$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa File: d1d035f6-95d4-3dbe-a301-249e15b96059.roa (raw, json) Hash identifier: CC/hJ7cnJVmHK2Yjggiv1ZySSr+XpXg4b2jE0ACp/s4= Subject key identifier: B0:FD:8A:9A:BA:34:30:22:00:75:EB:13:33:6E:44:9F:5C:B0:16:FA Certificate issuer: /CN=4746a92d-5f69-4264-863f-81298a3d93ed Certificate serial: 010D0C9F4328584F3CE278621D66E7C9D27D3E80 Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 397373 IP address blocks: 199.127.59.0/24 maxlen: 24 204.77.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:78:62:1d:66:e7:c9:d2:7d:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=961e5f18-5b40-4257-9c66-dea4fc8b1ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5b:07:1b:65:cb:6a:7b:d0:f6:8c:60:5e:c9: b4:71:0a:ec:92:80:b8:ed:aa:03:23:85:ab:2b:3f: 72:5a:f7:74:b0:36:8a:6d:af:a3:17:57:a7:fc:ce: 89:58:de:7d:87:73:9f:7f:3a:3b:d3:c1:e5:d2:a9: a0:b9:17:04:3a:41:cf:8d:fc:b8:3e:4e:2b:18:4f: e1:65:df:d7:4d:0d:d8:c2:9a:36:6a:1d:52:ce:1f: 26:10:44:21:8b:87:c1:d8:3d:e3:87:e7:2c:32:74: 4e:84:ce:8c:f1:9b:76:b2:e4:50:4f:e8:78:fd:91: 90:f6:db:e7:65:7d:a7:dd:3d:46:d7:77:aa:23:6a: ad:b0:c0:1b:dc:77:86:ea:10:7c:91:aa:9d:51:e8: 51:05:03:0c:33:4e:67:72:71:6c:5e:77:5c:f5:55: f9:89:4c:fd:d5:85:40:3c:26:ab:d0:c2:d0:99:ec: f5:3e:c4:98:1c:fc:e9:42:31:1f:21:87:c7:26:39: 28:5a:d5:db:37:70:ab:ff:10:27:0c:60:ad:ac:a5: 7f:c8:37:d9:b3:30:a5:fd:81:b0:65:40:f2:93:9c: e7:9e:d1:91:36:a1:7a:1c:3d:c0:ca:29:04:88:18: bd:b9:b4:49:f1:af:ac:8c:5b:a6:92:31:2a:79:84: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:8A:9A:BA:34:30:22:00:75:EB:13:33:6E:44:9F:5C:B0:16:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl X509v3 Authority Key Identifier: keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer sbgp-ipAddrBlock: critical IPv4: 199.127.59.0/24 204.77.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6c:9b:6c:81:13:13:f1:34:e7:a8:02:b2:63:40:1a:10:e3: f1:dd:7f:7b:9a:9a:65:c5:00:f2:00:3a:b5:b8:cd:72:b3:ca: 70:c1:de:82:65:e7:f2:4c:92:d3:16:f9:e3:18:1e:1f:ee:f8: db:af:73:27:b3:eb:d7:b0:66:06:d4:18:5d:24:d7:32:b4:f9: d8:13:78:77:13:eb:ae:39:ae:c7:61:b3:9c:19:7b:7e:c2:5f: b9:8b:d5:8b:c6:36:49:94:5f:0f:84:13:4b:54:63:f0:82:c2: 2b:4b:9e:a5:e4:cb:80:be:5e:8b:16:62:da:82:83:a5:5b:b7: e2:e4:08:f4:4f:f7:3b:8c:49:f7:35:b7:0c:e2:7d:18:86:79: 05:5b:fe:e9:5a:96:61:82:7f:45:db:c6:ef:0e:85:17:7c:b9: a7:dc:d8:a9:91:4a:14:a3:88:79:a1:f6:e3:8b:5e:83:c0:37: d2:15:1b:9b:1e:50:56:e8:40:27:aa:e8:13:6f:bd:17:79:f3: b0:58:13:78:8a:e1:bf:f2:e3:30:3e:dc:b0:4a:17:90:24:30: 5d:bd:76:3c:66:78:cd:67:15:fb:b9:5f:8d:79:8e:88:7d:8e: 03:bd:1c:4a:41:82:bf:d5:e3:f7:3f:49:fd:e8:d9:bd:56:8e: 3f:05:64:b8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE884nhiHWbnydJ9PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc0NmE5MmQtNWY2OS00MjY0LTg2M2YtODEyOThhM2Q5 M2VkMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OTYxZTVmMTgtNWI0MC00MjU3LTljNjYtZGVhNGZjOGIxZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FsHG2XLanvQ9oxgXsm0cQrskoC47aoDI4Wr Kz9yWvd0sDaKba+jF1en/M6JWN59h3Offzo708Hl0qmguRcEOkHPjfy4Pk4rGE/h Zd/XTQ3Ywpo2ah1Szh8mEEQhi4fB2D3jh+csMnROhM6M8Zt2suRQT+h4/ZGQ9tvn ZX2n3T1G13eqI2qtsMAb3HeG6hB8kaqdUehRBQMMM05ncnFsXndc9VX5iUz91YVA PCar0MLQmez1PsSYHPzpQjEfIYfHJjkoWtXbN3Cr/xAnDGCtrKV/yDfZszCl/YGw ZUDyk5znntGRNqF6HD3AyikEiBi9ubRJ8a+sjFumkjEqeYQ1vwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLD9ipq6NDAiAHXrEzNuRJ9csBb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2 YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5OGEzZDkzZWQvZDFkMDM1ZjYtOTVkNC0z ZGJlLWEzMDEtMjQ5ZTE1Yjk2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc0NmE5MmQtNWY2OS00MjY0LTg2 M2YtODEyOThhM2Q5M2VkLzQ3NDZhOTJkLTVmNjktNDI2NC04NjNmLTgxMjk4YTNk OTNlZC5jcmwwHwYDVR0jBBgwFoAUgW9dnFJE1xApxoveK2ZyuqaaHnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5 OGEzZDkzZWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAx387AwQB zE0IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADFsm2yBExPxNOeoArJjQBoQ4/Hdf3uammXFAPIAOrW4zXKz ynDB3oJl5/JMktMW+eMYHh/u+Nuvcyez69ewZgbUGF0k1zK0+dgTeHcT6645rsdh s5wZe37CX7mL1YvGNkmUXw+EE0tUY/CCwitLnqXky4C+XosWYtqCg6Vbt+LkCPRP 9zuMSfc1twzifRiGeQVb/ulalmGCf0Xbxu8OhRd8uafc2KmRShSjiHmh9uOLXoPA N9IVG5seUFboQCeq6BNvvRd587BYE3iK4b/y4zA+3LBKF5AkMF29djxmeM1nFfu5 X415joh9jgO9HEpBgr/V4/c/Sf3o2b1Wjj8FZLg= -----END CERTIFICATE-----Generated at Sat Oct 3 05:46:09 2026 by rpki-client