$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa File: ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa (raw, json) Hash identifier: K1B94hZ5YMiawzWk4j/2mmyj8lTMDm0DoIIttAKiW5c= Subject key identifier: 45:98:49:D9:34:5F:BE:BE:36:23:8A:02:6A:38:F5:D4:7C:FB:8D:78 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F7A4D94B8F47FC66EFB70F780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 36352 IP address blocks: 199.127.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:94:b8:f4:7f:c6:6e:fb:70:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=90c4b884-e829-4e26-92a4-ca78d0b1c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:11:4b:20:3b:7e:17:57:79:3f:d8:a0:6b: 26:b8:c3:88:52:46:2f:c4:76:77:d5:fb:cb:c5:39: 24:9f:e5:7b:91:af:38:be:0c:29:6a:a7:a1:07:b5: 3a:32:e4:69:27:65:cc:ca:a7:8e:1b:e6:56:25:80: 5a:c3:53:c8:e5:49:8e:94:19:ae:6c:4f:4e:97:60: 90:b1:3e:40:9d:c9:7c:01:8d:4e:22:2e:a6:e1:c6: dc:ab:94:de:8e:fa:2f:2c:df:bc:ba:80:8e:7e:3c: b9:36:cf:d2:ba:a2:74:bc:5f:54:8c:58:73:ff:55: ef:6c:5f:03:3e:d5:9f:6c:8f:af:be:81:c0:b1:07: a6:f2:67:6a:ce:8e:ea:5c:7b:65:d5:a0:b4:f2:87: 9e:84:c6:d7:2c:be:c4:57:dc:e3:0d:d6:03:9a:2d: a5:31:46:e8:0d:c1:37:39:06:a6:03:ca:19:5c:11: 3b:ea:18:cd:22:7a:51:d6:27:a3:fe:0e:19:57:37: ea:f4:80:9e:f4:e7:c3:3f:c0:e8:73:82:16:01:5f: 3f:4d:c2:f2:29:37:52:9d:db:e2:a5:12:7c:44:03: 33:78:1d:59:91:26:e2:94:ff:65:ea:8b:06:f6:b9: 02:52:c6:92:7d:77:8b:0f:a8:29:e6:eb:6c:d0:79: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:49:D9:34:5F:BE:BE:36:23:8A:02:6A:38:F5:D4:7C:FB:8D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 199.127.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:20:51:f4:f8:3f:cb:9b:9a:a6:d9:4b:7f:f2:df:71:03:e5: b7:9c:4b:63:8f:a8:c5:58:86:1b:00:46:a1:27:dc:a7:3d:93: ae:c5:fb:f1:14:38:aa:51:d5:aa:18:65:47:13:07:bd:21:41: 59:3b:17:be:f9:4a:76:e3:84:90:4d:87:2f:4b:ff:bb:e8:dc: e4:5d:94:39:69:d6:5b:99:dc:6c:9e:21:d5:28:5b:54:29:22: fa:77:e1:b2:24:34:67:1a:e4:6d:86:09:24:31:e1:29:35:20: 8e:33:67:c3:50:4a:f3:7a:e1:13:d6:58:0e:2a:36:0b:5b:9f: d3:15:28:09:ef:d2:08:ea:d7:ef:ed:87:46:34:7d:eb:79:87: f8:24:bd:82:ba:7f:81:5c:f5:6c:cd:c4:93:ed:e1:5d:96:b6: 8f:5c:00:81:b0:60:41:26:94:ae:27:07:be:25:c6:2a:01:f6: 01:a5:5a:cc:87:ce:05:b0:6e:aa:4e:4d:10:c4:3a:72:65:a1: 8a:16:56:f3:58:2d:c0:a3:30:a4:ef:8c:8c:17:5b:97:1b:1d: 36:e8:83:46:bb:d8:88:01:64:4b:ed:9e:7f:38:41:1a:51:4b: 05:2b:3f:91:98:87:5e:ec:bb:6e:7a:ea:cf:22:24:fa:49:92: 60:c0:79:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZS49H/Gbvtw94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OTBjNGI4ODQtZTgyOS00ZTI2LTkyYTQtY2E3OGQwYjFjOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/IRSyA7fhdXeT/YoGsmuMOIUkYvxHZ31fvL xTkkn+V7ka84vgwpaqehB7U6MuRpJ2XMyqeOG+ZWJYBaw1PI5UmOlBmubE9Ol2CQ sT5Ancl8AY1OIi6m4cbcq5TejvovLN+8uoCOfjy5Ns/SuqJ0vF9UjFhz/1XvbF8D PtWfbI+vvoHAsQem8mdqzo7qXHtl1aC08oeehMbXLL7EV9zjDdYDmi2lMUboDcE3 OQamA8oZXBE76hjNInpR1iej/g4ZVzfq9ICe9OfDP8Doc4IWAV8/TcLyKTdSndvi pRJ8RAMzeB1ZkSbilP9l6osG9rkCUsaSfXeLD6gp5uts0HmxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWYSdk0X76+NiOKAmo49dR8+414MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvY2U4OWY5N2ItMWY0Yy0z NTk4LWFjNjAtMDljZmY4ZmZjODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4gUfT4P8ubmqbZS3/y33ED5becS2OPqMVYhhsARqEn3Kc9k67F+/EU OKpR1aoYZUcTB70hQVk7F775SnbjhJBNhy9L/7vo3ORdlDlp1luZ3GyeIdUoW1Qp Ivp34bIkNGca5G2GCSQx4Sk1II4zZ8NQSvN64RPWWA4qNgtbn9MVKAnv0gjq1+/t h0Y0fet5h/gkvYK6f4Fc9WzNxJPt4V2Wto9cAIGwYEEmlK4nB74lxioB9gGlWsyH zgWwbqpOTRDEOnJloYoWVvNYLcCjMKTvjIwXW5cbHTbog0a72IgBZEvtnn84QRpR SwUrP5GYh17su2566s8iJPpJkmDAeag= -----END CERTIFICATE-----Generated at Tue Oct 13 23:37:33 2026 by rpki-client