$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json) Hash identifier: 0vCmmdH5QZhA8aXgL2NBQWZ6M+anWxcnU6PIMuviwRw= Subject key identifier: 1A:57:1F:C9:24:66:2D:67:F8:8D:FB:AD:86:56:6B:49:A6:FD:54:9C Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F03A77AE87CFF2FB457B63700 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 13414 IP address blocks: 199.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:7a:e8:7c:ff:2f:b4:57:b6:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=966a9a64-664b-4892-963c-15738ec3e9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:b6:20:32:05:1f:fa:cf:af:8f:25:51:6d: 74:a7:48:6f:b6:a3:03:c7:bd:c4:71:0b:f2:70:d5: 65:aa:50:df:1f:18:9d:ac:b2:44:22:f8:35:be:29: a7:27:e2:4c:69:50:b9:0d:ca:e7:85:95:5e:e7:ab: ee:b3:00:0f:e3:a7:0f:fe:46:a4:48:90:a1:b8:ff: f3:3f:77:70:d0:66:9c:1a:bd:20:58:9b:c3:a7:78: 3e:2e:7a:aa:4f:87:1e:c0:38:fb:dd:8d:82:42:d1: bf:d7:c0:78:8f:f5:85:07:2f:d6:5b:02:ff:9c:2f: 59:07:94:22:7d:7c:94:a5:22:29:ff:ee:b3:2d:af: 95:1a:13:99:38:0a:ad:8a:14:f5:e7:91:0d:db:32: 24:61:72:40:45:42:1a:85:6a:8d:08:a7:32:b8:a3: 51:67:55:b8:df:93:9f:25:b1:c3:a8:d2:d1:8f:52: 6b:6d:98:9e:fd:20:c5:62:1e:3f:6b:77:9b:9b:54: f1:47:73:6d:66:d6:8b:1a:23:19:b6:08:9f:86:b6: 33:d2:88:07:07:1e:bf:a0:48:25:5a:7b:5a:37:c0: a9:e4:04:cb:76:fc:6c:1c:bd:44:07:ea:1b:5a:66: 58:8c:e3:c9:9f:60:f7:21:97:51:e7:14:27:ad:9c: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:57:1F:C9:24:66:2D:67:F8:8D:FB:AD:86:56:6B:49:A6:FD:54:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f9:9a:57:45:b0:53:2e:be:bd:0e:75:a1:a0:a7:e7:e5:62: 38:22:a8:c9:cd:6e:07:bd:f5:60:6e:fb:7d:33:bc:2f:e7:e7: 31:d0:f9:4b:1d:1a:8a:34:a3:66:91:16:19:e4:c0:49:51:97: fd:4d:d1:8e:c7:97:ce:f1:82:7b:88:17:1c:a9:29:a1:37:8a: ef:ea:87:2f:cf:cf:1b:3e:d6:1a:cb:cd:6a:24:20:a2:d6:c7: 5c:d0:1a:eb:6c:66:ec:12:ab:0c:6c:07:59:39:56:16:ab:d7: d6:33:d5:86:4c:ff:c6:0e:97:93:77:d2:1d:ee:54:1f:4d:df: c5:de:16:45:87:0c:dd:b2:b3:d6:35:42:5e:7c:e4:2f:92:b6: 75:09:5a:41:1f:67:38:be:96:26:d7:93:5a:1e:d3:78:39:57: 35:dc:69:98:f3:77:e4:17:c2:d6:b6:37:50:30:5f:ca:9e:1b: 4d:05:a1:b6:63:d2:f8:32:6d:1c:1e:d9:fd:4e:1b:62:b8:00: f7:56:b0:5b:0d:dd:7c:64:e4:a6:01:5f:6e:05:81:5b:91:7d: 50:fd:07:ca:de:97:8d:65:68:19:ec:a0:49:14:49:a3:5e:37: 61:7c:a4:f2:2d:54:9b:2d:9b:63:70:61:6b:cc:39:e8:47:a6: 26:52:7b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3rofP8vtFe2NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk OTY2YTlhNjQtNjY0Yi00ODkyLTk2M2MtMTU3MzhlYzNlOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE62IDIFH/rPr48lUW10p0hvtqMDx73EcQvy cNVlqlDfHxidrLJEIvg1vimnJ+JMaVC5DcrnhZVe56vuswAP46cP/kakSJChuP/z P3dw0GacGr0gWJvDp3g+LnqqT4cewDj73Y2CQtG/18B4j/WFBy/WWwL/nC9ZB5Qi fXyUpSIp/+6zLa+VGhOZOAqtihT155EN2zIkYXJARUIahWqNCKcyuKNRZ1W435Of JbHDqNLRj1JrbZie/SDFYh4/a3ebm1TxR3NtZtaLGiMZtgifhrYz0ogHBx6/oEgl WntaN8Cp5ATLdvxsHL1EB+obWmZYjOPJn2D3IZdR5xQnrZxSSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpXH8kkZi1n+I37rYZWa0mm/VScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNmVmZDNhMDgtYWNkZS0z YmRkLTg1YjUtNGViYTUzM2U1MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX5mldFsFMuvr0OdaGgp+flYjgiqMnNbge99WBu+30zvC/n5zHQ+Usd Goo0o2aRFhnkwElRl/1N0Y7Hl87xgnuIFxypKaE3iu/qhy/Pzxs+1hrLzWokIKLW x1zQGutsZuwSqwxsB1k5Vhar19Yz1YZM/8YOl5N30h3uVB9N38XeFkWHDN2ys9Y1 Ql585C+StnUJWkEfZzi+libXk1oe03g5VzXcaZjzd+QXwta2N1AwX8qeG00FobZj 0vgybRwe2f1OG2K4APdWsFsN3Xxk5KYBX24FgVuRfVD9B8rel41laBnsoEkUSaNe N2F8pPItVJstm2NwYWvMOehHpiZSe/k= -----END CERTIFICATE-----Generated at Sat Sep 26 15:54:20 2026 by rpki-client