$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/449b177a-b3f4-37ea-949e-453399472d83.roa File: 449b177a-b3f4-37ea-949e-453399472d83.roa (raw, json) Hash identifier: MnVjxHXBV6148w5yOPXjAQLg/rl3mDdrRysY3sYAiDQ= Subject key identifier: 92:C6:FF:1C:49:5E:E6:33:B4:FF:82:1F:4F:16:A0:18:BB:DC:5B:F5 Certificate issuer: /CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2 Certificate serial: 010D0C9F4328584F4989156E417EE4BD11982830 Authority key identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/449b177a-b3f4-37ea-949e-453399472d83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399353 IP address blocks: 199.21.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:15:6e:41:7e:e4:bd:11:98:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=43878a10-4ecd-4102-8425-778c568a078d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:bb:ba:7f:e4:0f:00:51:96:5d:87:08:22: a4:4a:31:5e:3f:b8:05:7a:c7:09:b5:94:bd:4a:11: 58:a8:1b:ce:6d:dd:f7:62:2f:c4:b4:a1:da:09:c4: 79:a9:68:31:0d:ff:9e:27:da:b9:64:5f:84:f4:77: 23:da:44:1c:83:49:48:52:66:4f:0e:2f:a0:20:85: 39:da:ca:f3:f2:60:8d:fd:4b:32:8e:65:4b:8e:d0: 4c:9c:0a:ee:4e:de:c6:5a:08:2e:27:e6:de:66:c7: fa:d7:62:96:df:33:51:ee:f3:5e:69:3f:e6:55:a4: 98:43:6d:cb:71:d9:e2:45:87:1c:a5:7c:3a:50:af: 1f:cb:d3:fc:b4:73:91:aa:b3:b0:4d:4a:39:59:c6: be:28:aa:6b:e2:36:fa:33:70:67:be:98:85:d2:31: 23:3e:da:a6:7c:76:2b:40:2c:89:33:6a:ff:8b:87: be:8f:54:32:c9:34:17:1f:62:3b:fa:76:df:fb:28: c1:5c:24:df:91:f2:84:71:2a:94:20:10:64:b0:49: ec:ec:00:6e:af:7d:16:2f:da:d5:00:0f:33:a0:9f: 64:af:cb:eb:a3:af:a4:b6:8e:0e:a0:b4:ea:b7:71: b2:49:c6:44:b3:82:18:78:b8:1c:36:07:7d:78:71: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C6:FF:1C:49:5E:E6:33:B4:FF:82:1F:4F:16:A0:18:BB:DC:5B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/449b177a-b3f4-37ea-949e-453399472d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl X509v3 Authority Key Identifier: keyid:88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer sbgp-ipAddrBlock: critical IPv4: 199.21.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e9:2a:89:2a:e9:2a:fb:b9:fd:05:41:dc:c0:f0:7c:c6:f0: b4:64:2f:2f:56:73:04:c5:05:e2:25:c0:40:ef:4d:cf:03:18: b8:ed:f9:b5:d2:b4:f5:95:ab:0e:52:35:83:51:bd:0d:84:da: 0f:1d:95:54:6d:54:38:bd:3d:38:11:d2:33:c3:f1:49:ac:37: a8:7a:a2:2f:45:5b:c3:47:01:66:cd:0a:6b:8f:78:31:8c:02: b2:23:31:b3:09:29:18:1f:68:23:98:4a:39:62:ad:40:9a:3d: f2:1a:a3:e4:95:15:5b:0b:01:b8:99:4a:9b:98:8d:e9:52:f3: d6:3b:f3:ac:6b:bc:4d:d1:25:8d:34:74:ef:a5:4b:45:54:a4: b3:ef:2f:66:db:13:87:3e:c2:3b:67:25:2b:cf:4c:19:9d:41: 6c:5b:70:cc:8e:f0:de:6c:1b:3e:95:a7:e2:d1:da:f5:c3:82: a8:f3:1a:9e:4b:42:97:62:8f:51:69:6b:36:ea:4d:fb:b2:dc: e5:1a:76:97:a7:08:5f:e3:22:46:37:82:07:78:dc:2e:23:75: 79:96:4a:e8:4b:5b:47:76:8a:4c:98:ae:2d:e3:22:90:df:15: de:65:f1:2d:5d:7b:39:57:85:33:60:4a:91:6a:e6:65:97:e7: c0:9b:2f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiRVuQX7kvRGYKDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMwY2ZiZjQtYjZhZC00ZjNhLThlZWMtZTM4MmRmMjkz OGMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDM4NzhhMTAtNGVjZC00MTAyLTg0MjUtNzc4YzU2OGEwNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyO7un/kDwBRll2HCCKkSjFeP7gFescJtZS9 ShFYqBvObd33Yi/EtKHaCcR5qWgxDf+eJ9q5ZF+E9Hcj2kQcg0lIUmZPDi+gIIU5 2srz8mCN/UsyjmVLjtBMnAruTt7GWgguJ+beZsf612KW3zNR7vNeaT/mVaSYQ23L cdniRYccpXw6UK8fy9P8tHORqrOwTUo5Wca+KKpr4jb6M3BnvpiF0jEjPtqmfHYr QCyJM2r/i4e+j1QyyTQXH2I7+nbf+yjBXCTfkfKEcSqUIBBksEns7ABur30WL9rV AA8zoJ9kr8vro6+kto4OoLTqt3GyScZEs4IYeLgcNgd9eHFlKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLG/xxJXuYztP+CH08WoBi73Fv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYzBj ZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgyZGYyOTM4YzIvNDQ5YjE3N2EtYjNmNC0z N2VhLTk0OWUtNDUzMzk5NDcyZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWMwY2ZiZjQtYjZhZC00ZjNhLThl ZWMtZTM4MmRmMjkzOGMyL2FjMGNmYmY0LWI2YWQtNGYzYS04ZWVjLWUzODJkZjI5 MzhjMi5jcmwwHwYDVR0jBBgwFoAUiJO3mNz0q8Owq4URN01mRZBx2tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYzBjZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgy ZGYyOTM4YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTpKokq6Sr7uf0FQdzA8HzG8LRkLy9WcwTFBeIlwEDvTc8DGLjt+bXS tPWVqw5SNYNRvQ2E2g8dlVRtVDi9PTgR0jPD8UmsN6h6oi9FW8NHAWbNCmuPeDGM ArIjMbMJKRgfaCOYSjlirUCaPfIao+SVFVsLAbiZSpuYjelS89Y786xrvE3RJY00 dO+lS0VUpLPvL2bbE4c+wjtnJSvPTBmdQWxbcMyO8N5sGz6Vp+LR2vXDgqjzGp5L Qpdij1FpazbqTfuy3OUadpenCF/jIkY3ggd43C4jdXmWSuhLW0d2ikyYri3jIpDf Fd5l8S1dezlXhTNgSpFq5mWX58CbL+Q= -----END CERTIFICATE-----Generated at Sat Sep 26 10:44:07 2026 by rpki-client