$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa File: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (raw, json) Hash identifier: JDpvZujeUv4qlwrLdyoc+ugcGluA4yUdp1Lk9GR4YJs= Subject key identifier: 51:E3:2D:35:E4:58:F4:15:93:79:93:09:87:85:8D:15:35:87:02:7F Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584F71EDB96EA6BC6664656CE180 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 393468 IP address blocks: 199.185.120.0/23 maxlen: 23 199.185.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b9:6e:a6:bc:66:64:65:6c:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=086d9965-d409-4f28-b519-7757d8262245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:16:09:4e:6c:32:87:7b:17:6f:07:ac:47: 76:f1:56:d5:f1:d1:9d:1a:39:fb:ef:3a:13:38:29: 39:8b:5e:c4:5c:26:fe:d5:b9:27:30:ea:2e:32:09: 05:1a:6b:19:4a:ee:50:cf:ce:1d:6a:c8:0a:b9:de: 86:a2:06:ca:8e:b4:42:91:6d:8b:61:84:07:9f:1e: fd:3d:7d:2c:28:19:7e:e4:b9:70:43:b0:f7:8c:37: ee:57:e4:67:a6:12:9f:e2:3d:62:92:f0:cc:5f:3d: 93:9c:86:b5:3a:bc:d6:51:98:90:2a:e9:ed:fe:50: 99:8e:21:a3:f0:f6:c4:ae:1c:50:0d:3c:da:ae:9b: 13:5f:c7:52:b1:32:e8:50:94:d8:6a:9c:f0:fd:f6: 62:a6:78:cf:2b:99:ab:da:95:13:8f:67:2b:94:31: 65:12:2a:73:74:54:5e:3b:9f:65:b0:66:28:37:81: 56:1b:58:5d:5f:77:32:0c:75:24:30:30:f6:ef:7c: 7b:10:87:d1:65:fe:7d:83:a1:b0:a1:91:55:f3:40: 12:3f:b9:4a:8b:12:d9:c4:97:12:9e:be:3b:ba:37: fd:40:27:b9:f3:b5:df:b1:1a:a6:c2:9a:a6:bc:91: 26:3c:1b:8c:ad:25:d0:c3:69:c8:98:64:0c:48:bc: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:2D:35:E4:58:F4:15:93:79:93:09:87:85:8D:15:35:87:02:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:17:bf:cc:75:af:de:18:d1:44:5d:80:d9:99:74:e2:e7:26: 9a:d6:84:a2:bf:03:d8:7c:25:76:98:d9:0e:3e:90:99:a9:08: ee:85:35:0c:65:43:36:36:04:5e:23:52:f6:fa:1a:9d:d6:83: af:68:10:2a:12:23:9a:d0:61:a5:54:64:7e:b7:01:93:d3:47: cb:16:69:27:ea:a3:f0:45:2d:a4:d8:08:4c:54:2f:cb:b0:bd: fe:5d:04:4d:03:8a:ab:89:f9:69:f7:a8:81:6c:7b:b7:7d:01: ff:54:ea:65:b9:92:c1:b4:c0:b4:8b:06:be:ac:b3:5a:6a:ee: aa:20:fb:56:93:55:86:bf:81:6a:f4:9d:d7:c3:80:c4:db:52: e2:ad:1f:44:87:47:a3:7e:fb:38:f4:cc:7d:30:f6:6c:0a:15: de:41:89:d3:52:7a:dc:3d:a4:0a:47:f6:7c:3a:d6:7d:ee:1c: 48:b8:6a:77:15:b4:e0:0d:04:3e:13:3d:c1:94:19:72:1d:c0: c2:59:ea:6e:12:7b:88:0d:7e:d1:56:f7:96:60:e4:ee:83:de: bb:a9:59:28:39:a3:4b:87:d7:17:a5:3d:31:4e:9c:6e:7b:e9: 79:e0:de:0b:ca:f1:15:98:d3:f8:a9:3b:59:65:53:aa:c1:69: 90:3c:e5:c3 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9x7bluprxmZGVs4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MDg2ZDk5NjUtZDQwOS00ZjI4LWI1MTktNzc1N2Q4MjYyMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0UWCU5sMod7F28HrEd28VbV8dGdGjn77zoT OCk5i17EXCb+1bknMOouMgkFGmsZSu5Qz84dasgKud6GogbKjrRCkW2LYYQHnx79 PX0sKBl+5LlwQ7D3jDfuV+RnphKf4j1ikvDMXz2TnIa1OrzWUZiQKunt/lCZjiGj 8PbErhxQDTzarpsTX8dSsTLoUJTYapzw/fZipnjPK5mr2pUTj2crlDFlEipzdFRe O59lsGYoN4FWG1hdX3cyDHUkMDD273x7EIfRZf59g6GwoZFV80ASP7lKixLZxJcS nr47ujf9QCe587XfsRqmwpqmvJEmPBuMrSXQw2nImGQMSLyBXQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFHjLTXkWPQVk3mTCYeFjRU1hwJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMzU0NGE0NzEtMjdjYS0z ZDhiLTlmOGEtNmZhMmY2MTM0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPHuXgD BADHuXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAYhe/zHWv3hjRRF2A2Zl04ucmmtaEor8D2HwldpjZDj6Q makI7oU1DGVDNjYEXiNS9voandaDr2gQKhIjmtBhpVRkfrcBk9NHyxZpJ+qj8EUt pNgITFQvy7C9/l0ETQOKq4n5afeogWx7t30B/1TqZbmSwbTAtIsGvqyzWmruqiD7 VpNVhr+BavSd18OAxNtS4q0fRIdHo377OPTMfTD2bAoV3kGJ01J63D2kCkf2fDrW fe4cSLhqdxW04A0EPhM9wZQZch3AwlnqbhJ7iA1+0Vb3lmDk7oPeu6lZKDmjS4fX F6U9MU6cbnvpeeDeC8rxFZjT+Kk7WWVTqsFpkDzlww== -----END CERTIFICATE-----Generated at Sun Oct 11 06:20:32 2026 by rpki-client