A6:67:A6:C9:69:39 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584F549DA07159C01302AFC33600 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 21782 IP address blocks: 199.30.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a0:71:59:c0:13:02:af:c3:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=08d29cca-e305-4aab-aecc-4e51abf5e60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:ad:8e:ad:14:ce:8b:dd:5e:ab:72:67:80: 83:31:9d:35:4d:84:aa:35:ee:9f:84:2f:cb:57:a3: aa:e8:b5:92:36:e0:b5:5a:ac:51:95:e9:13:ef:71: 0d:5e:c6:fa:ca:ac:24:bc:50:17:98:01:e6:6d:6b: 03:22:f7:5a:15:61:51:eb:00:97:14:47:5e:24:e3: c6:3b:1f:28:5b:bf:28:f5:cb:4c:6b:81:56:2a:1f: e6:6d:f7:98:99:ac:ab:b9:33:cd:2b:1a:0a:ad:c7: 6e:b0:63:aa:2e:04:9c:a7:8d:03:78:6d:ee:3e:50: cf:d1:8d:dc:98:29:a8:a0:b5:7a:6c:45:c7:d9:2b: 22:3b:40:65:83:8c:fb:17:bc:f5:cf:f1:76:51:94: 8d:83:5f:2d:ef:13:55:dc:a0:06:e1:e3:c1:cf:f5: 35:f3:56:5d:4a:ff:b0:69:de:11:9f:da:90:b1:36: da:90:67:e9:29:a6:32:a6:7e:a1:8f:26:60:14:88: ff:e4:5e:8a:4a:3d:d3:7c:16:fa:55:d1:b0:8b:df: 10:fb:5e:d1:3f:bd:3d:43:9f:10:af:87:18:63:2a: 16:42:d3:56:f2:33:3d:e6:9c:04:05:c2:16:3a:38: 64:75:a0:2a:ab:cb:61:9a:86:b0:fd:8b:c2:7a:3b: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B9:ED:DD:AA:A1:52:BA:AD:E0:11:00:B5:03:A6:67:A6:C9:69:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 199.30.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:10:6d:b0:12:58:c4:34:0a:8e:81:19:97:1f:71:88:b7:84: e1:07:0c:fb:e7:eb:7c:fa:e4:31:40:6f:78:b8:7b:5b:50:78: 5d:46:26:16:8c:64:c7:b2:35:f9:20:4b:34:77:42:21:7a:b2: 7a:89:4a:00:d2:5f:a6:fd:a9:98:ee:90:62:9d:60:7c:0b:f4: 1f:65:42:70:41:07:c3:96:52:ab:1e:e1:34:a9:f6:80:b6:be: 1f:4a:83:63:49:3f:17:03:e6:37:5b:20:fa:24:e0:88:3e:14: e1:cf:0c:07:69:7b:d8:95:ab:5c:ba:ee:1a:58:3c:0a:26:50: b1:bd:86:b3:83:d1:43:4f:dc:2e:11:be:0f:20:2d:be:72:a8: 63:20:15:ed:d6:b4:3d:07:6f:d7:02:88:f2:9b:49:ce:3d:79: a5:fb:db:05:76:b5:82:9e:15:7c:52:9e:04:cf:55:7c:3a:b8: 3f:31:f6:8d:aa:6d:40:d8:97:64:09:de:a0:89:b7:c9:86:62: 42:5b:18:d8:22:76:75:4f:e3:09:68:40:95:fb:e2:17:7a:22: 6d:d6:c1:ae:d7:f7:05:5d:78:5d:7c:fe:a4:67:7e:49:cc:48: d7:ce:f8:c8:1b:bd:09:af:c7:a1:b6:f4:25:c4:bb:7a:19:00: 1d:00:57:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaBxWcATAq/DNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDhkMjljY2EtZTMwNS00YWFiLWFlY2MtNGU1MWFiZjVlNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucitjq0UzovdXqtyZ4CDMZ01TYSqNe6fhC/L V6Oq6LWSNuC1WqxRlekT73ENXsb6yqwkvFAXmAHmbWsDIvdaFWFR6wCXFEdeJOPG Ox8oW78o9ctMa4FWKh/mbfeYmayruTPNKxoKrcdusGOqLgScp40DeG3uPlDP0Y3c mCmooLV6bEXH2SsiO0Blg4z7F7z1z/F2UZSNg18t7xNV3KAG4ePBz/U181ZdSv+w ad4Rn9qQsTbakGfpKaYypn6hjyZgFIj/5F6KSj3TfBb6VdGwi98Q+17RP709Q58Q r4cYYyoWQtNW8jM95pwEBcIWOjhkdaAqq8thmoaw/YvCejs/awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi57d2qoVK6reARALUDpmemyWk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvOWQ5MmQyYzgtZGI5MS0z MThjLWE1OTAtZjg5NGI0ZGQzYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMQbbASWMQ0Co6BGZcfcYi3hOEHDPvn63z65DFAb3i4e1tQeF1GJhaM ZMeyNfkgSzR3QiF6snqJSgDSX6b9qZjukGKdYHwL9B9lQnBBB8OWUqse4TSp9oC2 vh9Kg2NJPxcD5jdbIPok4Ig+FOHPDAdpe9iVq1y67hpYPAomULG9hrOD0UNP3C4R vg8gLb5yqGMgFe3WtD0Hb9cCiPKbSc49eaX72wV2tYKeFXxSngTPVXw6uD8x9o2q bUDYl2QJ3qCJt8mGYkJbGNgidnVP4wloQJX74hd6Im3Wwa7X9wVdeF18/qRnfknM SNfO+MgbvQmvx6G29CXEu3oZAB0AV/Q= -----END CERTIFICATE-----Generated at Sun Oct 11 10:23:24 2026 by rpki-client