$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa File: ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa (raw, json) Hash identifier: Vpqjx12TImKCbePJbNnkYwa3CFC1wHDDU+GmeVAw0L8= Subject key identifier: D0:3E:2E:E7:DA:21:4E:64:BA:A2:22:E9:A5:80:2E:DF:DC:CE:00:F8 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584EA788A33CF8AA29829AE50460 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30286 IP address blocks: 199.101.158.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a3:3c:f8:aa:29:82:9a:e5:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=39d4da08-fa9d-465d-b1d1-472d591606e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:84:1c:aa:df:d8:60:dc:da:d1:a4:2b:4f: 0c:ac:73:ce:63:a4:a6:9a:9e:13:96:30:e8:67:10: 77:fc:f2:88:80:64:16:a9:d7:2a:8b:43:47:7d:cb: 8c:d0:6d:ba:8c:21:44:88:56:27:19:92:6e:be:52: 50:cd:4e:ef:42:db:52:a4:11:37:69:2d:ef:b1:d3: 34:7a:61:cd:d6:1a:11:24:34:e7:bd:ef:ec:41:25: 5a:48:f5:87:a5:26:ec:a4:9e:44:93:8c:29:18:2b: 48:5b:a0:f0:06:90:9d:9a:96:a9:45:90:7a:78:62: 1d:95:ef:c5:67:1b:46:cb:56:5b:39:59:24:4e:79: e3:f2:61:f8:a7:65:45:f1:cc:a5:83:2d:27:cc:fa: 25:f7:fc:4a:cd:93:4e:65:f3:a8:e1:9b:1a:83:53: 8f:0d:86:42:dd:dc:15:79:10:6d:29:d3:82:07:21: cb:b8:2c:28:40:76:e0:d6:72:6b:f0:a6:7c:74:71: b6:7d:47:9b:6c:b0:00:50:86:b6:6a:78:07:60:72: a8:10:70:be:7f:79:e3:8f:4a:f3:9d:38:a3:c3:88: 40:8d:3a:f5:55:f2:40:c0:8f:70:2a:0e:25:87:35: 1f:78:8e:b8:66:c4:ec:81:76:f1:c0:ee:75:3a:a5: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3E:2E:E7:DA:21:4E:64:BA:A2:22:E9:A5:80:2E:DF:DC:CE:00:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:37:57:ab:36:bd:30:b6:07:7c:0a:57:a6:72:cd:87:44:2a: db:4c:bf:88:9e:95:d3:c3:99:fd:60:c0:48:df:90:bf:93:a5: 62:7e:d1:27:95:05:a6:c5:eb:e5:fc:eb:34:b7:af:ea:6f:0b: ce:b2:b3:e9:d0:d0:87:e6:a3:da:0b:59:f1:25:71:ef:b8:b3: 1f:19:db:52:7a:01:a8:e3:3e:cc:c5:dd:10:fa:60:c2:b8:85: 51:4c:27:d4:d3:99:f6:e6:28:83:4d:8b:f0:f0:c8:a3:f3:de: bd:69:09:a0:43:86:16:34:88:74:cd:c5:e3:e7:c9:ab:05:13: 05:5a:ca:b3:8c:52:7f:5b:29:ad:86:fa:03:44:a9:08:b2:c4: 1d:f9:62:7c:32:98:54:39:02:d0:67:12:a6:24:80:2e:e4:d4: a5:96:2b:c2:1d:ba:90:b9:c4:f7:a2:10:aa:b6:d1:7f:99:7e: 51:d4:72:8d:87:cb:39:64:98:86:7e:81:15:30:b0:2d:59:8e: 04:57:10:6d:90:c5:79:55:12:ee:30:0b:14:b1:69:59:ec:e2: 98:f3:f5:33:4c:80:05:b9:74:38:bb:0a:7d:61:2f:e0:6e:c4: a0:c5:ca:16:23:c4:fa:ef:e0:d2:e7:e0:6d:ff:23:0d:0e:b0: 51:37:cd:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKM8+KopgprlBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzlkNGRhMDgtZmE5ZC00NjVkLWIxZDEtNDcyZDU5MTYwNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd2EHKrf2GDc2tGkK08MrHPOY6Smmp4TljDo ZxB3/PKIgGQWqdcqi0NHfcuM0G26jCFEiFYnGZJuvlJQzU7vQttSpBE3aS3vsdM0 emHN1hoRJDTnve/sQSVaSPWHpSbspJ5Ek4wpGCtIW6DwBpCdmpapRZB6eGIdle/F ZxtGy1ZbOVkkTnnj8mH4p2VF8cylgy0nzPol9/xKzZNOZfOo4Zsag1OPDYZC3dwV eRBtKdOCByHLuCwoQHbg1nJr8KZ8dHG2fUebbLAAUIa2angHYHKoEHC+f3njj0rz nTijw4hAjTr1VfJAwI9wKg4lhzUfeI64ZsTsgXbxwO51OqV6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA+LufaIU5kuqIi6aWALt/czgD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvZWM1ZTFkN2UtNTM3Zi0z ZjdiLWI5NjctNTBlN2E3MWY3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA3V6s2vTC2B3wKV6ZyzYdEKttMv4ieldPDmf1gwEjfkL+TpWJ+0SeV BabF6+X86zS3r+pvC86ys+nQ0Ifmo9oLWfElce+4sx8Z21J6AajjPszF3RD6YMK4 hVFMJ9TTmfbmKINNi/DwyKPz3r1pCaBDhhY0iHTNxePnyasFEwVayrOMUn9bKa2G +gNEqQiyxB35YnwymFQ5AtBnEqYkgC7k1KWWK8IdupC5xPeiEKq20X+ZflHUco2H yzlkmIZ+gRUwsC1ZjgRXEG2QxXlVEu4wCxSxaVns4pjz9TNMgAW5dDi7Cn1hL+Bu xKDFyhYjxPrv4NLn4G3/Iw0OsFE3ze0= -----END CERTIFICATE-----Generated at Sat Sep 5 03:53:54 2026 by rpki-client