$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: ps8H2KpZYQQ+4L5p2MtbZuD/WWYaJdMbg+AiiVhdyCw= Subject key identifier: CB:F6:A1:56:CF:FF:FC:64:63:F6:2B:34:94:50:03:C6:EA:4B:EA:57 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584F655D81AAC40CACBEBED3DD00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:81:aa:c4:0c:ac:be:be:d3:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=c2c0121a-bfb9-4e69-94e3-aa6614cccbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3c:7e:d2:6a:3a:64:5c:9d:d3:a5:88:1a:a8: 4a:ba:02:3f:66:9e:a5:14:39:7c:77:30:fa:a9:43: df:3c:14:99:48:92:77:9b:24:78:33:46:f1:c3:5e: b3:b6:65:65:65:79:fb:02:11:e7:da:ea:5f:56:01: 74:d8:df:62:37:29:59:bf:49:de:a2:2f:5a:55:a2: 4d:49:4f:1f:a7:44:c4:d9:9f:46:16:02:ef:f7:8d: 85:ae:93:73:02:a7:cd:d5:70:73:58:40:7a:bd:b7: 3f:d7:e3:a4:e9:85:61:24:c3:45:4e:c7:7c:11:38: 38:87:33:10:96:df:98:bd:ab:53:9b:f4:86:60:91: 66:b5:b3:09:69:20:03:b0:bc:ef:05:d7:7e:cf:55: 89:1a:ef:dd:4e:97:c8:53:3b:f9:59:a0:8c:3b:25: 90:7f:46:1b:72:83:33:c0:0e:3f:9f:8b:65:6e:22: f7:75:97:d1:ac:96:a4:53:3b:58:18:dd:57:3a:f8: c2:5a:5e:a8:0d:12:d0:40:df:40:88:b0:c7:9c:3e: 3e:95:60:1d:da:ec:fb:f2:9c:d6:fd:bc:f0:ea:07: 2c:07:33:4f:a8:b8:e5:4e:5b:bd:af:9a:b3:b8:f0: de:97:97:0a:5c:62:a7:12:45:3b:62:55:c0:4c:16: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:A1:56:CF:FF:FC:64:63:F6:2B:34:94:50:03:C6:EA:4B:EA:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:06:dd:09:b9:71:f0:d7:a2:b6:e2:97:f6:56:75:20:ae:5d: 6e:e4:2a:07:8c:6f:f4:fe:14:45:79:16:2f:80:77:af:8f:8a: 62:d5:22:0f:96:2f:87:e5:a6:55:74:14:5d:f6:da:7d:b9:22: 56:cd:60:36:b0:4a:f9:64:b1:0b:fb:34:62:e0:e9:80:2c:5b: f0:3a:53:67:28:68:c1:71:0a:d4:69:7a:4d:4e:50:32:d5:7f: 97:3c:0a:99:aa:6c:67:b4:44:06:ac:48:bf:45:95:a6:50:5c: 4e:6a:a6:6e:05:c7:32:6f:82:ba:b6:ee:8f:95:cb:d7:1a:13: 07:15:7d:13:ad:96:76:59:c9:1c:02:d3:f6:6b:7f:23:72:57: 93:74:b6:21:5b:2b:9a:92:e7:dd:c6:bf:8b:ba:dc:65:1e:a2: c3:81:e6:23:20:92:7c:a0:2f:55:c3:6c:97:57:d3:74:6f:db: ac:8c:e6:87:c2:ad:b9:0c:11:98:77:40:3f:5a:1b:f0:a1:ec: 61:3c:78:c1:3a:84:1a:75:d3:61:a3:5d:a7:bf:54:65:31:71: 69:56:37:a2:40:0e:77:6f:3c:54:49:c8:a4:33:58:10:5c:7f: 2e:f1:c8:85:6b:a0:69:91:05:de:cb:73:a8:ac:dd:bd:f7:8f: d4:dd:aa:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYGqxAysvr7T3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YzJjMDEyMWEtYmZiOS00ZTY5LTk0ZTMtYWE2NjE0Y2NjYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzx+0mo6ZFyd06WIGqhKugI/Zp6lFDl8dzD6 qUPfPBSZSJJ3myR4M0bxw16ztmVlZXn7AhHn2upfVgF02N9iNylZv0neoi9aVaJN SU8fp0TE2Z9GFgLv942FrpNzAqfN1XBzWEB6vbc/1+Ok6YVhJMNFTsd8ETg4hzMQ lt+YvatTm/SGYJFmtbMJaSADsLzvBdd+z1WJGu/dTpfIUzv5WaCMOyWQf0YbcoMz wA4/n4tlbiL3dZfRrJakUztYGN1XOvjCWl6oDRLQQN9AiLDHnD4+lWAd2uz78pzW /bzw6gcsBzNPqLjlTlu9r5qzuPDel5cKXGKnEkU7YlXATBYkyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv2oVbP//xkY/YrNJRQA8bqS+pXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQG3Qm5cfDXorbil/ZWdSCuXW7kKgeMb/T+FEV5Fi+Ad6+PimLVIg+W L4flplV0FF322n25IlbNYDawSvlksQv7NGLg6YAsW/A6U2coaMFxCtRpek1OUDLV f5c8CpmqbGe0RAasSL9FlaZQXE5qpm4FxzJvgrq27o+Vy9caEwcVfROtlnZZyRwC 0/ZrfyNyV5N0tiFbK5qS593Gv4u63GUeosOB5iMgknygL1XDbJdX03Rv26yM5ofC rbkMEZh3QD9aG/Ch7GE8eME6hBp102GjXae/VGUxcWlWN6JADndvPFRJyKQzWBBc fy7xyIVroGmRBd7Lc6is3b33j9TdqhM= -----END CERTIFICATE-----Generated at Tue Oct 13 22:01:12 2026 by rpki-client