$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/c3e774b5-af48-378a-a989-d0e082fb3c50.roa File: c3e774b5-af48-378a-a989-d0e082fb3c50.roa (raw, json) Hash identifier: b0yy0Z8URP5lswE/HiLCZPzuIyQ4WnzA6hh2ife2reU= Subject key identifier: A2:83:A1:55:0E:C6:23:15:DF:E0:C2:36:3B:A2:7B:DD:2C:0D:85:00 Certificate issuer: /CN=47dcd76c-a53c-4746-b38d-ab33e0246341 Certificate serial: 010D0C9F4328584F48FAE760FC0212BB1050AF90 Authority key identifier: 47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/c3e774b5-af48-378a-a989-d0e082fb3c50.roa Signing time: Thu 24 Sep 2026 20:59:11 +0000 ROA not before: Thu 24 Sep 2026 20:59:11 +0000 ROA not after: Wed 23 Dec 2026 21:59:11 +0000 asID: 17215 IP address blocks: 199.38.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:fa:e7:60:fc:02:12:bb:10:50:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47dcd76c-a53c-4746-b38d-ab33e0246341 Validity Not Before: Sep 24 20:59:11 2026 GMT Not After : Dec 23 21:59:11 2026 GMT Subject: CN=239eb01c-ee26-4cab-a1bc-8c591efb117b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b5:08:27:8a:14:d9:c4:00:cf:d5:8c:02:4f: 0b:ff:4e:8a:f4:9f:09:7e:7e:6b:8a:6b:d3:85:53: 11:d4:9b:37:5a:71:ec:ec:a3:9d:cf:7e:67:79:7c: 99:04:2e:7f:10:39:02:9b:ad:9f:71:51:a3:a5:58: 2f:e1:20:64:e3:10:e8:2f:70:b7:cc:4a:b4:ce:4f: dd:22:f2:6f:91:8b:91:00:38:ed:3d:73:b6:ff:ff: 45:ce:d9:e3:40:1b:eb:d0:51:28:5b:b6:94:1c:f6: c2:03:af:d5:23:98:30:db:d8:62:3b:20:19:8e:52: 73:cd:a3:99:c2:fb:55:a8:cf:80:21:93:73:66:a6: 5c:8e:e9:0b:c7:f0:cb:41:1f:04:48:65:cb:6b:1c: ab:49:21:df:1e:5d:c2:82:31:4c:d1:98:bf:89:a8: b3:3b:96:c7:cf:33:db:2e:14:e4:d6:11:02:39:6d: d8:c2:5e:38:ae:f0:d1:58:aa:d2:e9:1d:ce:65:f9: ce:1d:7f:c4:10:b5:b8:67:5a:5e:84:ab:45:7c:00: 72:75:01:dd:29:78:65:99:00:ae:7e:18:24:47:eb: a0:ee:c0:ba:1c:e7:dc:5a:8a:b5:00:56:af:dd:b9: 1e:51:93:d6:61:e9:53:ef:52:1f:04:15:08:87:85: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:A1:55:0E:C6:23:15:DF:E0:C2:36:3B:A2:7B:DD:2C:0D:85:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/c3e774b5-af48-378a-a989-d0e082fb3c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl X509v3 Authority Key Identifier: keyid:47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer sbgp-ipAddrBlock: critical IPv4: 199.38.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:15:9b:10:1f:b6:91:cd:d5:b3:9b:44:6f:a6:2c:db:5e:53: fb:64:b1:3d:d1:60:95:b5:5d:8b:b1:ce:6a:ed:3a:87:4b:1b: 6c:7a:01:ba:38:61:82:c4:b2:81:16:12:6a:0e:d8:d8:ef:51: 67:67:0a:7c:17:03:90:d9:aa:7b:5e:a5:a7:9f:61:e2:a4:dc: 71:36:9b:63:20:13:1a:09:5a:6c:e9:08:b3:65:99:75:ef:d9: 06:f7:e6:86:2c:d8:f7:89:27:f7:45:66:b7:c7:fb:48:8a:97: 6b:6d:e0:1a:b6:b2:ed:98:86:e9:55:57:e5:85:aa:1f:a9:ff: 77:31:ed:22:f7:7e:2f:2a:12:d3:6c:c6:96:32:59:cb:7c:54: b9:b4:94:a5:c2:46:2c:7f:ef:23:be:a2:6a:4f:d7:ac:fe:56: 3b:6f:ae:3f:dd:28:b9:a0:e6:b5:77:21:4d:2d:2b:8e:ae:32: c0:30:ea:bb:97:14:0a:94:3f:1d:c2:4d:5e:4d:55:3f:94:c3: 1d:35:55:6e:09:54:ef:b4:b2:d8:e1:19:d2:d4:e8:fc:8d:98: 58:21:d7:da:d2:2a:6b:8a:d5:e1:15:c7:74:7e:7a:21:00:23: ab:56:2e:c7:79:23:35:b7:83:fa:13:cb:db:a5:f0:82:f4:1b: a5:31:b6:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9I+udg/AISuxBQr5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdkY2Q3NmMtYTUzYy00NzQ2LWIzOGQtYWIzM2UwMjQ2 MzQxMB4XDTI2MDkyNDIwNTkxMVoXDTI2MTIyMzIxNTkxMVowLzEtMCsGA1UEAxMk MjM5ZWIwMWMtZWUyNi00Y2FiLWExYmMtOGM1OTFlZmIxMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUIJ4oU2cQAz9WMAk8L/06K9J8Jfn5rimvT hVMR1Js3WnHs7KOdz35neXyZBC5/EDkCm62fcVGjpVgv4SBk4xDoL3C3zEq0zk/d IvJvkYuRADjtPXO2//9FztnjQBvr0FEoW7aUHPbCA6/VI5gw29hiOyAZjlJzzaOZ wvtVqM+AIZNzZqZcjukLx/DLQR8ESGXLaxyrSSHfHl3CgjFM0Zi/iaizO5bHzzPb LhTk1hECOW3Ywl44rvDRWKrS6R3OZfnOHX/EELW4Z1pehKtFfABydQHdKXhlmQCu fhgkR+ug7sC6HOfcWoq1AFav3bkeUZPWYelT71IfBBUIh4WmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKDoVUOxiMV3+DCNjuie90sDYUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80N2Rj ZDc2Yy1hNTNjLTQ3NDYtYjM4ZC1hYjMzZTAyNDYzNDEvYzNlNzc0YjUtYWY0OC0z NzhhLWE5ODktZDBlMDgyZmIzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDdkY2Q3NmMtYTUzYy00NzQ2LWIz OGQtYWIzM2UwMjQ2MzQxLzQ3ZGNkNzZjLWE1M2MtNDc0Ni1iMzhkLWFiMzNlMDI0 NjM0MS5jcmwwHwYDVR0jBBgwFoAUR5rbvJ0zOrxcTDR8mV1hGJNqbLAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80N2RjZDc2Yy1hNTNjLTQ3NDYtYjM4ZC1hYjMz ZTAyNDYzNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0VmxAftpHN1bObRG+mLNteU/tksT3RYJW1XYuxzmrtOodLG2x6Abo4 YYLEsoEWEmoO2NjvUWdnCnwXA5DZqntepaefYeKk3HE2m2MgExoJWmzpCLNlmXXv 2Qb35oYs2PeJJ/dFZrfH+0iKl2tt4Bq2su2YhulVV+WFqh+p/3cx7SL3fi8qEtNs xpYyWct8VLm0lKXCRix/7yO+ompP16z+Vjtvrj/dKLmg5rV3IU0tK46uMsAw6ruX FAqUPx3CTV5NVT+Uwx01VW4JVO+0stjhGdLU6PyNmFgh19rSKmuK1eEVx3R+eiEA I6tWLsd5IzW3g/oTy9ul8IL0G6UxtvI= -----END CERTIFICATE-----Generated at Sat Sep 26 06:24:17 2026 by rpki-client