$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa File: c31c4613-8e00-3105-92eb-34eba8b9948a.roa (raw, json) Hash identifier: eTjvJhv1tvRT6UPsg2fYbehiLTR0hwFE3f4zYLtTsxY= Subject key identifier: C1:56:9D:A9:46:85:D8:06:79:60:9C:13:6A:1B:65:05:D2:CF:0F:8C Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584F06722D891EEC69E1CBC415C0 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 400039 IP address blocks: 199.101.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2d:89:1e:ec:69:e1:cb:c4:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=eabfe7b7-9c49-45ac-85ad-880584c5185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:5c:b9:6e:f7:e1:a8:1e:0b:74:e9:dc:8b: e7:79:89:27:f3:96:3d:b9:1f:c4:63:3f:e6:41:65: b3:d7:91:a6:a2:a3:e4:3b:ea:ba:15:44:2a:f1:89: 40:44:43:51:ac:75:8a:0e:00:80:e4:99:ec:f7:92: 70:86:e7:3c:2d:d3:91:20:d4:dd:7e:0b:24:a5:d1: dc:d9:21:48:25:7b:c6:94:51:a2:55:fa:b8:e1:01: 0f:96:7f:bd:2a:75:d4:15:1c:17:c7:af:a2:f5:43: e7:35:e0:e7:60:5b:33:ba:e2:46:40:ca:3f:b7:1f: ab:77:2e:d7:2b:76:bd:3c:9b:0c:eb:9d:be:ae:c4: 22:20:fd:a4:95:9d:06:c5:13:6c:ca:b9:f4:36:da: a5:c2:8b:10:4c:ea:7c:48:07:97:19:05:3c:6c:c9: a1:98:83:ce:f1:84:2b:bf:38:4c:ea:da:d8:66:91: 7e:ef:de:c3:a2:09:e6:c3:61:c6:18:33:64:dd:b7: 65:78:be:ff:9e:7a:53:b5:24:ae:9f:65:c7:c2:5b: ac:67:ed:73:c9:db:95:03:ee:7f:50:29:97:2a:77: 86:fa:ee:7e:1b:58:1e:52:81:db:42:a6:20:93:df: 06:0b:8c:3c:f5:ab:43:d4:50:3f:a4:f4:04:e6:d7: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:9D:A9:46:85:D8:06:79:60:9C:13:6A:1B:65:05:D2:CF:0F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a6:b1:8a:cd:47:c3:b1:0e:dc:24:c8:16:e4:12:5d:b1:9d: 1a:d4:20:2b:f8:45:39:5b:d0:3e:41:9e:d4:e0:c6:20:6e:dc: 1d:62:47:dc:dc:66:29:65:a5:37:65:3d:ad:b6:fb:f6:4c:be: 6f:3c:86:a4:89:c9:1c:54:da:2e:75:13:d7:4a:9b:32:88:98: fc:f1:e4:ba:fd:39:21:67:3f:f6:7a:c6:b7:8e:d2:8b:63:ed: 8b:99:b9:58:1d:29:87:87:9a:37:fa:d0:c3:5e:60:ae:59:0b: 5f:fd:0d:61:21:d6:21:7b:e9:36:86:f9:45:77:39:e7:b3:0b: 06:d4:44:6f:34:6d:d4:db:5b:ca:9a:f7:b6:c6:20:0b:8c:49: 37:f8:e2:37:fd:e2:4c:de:bf:3f:a6:2a:6c:3a:15:de:08:86: 25:17:2c:db:e5:c2:e9:f6:80:4f:08:fa:87:e0:c4:df:4f:83: 0b:ee:98:c6:0a:21:d8:57:d2:7e:59:e5:5d:52:93:75:96:01: fd:7c:52:23:86:48:bc:93:36:17:6d:e8:e4:34:9e:c7:78:88: 0b:d9:97:50:66:23:bf:85:3c:bb:c2:87:e1:07:0e:39:15:4e: 2d:05:48:b1:e8:2b:f0:94:69:3f:86:ec:f4:45:47:09:c1:4a: ad:ba:6b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gci2JHuxp4cvEFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWFiZmU3YjctOWM0OS00NWFjLTg1YWQtODgwNTg0YzUxODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwstcuW734ageC3Tp3IvneYkn85Y9uR/EYz/m QWWz15GmoqPkO+q6FUQq8YlARENRrHWKDgCA5Jns95Jwhuc8LdORINTdfgskpdHc 2SFIJXvGlFGiVfq44QEPln+9KnXUFRwXx6+i9UPnNeDnYFszuuJGQMo/tx+rdy7X K3a9PJsM652+rsQiIP2klZ0GxRNsyrn0NtqlwosQTOp8SAeXGQU8bMmhmIPO8YQr vzhM6trYZpF+797Dognmw2HGGDNk3bdleL7/nnpTtSSun2XHwlusZ+1zyduVA+5/ UCmXKneG+u5+G1geUoHbQqYgk98GC4w89atD1FA/pPQE5tfXuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFWnalGhdgGeWCcE2obZQXSzw+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYzMxYzQ2MTMtOGUwMC0z MTA1LTkyZWItMzRlYmE4Yjk5NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACimsYrNR8OxDtwkyBbkEl2xnRrUICv4RTlb0D5BntTgxiBu3B1iR9zc ZillpTdlPa22+/ZMvm88hqSJyRxU2i51E9dKmzKImPzx5Lr9OSFnP/Z6xreO0otj 7YuZuVgdKYeHmjf60MNeYK5ZC1/9DWEh1iF76TaG+UV3OeezCwbURG80bdTbW8qa 97bGIAuMSTf44jf94kzevz+mKmw6Fd4IhiUXLNvlwun2gE8I+ofgxN9PgwvumMYK IdhX0n5Z5V1Sk3WWAf18UiOGSLyTNhdt6OQ0nsd4iAvZl1BmI7+FPLvCh+EHDjkV Ti0FSLHoK/CUaT+G7PRFRwnBSq26a1E= -----END CERTIFICATE-----Generated at Mon Sep 28 22:41:06 2026 by rpki-client