$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa File: 71d6f9d1-e76d-3468-8445-02e48e603140.roa (raw, json) Hash identifier: ppLJwHR/+yr6lXTQaRIj32v2cQxLpcNhMfLVvs01c5k= Subject key identifier: A9:9B:9E:41:68:E5:B5:AB:F1:FD:59:29:4C:40:4A:90:A0:81:3F:3E Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584EA788A347D38BA68250FB6740 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 1299 IP address blocks: 199.101.158.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a3:47:d3:8b:a6:82:50:fb:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=84fc9322-f52e-4467-8653-94e0b28c042b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:e6:97:b5:fe:85:8f:02:70:db:9e:c9:f9: da:fd:cf:9b:91:49:e1:c7:d2:0f:f3:15:5c:3f:e1: 52:83:db:36:7a:f9:2d:9c:aa:43:70:5b:49:36:6c: 52:9e:50:ec:35:0d:a7:81:d2:e4:40:08:31:66:7d: d0:88:13:78:32:01:84:7d:a2:c4:11:98:a0:61:54: 58:59:35:85:e9:01:d8:2b:f0:da:be:84:29:8c:6e: 5c:4f:3d:f8:cc:f0:82:73:92:b7:5d:ce:ad:d7:02: 9a:3d:08:44:5c:0f:16:5a:0c:3e:16:3f:e6:4f:7c: 1a:81:dd:96:97:23:de:42:81:98:b1:da:d8:56:5f: b0:59:6a:5d:40:27:93:ee:9a:69:89:42:87:fe:9f: e7:96:d9:c1:25:fc:c4:2f:24:5d:0b:e5:de:22:04: 65:e2:fb:4c:3e:a6:df:60:45:9c:6c:e6:f6:dc:73: 60:1d:00:05:67:34:aa:b8:e0:c5:1b:67:2b:91:9f: 08:d6:c0:d1:29:0d:34:60:b3:1d:78:90:ac:c8:e4: 50:71:42:71:84:21:03:36:61:39:0e:92:e4:db:4b: ef:63:c0:ec:ef:c6:c9:d1:c0:d4:4c:a4:2a:23:41: 89:a2:1d:f0:da:f1:c4:93:4c:99:12:d4:1c:24:c0: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9B:9E:41:68:E5:B5:AB:F1:FD:59:29:4C:40:4A:90:A0:81:3F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7b:69:16:85:8a:9c:5a:db:d4:28:32:ec:29:19:9a:3f:f0: 43:9f:dd:12:4d:a7:c0:40:35:b0:c8:29:30:f5:27:16:82:2a: 72:52:8e:c9:97:86:c3:aa:5b:e4:98:d3:1e:c0:be:f5:36:a0: f3:60:b7:ff:23:44:a8:ad:80:a1:1f:ed:24:4a:5a:ae:ea:c4: 51:78:e0:10:c1:b1:2d:75:93:1d:21:d4:3b:ee:bd:ab:c9:8a: 7d:d8:39:b8:07:2e:8e:b1:0b:68:19:7d:97:31:8e:8f:9c:e7: c6:44:bd:44:4f:cf:41:c7:8b:1b:a6:b1:ba:22:71:9b:a3:1c: 52:ba:12:d8:d4:79:e2:9e:10:35:34:1d:2e:b5:e1:ef:2b:39: bc:3e:49:75:bf:9b:97:2e:cd:40:2e:f6:ee:03:10:2a:6c:c0: 9e:c2:12:c8:7b:3d:1b:da:09:99:89:3f:23:5f:ab:d6:3b:dd: 75:74:ae:03:c4:c8:20:1a:1d:12:16:11:bf:6c:21:ff:76:b6: d7:a6:c2:9f:23:d2:f2:fa:45:04:01:52:de:cb:ee:14:63:b7: 5d:30:74:d7:8c:19:75:d2:68:d3:10:06:db:03:89:13:47:20: 9a:bd:3d:62:72:e2:04:e7:0f:b2:a0:d7:2e:5e:f4:9f:a9:4b: be:77:cb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKNH04umglD7Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODRmYzkzMjItZjUyZS00NDY3LTg2NTMtOTRlMGIyOGMwNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhzml7X+hY8CcNueyfna/c+bkUnhx9IP8xVc P+FSg9s2evktnKpDcFtJNmxSnlDsNQ2ngdLkQAgxZn3QiBN4MgGEfaLEEZigYVRY WTWF6QHYK/DavoQpjG5cTz34zPCCc5K3Xc6t1wKaPQhEXA8WWgw+Fj/mT3wagd2W lyPeQoGYsdrYVl+wWWpdQCeT7pppiUKH/p/nltnBJfzELyRdC+XeIgRl4vtMPqbf YEWcbOb23HNgHQAFZzSquODFG2crkZ8I1sDRKQ00YLMdeJCsyORQcUJxhCEDNmE5 DpLk20vvY8Ds78bJ0cDUTKQqI0GJoh3w2vHEk0yZEtQcJMAuuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmbnkFo5bWr8f1ZKUxASpCggT8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvNzFkNmY5ZDEtZTc2ZC0z NDY4LTg0NDUtMDJlNDhlNjAzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd7aRaFipxa29QoMuwpGZo/8EOf3RJNp8BANbDIKTD1JxaCKnJSjsmX hsOqW+SY0x7AvvU2oPNgt/8jRKitgKEf7SRKWq7qxFF44BDBsS11kx0h1DvuvavJ in3YObgHLo6xC2gZfZcxjo+c58ZEvURPz0HHixumsboicZujHFK6EtjUeeKeEDU0 HS614e8rObw+SXW/m5cuzUAu9u4DECpswJ7CEsh7PRvaCZmJPyNfq9Y73XV0rgPE yCAaHRIWEb9sIf92ttemwp8j0vL6RQQBUt7L7hRjt10wdNeMGXXSaNMQBtsDiRNH IJq9PWJy4gTnD7Kg1y5e9J+pS753yyQ= -----END CERTIFICATE-----Generated at Sat Sep 5 04:24:52 2026 by rpki-client