$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa File: 25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa (raw, json) Hash identifier: uPWrZ1DKv3TzRNXOMpcSRyShXEJxLi8DEz2twtfISIk= Subject key identifier: 4B:E2:A1:16:15:BD:24:9A:61:F8:C3:E2:CB:D1:52:95:6B:22:10:C9 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584F497309BA89D80BF4E2199F80 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 125 IP address blocks: 199.62.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:09:ba:89:d8:0b:f4:e2:19:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=851b7147-eea9-41b7-bbe1-8e231bf7b366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:df:5e:4b:b1:fd:e3:89:fa:cb:8d:47:77: e4:cf:7f:37:e0:c6:08:4e:af:ca:4e:ab:aa:03:bb: d7:53:25:e7:c1:c4:ae:bc:29:26:97:8e:5c:d9:f5: 01:89:e1:b0:fc:99:82:56:8d:f2:2e:6c:38:61:a3: 62:7a:9b:74:74:af:48:12:4e:ac:ee:3d:cc:ca:eb: 98:e5:1b:9a:46:ab:df:80:ba:52:ac:2d:65:7a:0a: 63:27:57:50:ba:3b:a4:89:15:bf:d2:11:b7:f8:c4: a7:b0:85:80:45:9d:cc:52:07:9a:d2:5c:21:b0:43: 09:df:97:7d:56:e2:87:6e:a8:ee:16:d5:eb:87:2a: 80:eb:ee:ff:0f:24:c2:71:b9:4e:40:96:d7:1a:09: ab:e5:60:a4:a1:fb:3c:80:c7:a5:ae:53:2d:7e:65: 47:83:d8:c7:51:6e:7b:50:62:c5:52:14:41:b9:88: 07:3b:2e:05:0b:83:05:92:37:68:35:d2:10:45:24: fe:be:44:9d:c6:ed:21:16:71:73:d1:09:80:df:c6: 94:aa:f7:35:2a:82:13:5a:7e:4f:6e:14:d2:41:ef: 80:b6:76:15:da:6b:25:89:a6:86:2d:3a:63:23:06: 6a:a7:94:d7:29:3b:cf:60:82:94:c5:09:99:c2:47: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E2:A1:16:15:BD:24:9A:61:F8:C3:E2:CB:D1:52:95:6B:22:10:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.62.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6f:ad:51:e3:e0:17:22:49:59:5a:63:2f:16:d7:51:90:bd: ef:5c:77:3c:8e:75:d3:a3:d7:1f:27:fd:94:15:c4:ca:b7:04: ca:a2:28:61:3e:f0:01:eb:70:9d:ae:83:b1:21:7e:18:17:16: 35:9d:31:f7:1c:2c:4a:7e:24:0c:cc:93:c6:ac:fb:c3:a7:ec: 04:b4:dc:55:86:c5:e7:47:93:5c:22:d8:0c:16:d1:11:41:1c: 65:a7:61:58:8c:5c:03:69:04:2d:70:5f:a8:98:97:a2:6c:57: f6:44:34:83:6c:5b:a1:5c:50:bb:0a:fa:e1:06:76:dc:b5:16: c4:50:61:2d:de:a3:a5:71:00:2c:65:c8:14:d8:11:11:44:7a: ba:6f:50:fe:75:26:78:97:f0:9b:03:84:af:c0:4b:f0:51:46: 0b:cf:6e:22:e9:fc:d7:f4:c4:0d:ca:4f:d4:e7:32:04:dd:a6: b7:0a:19:ef:6a:4c:60:cc:10:1a:df:8e:d7:a7:6d:ac:8e:52: 7b:df:31:3b:3c:47:a1:d0:8b:6d:7e:05:67:71:22:68:e2:c8: e2:87:51:7a:17:b0:43:3e:11:73:a1:3c:08:84:05:27:e7:30: 25:e4:f4:ad:72:24:83:3a:43:74:9d:4e:14:00:af:ce:ac:5f: 40:bf:3a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcwm6idgL9OIZn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODUxYjcxNDctZWVhOS00MWI3LWJiZTEtOGUyMzFiZjdiMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqknfXkux/eOJ+suNR3fkz3834MYITq/KTquq A7vXUyXnwcSuvCkml45c2fUBieGw/JmCVo3yLmw4YaNiept0dK9IEk6s7j3MyuuY 5RuaRqvfgLpSrC1legpjJ1dQujukiRW/0hG3+MSnsIWARZ3MUgea0lwhsEMJ35d9 VuKHbqjuFtXrhyqA6+7/DyTCcblOQJbXGgmr5WCkofs8gMelrlMtfmVHg9jHUW57 UGLFUhRBuYgHOy4FC4MFkjdoNdIQRST+vkSdxu0hFnFz0QmA38aUqvc1KoITWn5P bhTSQe+AtnYV2msliaaGLTpjIwZqp5TXKTvPYIKUxQmZwkdkhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvioRYVvSSaYfjD4svRUpVrIhDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMjVhOWRhMjYtYjJiYS0z MjkxLWE4YTktYWJjZDNhYmZkMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxz6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRvrVHj4BciSVlaYy8W11GQve9cdzyOddOj1x8n/ZQVxMq3BMqiKGE+ 8AHrcJ2ug7EhfhgXFjWdMfccLEp+JAzMk8as+8On7AS03FWGxedHk1wi2AwW0RFB HGWnYViMXANpBC1wX6iYl6JsV/ZENINsW6FcULsK+uEGdty1FsRQYS3eo6VxACxl yBTYERFEerpvUP51JniX8JsDhK/AS/BRRgvPbiLp/Nf0xA3KT9TnMgTdprcKGe9q TGDMEBrfjtenbayOUnvfMTs8R6HQi21+BWdxImjiyOKHUXoXsEM+EXOhPAiEBSfn MCXk9K1yJIM6Q3SdThQAr86sX0C/Opo= -----END CERTIFICATE-----Generated at Fri Sep 25 10:56:24 2026 by rpki-client