$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa File: 57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa (raw, json) Hash identifier: xJnoGtzGAlCAtaUHh1iIUfhsuiEwl06ULUg1jpi9Uko= Subject key identifier: 32:B3:C3:92:93:F0:F6:3B:B1:0E:40:66:3D:E4:DF:22:21:B0:98:B1 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584F4973A9D8FA1DD7D952D23E00 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6621 IP address blocks: 69.19.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a9:d8:fa:1d:d7:d9:52:d2:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d33c559c-3527-4255-b853-697e33f5fbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:7b:e2:a0:0c:1a:6d:98:0c:ed:1e:b4:9e: 89:c2:25:35:3f:96:dc:2d:42:e3:57:7c:4c:7d:9a: ee:f5:87:5a:32:99:c4:7a:b8:a7:39:bb:3b:c4:a1: a5:c9:2f:8c:5c:f7:64:44:7b:13:61:0c:65:c5:b0: f7:72:e7:9f:8c:3e:2d:06:ce:0c:1c:a6:e7:31:b7: de:97:8e:ce:25:71:ad:74:d1:9a:37:9c:a5:3d:36: ad:d3:d1:e9:fd:52:68:91:c1:f1:63:8a:38:d1:ee: 71:36:79:53:b2:e6:e4:0f:95:12:fc:5c:6e:a4:ad: d7:0b:d0:30:14:3b:68:00:85:3a:93:93:11:79:dc: 64:5f:36:8c:24:e4:c3:36:84:7f:da:96:0c:9f:d0: 54:68:50:99:ae:ef:1b:ad:29:d6:89:8e:5d:56:1b: 64:8a:9e:f4:4e:0d:aa:a1:91:99:7b:62:72:f5:e7: b6:9c:18:00:23:9a:8b:9f:7c:3a:b2:4c:07:a1:51: ef:22:99:f8:4b:0b:2f:bc:7f:18:39:be:f2:bc:89: 6c:6f:80:68:20:ce:90:b8:c0:a0:cf:e7:e0:b2:cf: 4d:aa:67:25:f0:0b:d3:fa:22:a4:81:52:fe:2a:dd: 3d:63:6c:7c:eb:57:ce:4c:49:92:2c:a7:d9:37:bb: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B3:C3:92:93:F0:F6:3B:B1:0E:40:66:3D:E4:DF:22:21:B0:98:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 69.19.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f5:c2:bb:7d:00:05:13:d3:ad:d1:13:aa:cc:f2:18:ae:51: e6:17:1d:1a:c3:71:b5:ee:80:b4:32:69:ee:36:34:0f:d5:a7: 83:26:bc:37:62:e7:43:a1:8d:96:1d:2f:95:c6:e4:5a:3e:b9: 20:7b:7b:a7:0f:17:d2:12:06:20:2c:cd:65:b8:07:72:03:83: 4b:80:b8:91:0a:96:b3:6f:bc:03:3e:25:14:ee:82:f9:6f:c1: 52:05:66:91:2c:e7:b9:a4:f3:ae:c9:a8:ad:25:f3:ea:99:c8: eb:37:b5:66:4b:22:ab:e6:de:be:09:e1:1f:54:e1:91:e5:be: 28:df:a1:aa:a5:13:57:68:45:df:a4:cc:ff:7a:c7:a4:9b:54: 64:a9:84:15:e4:d3:db:a4:f4:dd:05:a3:d3:d1:63:ea:36:8a: fd:96:18:44:fe:bd:83:8f:aa:bf:a1:31:e1:b8:6b:4b:5d:7d: ec:2b:14:ef:be:d1:d7:ea:09:dd:63:be:b5:d2:2d:8a:14:ca: f6:2d:4f:53:0a:df:59:0e:fd:f2:c3:50:98:a0:66:bd:db:23: 1c:ae:8f:3a:24:d3:aa:f4:8a:58:c6:15:81:c6:09:a8:90:32: d7:ef:1b:5d:88:49:85:07:9a:3f:31:f0:84:bc:14:24:38:0b: bd:81:d0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6nY+h3X2VLSPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDMzYzU1OWMtMzUyNy00MjU1LWI4NTMtNjk3ZTMzZjVmYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Z74qAMGm2YDO0etJ6JwiU1P5bcLULjV3xM fZru9YdaMpnEerinObs7xKGlyS+MXPdkRHsTYQxlxbD3cuefjD4tBs4MHKbnMbfe l47OJXGtdNGaN5ylPTat09Hp/VJokcHxY4o40e5xNnlTsubkD5US/FxupK3XC9Aw FDtoAIU6k5MRedxkXzaMJOTDNoR/2pYMn9BUaFCZru8brSnWiY5dVhtkip70Tg2q oZGZe2Jy9ee2nBgAI5qLn3w6skwHoVHvIpn4SwsvvH8YOb7yvIlsb4BoIM6QuMCg z+fgss9Nqmcl8AvT+iKkgVL+Kt09Y2x861fOTEmSLKfZN7v5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKzw5KT8PY7sQ5AZj3k3yIhsJixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNTdjMmEzNWQtNDNiZS0z ZmVhLTllNTAtYmNlM2FiMzM0OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRRMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv1wrt9AAUT063RE6rM8hiuUeYXHRrDcbXugLQyae42NA/Vp4MmvDdi 50OhjZYdL5XG5Fo+uSB7e6cPF9ISBiAszWW4B3IDg0uAuJEKlrNvvAM+JRTugvlv wVIFZpEs57mk867JqK0l8+qZyOs3tWZLIqvm3r4J4R9U4ZHlvijfoaqlE1doRd+k zP96x6SbVGSphBXk09uk9N0Fo9PRY+o2iv2WGET+vYOPqr+hMeG4a0tdfewrFO++ 0dfqCd1jvrXSLYoUyvYtT1MK31kO/fLDUJigZr3bIxyujzok06r0iljGFYHGCaiQ MtfvG12ISYUHmj8x8IS8FCQ4C72B0Cg= -----END CERTIFICATE-----Generated at Sun Oct 4 11:15:23 2026 by rpki-client