$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/841aba38-7d00-30d9-863c-9732d3a8519c.roa File: 841aba38-7d00-30d9-863c-9732d3a8519c.roa (raw, json) Hash identifier: NFrXlCvj/FXy1AYGZ7OqyhCfuMNifj7pJdwJGNBfm+E= Subject key identifier: C5:AF:50:A0:B2:D2:8B:42:AA:82:21:39:34:14:DE:97:E8:3B:5B:96 Certificate issuer: /CN=23658315-b56f-46db-89d2-184000d7f7e1 Certificate serial: 010D0C9F4328584F119CF263CF6ED5B7DA228F80 Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/841aba38-7d00-30d9-863c-9732d3a8519c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 26968 IP address blocks: 199.101.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f2:63:cf:6e:d5:b7:da:22:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=206658c8-13b4-4252-a34e-80a0fa1dc998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:f5:4d:b9:ee:45:c1:be:1f:41:8b:f6:73: 95:db:88:fb:bf:f0:fd:54:85:62:9e:3e:b1:db:0d: ce:c6:d5:08:4c:32:8d:67:ba:d8:19:40:45:82:62: 9e:e2:97:16:8a:0c:39:e1:20:6f:5a:67:68:dc:06: 21:a0:99:28:8f:83:9e:bc:b4:59:67:4f:8a:b8:4c: 93:99:5d:08:3a:77:5c:49:55:4b:7e:8d:d7:ed:06: 79:ec:62:09:e9:1a:66:c9:1a:83:37:45:7a:37:7e: 86:b0:fa:ee:4c:25:86:e1:48:36:3f:39:05:3e:94: 5f:8f:0f:85:2b:ac:09:75:18:34:6e:5a:9f:9f:73: 88:c6:0d:42:69:a8:05:ba:b1:e0:e3:aa:7d:b3:a7: cc:6c:8b:d6:14:ed:ce:6d:90:07:5c:58:56:80:3d: 1b:87:4d:d3:90:70:e2:b7:85:88:b8:81:3a:57:d9: 49:2e:e1:d1:59:85:72:97:23:01:35:4c:27:4d:f8: 20:7b:03:6e:b0:f2:06:01:0d:d6:c3:4c:7f:e3:eb: 70:da:45:13:ab:2c:63:13:65:5b:22:8e:8a:c0:53: f2:bf:82:d5:66:87:80:56:ce:e8:ef:c9:6a:ce:1f: d3:e8:03:c8:4d:d3:c3:de:80:50:a3:c5:3f:7d:f3: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:50:A0:B2:D2:8B:42:AA:82:21:39:34:14:DE:97:E8:3B:5B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/841aba38-7d00-30d9-863c-9732d3a8519c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl X509v3 Authority Key Identifier: keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer sbgp-ipAddrBlock: critical IPv4: 199.101.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:54:f1:33:1e:94:61:2d:b0:5f:1d:cc:2a:54:11:7d:d6:ef: fb:56:42:77:61:5f:d9:b5:69:e1:f7:cc:0d:b3:ce:cb:a6:b7: 88:20:7e:29:51:00:dc:4b:b3:c7:f5:8b:e2:b2:37:60:d0:1c: 24:82:c6:7f:17:33:97:12:b4:67:18:24:b0:07:ac:07:88:0b: 12:2a:62:d2:81:d3:c7:d2:ad:12:30:1c:ce:bf:02:73:87:a1: a3:5a:00:b9:e3:06:38:86:a3:e1:96:d9:51:5b:77:95:08:69: 97:3e:d0:f1:35:06:c2:52:fe:5c:aa:ee:7a:6f:30:c9:bb:39: 36:43:34:e9:67:00:f4:42:ab:41:33:4a:78:8c:c0:96:a1:fe: 68:bd:66:22:af:0e:d0:9f:5e:06:ab:74:78:52:e8:30:b9:83: 9a:fb:99:df:d5:78:7d:a9:e0:8e:43:ce:41:74:5d:4e:fc:b4: 22:53:df:56:43:20:10:1f:68:9c:c1:0f:d7:fd:dc:90:98:bc: 19:a7:0f:9a:c6:10:c4:cd:65:43:d7:a1:5a:81:2d:53:cc:32: e1:6b:2e:c2:b1:e8:46:90:1c:e7:25:0b:aa:c9:c4:0b:56:c8: a4:d8:45:d7:0c:9c:ee:64:0b:6b:2d:80:d9:9a:a5:c4:6a:67: eb:6e:c6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPJjz27Vt9oij4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm N2UxMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjA2NjU4YzgtMTNiNC00MjUyLWEzNGUtODBhMGZhMWRjOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+z1TbnuRcG+H0GL9nOV24j7v/D9VIVinj6x 2w3OxtUITDKNZ7rYGUBFgmKe4pcWigw54SBvWmdo3AYhoJkoj4OevLRZZ0+KuEyT mV0IOndcSVVLfo3X7QZ57GIJ6RpmyRqDN0V6N36GsPruTCWG4Ug2PzkFPpRfjw+F K6wJdRg0blqfn3OIxg1CaagFurHg46p9s6fMbIvWFO3ObZAHXFhWgD0bh03TkHDi t4WIuIE6V9lJLuHRWYVylyMBNUwnTfggewNusPIGAQ3Ww0x/4+tw2kUTqyxjE2Vb Io6KwFPyv4LVZoeAVs7o78lqzh/T6APITdPD3oBQo8U/ffNmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWvUKCy0otCqoIhOTQU3pfoO1uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1 ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvODQxYWJhMzgtN2QwMC0z MGQ5LTg2M2MtOTczMmQzYTg1MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5 ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3 ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2VLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVU8TMelGEtsF8dzCpUEX3W7/tWQndhX9m1aeH3zA2zzsumt4ggfilR ANxLs8f1i+KyN2DQHCSCxn8XM5cStGcYJLAHrAeICxIqYtKB08fSrRIwHM6/AnOH oaNaALnjBjiGo+GW2VFbd5UIaZc+0PE1BsJS/lyq7npvMMm7OTZDNOlnAPRCq0Ez SniMwJah/mi9ZiKvDtCfXgardHhS6DC5g5r7md/VeH2p4I5DzkF0XU78tCJT31ZD IBAfaJzBD9f93JCYvBmnD5rGEMTNZUPXoVqBLVPMMuFrLsKx6EaQHOclC6rJxAtW yKTYRdcMnO5kC2stgNmapcRqZ+tuxgg= -----END CERTIFICATE-----Generated at Mon Oct 12 18:40:13 2026 by rpki-client