$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa File: 0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json) Hash identifier: xfVmAi0p7Sot4OfjYCGTrOY4oFCmGefNeKHkXkO6TZE= Subject key identifier: E9:C3:54:E9:93:F6:55:53:57:41:09:DB:9F:E1:D4:D3:3D:2B:5B:0B Certificate issuer: /CN=2b666ba7-a215-4f08-8204-c5b168b3360c Certificate serial: 010D0C9F4328584F4976297F4297F73894C212C0 Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25661 IP address blocks: 199.119.140.0/22 maxlen: 24 207.167.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:29:7f:42:97:f7:38:94:c2:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a8f8c9e-dada-49db-aaf8-fbafed0c8cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b4:04:c3:7b:63:ff:a0:82:5e:da:02:9e:9d: 93:c6:7c:51:0c:e7:59:5e:9e:43:a2:bd:cb:a0:66: b6:93:fb:4b:2e:9c:fc:2c:5f:2e:3a:e0:e2:f7:fa: 25:40:83:fd:df:f2:06:cc:b2:6f:32:86:04:b6:4c: 10:83:bb:dd:b4:7c:91:a5:65:ea:68:f4:12:3b:15: 3d:17:d5:10:43:a2:bc:d1:ea:36:2c:4e:01:94:52: b3:19:af:9c:01:a7:be:67:e5:bd:f7:9e:53:54:84: f1:79:8e:69:a6:5b:90:95:06:89:4f:e8:00:cf:3c: 38:8b:3c:8d:74:4a:0f:92:ed:b9:b7:d8:6e:86:0f: ad:06:33:d9:59:70:f5:5c:97:30:44:57:b6:55:bd: 21:e7:7e:85:b9:9c:eb:95:16:57:59:28:43:76:8d: f3:3d:d2:ec:a3:62:19:e4:15:68:07:a0:f1:13:06: 99:d4:95:ca:90:47:fb:3c:13:42:2f:1c:80:52:40: b9:26:11:8c:23:2d:af:87:fa:86:90:fc:2e:2f:9a: 80:18:bc:a2:52:a4:b3:85:f1:95:cb:2d:f6:ee:92: 8b:04:b1:23:95:7c:cd:22:ae:3e:4b:aa:ad:04:05: e0:f2:b9:79:7a:09:06:ea:20:a1:65:15:5e:5f:80: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C3:54:E9:93:F6:55:53:57:41:09:DB:9F:E1:D4:D3:3D:2B:5B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl X509v3 Authority Key Identifier: keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer sbgp-ipAddrBlock: critical IPv4: 199.119.140.0/22 207.167.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5a:57:df:87:ce:1d:05:45:6e:6f:44:88:91:41:31:d0:74: bb:46:59:d2:66:d1:5d:f1:18:04:12:b1:34:df:b4:24:77:a5: 58:11:3b:44:ac:1c:8f:07:63:57:be:bc:11:05:61:6b:af:79: 0d:ce:05:5f:f0:1d:30:0c:b2:8b:ff:7c:30:2e:ee:33:40:41: 9f:fe:90:a5:1f:1b:90:1e:92:e6:7a:2e:1e:8e:8b:71:93:96: 08:cf:e9:87:bb:93:29:08:b1:8f:13:f2:6f:13:3c:90:7a:7e: aa:fc:87:db:55:fc:b8:77:56:1c:98:f1:97:fb:07:24:fe:9a: 63:6b:36:eb:c0:12:f7:6d:c7:fd:b0:4d:af:df:75:6c:bc:fa: 2a:59:dd:dd:d1:11:f8:0d:3c:50:a1:b9:de:b3:55:09:ae:2e: e8:a1:a3:a1:18:b7:b4:55:6b:1e:20:47:16:20:2a:24:a4:ed: e2:9e:78:c8:a4:1d:c6:d8:c0:70:cb:ac:5d:44:0d:85:38:e3: 80:35:ff:b3:53:25:f8:05:79:7f:08:00:1d:90:ad:a8:e6:5c: 07:e4:a2:fa:47:e4:b6:c8:35:68:e4:43:04:37:52:0f:ce:1a: cd:6e:6d:c8:ca:8d:48:45:1b:d0:a8:ba:64:0a:5c:a7:99:50: d0:86:18:52 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jdil/Qpf3OJTCEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI2NjZiYTctYTIxNS00ZjA4LTgyMDQtYzViMTY4YjMz NjBjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE4ZjhjOWUtZGFkYS00OWRiLWFhZjgtZmJhZmVkMGM4Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLQEw3tj/6CCXtoCnp2TxnxRDOdZXp5Dor3L oGa2k/tLLpz8LF8uOuDi9/olQIP93/IGzLJvMoYEtkwQg7vdtHyRpWXqaPQSOxU9 F9UQQ6K80eo2LE4BlFKzGa+cAae+Z+W9955TVITxeY5ppluQlQaJT+gAzzw4izyN dEoPku25t9huhg+tBjPZWXD1XJcwRFe2Vb0h536FuZzrlRZXWShDdo3zPdLso2IZ 5BVoB6DxEwaZ1JXKkEf7PBNCLxyAUkC5JhGMIy2vh/qGkPwuL5qAGLyiUqSzhfGV yy327pKLBLEjlXzNIq4+S6qtBAXg8rl5egkG6iChZRVeX4A/lQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOnDVOmT9lVTV0EJ25/h1NM9K1sLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYjY2 NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIxNjhiMzM2MGMvMGU4NmRkY2EtZTgwMy0z NDlmLTllMWUtZDU1NjA1OTZmNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmI2NjZiYTctYTIxNS00ZjA4LTgy MDQtYzViMTY4YjMzNjBjLzJiNjY2YmE3LWEyMTUtNGYwOC04MjA0LWM1YjE2OGIz MzYwYy5jcmwwHwYDVR0jBBgwFoAUrMOhT+x9JgaLiuSTjSvGRetwf0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYjY2NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIx NjhiMzM2MGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx3eMAwQA z6d8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACRaV9+Hzh0FRW5vRIiRQTHQdLtGWdJm0V3xGAQSsTTftCR3 pVgRO0SsHI8HY1e+vBEFYWuveQ3OBV/wHTAMsov/fDAu7jNAQZ/+kKUfG5AekuZ6 Lh6Oi3GTlgjP6Ye7kykIsY8T8m8TPJB6fqr8h9tV/Lh3VhyY8Zf7ByT+mmNrNuvA Evdtx/2wTa/fdWy8+ipZ3d3REfgNPFChud6zVQmuLuiho6EYt7RVax4gRxYgKiSk 7eKeeMikHcbYwHDLrF1EDYU444A1/7NTJfgFeX8IAB2QrajmXAfkovpH5LbINWjk QwQ3Ug/OGs1ubcjKjUhFG9CoumQKXKeZUNCGGFI= -----END CERTIFICATE-----Generated at Fri Sep 25 14:29:36 2026 by rpki-client