$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/79859607-3a2c-3fc1-9e7f-2d7ddf61220c.roa File: 79859607-3a2c-3fc1-9e7f-2d7ddf61220c.roa (raw, json) Hash identifier: Ofh4BrXxqM4KLinUZg7uUbYBtA7HdNcksivLma/l4l8= Subject key identifier: 9D:87:1C:08:0B:A6:16:33:81:81:70:CD:1B:47:22:F6:0E:4D:B6:A8 Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584F6CD8F2FAE318084BA0801600 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/79859607-3a2c-3fc1-9e7f-2d7ddf61220c.roa Signing time: Wed 07 Oct 2026 17:19:53 +0000 ROA not before: Wed 07 Oct 2026 17:19:53 +0000 ROA not after: Tue 05 Jan 2027 18:19:53 +0000 asID: 9457 IP address blocks: 199.30.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:d8:f2:fa:e3:18:08:4b:a0:80:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Oct 7 17:19:53 2026 GMT Not After : Jan 5 18:19:53 2027 GMT Subject: CN=3fbe58ff-f1d7-460b-9ed2-8d6ee4a040d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:ec:d7:a5:b7:d6:fc:61:79:6a:56:9c:26: 12:84:cc:02:e5:80:2b:d7:74:39:d4:b2:5b:09:1f: 91:9c:c4:49:dc:49:39:3e:31:71:69:b8:5b:9e:50: 9b:2c:ce:c8:4f:62:b8:2d:4c:be:2f:c6:2a:fe:d8: 1f:36:c3:1e:92:5c:3f:01:97:97:d4:56:bb:f8:f6: 79:f6:31:c5:db:d2:7f:06:d0:6e:73:1d:4a:64:31: 27:a5:c1:7a:ca:f6:cc:d8:89:e5:c2:12:ab:25:33: da:6c:41:fc:71:52:6c:d9:12:2f:5b:b7:81:64:8c: 8a:c9:bc:ee:b5:c7:d3:c7:60:3d:33:72:e6:a8:f1: ce:0f:f1:d7:b5:a2:45:b1:84:05:79:c2:be:9a:4f: 9d:76:0e:62:2f:d9:97:4a:91:ae:e2:2d:e6:27:85: 41:3d:53:a2:74:94:35:2d:25:aa:05:fe:12:0c:35: 35:11:5f:de:25:0a:3b:5d:ce:d0:7f:b9:fb:15:8a: 79:85:8f:53:67:6b:90:fc:76:e5:e1:83:b1:c7:90: b3:e7:d4:d1:ff:94:cc:98:3f:23:f7:96:17:d6:1c: ab:a7:93:54:f0:7e:83:80:9a:ec:31:f2:12:cd:52: c6:7f:cf:db:07:81:87:64:02:c6:aa:ea:a3:7b:46: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:1C:08:0B:A6:16:33:81:81:70:CD:1B:47:22:F6:0E:4D:B6:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/79859607-3a2c-3fc1-9e7f-2d7ddf61220c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.30.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:46:88:64:c1:9f:89:bd:2a:db:76:af:e6:09:96:2f:a8:b3: fd:24:36:2e:f5:eb:85:10:70:d1:3d:de:43:1c:4f:af:ff:a4: ac:85:ef:9a:06:8d:f1:39:83:de:71:9a:6c:97:ca:61:be:0e: 5d:d7:6f:dc:f0:e6:73:08:8f:f4:d9:4b:20:bc:16:5b:ff:4d: 25:12:9e:2b:71:84:55:6b:93:52:21:62:75:17:d8:25:31:11: 51:3a:52:96:59:29:0c:a6:76:f9:78:a8:ad:d0:9a:95:72:52: 84:7a:88:7e:87:7d:79:d9:65:6a:2d:90:d2:3d:9b:66:02:65: 11:ac:12:fe:eb:2c:d2:aa:79:2b:8d:c8:fd:4b:fe:33:2f:c1: 53:b5:35:76:82:b3:93:4b:9c:64:52:a6:12:3a:27:5f:8c:45: 91:d5:1d:52:85:43:4b:25:aa:9a:92:8b:34:56:4a:ea:a4:35: 9d:38:c3:55:d8:67:b7:35:06:41:55:7a:f2:cd:b7:97:e5:87: d8:95:07:d1:3e:91:68:02:c1:b1:13:1f:7b:c4:fe:d1:dc:a3: 64:67:60:c0:ab:35:14:9b:c1:3c:bd:6b:17:d2:cc:bf:e9:ad: 1a:d7:60:28:74:3a:cd:c0:6e:a3:26:9d:a2:e2:6b:f9:9f:d4: 3b:40:0d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9s2PL64xgIS6CAFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI2MTAwNzE3MTk1M1oXDTI3MDEwNTE4MTk1M1owLzEtMCsGA1UEAxMk M2ZiZTU4ZmYtZjFkNy00NjBiLTllZDItOGQ2ZWU0YTA0MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuADs16W31vxheWpWnCYShMwC5YAr13Q51LJb CR+RnMRJ3Ek5PjFxabhbnlCbLM7IT2K4LUy+L8Yq/tgfNsMeklw/AZeX1Fa7+PZ5 9jHF29J/BtBucx1KZDEnpcF6yvbM2InlwhKrJTPabEH8cVJs2RIvW7eBZIyKybzu tcfTx2A9M3LmqPHOD/HXtaJFsYQFecK+mk+ddg5iL9mXSpGu4i3mJ4VBPVOidJQ1 LSWqBf4SDDU1EV/eJQo7Xc7Qf7n7FYp5hY9TZ2uQ/Hbl4YOxx5Cz59TR/5TMmD8j 95YX1hyrp5NU8H6DgJrsMfISzVLGf8/bB4GHZALGquqje0Y8RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2HHAgLphYzgYFwzRtHIvYOTbaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvNzk4NTk2MDctM2EyYy0z ZmMxLTllN2YtMmQ3ZGRmNjEyMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpGiGTBn4m9Ktt2r+YJli+os/0kNi7164UQcNE93kMcT6//pKyF75oG jfE5g95xmmyXymG+Dl3Xb9zw5nMIj/TZSyC8Flv/TSUSnitxhFVrk1IhYnUX2CUx EVE6UpZZKQymdvl4qK3QmpVyUoR6iH6HfXnZZWotkNI9m2YCZRGsEv7rLNKqeSuN yP1L/jMvwVO1NXaCs5NLnGRSphI6J1+MRZHVHVKFQ0slqpqSizRWSuqkNZ04w1XY Z7c1BkFVevLNt5flh9iVB9E+kWgCwbETH3vE/tHco2RnYMCrNRSbwTy9axfSzL/p rRrXYCh0Os3AbqMmnaLia/mf1DtADeI= -----END CERTIFICATE-----Generated at Wed Oct 14 03:48:49 2026 by rpki-client