$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa File: 1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa (raw, json) Hash identifier: IQjMpdbhP23BCovcr5sstggJTj5LdUaH1IgK+m4wtTY= Subject key identifier: 7D:50:5A:55:E9:E5:4A:F3:40:7B:09:04:45:DB:03:7D:FF:D7:E3:55 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629306EDCAC367471841C580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 47065 IP address blocks: 199.36.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:ed:ca:c3:67:47:18:41:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=07c7db1e-a0b0-4c8d-a329-16df20c74939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:1a:e2:55:51:e2:cb:68:6f:51:4f:dd:a3: cf:f4:f1:eb:40:8a:71:20:4e:76:ee:1b:c8:0d:c5: 6e:fc:2e:c4:29:bf:ab:d0:1d:07:1d:a8:16:e2:94: 06:b4:97:3e:62:ad:75:cd:18:d0:b5:4b:35:13:0f: 93:c8:6b:ad:c8:d8:19:86:7d:41:e4:84:b1:8d:a1: 3f:a0:bc:49:a1:7c:47:a1:8f:0f:61:29:41:da:a7: 3c:48:72:8f:a5:2f:2b:a5:c4:4e:3d:83:2d:01:b9: ec:ee:db:a8:9e:bf:0c:40:a7:a6:1a:6d:4f:b6:f6: 76:92:6b:69:03:c7:c7:f4:92:5c:61:cb:e8:8c:0c: 57:dd:1a:6e:35:c3:0e:f3:ec:09:48:f0:e1:c7:70: 5b:5b:88:57:d4:fd:72:2e:64:0b:f4:4a:5a:ce:d2: 3d:79:40:7c:e4:a6:4a:9f:57:16:f2:61:fc:20:6d: 1a:f9:c5:22:f8:1a:ce:9d:ab:ba:3a:28:9b:7c:3a: d0:61:c0:98:90:96:25:89:10:d8:3d:2e:d1:33:ef: f3:3a:dd:49:5d:69:86:d5:75:e2:5b:ef:3c:6b:ad: 65:3f:91:bb:a4:73:52:90:da:39:fa:83:ee:ac:21: b5:0e:96:88:ba:7d:3c:92:3e:2a:af:89:74:bc:95: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:5A:55:E9:E5:4A:F3:40:7B:09:04:45:DB:03:7D:FF:D7:E3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1a:f8:7b:04:23:97:1b:1a:5e:a4:10:5f:9a:13:be:f1:f5: be:17:73:3d:f9:4e:c7:51:ee:f6:c1:04:9e:4c:1d:f3:97:e9: 1f:40:0c:53:70:b4:6d:08:69:93:25:61:3f:d4:93:36:39:55: 52:fd:6a:c6:8e:0d:bd:1d:2b:75:cd:cc:fe:eb:47:08:f1:5b: cc:ca:32:f9:e4:c1:af:66:34:ae:bf:e6:0d:b7:1f:bc:0c:a0: 13:65:a7:c5:c1:81:3b:79:d6:e6:a5:a1:fd:5a:85:e9:f7:6a: b2:c5:97:6d:cd:5b:18:1d:77:ad:d3:8a:3d:b8:b1:4b:9f:a0: bc:10:e2:ae:af:fa:68:1b:1e:97:38:fa:9e:dd:01:d3:0e:5a: 11:cf:ab:90:a0:f0:65:f3:31:b1:c7:cb:5c:9f:db:74:f3:c2: 97:46:3e:f2:71:d1:5a:8d:e5:dd:8d:4a:c9:0c:2a:82:c3:17: 3a:47:f4:14:a5:1e:6c:a0:73:63:5c:a1:89:65:5c:3f:ab:aa: b6:0a:21:53:8e:20:b9:60:33:4c:4a:44:8a:8c:08:e7:22:d4: bd:a7:c7:34:3e:95:c1:c3:6b:7a:48:bf:57:4a:34:84:4d:79: eb:85:05:62:ff:a2:23:79:4d:78:7b:69:b6:12:ea:9b:73:15: 1f:c2:a2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwbtysNnRxhBxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MDdjN2RiMWUtYTBiMC00YzhkLWEzMjktMTZkZjIwYzc0OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobAa4lVR4stob1FP3aPP9PHrQIpxIE527hvI DcVu/C7EKb+r0B0HHagW4pQGtJc+Yq11zRjQtUs1Ew+TyGutyNgZhn1B5ISxjaE/ oLxJoXxHoY8PYSlB2qc8SHKPpS8rpcROPYMtAbns7tuonr8MQKemGm1PtvZ2kmtp A8fH9JJcYcvojAxX3RpuNcMO8+wJSPDhx3BbW4hX1P1yLmQL9EpaztI9eUB85KZK n1cW8mH8IG0a+cUi+BrOnau6OiibfDrQYcCYkJYliRDYPS7RM+/zOt1JXWmG1XXi W+88a61lP5G7pHNSkNo5+oPurCG1DpaIun08kj4qr4l0vJVbQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1QWlXp5UrzQHsJBEXbA33/1+NVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWI2MzA2YmItOTA4YS0z NWJkLWJkZTEtMzJmZmVlOGFlZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEca+HsEI5cbGl6kEF+aE77x9b4Xcz35TsdR7vbBBJ5MHfOX6R9ADFNw tG0IaZMlYT/UkzY5VVL9asaODb0dK3XNzP7rRwjxW8zKMvnkwa9mNK6/5g23H7wM oBNlp8XBgTt51ualof1ahen3arLFl23NWxgdd63Tij24sUufoLwQ4q6v+mgbHpc4 +p7dAdMOWhHPq5Cg8GXzMbHHy1yf23TzwpdGPvJx0VqN5d2NSskMKoLDFzpH9BSl Hmygc2NcoYllXD+rqrYKIVOOILlgM0xKRIqMCOci1L2nxzQ+lcHDa3pIv1dKNIRN eeuFBWL/oiN5TXh7abYS6ptzFR/Coks= -----END CERTIFICATE-----Generated at Tue Nov 10 20:50:57 2026 by rpki-client