$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa File: 31ea5e48-31b1-303a-9005-188379a2a655.roa (raw, json) Hash identifier: 2iekDxW9GENQecf2yDSJudFw2+sm0Vl4GgkfMYtLnqA= Subject key identifier: B8:AA:03:7F:94:38:F3:61:83:CE:11:85:DF:94:7A:DA:7C:3A:F5:34 Certificate issuer: /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893 Certificate serial: 010D0C9F4328584F1B624F0F7F08D2EF098D6100 Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 46757 IP address blocks: 199.241.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4f:0f:7f:08:d2:ef:09:8d:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=0ee538a2-23f9-428d-8e3e-f93c7e65b128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:1c:78:5c:8e:97:eb:c6:8e:28:15:25:f2: 9a:d0:0b:4d:6b:c9:e0:ab:ce:d6:0f:76:56:43:f7: 81:7d:48:38:61:62:9f:55:8c:ea:72:99:6b:55:65: fb:a1:b3:af:15:c0:36:a8:91:0e:13:95:0c:55:40: b1:1c:b9:15:ff:d3:22:62:1c:85:aa:64:e3:bc:55: a5:11:7f:6e:2a:70:4c:ac:1c:55:be:04:ad:fe:26: 97:9a:02:09:63:a1:61:b3:43:c2:12:93:62:73:7e: ee:17:17:d0:e9:f3:4b:53:26:95:bd:14:9d:22:84: f5:01:64:85:4b:70:60:ac:71:43:12:07:0f:de:58: 96:3d:d0:6f:7a:6f:9c:7e:1e:11:a9:c3:0c:dc:98: e3:5c:ac:9a:6a:fc:b7:d9:1a:3a:80:d2:5d:f2:22: 62:6d:3c:55:e2:9e:0d:bd:b8:cd:eb:3f:f6:13:0d: 8a:59:c6:a6:24:ca:f2:6b:f3:46:c6:07:95:e1:87: fd:5c:72:29:5a:91:c2:07:d8:3d:8e:d9:be:83:96: f8:fe:3d:c0:00:82:1e:64:fb:b7:20:b2:20:6c:c4: 81:83:af:e2:6a:51:ea:a3:b8:cf:f3:b8:b5:a7:a6: 92:19:f9:19:45:29:da:fe:99:42:e1:17:bb:8a:5a: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:03:7F:94:38:F3:61:83:CE:11:85:DF:94:7A:DA:7C:3A:F5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl X509v3 Authority Key Identifier: keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer sbgp-ipAddrBlock: critical IPv4: 199.241.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:42:41:2e:fa:01:c4:b3:c3:14:87:dd:ab:2a:f5:b2:f4:0d: b1:a0:15:e9:76:56:66:f1:e0:c8:0f:43:5b:49:43:1e:d1:25: cc:3b:4a:f3:2d:c9:f3:6f:ae:0f:a6:6b:7a:4f:1d:6b:f2:68: e2:07:04:a9:fe:aa:36:81:0d:3b:da:60:06:07:a3:2c:bf:73: ec:5f:7f:77:be:2b:87:f3:6d:29:13:fc:59:e8:48:92:a1:fb: 41:b5:ae:d4:2d:71:8d:3d:23:d4:d8:5a:c8:7d:78:37:fc:c4: 49:c1:f4:af:e3:50:40:cd:6a:c6:94:92:a1:b4:38:4a:08:5c: 3a:50:c0:84:79:8f:53:79:91:73:f7:1e:51:ee:1f:d7:e2:f1: 6d:8c:a3:8b:13:22:64:a7:17:ca:06:02:29:b0:17:29:8e:ef: d9:06:ef:e3:9b:69:6d:43:59:98:e6:18:63:80:18:ce:e1:5b: b0:02:eb:09:96:fd:df:d2:16:45:a4:a6:04:f1:bc:88:74:15: 9d:76:93:ab:57:3e:b0:fe:61:5e:44:4b:5f:d8:94:ac:97:89: d7:3c:5e:5e:9f:2f:48:7f:52:ca:f6:5e:6e:33:66:7d:a8:2b: e0:28:26:3c:f4:d1:79:62:4d:00:3e:dd:f5:11:dc:3c:51:78: 73:7e:1a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk8PfwjS7wmNYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E4ZjBiYmMtOGNjNC00NTE0LTg3NGEtNDA3ZjMyOGYz ODkzMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MGVlNTM4YTItMjNmOS00MjhkLThlM2UtZjkzYzdlNjViMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp4ceFyOl+vGjigVJfKa0AtNa8ngq87WD3ZW Q/eBfUg4YWKfVYzqcplrVWX7obOvFcA2qJEOE5UMVUCxHLkV/9MiYhyFqmTjvFWl EX9uKnBMrBxVvgSt/iaXmgIJY6Fhs0PCEpNic37uFxfQ6fNLUyaVvRSdIoT1AWSF S3BgrHFDEgcP3liWPdBvem+cfh4RqcMM3JjjXKyaavy32Ro6gNJd8iJibTxV4p4N vbjN6z/2Ew2KWcamJMrya/NGxgeV4Yf9XHIpWpHCB9g9jtm+g5b4/j3AAIIeZPu3 ILIgbMSBg6/ialHqo7jP87i1p6aSGfkZRSna/plC4Re7ilrmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiqA3+UOPNhg84Rhd+Uetp8OvU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYThm MGJiYy04Y2M0LTQ1MTQtODc0YS00MDdmMzI4ZjM4OTMvMzFlYTVlNDgtMzFiMS0z MDNhLTkwMDUtMTg4Mzc5YTJhNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2E4ZjBiYmMtOGNjNC00NTE0LTg3 NGEtNDA3ZjMyOGYzODkzL2NhOGYwYmJjLThjYzQtNDUxNC04NzRhLTQwN2YzMjhm Mzg5My5jcmwwHwYDVR0jBBgwFoAUTzZRlFzvdEC56WayZJszV3DncgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYThmMGJiYy04Y2M0LTQ1MTQtODc0YS00MDdm MzI4ZjM4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/GgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJCQS76AcSzwxSH3asq9bL0DbGgFel2Vmbx4MgPQ1tJQx7RJcw7SvMt yfNvrg+ma3pPHWvyaOIHBKn+qjaBDTvaYAYHoyy/c+xff3e+K4fzbSkT/FnoSJKh +0G1rtQtcY09I9TYWsh9eDf8xEnB9K/jUEDNasaUkqG0OEoIXDpQwIR5j1N5kXP3 HlHuH9fi8W2Mo4sTImSnF8oGAimwFymO79kG7+ObaW1DWZjmGGOAGM7hW7AC6wmW /d/SFkWkpgTxvIh0FZ12k6tXPrD+YV5ES1/YlKyXidc8Xl6fL0h/Usr2Xm4zZn2o K+AoJjz00XliTQA+3fUR3DxReHN+GiE= -----END CERTIFICATE-----Generated at Sat Oct 10 17:57:19 2026 by rpki-client