$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa File: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (raw, json) Hash identifier: KeKIhAQX3q/WR//X8cZIPe3Xg5Ppw88e99iVzpbX6l8= Subject key identifier: B1:E6:69:E2:83:67:A2:7F:47:B5:79:2E:C5:29:D3:5F:9F:51:DD:A5 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F4328584F94D350A41A827DD37E0BF080 Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 11700 IP address blocks: 199.71.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:50:a4:1a:82:7d:d3:7e:0b:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=612c70ea-ef68-4bf7-9796-9a62c3ccba96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a2:fb:a3:5a:d5:1d:3a:b7:8d:53:d9:fa:60: 89:9c:53:56:f1:c9:ec:a6:6d:8b:52:1a:5f:90:18: 3a:9a:2b:fc:aa:aa:51:69:e5:13:d2:5e:23:fb:24: f6:9e:c0:24:43:62:cc:3b:e6:cd:74:b6:4d:e8:b2: b2:d1:7c:04:e2:b4:bc:c6:1a:8c:e9:b7:d5:67:fd: 4b:24:4f:bc:bb:ad:cc:64:c3:2f:1f:77:ca:a2:c2: d4:84:fd:c8:5a:4b:cb:be:3b:cf:25:78:d4:ef:bf: dc:b4:74:f4:d8:44:a5:54:37:09:3f:92:0b:10:91: ef:84:a2:50:f6:0e:1c:c1:bc:0b:e0:c6:c8:55:a7: e0:ef:66:4d:e9:68:e5:de:76:5c:fc:b9:f5:46:82: 45:98:bf:7a:80:c5:eb:7b:f2:73:71:0b:9e:60:2f: 98:87:86:51:df:e0:d8:d4:81:1d:fb:ff:e7:7d:90: d4:2f:45:3b:7a:00:7d:19:a5:cf:7d:ad:26:1f:15: 7c:0b:25:47:86:8d:d6:99:44:4d:73:6b:48:b6:1b: cc:75:26:50:a2:92:66:00:84:01:db:06:6a:25:8a: 48:2e:9a:8a:b1:0f:97:53:e6:b2:51:93:05:70:bc: a9:94:d4:50:35:73:63:68:1c:86:ee:21:63:fd:e4: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E6:69:E2:83:67:A2:7F:47:B5:79:2E:C5:29:D3:5F:9F:51:DD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: 199.71.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:78:79:66:49:9c:43:ae:b0:e2:25:57:a2:6d:33:13:e4:72: e9:12:eb:77:51:0e:c9:13:91:96:46:a5:00:7a:da:16:c3:53: 01:d8:aa:05:11:e5:bb:19:21:47:89:75:25:c0:7c:5b:b5:6e: 7b:bb:44:d8:0c:9b:74:66:93:73:93:ef:86:5b:cc:5d:64:08: 7f:25:f6:52:74:18:25:05:b8:17:db:d9:a0:f4:ac:a6:9b:0a: 6d:4f:a5:ea:db:c8:0a:d6:88:3c:2d:ba:d8:3d:e7:5a:83:ba: 6a:94:9d:7c:8b:36:6d:18:9a:12:78:04:0e:8e:da:fe:60:f2: d1:9f:0c:69:8f:5b:23:3d:7c:15:f1:5d:0a:46:e1:16:63:d9: 46:93:2a:4c:e1:49:49:74:ca:bd:84:84:83:e4:49:6e:79:37: bb:40:b6:a4:76:3b:ef:58:9b:56:ee:b5:ab:a9:3f:f2:ae:79: 00:d9:06:ea:4c:9e:a4:d7:87:2d:94:09:82:70:df:1a:99:ac: 01:5d:00:7f:00:85:f0:93:7b:d9:41:31:a4:c7:1b:1e:40:4a: fa:6e:f4:42:80:7b:14:2c:98:29:7d:05:9d:b4:cd:84:0e:3c: a7:83:b3:ea:5c:88:be:c4:e7:95:ec:cb:a2:cc:fd:ce:3f:64: 4b:6c:ce:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01CkGoJ9034L8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NjEyYzcwZWEtZWY2OC00YmY3LTk3OTYtOWE2MmMzY2NiYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKL7o1rVHTq3jVPZ+mCJnFNW8cnspm2LUhpf kBg6miv8qqpRaeUT0l4j+yT2nsAkQ2LMO+bNdLZN6LKy0XwE4rS8xhqM6bfVZ/1L JE+8u63MZMMvH3fKosLUhP3IWkvLvjvPJXjU77/ctHT02ESlVDcJP5ILEJHvhKJQ 9g4cwbwL4MbIVafg72ZN6Wjl3nZc/Ln1RoJFmL96gMXre/JzcQueYC+Yh4ZR3+DY 1IEd+//nfZDUL0U7egB9GaXPfa0mHxV8CyVHho3WmURNc2tIthvMdSZQopJmAIQB 2wZqJYpILpqKsQ+XU+ayUZMFcLyplNRQNXNjaByG7iFj/eSqbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHmaeKDZ6J/R7V5LsUp01+fUd2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvODJiZTMyZjgtNmE3Yy0z YWM1LTk1NTktODA3ZGVhNGVjMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0eNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl4eWZJnEOusOIlV6JtMxPkcukS63dRDskTkZZGpQB62hbDUwHYqgUR 5bsZIUeJdSXAfFu1bnu7RNgMm3Rmk3OT74ZbzF1kCH8l9lJ0GCUFuBfb2aD0rKab Cm1PperbyArWiDwtutg951qDumqUnXyLNm0YmhJ4BA6O2v5g8tGfDGmPWyM9fBXx XQpG4RZj2UaTKkzhSUl0yr2EhIPkSW55N7tAtqR2O+9Ym1butaupP/KueQDZBupM nqTXhy2UCYJw3xqZrAFdAH8AhfCTe9lBMaTHGx5ASvpu9EKAexQsmCl9BZ20zYQO PKeDs+pciL7E55Xsy6LM/c4/ZEtsztM= -----END CERTIFICATE-----Generated at Sun Nov 1 19:41:52 2026 by rpki-client