$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8bf530ba-b7a8-3dc9-bd69-b15d4234660b.roa File: 8bf530ba-b7a8-3dc9-bd69-b15d4234660b.roa (raw, json) Hash identifier: WxKg9PWqjeR8qiuywkAqpDBxW3qYBhwZ2mvixr59yR8= Subject key identifier: 6A:FC:C1:B3:02:05:C4:E1:B8:56:94:B6:F0:59:A1:23:3B:67:59:EB Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F3CE28133655320C2C3F45EA0 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8bf530ba-b7a8-3dc9-bd69-b15d4234660b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 397268 IP address blocks: 199.58.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:81:33:65:53:20:c2:c3:f4:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=9c7ed67a-26a1-4354-8d34-989adb98fb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d3:f9:e8:70:71:0f:7d:31:28:28:65:d2:a4: 12:44:5e:c0:bb:c8:e3:08:f0:05:1a:78:2f:ea:9f: 21:1a:64:70:a1:eb:53:1d:3e:4c:7d:f8:2f:84:fc: e5:18:e9:d8:eb:4c:5a:c5:f2:f8:f6:47:42:d2:6b: 98:25:7d:70:b4:65:df:05:a7:0c:87:1a:b5:ca:11: 47:26:4d:64:28:b0:bc:cd:99:47:e1:3f:53:a7:c2: 07:da:5c:1c:1c:87:74:97:0e:28:9d:07:0f:7d:ae: 77:ef:b3:2c:84:3c:42:b9:04:44:85:ec:8a:93:76: 16:e5:74:a7:ea:cc:6f:92:23:d2:b6:27:7d:64:30: 5c:de:04:68:8e:09:30:4a:4f:ba:9b:c9:21:fa:fd: 3f:e7:c2:ed:07:e5:84:20:a5:6f:82:d6:c7:74:a8: d1:e8:62:04:05:d9:69:17:ae:3c:81:59:58:3f:72: 0f:8b:c2:75:57:88:21:ed:23:86:37:52:0f:55:16: 8e:f8:c3:0a:af:57:43:c3:df:9b:23:64:57:3f:b4: 2e:8f:c3:b6:2d:3d:95:3f:16:d3:86:4a:b6:b3:72: d7:0d:2c:6b:57:05:44:bb:df:be:ff:6d:e7:56:29: 96:f3:d9:ad:fe:34:97:31:02:c7:09:9c:e0:7b:c4: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FC:C1:B3:02:05:C4:E1:B8:56:94:B6:F0:59:A1:23:3B:67:59:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8bf530ba-b7a8-3dc9-bd69-b15d4234660b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d0:af:29:5d:1f:ff:95:b4:fa:c5:c3:20:a7:83:54:ef:79: df:44:80:f3:77:84:8e:65:f7:03:63:b9:68:b8:87:22:9c:12: 92:dc:52:c5:86:3d:dd:62:5a:56:0b:1a:95:dd:22:37:27:d1: 1b:4d:66:88:33:83:65:a7:e1:b0:10:c4:33:75:3d:a4:a0:72: bc:82:bc:cf:6f:c7:5d:0e:58:a4:56:89:82:30:3b:da:5f:83: bd:ec:16:ed:eb:0a:33:05:d7:2d:06:f6:47:49:62:bb:70:11: fc:f0:77:5a:bb:7e:d3:6d:83:d0:73:c5:05:4d:ab:c7:d1:93: e6:48:77:16:2e:46:eb:f2:4d:35:09:50:d4:56:81:07:03:49: 63:0d:37:38:77:d4:b6:4a:39:e4:ce:ff:03:b3:ee:94:90:bd: ee:4d:e1:3f:79:13:a4:8c:49:d3:0f:18:40:d8:71:83:44:48: 26:73:87:6d:bb:1e:fe:dc:64:7b:e4:a5:46:29:51:f7:89:6e: 24:67:c5:a1:6d:d1:a0:c6:55:f0:0e:80:60:d0:d4:a3:b5:e5: a7:e4:a5:b8:72:08:f7:67:75:08:3d:20:63:42:39:7c:d3:82: 35:c1:5e:30:08:f7:05:6a:86:56:f8:e0:e8:14:3c:18:a9:46: d3:ae:d0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oEzZVMgwsP0XqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OWM3ZWQ2N2EtMjZhMS00MzU0LThkMzQtOTg5YWRiOThmYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dP56HBxD30xKChl0qQSRF7Au8jjCPAFGngv 6p8hGmRwoetTHT5MffgvhPzlGOnY60xaxfL49kdC0muYJX1wtGXfBacMhxq1yhFH Jk1kKLC8zZlH4T9Tp8IH2lwcHId0lw4onQcPfa5377MshDxCuQREheyKk3YW5XSn 6sxvkiPStid9ZDBc3gRojgkwSk+6m8kh+v0/58LtB+WEIKVvgtbHdKjR6GIEBdlp F648gVlYP3IPi8J1V4gh7SOGN1IPVRaO+MMKr1dDw9+bI2RXP7Quj8O2LT2VPxbT hkq2s3LXDSxrVwVEu9++/23nVimW89mt/jSXMQLHCZzge8SWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr8wbMCBcThuFaUtvBZoSM7Z1nrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvOGJmNTMwYmEtYjdhOC0z ZGM5LWJkNjktYjE1ZDQyMzQ2NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjQryldH/+VtPrFwyCng1Tved9EgPN3hI5l9wNjuWi4hyKcEpLcUsWG Pd1iWlYLGpXdIjcn0RtNZogzg2Wn4bAQxDN1PaSgcryCvM9vx10OWKRWiYIwO9pf g73sFu3rCjMF1y0G9kdJYrtwEfzwd1q7ftNtg9BzxQVNq8fRk+ZIdxYuRuvyTTUJ UNRWgQcDSWMNNzh31LZKOeTO/wOz7pSQve5N4T95E6SMSdMPGEDYcYNESCZzh227 Hv7cZHvkpUYpUfeJbiRnxaFt0aDGVfAOgGDQ1KO15afkpbhyCPdndQg9IGNCOXzT gjXBXjAI9wVqhlb44OgUPBipRtOu0Ls= -----END CERTIFICATE-----Generated at Sun Sep 27 08:52:34 2026 by rpki-client