$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/a381b1b2-c4dc-3af2-8aff-c0e95fca1017.roa File: a381b1b2-c4dc-3af2-8aff-c0e95fca1017.roa (raw, json) Hash identifier: DLnBOXqZoyjdem5pDuEGwLK0TR1eKc9dm4bilI6OSxA= Subject key identifier: F0:40:C6:29:59:A1:7B:EC:E0:76:54:31:AF:81:35:00:D0:70:DF:7C Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584F49733E182A667BDFC3EB5E80 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/a381b1b2-c4dc-3af2-8aff-c0e95fca1017.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54533 IP address blocks: 199.66.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3e:18:2a:66:7b:df:c3:eb:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5da28361-d2cb-47cc-a321-73f6817eea88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:60:79:95:4a:43:09:4d:2a:4e:b4:b0:f4:dc: 52:21:88:18:d0:24:b1:db:85:4c:45:8e:49:9c:3a: f5:85:7b:88:84:84:bd:f4:a1:ec:39:18:28:42:0f: e1:0a:07:bc:af:f4:f9:70:13:a5:6f:da:ec:fc:41: 0f:ea:bb:7f:91:7d:19:12:49:cf:04:18:27:df:f2: 91:2b:c2:7e:23:04:86:dc:1a:c0:6c:59:c5:73:67: 25:3a:4e:48:1e:96:d3:5a:70:bc:e3:9f:52:72:ea: 43:c0:32:4d:4e:3a:d8:9e:ea:f8:2b:a0:24:81:5d: 7e:e1:f9:ff:0b:7e:71:bf:de:fa:c2:93:cb:47:dc: 8f:09:12:2b:b8:f7:b7:29:e6:2e:76:cc:fe:40:66: e8:97:13:1a:70:88:45:43:d6:7a:ed:ea:a1:6f:7a: 3e:9b:6d:1e:9b:a2:76:25:a1:23:1c:f0:81:51:76: f6:72:a7:5b:47:ce:a4:a9:97:5e:82:30:e3:50:21: 0b:f7:bb:a1:66:82:2e:2a:20:fc:8e:e7:54:d6:82: 48:c5:8b:cb:b6:0a:19:57:48:f8:94:7b:af:fd:d3: 3c:54:12:f8:a6:9c:55:be:92:df:ee:52:98:28:2d: ec:83:fe:fc:8b:05:f5:44:28:5c:00:8d:2c:42:e8: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:40:C6:29:59:A1:7B:EC:E0:76:54:31:AF:81:35:00:D0:70:DF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/a381b1b2-c4dc-3af2-8aff-c0e95fca1017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:91:99:2d:e1:ee:8f:27:64:0d:b1:5f:37:a9:15:bd:fa:bd: c3:75:08:8f:47:b1:50:22:85:d8:5a:de:49:af:6e:f2:b3:ad: 98:b3:42:b3:2c:a3:10:d1:ee:6d:3f:0e:15:85:a5:f6:12:17: 87:74:c0:54:7f:79:1c:0c:e8:3e:33:5e:bf:31:37:1e:89:f7: f5:14:7e:5d:98:3d:5b:2f:8d:39:a3:c3:06:86:3b:22:71:ec: bf:c9:be:c1:07:a5:7b:3f:75:da:35:53:22:a2:8e:14:a4:25: 01:52:04:d8:f6:c8:4c:b5:a8:43:5c:2f:eb:34:30:11:85:df: c8:93:25:2a:06:4f:60:e5:6c:9b:c4:9d:54:f2:90:2c:05:20: db:83:99:e4:f8:1f:41:0c:d2:91:3b:87:05:ef:69:7c:d8:82: 6d:36:aa:c5:98:2d:28:72:8a:f5:f2:6e:b7:f6:3a:95:92:9d: a9:46:42:03:08:e8:94:af:b7:50:d9:5b:1c:db:31:e4:34:35: ec:c6:05:94:6d:01:00:1b:a8:53:30:62:c0:47:d8:3f:2f:f4: cc:7b:b8:43:1c:95:8c:43:be:37:30:c4:a8:1c:84:6d:b6:49: 54:aa:b3:d4:e0:b8:b0:2a:fb:b7:1b:96:cf:5e:3c:e1:37:fa: af:cd:78:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcz4YKmZ738PrXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRhMjgzNjEtZDJjYi00N2NjLWEzMjEtNzNmNjgxN2VlYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2B5lUpDCU0qTrSw9NxSIYgY0CSx24VMRY5J nDr1hXuIhIS99KHsORgoQg/hCge8r/T5cBOlb9rs/EEP6rt/kX0ZEknPBBgn3/KR K8J+IwSG3BrAbFnFc2clOk5IHpbTWnC8459ScupDwDJNTjrYnur4K6AkgV1+4fn/ C35xv976wpPLR9yPCRIruPe3KeYudsz+QGbolxMacIhFQ9Z67eqhb3o+m20em6J2 JaEjHPCBUXb2cqdbR86kqZdegjDjUCEL97uhZoIuKiD8judU1oJIxYvLtgoZV0j4 lHuv/dM8VBL4ppxVvpLf7lKYKC3sg/78iwX1RChcAI0sQugXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBAxilZoXvs4HZUMa+BNQDQcN98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYTM4MWIxYjItYzRkYy0z YWYyLThhZmYtYzBlOTVmY2ExMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0K+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiRmS3h7o8nZA2xXzepFb36vcN1CI9HsVAihdha3kmvbvKzrZizQrMs oxDR7m0/DhWFpfYSF4d0wFR/eRwM6D4zXr8xNx6J9/UUfl2YPVsvjTmjwwaGOyJx 7L/JvsEHpXs/ddo1UyKijhSkJQFSBNj2yEy1qENcL+s0MBGF38iTJSoGT2DlbJvE nVTykCwFINuDmeT4H0EM0pE7hwXvaXzYgm02qsWYLShyivXybrf2OpWSnalGQgMI 6JSvt1DZWxzbMeQ0NezGBZRtAQAbqFMwYsBH2D8v9Mx7uEMclYxDvjcwxKgchG22 SVSqs9TguLAq+7cbls9ePOE3+q/NeCo= -----END CERTIFICATE-----Generated at Sat Sep 26 18:28:10 2026 by rpki-client