$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: mQdCFv7JvpEpPbkRfS8Y02ST36z8TwhhwP0Kf/15N+4= Subject key identifier: E6:91:F9:09:82:B9:91:26:77:5F:24:64:78:AC:4C:40:73:BD:F2:73 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4F0818FAEA917CC230B35350 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:18:fa:ea:91:7c:c2:30:b3:53:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=7c2e2b9b-c17e-4f49-9fa1-65153f9aa9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:3e:a1:5f:a1:d5:0e:3f:0f:e6:5d:e9:70: b6:2e:a7:c9:92:41:a1:13:b4:41:6b:e2:69:f4:e2: 77:00:22:de:33:fb:36:3b:2c:b1:88:bf:ac:9c:80: 0c:d6:b1:9b:24:4b:29:05:89:e8:9a:b9:6a:f6:ea: 78:cd:ff:4d:52:46:27:2c:74:ba:84:cd:2c:1d:10: ce:cf:d9:08:de:36:b3:a1:c0:07:18:48:f1:dc:21: eb:cc:0f:c1:92:bb:15:a7:4c:2e:8e:ce:40:6c:c8: d2:27:31:e5:d8:3d:73:2a:25:a3:11:23:de:e0:2e: 1c:d9:a9:43:f9:bd:07:c2:d4:46:c3:43:7a:91:d9: 68:c0:52:f5:44:1d:9c:a6:bf:d9:31:39:c6:9f:20: 05:71:9d:3f:1a:01:02:54:77:f3:5e:02:fc:50:20: 48:c2:29:f8:e1:2f:f8:df:e0:d9:60:c7:cf:c3:e7: aa:aa:ca:f7:2e:d4:ef:db:2a:d7:98:7f:52:f0:fd: 63:82:4c:35:b8:9f:3b:53:c4:f7:57:d2:4b:b7:0d: a3:a4:72:78:0a:bf:93:10:07:94:4e:b8:d6:f4:0b: 77:ec:79:8b:a1:1e:70:ee:e2:57:05:2f:29:f2:aa: 40:c9:51:3b:1f:f9:d6:de:d4:de:f5:84:8e:c1:a5: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:F9:09:82:B9:91:26:77:5F:24:64:78:AC:4C:40:73:BD:F2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:57:f4:86:d3:35:bd:8b:12:8f:3a:27:b5:51:c5:11:64:91: 14:82:77:63:15:64:07:03:3b:ad:c1:eb:33:fc:9b:91:b9:81: 03:5d:27:c5:6c:73:42:b5:a1:9a:a0:17:d9:72:a7:73:db:e0: 54:51:b7:c4:bf:f8:7c:5c:0a:a7:ac:a5:c8:c0:79:61:b6:30: 27:c0:2e:c6:3d:f0:51:7f:5e:39:c0:8a:ca:db:90:4b:1e:cc: 3d:c7:7f:94:17:12:0e:dc:87:75:7c:ca:76:42:63:3a:58:6b: ae:4c:66:c8:76:1f:c5:b8:28:1d:c9:00:69:50:a7:c1:aa:19: b3:d1:a5:ce:8f:aa:ec:28:75:00:e1:a6:6b:26:fe:2a:eb:28: c6:3c:ae:18:49:b0:d6:5f:46:65:0b:cd:2e:c7:97:c9:77:bc: 97:cb:68:37:13:a4:83:db:4e:9c:63:d3:c8:6d:e2:5b:38:4c: 45:bb:75:14:05:47:ad:bc:be:19:44:2a:31:49:e0:b6:71:5d: 09:ff:f1:3c:70:3b:c5:a5:18:2c:b2:a4:ba:2f:c3:d2:5d:55: fe:4c:dc:21:17:48:1f:70:19:8d:5b:2c:aa:06:9c:22:a2:9f: 1c:7e:d4:0b:71:ea:b0:88:0b:27:01:30:3f:82:43:1c:f9:bd: 50:bf:a0:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBj66pF8wjCzU1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk N2MyZTJiOWItYzE3ZS00ZjQ5LTlmYTEtNjUxNTNmOWFhOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbc+oV+h1Q4/D+Zd6XC2LqfJkkGhE7RBa+Jp 9OJ3ACLeM/s2OyyxiL+snIAM1rGbJEspBYnomrlq9up4zf9NUkYnLHS6hM0sHRDO z9kI3jazocAHGEjx3CHrzA/BkrsVp0wujs5AbMjSJzHl2D1zKiWjESPe4C4c2alD +b0HwtRGw0N6kdlowFL1RB2cpr/ZMTnGnyAFcZ0/GgECVHfzXgL8UCBIwin44S/4 3+DZYMfPw+eqqsr3LtTv2yrXmH9S8P1jgkw1uJ87U8T3V9JLtw2jpHJ4Cr+TEAeU TrjW9At37HmLoR5w7uJXBS8p8qpAyVE7H/nW3tTe9YSOwaXKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaR+QmCuZEmd18kZHisTEBzvfJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFX9IbTNb2LEo86J7VRxRFkkRSCd2MVZAcDO63B6zP8m5G5gQNdJ8Vs c0K1oZqgF9lyp3Pb4FRRt8S/+HxcCqespcjAeWG2MCfALsY98FF/XjnAisrbkEse zD3Hf5QXEg7ch3V8ynZCYzpYa65MZsh2H8W4KB3JAGlQp8GqGbPRpc6PquwodQDh pmsm/irrKMY8rhhJsNZfRmULzS7Hl8l3vJfLaDcTpIPbTpxj08ht4ls4TEW7dRQF R628vhlEKjFJ4LZxXQn/8TxwO8WlGCyypLovw9JdVf5M3CEXSB9wGY1bLKoGnCKi nxx+1Atx6rCICycBMD+CQxz5vVC/oPw= -----END CERTIFICATE-----Generated at Thu Oct 15 21:09:45 2026 by rpki-client