$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa File: 81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa (raw, json) Hash identifier: Xnx+tluwZHU+y1v+CLeHkis6opVim5NrY5VRZxGLQhw= Subject key identifier: 54:AB:97:81:2A:7C:DD:C9:E1:07:83:10:C1:06:CE:6A:86:47:7A:4F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F1B624C2AFC292DACDE0905C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 199.36.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4c:2a:fc:29:2d:ac:de:09:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=745be258-77bc-4299-8eee-e80ffac0bdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:97:78:77:ef:43:f3:93:43:0c:9c:d4:2f: 4e:f4:48:d7:17:74:4b:a7:79:a5:5d:1f:43:55:a5: 49:27:44:35:53:fb:0a:d3:76:6b:95:ee:13:e7:2d: c0:56:8e:5e:be:0a:9d:a6:21:d0:44:5b:7d:04:cc: aa:9c:c0:37:bd:08:ea:7f:f5:2b:c3:3a:7a:72:7b: 0e:4d:f7:8e:ca:a5:16:25:d4:0d:cf:2e:7a:7f:b6: d1:e0:c7:54:15:5c:6a:b6:85:08:7e:70:35:dc:97: e1:49:0d:42:18:e4:56:5f:23:7e:5d:22:da:70:62: 28:fe:05:5c:87:19:4a:29:d2:cd:7f:4c:1e:1b:22: ce:5e:89:6b:1e:74:79:20:16:5d:da:43:eb:ec:ef: c0:79:ee:b9:c3:2d:ff:50:ed:78:a6:19:6e:5a:ef: 74:1f:52:22:5a:a4:2a:20:7b:72:e5:d8:74:b3:17: 3a:44:6f:09:04:b4:cc:39:55:f8:b6:1c:29:b6:ee: 59:17:f1:f6:52:a5:b4:18:af:df:88:d3:a5:4d:d5: 52:7b:df:9b:76:8d:49:6c:dd:05:4b:84:2b:a5:de: 52:6f:fc:55:40:7c:b6:90:c8:52:6a:93:37:20:28: ed:fb:b6:d4:cb:93:35:1b:4b:2f:64:50:6f:05:65: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AB:97:81:2A:7C:DD:C9:E1:07:83:10:C1:06:CE:6A:86:47:7A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:21:8e:aa:8c:06:ad:dc:a1:f7:e3:1c:d0:71:a7:92:d7:a3: c9:72:ed:81:87:b6:c1:fc:67:e6:b4:b8:4a:69:eb:d9:b1:e5: 11:c5:fa:0a:fb:30:f8:e2:c8:67:51:77:e2:4d:4c:3a:f1:42: 4e:52:56:48:15:04:63:5c:8d:54:e9:d9:fb:2f:01:51:b4:f1: c1:ee:f6:9e:b1:5b:84:93:63:92:6f:35:76:f6:23:da:24:30: 91:48:89:a8:58:d1:4a:2a:f1:27:0a:9c:c9:60:7b:25:eb:12: 84:28:4d:f5:e6:ff:5e:9e:06:33:35:ad:49:49:19:0e:dd:20: fe:28:35:13:a1:46:e2:0e:7f:59:cf:c5:65:8d:36:f3:81:35: 8b:ed:f0:b1:26:6e:3d:47:8b:cb:8f:a1:2a:63:53:f5:69:63: f0:5b:72:d2:62:7c:9b:d1:e5:84:33:eb:4d:51:3e:9f:14:3b: 06:19:cb:32:0c:0d:a5:d2:e7:7d:39:16:e1:8e:02:1a:d6:ed: f7:0f:a1:53:31:b0:e2:fb:13:cc:c1:68:4d:7a:59:85:43:48: c1:60:85:f5:44:50:17:03:c8:2d:74:af:e4:cc:eb:0d:82:72: d1:ee:ec:a7:a4:a6:bb:b2:89:98:e1:b6:ce:55:92:c2:1f:93: f4:42:73:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkwq/CktrN4JBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NzQ1YmUyNTgtNzdiYy00Mjk5LThlZWUtZTgwZmZhYzBiZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox6XeHfvQ/OTQwyc1C9O9EjXF3RLp3mlXR9D VaVJJ0Q1U/sK03Zrle4T5y3AVo5evgqdpiHQRFt9BMyqnMA3vQjqf/Urwzp6cnsO TfeOyqUWJdQNzy56f7bR4MdUFVxqtoUIfnA13JfhSQ1CGORWXyN+XSLacGIo/gVc hxlKKdLNf0weGyLOXolrHnR5IBZd2kPr7O/Aee65wy3/UO14phluWu90H1IiWqQq IHty5dh0sxc6RG8JBLTMOVX4thwptu5ZF/H2UqW0GK/fiNOlTdVSe9+bdo1JbN0F S4Qrpd5Sb/xVQHy2kMhSapM3ICjt+7bUy5M1G0svZFBvBWVK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSrl4EqfN3J4QeDEMEGzmqGR3pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODFjMWNkZmEtN2I3ZS0z OWI1LTk2OGMtNzcwYzVjOGYzMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIohjqqMBq3coffjHNBxp5LXo8ly7YGHtsH8Z+a0uEpp69mx5RHF+gr7 MPjiyGdRd+JNTDrxQk5SVkgVBGNcjVTp2fsvAVG08cHu9p6xW4STY5JvNXb2I9ok MJFIiahY0Uoq8ScKnMlgeyXrEoQoTfXm/16eBjM1rUlJGQ7dIP4oNROhRuIOf1nP xWWNNvOBNYvt8LEmbj1Hi8uPoSpjU/VpY/BbctJifJvR5YQz601RPp8UOwYZyzIM DaXS5305FuGOAhrW7fcPoVMxsOL7E8zBaE16WYVDSMFghfVEUBcDyC10r+TM6w2C ctHu7KekpruyiZjhts5VksIfk/RCcxc= -----END CERTIFICATE-----Generated at Sat Sep 19 22:38:35 2026 by rpki-client