$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa File: d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json) Hash identifier: I9x+ioWQY+bmkvh6vbf5gNwWpRUIYXfwwqBrmqVtksM= Subject key identifier: 0A:C9:23:9E:69:AF:C5:D8:77:C4:E4:29:98:30:DA:64:85:B0:C4:97 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584F6F23080B2874B04C4DDCC700 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 394353 IP address blocks: 199.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:08:0b:28:74:b0:4c:4d:dc:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=8f0b58fb-a1ac-47f3-9993-c855f3f865d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:db:a5:16:98:bb:42:14:09:17:98:45:86: 52:c4:a4:ff:f4:2e:08:4d:7e:b9:42:db:76:29:39: 5a:4a:9d:0f:41:a6:32:d0:89:d6:9d:6a:9e:ae:6d: 08:ed:dd:b8:58:d3:15:b9:32:4c:11:5b:ca:d2:94: 35:7e:62:0a:8d:a7:29:c5:97:fb:f4:47:9b:39:2f: e1:52:63:88:37:33:7b:85:e2:5b:82:b1:a2:ef:06: 64:ce:3e:1c:34:92:fe:db:2e:72:a7:97:f8:93:a8: 9f:41:0b:12:09:ef:68:b5:d0:3b:dd:93:1b:66:65: 25:74:2f:37:ba:ff:5e:ed:78:b3:f7:3f:8a:c7:dc: 57:0c:7e:0a:f4:a3:1b:ac:e5:c6:6e:ba:1f:8a:6c: 52:f2:23:76:19:16:f3:26:53:3e:80:ef:c8:33:07: af:ac:d5:8f:ba:f9:34:6a:6f:a6:23:71:79:16:83: 02:b3:f2:60:e8:b9:7a:14:bd:1c:42:7e:6d:0c:62: 5e:f7:7f:99:7f:0e:f6:52:9f:f3:f3:83:9b:b5:db: e4:db:8d:39:4a:99:dd:c1:aa:e1:a4:5f:55:1e:39: 64:25:95:2d:19:e9:1f:8e:f6:8e:f7:95:a8:d1:8c: a7:79:36:7b:2a:34:ed:05:85:fc:1a:67:26:28:cf: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C9:23:9E:69:AF:C5:D8:77:C4:E4:29:98:30:DA:64:85:B0:C4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8d:4c:50:91:46:0a:5b:22:b1:7b:56:d9:cd:e5:0a:c8:ec: a6:95:52:cf:35:bd:f6:55:1a:a8:d0:90:b6:86:8e:05:7a:ea: ce:bc:a1:63:e7:f9:2e:e7:46:c3:af:6c:26:0c:60:c5:4e:5b: 8a:6e:ad:60:2d:1e:cb:a4:a1:5f:1f:f2:fe:f6:49:71:c0:9c: 12:17:0f:4c:99:77:07:4e:17:13:3e:e0:43:d5:5b:6c:20:99: 8d:42:8f:99:ed:de:57:3e:34:21:05:e1:b8:52:ee:b1:ff:20: ae:4f:c9:68:b4:41:ef:53:10:b4:71:8f:b2:0c:34:15:c2:90: ff:04:40:44:a9:ae:d0:9d:a4:26:33:1f:12:d6:07:37:7f:63: ef:0e:57:3d:09:76:d1:af:0d:d9:b9:30:61:1d:0e:86:a6:90: 51:13:3e:73:dc:48:c6:e0:c6:56:37:5c:b0:7f:73:74:56:23: bf:1f:5c:a2:5f:d6:65:0f:2b:f8:5e:cc:c7:45:9e:28:b0:4b: 65:e0:01:79:aa:35:64:ff:f1:05:f3:57:3e:ee:fd:ac:37:46: 17:45:c5:50:7c:d5:e3:e5:5d:b8:cd:4b:34:09:3b:7b:f8:86: e6:ec:b5:77:6c:b0:87:87:aa:ff:80:99:c3:72:70:a8:69:89: a5:84:37:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwgLKHSwTE3cxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OGYwYjU4ZmItYTFhYy00N2YzLTk5OTMtYzg1NWYzZjg2NWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgXbpRaYu0IUCReYRYZSxKT/9C4ITX65Qtt2 KTlaSp0PQaYy0InWnWqerm0I7d24WNMVuTJMEVvK0pQ1fmIKjacpxZf79EebOS/h UmOINzN7heJbgrGi7wZkzj4cNJL+2y5yp5f4k6ifQQsSCe9otdA73ZMbZmUldC83 uv9e7Xiz9z+Kx9xXDH4K9KMbrOXGbrofimxS8iN2GRbzJlM+gO/IMwevrNWPuvk0 am+mI3F5FoMCs/Jg6Ll6FL0cQn5tDGJe93+Zfw72Up/z84Obtdvk2405Spndwarh pF9VHjlkJZUtGekfjvaO95Wo0YyneTZ7KjTtBYX8GmcmKM8F0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArJI55pr8XYd8TkKZgw2mSFsMSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZDBmY2MwMzktMmYzMi0z NDNlLWFhNjYtZTIwOTQwNjZkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyNTFCRRgpbIrF7VtnN5QrI7KaVUs81vfZVGqjQkLaGjgV66s68oWPn +S7nRsOvbCYMYMVOW4purWAtHsukoV8f8v72SXHAnBIXD0yZdwdOFxM+4EPVW2wg mY1Cj5nt3lc+NCEF4bhS7rH/IK5PyWi0Qe9TELRxj7IMNBXCkP8EQESprtCdpCYz HxLWBzd/Y+8OVz0JdtGvDdm5MGEdDoamkFETPnPcSMbgxlY3XLB/c3RWI78fXKJf 1mUPK/hezMdFniiwS2XgAXmqNWT/8QXzVz7u/aw3RhdFxVB81ePlXbjNSzQJO3v4 hubstXdssIeHqv+AmcNycKhpiaWEN9Q= -----END CERTIFICATE-----Generated at Wed Oct 21 20:13:57 2026 by rpki-client