$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/dd663c71-586c-3d17-9fe8-dadb2b87db8d.roa File: dd663c71-586c-3d17-9fe8-dadb2b87db8d.roa (raw, json) Hash identifier: mg7HMAWxWw8YeRvkjx9d0a742KU72HrWByovDoGFWpk= Subject key identifier: D7:BC:F4:F5:66:CE:B3:84:D4:CD:73:91:12:47:C6:47:02:59:51:5D Certificate issuer: /CN=9de0425b-788e-45de-93cd-d9e343be4db2 Certificate serial: 010D0C9F4328584F46A7D7748B1F9B9C841880E0 Authority key identifier: 8C:98:D6:E3:29:CE:9D:23:87:77:68:9B:84:FD:20:5A:D2:82:B3:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/dd663c71-586c-3d17-9fe8-dadb2b87db8d.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 398954 IP address blocks: 198.96.96.0/20 maxlen: 24 199.212.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:d7:74:8b:1f:9b:9c:84:18:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de0425b-788e-45de-93cd-d9e343be4db2 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=34fccd81-4038-4970-a9fa-fe2768ecdacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:5f:ca:70:97:1f:7c:dd:02:2c:68:bf:71: f3:19:90:b5:3b:6f:e7:48:ea:42:04:8b:29:71:ca: 16:4b:1e:82:0b:47:21:67:d7:98:f3:24:7a:38:e8: c8:7f:55:8c:89:fd:c5:7a:e6:dc:3c:e4:26:e4:a2: 1b:77:11:18:db:d2:cd:9f:4c:a6:e6:67:2d:84:e6: 82:72:38:83:a1:51:0a:2a:26:7c:81:2c:5e:08:38: 43:51:46:48:f9:34:49:98:fb:28:2e:c2:b1:2c:65: e9:31:7f:5f:88:f5:00:dc:a7:9d:05:f9:be:1d:98: 6a:96:37:a6:ca:c5:c1:eb:da:92:94:e5:2a:ba:9b: e8:35:a9:66:08:cc:ea:b0:c7:02:d3:44:51:4f:9d: a4:d4:be:22:62:f0:01:cc:1d:8b:f6:63:31:d2:76: c7:5d:3a:3e:c5:05:d5:39:b8:bf:29:e4:5b:de:25: 7b:84:83:2d:a2:42:f2:20:13:ef:11:c7:d4:b6:0f: 72:0a:cb:b3:6e:88:d0:ff:71:ce:b5:02:4b:5f:04: ff:90:12:53:0a:ce:4f:d3:8f:03:05:92:49:96:f9: 8a:c5:6b:07:b7:9c:80:4c:82:50:2c:56:55:e8:6a: b8:b0:f6:35:f4:33:ae:fd:4e:f8:33:89:55:99:b9: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BC:F4:F5:66:CE:B3:84:D4:CD:73:91:12:47:C6:47:02:59:51:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/dd663c71-586c-3d17-9fe8-dadb2b87db8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.crl X509v3 Authority Key Identifier: keyid:8C:98:D6:E3:29:CE:9D:23:87:77:68:9B:84:FD:20:5A:D2:82:B3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer sbgp-ipAddrBlock: critical IPv4: 198.96.96.0/20 199.212.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d5:b2:cf:cd:63:23:63:da:58:26:85:36:da:53:a3:c7:05: 56:53:40:2e:9e:17:8e:0e:cf:02:29:c3:34:22:a3:17:07:dd: ab:12:9a:12:79:07:5b:2a:30:5e:82:12:f9:ff:21:4f:fe:1a: 79:cb:f4:06:a0:0e:84:61:57:61:b9:20:fb:75:d4:32:b0:f3: 8c:e6:7a:2e:b7:f8:04:af:61:77:90:55:12:de:71:84:55:50: d9:37:21:f8:ba:7d:0a:b5:5a:98:a0:d0:62:37:d9:b7:d5:af: 38:e7:42:96:a8:fe:d4:4d:88:fb:a3:27:a7:1e:3f:00:68:cb: 80:76:c6:4c:da:83:61:8c:3d:57:02:f0:33:0d:a8:3c:1e:06: 51:9d:f2:5b:82:e2:f0:6f:d2:5e:75:33:6f:2c:36:d4:ae:1e: 7e:04:26:09:d9:42:43:68:fa:37:fb:ea:3d:7d:cf:51:f5:d9: b8:d3:d4:d6:aa:69:34:6c:10:b5:7c:ad:d6:d2:2b:20:62:b2: 1f:21:de:d4:16:f2:3c:f1:82:cb:8a:6a:a4:ee:20:b2:45:a0: b9:ea:0d:f5:c3:96:68:7e:cc:9e:27:4f:62:47:67:c2:11:17: b5:11:44:e8:e2:eb:97:f2:d4:b0:d9:9e:d3:c7:43:f3:8b:c8: e1:b4:dd:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Gp9d0ix+bnIQYgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlMDQyNWItNzg4ZS00NWRlLTkzY2QtZDllMzQzYmU0 ZGIyMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzRmY2NkODEtNDAzOC00OTcwLWE5ZmEtZmUyNzY4ZWNkYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwotfynCXH3zdAixov3HzGZC1O2/nSOpCBIsp ccoWSx6CC0chZ9eY8yR6OOjIf1WMif3FeubcPOQm5KIbdxEY29LNn0ym5mcthOaC cjiDoVEKKiZ8gSxeCDhDUUZI+TRJmPsoLsKxLGXpMX9fiPUA3KedBfm+HZhqljem ysXB69qSlOUqupvoNalmCMzqsMcC00RRT52k1L4iYvABzB2L9mMx0nbHXTo+xQXV Obi/KeRb3iV7hIMtokLyIBPvEcfUtg9yCsuzbojQ/3HOtQJLXwT/kBJTCs5P048D BZJJlvmKxWsHt5yATIJQLFZV6Gq4sPY19DOu/U74M4lVmbkMywIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNe89PVmzrOE1M1zkRJHxkcCWVFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85ZGUw NDI1Yi03ODhlLTQ1ZGUtOTNjZC1kOWUzNDNiZTRkYjIvZGQ2NjNjNzEtNTg2Yy0z ZDE3LTlmZTgtZGFkYjJiODdkYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWRlMDQyNWItNzg4ZS00NWRlLTkz Y2QtZDllMzQzYmU0ZGIyLzlkZTA0MjViLTc4OGUtNDVkZS05M2NkLWQ5ZTM0M2Jl NGRiMi5jcmwwHwYDVR0jBBgwFoAUjJjW4ynOnSOHd2ibhP0gWtKCs9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85ZGUwNDI1Yi03ODhlLTQ1ZGUtOTNjZC1kOWUz NDNiZTRkYjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQExmBgAwQE x9RgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEHVss/NYyNj2lgmhTbaU6PHBVZTQC6eF44OzwIpwzQioxcH 3asSmhJ5B1sqMF6CEvn/IU/+GnnL9AagDoRhV2G5IPt11DKw84zmei63+ASvYXeQ VRLecYRVUNk3Ifi6fQq1Wpig0GI32bfVrzjnQpao/tRNiPujJ6cePwBoy4B2xkza g2GMPVcC8DMNqDweBlGd8luC4vBv0l51M28sNtSuHn4EJgnZQkNo+jf76j19z1H1 2bjT1NaqaTRsELV8rdbSKyBish8h3tQW8jzxgsuKaqTuILJFoLnqDfXDlmh+zJ4n T2JHZ8IRF7URROji65fy1LDZntPHQ/OLyOG03U4= -----END CERTIFICATE-----Generated at Fri Sep 25 17:54:36 2026 by rpki-client