$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/a488a87c-a961-3f28-8722-b015f7da7528.roa File: a488a87c-a961-3f28-8722-b015f7da7528.roa (raw, json) Hash identifier: 6HybVmniAuRtU6ii9gnl/LGjij4jRVXTQaAYu5zNbBA= Subject key identifier: 63:AD:4F:B8:5D:2D:2E:E1:9A:B3:27:E1:9F:31:6D:34:96:07:0C:D6 Certificate issuer: /CN=df50907a-5dd1-4ef7-a109-30ae99771030 Certificate serial: 010D0C9F4328584F02421452C365E7D56B5AF548 Authority key identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/a488a87c-a961-3f28-8722-b015f7da7528.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 394857 IP address blocks: 199.202.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:14:52:c3:65:e7:d5:6b:5a:f5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df50907a-5dd1-4ef7-a109-30ae99771030 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=46bf5577-95b3-40ef-a155-cd4691bd232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6c:42:4a:85:dc:67:8a:19:c4:f0:fa:c9:b5: 60:1e:43:56:46:a4:4f:5e:52:54:df:63:45:e1:07: 6e:b2:e7:2a:07:79:13:8b:17:39:fb:c8:00:fd:82: 92:87:91:de:5f:10:e7:99:31:33:5c:bb:5f:de:01: 11:1f:e8:10:ff:fe:ef:1e:87:2f:09:76:cb:a0:74: a1:19:55:6c:4e:1b:ed:e9:24:51:2c:8a:29:72:80: 9f:fa:ad:f1:e2:09:21:c8:3d:fe:72:22:f8:6f:9f: b8:9d:20:df:b1:a3:f6:09:25:69:20:0c:8a:63:4c: 51:62:ca:3f:27:6a:62:18:15:84:e7:62:9e:32:81: a7:08:f2:3c:33:59:3b:35:18:e9:d8:0d:e0:e2:35: 24:f5:61:73:a9:67:3a:c4:cc:b6:01:8b:75:41:65: 76:e2:da:98:08:6c:a7:7c:75:d9:c8:c3:5b:7e:7f: 11:ac:a0:d1:1e:17:b9:c2:6e:77:6d:be:09:d9:3a: 07:17:7c:17:a4:aa:32:fa:b4:70:ee:3f:ee:18:19: 1e:da:ef:67:aa:cd:64:d9:6e:d2:1b:15:e5:e8:d4: 9e:79:2b:38:a6:7d:05:b6:74:43:52:cb:0d:1b:45: fc:53:93:25:d8:40:b3:97:78:e1:e8:fd:e2:89:6c: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:4F:B8:5D:2D:2E:E1:9A:B3:27:E1:9F:31:6D:34:96:07:0C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/a488a87c-a961-3f28-8722-b015f7da7528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.crl X509v3 Authority Key Identifier: keyid:F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer sbgp-ipAddrBlock: critical IPv4: 199.202.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ed:3b:38:05:14:1f:2f:df:73:a7:a5:bc:63:84:00:21:23: 1e:63:5a:0d:9e:67:da:b5:c4:0b:0e:08:07:92:45:34:49:bc: a6:46:db:f4:fc:f2:a5:69:e1:a1:5b:9f:84:4b:1d:a2:cd:a1: 3d:da:e8:12:34:32:c4:3f:c0:cb:33:05:2c:fd:71:a3:dc:c2: c2:d5:f6:2a:bf:33:5c:1c:9b:08:a2:fe:c8:7f:76:78:0f:da: a4:65:f4:88:42:c0:98:25:7e:98:36:25:2c:c4:04:9a:59:18: af:46:50:cd:74:29:fc:47:d5:48:34:76:fe:73:a4:4d:4d:1e: 2f:4e:ee:74:73:a6:b9:62:bb:4f:67:14:9c:a6:29:96:45:37: cc:87:34:26:a0:26:12:ce:f3:f8:55:9a:ec:0e:6a:c7:37:6b: 5e:68:8d:5c:98:64:b2:86:25:21:9f:6d:d2:c4:e0:06:5b:af: e4:35:0c:20:df:1d:5b:75:25:8b:57:c0:4e:80:0d:a8:c6:7b: 11:9b:7d:11:d7:c7:d5:6e:f6:5e:a3:08:f8:91:0c:8a:f7:3f: f6:e5:e6:99:84:86:d7:b1:b5:ca:ff:a2:e0:ab:ac:2d:0d:03: f5:98:71:07:f5:fa:4c:cb:16:a9:3b:d5:fd:00:12:4a:ec:d9: 62:f3:c1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhRSw2Xn1Wta9UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1MDkwN2EtNWRkMS00ZWY3LWExMDktMzBhZTk5Nzcx MDMwMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NDZiZjU1NzctOTViMy00MGVmLWExNTUtY2Q0NjkxYmQyMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWxCSoXcZ4oZxPD6ybVgHkNWRqRPXlJU32NF 4QdusucqB3kTixc5+8gA/YKSh5HeXxDnmTEzXLtf3gERH+gQ//7vHocvCXbLoHSh GVVsThvt6SRRLIopcoCf+q3x4gkhyD3+ciL4b5+4nSDfsaP2CSVpIAyKY0xRYso/ J2piGBWE52KeMoGnCPI8M1k7NRjp2A3g4jUk9WFzqWc6xMy2AYt1QWV24tqYCGyn fHXZyMNbfn8RrKDRHhe5wm53bb4J2ToHF3wXpKoy+rRw7j/uGBke2u9nqs1k2W7S GxXl6NSeeSs4pn0FtnRDUssNG0X8U5Ml2ECzl3jh6P3iiWxUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOtT7hdLS7hmrMn4Z8xbTSWBwzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZjUw OTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3NzEwMzAvYTQ4OGE4N2MtYTk2MS0z ZjI4LTg3MjItYjAxNWY3ZGE3NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGY1MDkwN2EtNWRkMS00ZWY3LWEx MDktMzBhZTk5NzcxMDMwL2RmNTA5MDdhLTVkZDEtNGVmNy1hMTA5LTMwYWU5OTc3 MTAzMC5jcmwwHwYDVR0jBBgwFoAU+aimNbFyaPzvRX93xz447rcRhW0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFl OTk3NzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8qaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3tOzgFFB8v33OnpbxjhAAhIx5jWg2eZ9q1xAsOCAeSRTRJvKZG2/T8 8qVp4aFbn4RLHaLNoT3a6BI0MsQ/wMszBSz9caPcwsLV9iq/M1wcmwii/sh/dngP 2qRl9IhCwJglfpg2JSzEBJpZGK9GUM10KfxH1Ug0dv5zpE1NHi9O7nRzprliu09n FJymKZZFN8yHNCagJhLO8/hVmuwOasc3a15ojVyYZLKGJSGfbdLE4AZbr+Q1DCDf HVt1JYtXwE6ADajGexGbfRHXx9Vu9l6jCPiRDIr3P/bl5pmEhtextcr/ouCrrC0N A/WYcQf1+kzLFqk71f0AEkrs2WLzwcQ= -----END CERTIFICATE-----Generated at Thu Oct 8 14:34:42 2026 by rpki-client