$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/445a9e00-5a07-31da-8c8a-9ca8970ca526.roa File: 445a9e00-5a07-31da-8c8a-9ca8970ca526.roa (raw, json) Hash identifier: KDqgUtXXyiPgeV2G3iwDTtPfxpl6OQBDGPY4mmD3pWM= Subject key identifier: 8B:FB:57:B5:CD:21:60:31:0D:FF:F2:A2:BF:54:5D:43:D0:98:52:18 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584F225D00B7F38AEDA2D4632780 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/445a9e00-5a07-31da-8c8a-9ca8970ca526.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 53535 IP address blocks: 199.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:00:b7:f3:8a:ed:a2:d4:63:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=0f8a4788-ffb0-4a4a-a036-3a9a2ca999ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:78:52:0e:d1:02:31:0a:a9:1d:bc:70:3b: a4:d2:45:13:1f:fe:a6:ba:70:31:d5:ae:12:20:7b: fa:b1:79:b5:c4:65:ec:8e:ae:83:c5:b4:3d:db:d5: af:1d:d9:c1:b5:87:9b:58:da:32:08:57:0f:6b:a8: e7:47:e7:fd:9d:ed:d5:56:fa:f8:f1:b9:82:21:93: f9:a1:6f:2e:4b:c5:26:55:f3:32:90:53:c7:06:ee: 41:0c:83:4f:c2:3c:d1:61:bd:c8:57:c7:5a:0a:a0: d2:da:38:36:e7:e1:75:05:b2:f7:9c:98:b4:41:c2: a0:57:69:8b:72:fa:29:cc:01:94:4c:a1:95:c0:27: 2d:72:fc:59:74:6a:94:4a:ec:fa:1c:21:c7:91:dc: a2:0c:3c:c7:4d:c9:85:10:db:d4:46:d0:88:58:d5: 13:0b:95:21:95:75:67:04:67:74:39:7f:a6:87:64: c7:ed:b6:b8:2f:c4:ba:87:f1:7b:c4:17:48:6d:bc: 22:b6:a4:03:60:ad:42:8c:4b:2b:1b:76:28:cf:51: 72:05:d7:ca:e9:da:31:aa:8e:cd:81:93:d7:03:62: b6:af:d8:bf:d6:3a:bb:70:c8:b7:c6:36:b3:1e:6e: c7:7a:26:fa:13:f6:33:9f:88:cb:78:68:6a:c9:87: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FB:57:B5:CD:21:60:31:0D:FF:F2:A2:BF:54:5D:43:D0:98:52:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/445a9e00-5a07-31da-8c8a-9ca8970ca526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cb:4b:48:ba:87:dc:57:68:57:63:47:a6:e0:f7:76:c2:fa: 3f:04:74:1a:3e:7c:d4:a1:6f:6a:b2:ab:5b:95:c1:dd:07:46: f6:ba:b4:d3:95:18:65:c6:6d:fe:31:51:2b:9e:88:af:30:37: 4e:ad:16:03:ed:f5:4e:fb:49:bd:a1:be:81:ad:43:9d:8c:8b: 41:7d:f6:30:ed:7b:25:db:80:a6:88:e2:e5:9c:a8:d0:a6:dd: b0:7b:ee:cb:f7:de:88:bb:c0:1b:80:e1:42:1f:f9:b7:76:6a: 6b:de:6e:11:39:e9:38:68:6d:ba:75:2f:b3:c8:19:e0:66:71: fa:e3:24:8c:f8:c4:ed:ce:13:27:e6:1b:59:9f:c3:66:22:09: 68:91:3a:5d:79:84:32:df:42:02:f1:b0:10:b2:0e:82:01:11: fe:9d:95:9c:34:4b:f4:3c:f2:92:0c:c8:98:f2:01:e7:37:17: 63:a1:06:d2:d1:c2:e3:fb:30:66:41:77:35:05:70:59:7f:46: 90:4b:f3:00:7a:5b:cd:ba:0d:02:c9:19:20:44:e9:42:a0:20: 8c:f0:53:8b:62:f2:a9:60:c0:8f:a7:13:2d:0e:67:e2:d9:72: 44:d5:a6:23:59:0a:de:65:86:81:93:1a:ae:4f:cc:1b:27:19: cf:1a:e0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQC384rtotRjJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MGY4YTQ3ODgtZmZiMC00YTRhLWEwMzYtM2E5YTJjYTk5OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqx4Ug7RAjEKqR28cDuk0kUTH/6munAx1a4S IHv6sXm1xGXsjq6DxbQ929WvHdnBtYebWNoyCFcPa6jnR+f9ne3VVvr48bmCIZP5 oW8uS8UmVfMykFPHBu5BDINPwjzRYb3IV8daCqDS2jg25+F1BbL3nJi0QcKgV2mL cvopzAGUTKGVwCctcvxZdGqUSuz6HCHHkdyiDDzHTcmFENvURtCIWNUTC5UhlXVn BGd0OX+mh2TH7ba4L8S6h/F7xBdIbbwitqQDYK1CjEsrG3Yoz1FyBdfK6doxqo7N gZPXA2K2r9i/1jq7cMi3xjazHm7Heib6E/Yzn4jLeGhqyYdLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv7V7XNIWAxDf/yor9UXUPQmFIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNDQ1YTllMDAtNWEwNy0z MWRhLThjOGEtOWNhODk3MGNhNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPLS0i6h9xXaFdjR6bg93bC+j8EdBo+fNShb2qyq1uVwd0HRva6tNOV GGXGbf4xUSueiK8wN06tFgPt9U77Sb2hvoGtQ52Mi0F99jDteyXbgKaI4uWcqNCm 3bB77sv33oi7wBuA4UIf+bd2amvebhE56Thobbp1L7PIGeBmcfrjJIz4xO3OEyfm G1mfw2YiCWiROl15hDLfQgLxsBCyDoIBEf6dlZw0S/Q88pIMyJjyAec3F2OhBtLR wuP7MGZBdzUFcFl/RpBL8wB6W826DQLJGSBE6UKgIIzwU4ti8qlgwI+nEy0OZ+LZ ckTVpiNZCt5lhoGTGq5PzBsnGc8a4F0= -----END CERTIFICATE-----Generated at Tue Sep 29 11:32:55 2026 by rpki-client