$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa File: add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa (raw, json) Hash identifier: TpOWcRcAs1nwnYJin8g7yvxNzjhUOTbH2lujow6iHTw= Subject key identifier: 63:6C:E6:F5:95:C8:F7:3A:A3:B8:D5:FB:E0:4F:65:D0:01:DD:FF:45 Certificate issuer: /CN=ead863e4-358d-4a38-ac7a-947961e420de Certificate serial: 010D0C9F4328584F2ABD1702CB407F8A86E05980 Authority key identifier: 26:E5:A8:5C:80:53:C2:37:74:BF:46:BC:82:AE:8F:23:32:9D:49:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 47041 IP address blocks: 199.249.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/ead863e4-358d-4a38-ac7a-947961e420de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/ead863e4-358d-4a38-ac7a-947961e420de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:17:02:cb:40:7f:8a:86:e0:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead863e4-358d-4a38-ac7a-947961e420de Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=c3793ea8-25a1-4fa9-8fe6-cafb08a1acf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:39:e5:1d:47:ae:f5:15:a2:4f:d2:2a:55: 68:69:c8:8c:f1:84:f9:ea:48:94:78:3f:5e:50:aa: 90:08:b6:c3:b3:6a:f5:d0:76:eb:b2:22:c3:a2:39: a0:e7:95:fa:56:03:28:71:83:72:07:22:8b:5e:09: 27:db:97:81:53:9e:8d:b8:c8:44:22:b1:95:a1:b8: 82:9d:49:f3:8a:a8:60:d0:e3:2e:00:45:86:79:aa: b5:b6:85:f4:57:78:68:19:ef:e9:e3:36:10:4f:be: cc:ed:f5:78:e0:50:24:74:e6:87:ac:5a:4a:43:3b: 3a:98:ed:3f:5a:13:53:b7:8e:56:78:48:5f:db:75: a5:80:32:d4:83:58:f9:4c:23:6d:3d:13:04:60:be: 4a:6d:00:12:3a:aa:b5:0c:70:06:ca:2b:bc:ef:4f: 37:06:5d:9a:77:a1:1d:e0:fa:ef:b3:84:c8:5c:4b: 59:4d:45:72:0c:f3:f6:4e:7b:e4:9c:4b:d0:74:d6: 8a:1f:32:80:2b:5a:c0:07:36:6b:5b:98:26:2b:b8: 78:d6:4d:63:72:de:7e:50:5c:51:22:b1:fa:ae:22: d6:9f:ba:43:6c:9d:e7:56:a4:a6:09:4c:d5:ef:39: f6:27:a5:e3:20:64:97:ee:17:d5:24:3f:f7:c7:3c: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6C:E6:F5:95:C8:F7:3A:A3:B8:D5:FB:E0:4F:65:D0:01:DD:FF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/ead863e4-358d-4a38-ac7a-947961e420de.crl X509v3 Authority Key Identifier: keyid:26:E5:A8:5C:80:53:C2:37:74:BF:46:BC:82:AE:8F:23:32:9D:49:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de.cer sbgp-ipAddrBlock: critical IPv4: 199.249.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5d:b4:c5:fe:ef:bd:e8:0f:67:c1:49:65:f1:49:ce:eb:ec: 37:30:fe:cf:90:61:d1:40:f9:f6:ca:ac:6c:6f:ea:2e:76:69: 65:eb:2f:92:d2:2e:d7:d2:aa:e3:94:eb:87:46:f1:b2:3a:d7: 14:16:f9:6a:6b:9a:32:df:f9:6a:15:71:b4:e1:44:7b:3f:d8: 44:06:3a:f0:c4:f1:58:60:e3:9e:7e:80:45:6e:05:87:cc:af: a5:41:a0:68:bb:99:a8:26:46:dc:6c:3f:cf:3b:8c:3f:4d:93: 0a:56:ad:11:49:f8:51:a7:e3:5b:22:00:0a:95:95:1f:cb:85: 6c:0e:49:d4:a5:f2:f3:1d:78:14:92:a6:18:cb:c7:06:28:d4: 17:89:7e:90:8b:d0:be:16:99:3b:f0:ad:a8:8f:f7:39:85:81: ed:83:e4:ed:14:02:dc:d5:8f:9f:4f:ab:0b:8a:c3:60:40:8f: 6f:20:ac:f6:3a:cd:8c:fd:f4:79:bf:38:2d:03:fb:e6:a4:1c: 3d:91:70:5f:28:06:77:3d:4f:73:08:2b:fc:6b:70:31:bb:9b: 96:5e:8a:ec:5e:d4:5f:1a:d7:3c:7c:34:51:07:91:4a:50:f4: 0a:38:7a:0e:26:9d:00:d9:fc:de:31:a3:ae:34:e8:e1:52:d3: 53:c1:4d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRcCy0B/iobgWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFkODYzZTQtMzU4ZC00YTM4LWFjN2EtOTQ3OTYxZTQy MGRlMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YzM3OTNlYTgtMjVhMS00ZmE5LThmZTYtY2FmYjA4YTFhY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qQ55R1HrvUVok/SKlVoaciM8YT56kiUeD9e UKqQCLbDs2r10HbrsiLDojmg55X6VgMocYNyByKLXgkn25eBU56NuMhEIrGVobiC nUnziqhg0OMuAEWGeaq1toX0V3hoGe/p4zYQT77M7fV44FAkdOaHrFpKQzs6mO0/ WhNTt45WeEhf23WlgDLUg1j5TCNtPRMEYL5KbQASOqq1DHAGyiu87083Bl2ad6Ed 4Prvs4TIXEtZTUVyDPP2TnvknEvQdNaKHzKAK1rABzZrW5gmK7h41k1jct5+UFxR IrH6riLWn7pDbJ3nVqSmCUzV7zn2J6XjIGSX7hfVJD/3xzy9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNs5vWVyPc6o7jV++BPZdAB3f9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lYWQ4 NjNlNC0zNThkLTRhMzgtYWM3YS05NDc5NjFlNDIwZGUvYWRkOGQzZGQtMmNkOS0z NDExLWEzNTgtMTA2N2MzZDRiOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWFkODYzZTQtMzU4ZC00YTM4LWFj N2EtOTQ3OTYxZTQyMGRlL2VhZDg2M2U0LTM1OGQtNGEzOC1hYzdhLTk0Nzk2MWU0 MjBkZS5jcmwwHwYDVR0jBBgwFoAUJuWoXIBTwjd0v0a8gq6PIzKdScIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lYWQ4NjNlNC0zNThkLTRhMzgtYWM3YS05NDc5 NjFlNDIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpdtMX+773oD2fBSWXxSc7r7Dcw/s+QYdFA+fbKrGxv6i52aWXrL5LS LtfSquOU64dG8bI61xQW+WprmjLf+WoVcbThRHs/2EQGOvDE8Vhg455+gEVuBYfM r6VBoGi7magmRtxsP887jD9NkwpWrRFJ+FGn41siAAqVlR/LhWwOSdSl8vMdeBSS phjLxwYo1BeJfpCL0L4WmTvwraiP9zmFge2D5O0UAtzVj59PqwuKw2BAj28grPY6 zYz99Hm/OC0D++akHD2RcF8oBnc9T3MIK/xrcDG7m5Zeiuxe1F8a1zx8NFEHkUpQ 9Ao4eg4mnQDZ/N4xo6406OFS01PBTbQ= -----END CERTIFICATE-----Generated at Tue Sep 29 00:50:08 2026 by rpki-client