$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/80c9c456-c754-3368-96d1-77ff871e420c.roa File: 80c9c456-c754-3368-96d1-77ff871e420c.roa (raw, json) Hash identifier: teGWw0hdW2cbC1U3hlD7hZvBazi8alawybmHFyXDOHY= Subject key identifier: 0C:D5:FD:86:DA:36:78:C3:78:FC:BB:C4:99:2A:9D:20:61:DF:89:17 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235E31327E36CCD969F280 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/80c9c456-c754-3368-96d1-77ff871e420c.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Thu 02 May 2030 04:00:00 +0000 asID: 8075 IP address blocks: 199.242.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5e:31:32:7e:36:cc:d9:69:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : May 2 04:00:00 2030 GMT Subject: CN=4b4e42b7-e968-4d4e-b752-714223718674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:05:07:ae:3c:d4:b9:37:0e:76:03:c2:a8: 69:ad:64:41:59:f9:03:dd:e4:9d:4d:28:28:46:2d: 75:95:2f:4a:65:23:ff:c3:8e:39:8e:3d:d9:7c:37: ed:c4:74:b2:33:fa:e4:3b:e9:9b:2a:30:eb:9f:00: 2c:f9:f2:43:d5:37:5d:86:82:77:ce:72:49:d4:1d: 28:00:0f:29:28:2d:a7:40:cf:ba:ff:8d:7e:83:ef: 93:9d:11:79:41:eb:c2:9a:23:25:3f:d8:4c:3e:14: 17:25:83:e8:0e:82:a1:9e:5e:ca:de:39:eb:0e:b6: 36:3c:94:6d:43:7a:d2:8e:17:66:5c:e8:54:35:19: b3:3a:65:df:ce:a0:3b:24:71:16:b6:14:e6:92:f9: 42:89:f4:50:40:13:c5:6d:bb:4c:df:60:fd:2c:b0: a7:73:e6:87:93:bb:0e:9f:a1:30:ca:1a:05:c9:8d: bf:72:95:af:ce:86:8e:80:a3:01:0a:1f:65:80:76: 72:6a:9a:5e:5a:1d:7c:ca:b1:56:3b:10:1c:58:c4: 64:89:8e:82:f0:d3:19:e6:4f:0c:e6:6a:97:8d:60: 33:8c:93:55:d1:3b:d0:22:75:63:1e:47:db:9c:78: c9:6a:be:11:a1:ce:4c:63:25:57:3b:af:73:30:7b: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:FD:86:DA:36:78:C3:78:FC:BB:C4:99:2A:9D:20:61:DF:89:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/80c9c456-c754-3368-96d1-77ff871e420c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 199.242.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:36:0a:3f:21:20:fd:f4:29:23:d3:ca:2c:9c:00:0e:4b:e6: 85:2a:c8:30:d3:92:5f:63:08:dd:71:d0:93:d2:3f:c9:29:33: 2a:7b:d4:d8:af:e2:8a:41:58:1b:cf:fe:18:5c:5c:b8:64:c3: d1:87:b8:38:db:49:67:46:8f:67:2e:ea:5c:89:19:19:35:2d: b8:bc:93:95:c4:da:11:8e:4b:93:47:76:7c:6b:9a:c6:89:52: ea:82:c1:71:50:9d:bb:4b:fd:ed:2e:7d:c8:ef:ca:8a:68:3d: 10:17:92:77:f6:9f:67:f5:74:21:7b:44:00:62:62:06:c8:c5: f7:82:81:bc:aa:13:01:82:f9:70:17:bb:0f:09:f5:ee:15:b8: 46:5f:00:16:bb:18:7f:6c:75:79:13:7a:02:89:86:06:7c:c7: 12:3a:55:af:9b:f8:dd:ed:15:ce:f6:b0:17:7f:84:5a:9a:01: 00:4a:e8:7f:ca:f9:d6:e6:25:04:d2:36:38:ac:9a:ad:d8:26: d8:e8:71:e6:f0:8d:ee:2e:ac:b2:72:26:1e:7b:a5:db:e9:92: 14:1f:47:cc:a9:dd:0a:b4:b1:1f:66:9b:d4:e5:70:b3:8b:b3: 42:71:f8:a3:ff:89:75:04:56:6c:35:6d:7f:a9:eb:47:16:64: 5a:56:21:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI14xMn42zNlp8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNVoXDTMwMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk NGI0ZTQyYjctZTk2OC00ZDRlLWI3NTItNzE0MjIzNzE4Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN8FB6481Lk3DnYDwqhprWRBWfkD3eSdTSgo Ri11lS9KZSP/w445jj3ZfDftxHSyM/rkO+mbKjDrnwAs+fJD1TddhoJ3znJJ1B0o AA8pKC2nQM+6/41+g++TnRF5QevCmiMlP9hMPhQXJYPoDoKhnl7K3jnrDrY2PJRt Q3rSjhdmXOhUNRmzOmXfzqA7JHEWthTmkvlCifRQQBPFbbtM32D9LLCnc+aHk7sO n6EwyhoFyY2/cpWvzoaOgKMBCh9lgHZyappeWh18yrFWOxAcWMRkiY6C8NMZ5k8M 5mqXjWAzjJNV0TvQInVjHkfbnHjJar4Roc5MYyVXO69zMHuY9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzV/YbaNnjDePy7xJkqnSBh34kXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvODBjOWM0NTYtYzc1NC0z MzY4LTk2ZDEtNzdmZjg3MWU0MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/IwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ82Cj8hIP30KSPTyiycAA5L5oUqyDDTkl9jCN1x0JPSP8kpMyp71Niv 4opBWBvP/hhcXLhkw9GHuDjbSWdGj2cu6lyJGRk1Lbi8k5XE2hGOS5NHdnxrmsaJ UuqCwXFQnbtL/e0ufcjvyopoPRAXknf2n2f1dCF7RABiYgbIxfeCgbyqEwGC+XAX uw8J9e4VuEZfABa7GH9sdXkTegKJhgZ8xxI6Va+b+N3tFc72sBd/hFqaAQBK6H/K +dbmJQTSNjismq3YJtjocebwje4urLJyJh57pdvpkhQfR8yp3Qq0sR9mm9TlcLOL s0Jx+KP/iXUEVmw1bX+p60cWZFpWIRA= -----END CERTIFICATE-----Generated at Fri Sep 4 23:08:51 2026 by rpki-client