$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa File: 9c0ab96e-07f3-340f-b026-49a7e297e98f.roa (raw, json) Hash identifier: DwiiHs6CTkzyyTrNpySQORm7OmCLh6gm/fIL9lPYF0c= Subject key identifier: 8D:94:3B:79:8C:0F:50:E8:9D:79:0C:18:97:B0:99:E0:00:19:97:AA Certificate issuer: /CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Certificate serial: 010D0C9F4328584F6F230114B9DD3F5C346AB200 Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 33309 IP address blocks: 199.189.204.0/22 maxlen: 22 199.189.204.0/24 maxlen: 24 199.189.205.0/24 maxlen: 24 199.189.206.0/24 maxlen: 24 199.189.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:01:14:b9:dd:3f:5c:34:6a:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=a89b67ef-e3fc-47de-91da-d3d0436f7bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:fe:b8:02:4d:d7:6b:45:6d:fe:f8:f5:26: 79:aa:ad:f5:cd:39:f5:d1:7f:df:f7:4c:cb:5f:04: 27:6c:bd:36:a2:ea:a3:a5:cf:d9:b5:c0:9d:d3:0c: a4:f7:95:64:c2:1a:a5:c0:93:75:ec:44:31:9d:af: 07:43:b9:be:1b:6a:98:02:64:69:4c:20:3c:8d:b4: 1c:3b:e1:39:48:df:91:d2:3d:67:96:db:e4:9d:b8: c9:ed:07:25:3e:2f:02:a1:8a:74:df:38:2e:27:c3: d5:4a:c2:2c:82:1b:99:47:e0:9d:f4:df:92:8b:4c: e3:92:e5:fb:28:96:59:61:2f:ce:70:26:69:45:72: 61:8c:21:f8:7f:a9:f2:32:fa:b9:5e:60:42:6b:2e: 97:ab:ad:dd:bf:17:7c:82:a6:57:5d:24:d4:8e:d4: f6:fd:74:ea:36:b3:58:e6:bf:06:3a:9b:44:ad:6d: e0:b7:12:4c:a1:1b:b3:0c:f8:6a:78:dd:4a:66:eb: 9d:2f:8d:94:3c:dc:fd:08:4a:e1:72:7a:5f:16:57: 1d:34:0d:96:e6:10:da:83:c6:b8:d5:2b:12:60:75: 8e:84:f1:81:3b:a6:9d:c6:ea:63:3f:66:78:ed:7e: 45:ae:b7:95:14:c6:ee:f8:73:aa:ad:85:40:ce:90: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:94:3B:79:8C:0F:50:E8:9D:79:0C:18:97:B0:99:E0:00:19:97:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl X509v3 Authority Key Identifier: keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer sbgp-ipAddrBlock: critical IPv4: 199.189.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:2f:89:6f:4b:8b:3c:67:cb:33:48:53:9d:3e:40:50:32:41: fd:4d:b5:10:58:6e:9b:c6:33:ac:82:a7:bd:20:94:68:d8:5a: 59:a9:c9:80:86:d2:7c:60:ec:ea:ac:be:c2:85:71:bd:16:4b: d1:2d:8d:c8:1a:7a:f5:0e:66:ba:48:15:20:dd:ae:77:21:8f: 90:15:72:d4:6c:b2:1d:dd:af:c9:bd:32:e0:77:c1:ab:bc:d1: 62:2f:cd:59:d1:85:b0:9f:10:01:b1:d2:c1:9b:c5:d0:f6:c8: 48:aa:9b:9d:eb:19:bb:10:64:fa:de:23:10:f7:47:72:2c:05: 3b:f0:60:d3:9c:45:3d:90:f7:47:b5:ec:36:c6:66:f5:46:f1: 09:4d:9c:6d:50:a7:b0:07:6a:62:c8:ff:15:09:fa:34:df:fc: 04:ef:89:c6:fa:30:c2:54:db:4d:03:54:92:bf:74:70:99:77: fb:4b:65:9c:ab:9a:d4:08:6b:90:be:ed:08:d1:d8:d5:aa:db: ce:34:0f:69:71:3b:e9:00:5e:61:c3:79:98:45:b3:1d:90:37: f4:ca:5f:de:ed:7e:10:ca:4b:dd:9c:12:d0:a5:55:4b:f4:5d: 97:cc:97:e4:75:f2:28:b1:2c:eb:53:59:e3:ce:5d:bb:23:14: 4d:2c:a0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwEUud0/XDRqsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5NDQ2ZGItNmEyZS00N2JjLWEzM2ItMmRkODgzYmZi ODk5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YTg5YjY3ZWYtZTNmYy00N2RlLTkxZGEtZDNkMDQzNmY3YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHf+uAJN12tFbf749SZ5qq31zTn10X/f90zL XwQnbL02ouqjpc/ZtcCd0wyk95VkwhqlwJN17EQxna8HQ7m+G2qYAmRpTCA8jbQc O+E5SN+R0j1nltvknbjJ7QclPi8CoYp03zguJ8PVSsIsghuZR+Cd9N+Si0zjkuX7 KJZZYS/OcCZpRXJhjCH4f6nyMvq5XmBCay6Xq63dvxd8gqZXXSTUjtT2/XTqNrNY 5r8GOptErW3gtxJMoRuzDPhqeN1KZuudL42UPNz9CErhcnpfFlcdNA2W5hDag8a4 1SsSYHWOhPGBO6adxupjP2Z47X5FrreVFMbu+HOqrYVAzpBhxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2UO3mMD1DonXkMGJewmeAAGZeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0 NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4ODNiZmI4OTkvOWMwYWI5NmUtMDdmMy0z NDBmLWIwMjYtNDlhN2UyOTdlOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NDQ2ZGItNmEyZS00N2JjLWEz M2ItMmRkODgzYmZiODk5Lzk2OTQ0NmRiLTZhMmUtNDdiYy1hMzNiLTJkZDg4M2Jm Yjg5OS5jcmwwHwYDVR0jBBgwFoAUjExRRRuXGOwp9mXrg3Mn44TCANcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4 ODNiZmI4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx73MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4viW9LizxnyzNIU50+QFAyQf1NtRBYbpvGM6yCp70glGjYWlmpyYCG 0nxg7OqsvsKFcb0WS9EtjcgaevUOZrpIFSDdrnchj5AVctRssh3dr8m9MuB3wau8 0WIvzVnRhbCfEAGx0sGbxdD2yEiqm53rGbsQZPreIxD3R3IsBTvwYNOcRT2Q90e1 7DbGZvVG8QlNnG1Qp7AHamLI/xUJ+jTf/ATvicb6MMJU200DVJK/dHCZd/tLZZyr mtQIa5C+7QjR2NWq2840D2lxO+kAXmHDeZhFsx2QN/TKX97tfhDKS92cEtClVUv0 XZfMl+R18iixLOtTWePOXbsjFE0soFk= -----END CERTIFICATE-----Generated at Mon Nov 2 11:12:48 2026 by rpki-client