$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/a344504a-5432-324c-b92a-7dce49f8b28b.roa File: a344504a-5432-324c-b92a-7dce49f8b28b.roa (raw, json) Hash identifier: B5Bnh5KPRMzgcuCHCFLjgLvWOPAUASSdgfHEGwUd1Qc= Subject key identifier: 55:9B:9F:3F:F7:C4:7C:84:F2:CE:C5:16:F8:9D:93:FA:97:B4:6C:28 Certificate issuer: /CN=752d413c-d382-4874-b63b-a253c7aa7446 Certificate serial: 010D0C9F4328584F4973DF777973474C87AF1A20 Authority key identifier: 33:98:EF:BE:87:5A:24:D5:3D:62:9C:D7:82:6E:7B:22:6D:B0:34:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/a344504a-5432-324c-b92a-7dce49f8b28b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 199.115.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/752d413c-d382-4874-b63b-a253c7aa7446.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/752d413c-d382-4874-b63b-a253c7aa7446.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:df:77:79:73:47:4c:87:af:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=752d413c-d382-4874-b63b-a253c7aa7446 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5f7920e4-4734-40d3-859f-2cea9c25140a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8a:3a:33:b1:11:14:d0:f9:a8:35:5b:9b:ed: e6:37:8f:4c:e7:9b:e0:2f:ac:e2:50:50:08:23:74: 7f:f9:b5:83:c2:79:ab:64:2f:05:4d:27:22:e6:84: b0:24:11:e7:f1:8b:8f:cf:6a:5c:2c:0d:24:a0:a1: 1d:7d:3a:ab:c3:ff:f8:13:9d:ec:a6:39:03:f9:92: 55:a5:1d:76:f4:a7:92:af:df:ab:65:fa:cd:22:c9: 72:12:64:51:e6:e7:ed:f7:a5:72:38:ac:77:8d:0e: 36:b9:e8:f5:3b:d7:17:1d:a2:76:28:e0:2b:57:30: af:49:46:1f:5f:f6:37:84:35:36:17:19:a6:3f:df: fa:63:96:f6:8d:38:d7:3c:28:34:9f:8e:b7:9f:df: 04:68:0d:ba:8b:9d:2c:38:62:15:cd:b9:df:45:da: d6:c6:6d:d8:7f:4b:d7:51:d4:52:47:62:b0:b8:ac: 6f:47:0a:0d:bc:dd:45:7c:97:ad:b4:96:0e:e4:f6: ed:3f:d3:3e:ce:a6:41:d7:aa:04:59:ec:28:03:cb: aa:7c:d0:81:4a:b5:99:45:28:24:f1:13:43:2b:67: be:3e:0e:6f:b0:66:4f:18:3d:cb:98:40:0b:39:1f: e2:e5:79:7a:8d:73:e7:8b:1e:e6:34:f2:30:d0:12: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9B:9F:3F:F7:C4:7C:84:F2:CE:C5:16:F8:9D:93:FA:97:B4:6C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/a344504a-5432-324c-b92a-7dce49f8b28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/752d413c-d382-4874-b63b-a253c7aa7446.crl X509v3 Authority Key Identifier: keyid:33:98:EF:BE:87:5A:24:D5:3D:62:9C:D7:82:6E:7B:22:6D:B0:34:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446.cer sbgp-ipAddrBlock: critical IPv4: 199.115.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a6:ea:63:a3:2b:85:a4:0d:5a:d1:e1:89:b5:24:66:41:1c: 74:2d:da:7d:3d:dd:d9:2f:51:9c:ac:60:d4:b7:69:60:88:25: 70:19:4c:0a:f5:ca:0a:8f:cb:7a:35:b2:71:94:5c:76:65:bb: 4b:d3:5c:24:b8:0e:26:64:93:ae:13:60:8d:fc:ef:5f:d5:12: 7f:6e:b0:37:b3:10:ca:86:fc:78:cc:c2:88:d9:c4:ab:c6:0b: ca:a9:f6:9f:22:15:61:1b:c5:d0:7d:f4:72:d4:38:2c:a2:09: ca:f2:53:58:d5:40:9c:89:38:eb:1b:68:79:9e:b9:4b:b7:f7: 4c:ef:d7:63:8d:ec:ab:12:74:6a:14:f7:1d:df:85:09:4a:ee: 8b:ff:69:f9:cf:8a:18:eb:01:0b:a3:ea:17:64:c3:ee:31:1d: e3:63:e5:97:d2:a7:da:a2:1a:28:63:4b:53:6d:dc:eb:93:d7: 15:08:ee:a1:fb:9a:ae:02:9c:8e:06:07:a4:41:3e:f3:9d:86: 38:d3:df:b5:47:84:a6:71:93:f6:a4:60:c0:80:1d:b9:f7:c1: 2d:8f:49:96:4f:72:2d:7a:82:d1:af:f6:1d:60:c1:43:e4:34: 1c:94:46:9a:b1:cd:53:05:12:32:71:e4:f7:d9:48:ae:90:dd: 4d:40:fb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc993eXNHTIevGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzUyZDQxM2MtZDM4Mi00ODc0LWI2M2ItYTI1M2M3YWE3 NDQ2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWY3OTIwZTQtNDczNC00MGQzLTg1OWYtMmNlYTljMjUxNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoo6M7ERFND5qDVbm+3mN49M55vgL6ziUFAI I3R/+bWDwnmrZC8FTSci5oSwJBHn8YuPz2pcLA0koKEdfTqrw//4E53spjkD+ZJV pR129KeSr9+rZfrNIslyEmRR5uft96VyOKx3jQ42uej1O9cXHaJ2KOArVzCvSUYf X/Y3hDU2FxmmP9/6Y5b2jTjXPCg0n463n98EaA26i50sOGIVzbnfRdrWxm3Yf0vX UdRSR2KwuKxvRwoNvN1FfJettJYO5PbtP9M+zqZB16oEWewoA8uqfNCBSrWZRSgk 8RNDK2e+Pg5vsGZPGD3LmEALOR/i5Xl6jXPnix7mNPIw0BJr5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWbnz/3xHyE8s7FFvidk/qXtGwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NTJk NDEzYy1kMzgyLTQ4NzQtYjYzYi1hMjUzYzdhYTc0NDYvYTM0NDUwNGEtNTQzMi0z MjRjLWI5MmEtN2RjZTQ5ZjhiMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzUyZDQxM2MtZDM4Mi00ODc0LWI2 M2ItYTI1M2M3YWE3NDQ2Lzc1MmQ0MTNjLWQzODItNDg3NC1iNjNiLWEyNTNjN2Fh NzQ0Ni5jcmwwHwYDVR0jBBgwFoAUM5jvvodaJNU9YpzXgm57Im2wNDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NTJkNDEzYy1kMzgyLTQ4NzQtYjYzYi1hMjUz YzdhYTc0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3PIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2m6mOjK4WkDVrR4Ym1JGZBHHQt2n093dkvUZysYNS3aWCIJXAZTAr1 ygqPy3o1snGUXHZlu0vTXCS4DiZkk64TYI3871/VEn9usDezEMqG/HjMwojZxKvG C8qp9p8iFWEbxdB99HLUOCyiCcryU1jVQJyJOOsbaHmeuUu390zv12ON7KsSdGoU 9x3fhQlK7ov/afnPihjrAQuj6hdkw+4xHeNj5ZfSp9qiGihjS1Nt3OuT1xUI7qH7 mq4CnI4GB6RBPvOdhjjT37VHhKZxk/akYMCAHbn3wS2PSZZPci16gtGv9h1gwUPk NByURpqxzVMFEjJx5PfZSK6Q3U1A+1o= -----END CERTIFICATE-----Generated at Mon Sep 28 19:21:00 2026 by rpki-client