$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa File: e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa (raw, json) Hash identifier: if9GqxEgJeT1LLhNPedvslLXa5pKqHNxcTZ919DGR7c= Subject key identifier: FD:35:CD:1C:C8:DC:8B:4B:B9:E5:6E:FF:DE:BD:F5:95:1E:D0:5D:DF Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584F498A65C7F984718A6F653DC0 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30048 IP address blocks: 199.33.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:65:c7:f9:84:71:8a:6f:65:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7809d9e7-7137-4e9c-8eb1-15137caeb543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:9c:64:30:0f:16:34:6f:c5:26:56:f4:d7: fa:ca:4e:85:61:94:b7:be:97:db:82:c0:be:5c:e1: 67:ef:21:28:d2:c0:dc:a7:ad:4f:1b:87:f4:1f:a2: de:c1:da:8f:06:77:cc:cf:0b:cc:6c:95:b1:8f:4f: 99:86:0b:3a:d4:eb:39:b3:af:86:52:04:5b:06:35: 57:94:18:c5:97:9e:99:15:e7:87:6e:77:f2:e1:69: 84:d9:a0:23:37:c7:93:43:4d:6a:20:02:16:c5:e4: 8a:f6:f9:63:24:08:e0:27:a7:a0:1e:27:2c:4e:7c: bd:cb:15:ac:19:5c:ab:48:33:b1:18:0f:48:db:c3: 33:99:1b:3a:0f:1d:9d:44:67:58:99:5d:3d:b3:b9: 96:d9:8c:62:5f:57:c8:1d:b3:da:63:02:c9:0f:07: 69:ce:1b:68:3b:6f:7f:12:0e:cf:e8:fb:88:d5:09: ef:6b:fc:f1:15:54:9b:f4:a7:7c:24:0a:56:b6:91: 78:be:72:3a:fe:36:4b:df:64:99:72:1e:4b:0b:ac: e2:66:19:81:b6:03:fd:c1:c7:5c:fe:af:5f:72:aa: ee:21:31:11:7a:02:f1:bd:4a:aa:cf:c1:97:43:05: 01:fa:90:34:dc:b3:c2:62:c7:e6:ec:3c:ed:b5:75: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:CD:1C:C8:DC:8B:4B:B9:E5:6E:FF:DE:BD:F5:95:1E:D0:5D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:69:ba:be:64:3c:5b:fc:1a:e4:6f:80:d0:86:0c:01:8a:e4: 45:be:02:78:a5:e0:ac:3a:a9:65:de:3b:d5:8c:2f:d2:94:a1: 10:dc:4f:6d:3f:3c:28:4d:98:8d:61:f3:5d:81:f7:7c:49:54: a1:31:2b:6b:68:77:ca:14:b0:1e:cc:5c:ed:e5:47:08:5d:31: 33:da:4e:a1:32:42:9c:48:e0:a4:83:9b:b5:16:4a:8a:cc:b0: 46:9c:ee:f1:ea:3c:14:ae:74:10:dd:00:a9:17:7d:0e:a4:14: 87:e0:f4:8f:b1:bb:3b:f1:3b:d8:25:63:a3:44:d7:90:e4:71: e2:78:0f:fd:17:bd:71:a0:05:a7:17:fc:24:53:98:5d:48:e1: f7:2c:8b:a5:44:96:fe:13:9f:f4:79:93:aa:35:ae:2a:d3:43: 00:f7:98:69:3a:e6:70:34:bd:55:5d:88:11:60:14:ad:1e:da: 65:28:79:08:af:00:46:19:24:7c:6a:21:76:01:68:a1:e6:de: ef:67:05:fe:67:9e:93:86:93:90:26:6a:10:4c:0f:e1:72:f0: 1d:25:e8:94:dc:59:81:4b:56:f8:62:7d:91:b2:af:53:28:29: d6:43:ec:4d:32:4e:d0:d7:ab:de:a3:77:0f:ee:6e:54:5b:4b: 45:26:a6:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JimXH+YRxim9lPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzgwOWQ5ZTctNzEzNy00ZTljLThlYjEtMTUxMzdjYWViNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGqcZDAPFjRvxSZW9Nf6yk6FYZS3vpfbgsC+ XOFn7yEo0sDcp61PG4f0H6LewdqPBnfMzwvMbJWxj0+Zhgs61Os5s6+GUgRbBjVX lBjFl56ZFeeHbnfy4WmE2aAjN8eTQ01qIAIWxeSK9vljJAjgJ6egHicsTny9yxWs GVyrSDOxGA9I28MzmRs6Dx2dRGdYmV09s7mW2YxiX1fIHbPaYwLJDwdpzhtoO29/ Eg7P6PuI1Qnva/zxFVSb9Kd8JApWtpF4vnI6/jZL32SZch5LC6ziZhmBtgP9wcdc /q9fcqruITERegLxvUqqz8GXQwUB+pA03LPCYsfm7DzttXVfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP01zRzI3ItLueVu/9699ZUe0F3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZTg4YTM0YzktMDVkMC0z ZmRlLWE1MTYtN2U1OGJhMzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJpur5kPFv8GuRvgNCGDAGK5EW+Anil4Kw6qWXeO9WML9KUoRDcT20/ PChNmI1h812B93xJVKExK2tod8oUsB7MXO3lRwhdMTPaTqEyQpxI4KSDm7UWSorM sEac7vHqPBSudBDdAKkXfQ6kFIfg9I+xuzvxO9glY6NE15DkceJ4D/0XvXGgBacX /CRTmF1I4fcsi6VElv4Tn/R5k6o1rirTQwD3mGk65nA0vVVdiBFgFK0e2mUoeQiv AEYZJHxqIXYBaKHm3u9nBf5nnpOGk5AmahBMD+Fy8B0l6JTcWYFLVvhifZGyr1Mo KdZD7E0yTtDXq96jdw/ublRbS0UmphM= -----END CERTIFICATE-----Generated at Sat Sep 26 18:27:37 2026 by rpki-client