$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa File: f2983f60-df74-3593-83d6-9699aa4424c4.roa (raw, json) Hash identifier: nPhXSYZTGIPmffCdyjCWfCjg/j7Ge5zE8pMHBtqBnRo= Subject key identifier: 31:ED:29:4D:E1:25:F2:AF:6C:E3:72:D3:55:3F:19:98:C7:E2:43:AF Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513 Certificate serial: 010D0C9F4328584F23C25EA3519B50AAAD8DFB40 Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 199.101.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5e:a3:51:9b:50:aa:ad:8d:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=c6ba9335-35ac-4b8b-b26b-29d75e02e93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:c9:b7:77:78:e6:a1:08:8b:88:fb:7d:6f: 80:a0:33:f0:34:68:5b:c1:5b:8f:4f:25:88:47:be: 81:78:22:f4:84:7d:c8:9b:c6:f9:df:64:2d:ec:e5: db:af:57:02:43:d1:28:58:89:41:cc:07:96:74:05: 1d:77:a4:a5:a8:e9:f5:ef:34:cd:89:20:78:11:2e: 93:b7:9b:c9:64:24:ae:91:d5:37:b4:d3:5f:6b:f9: 02:e2:57:27:47:22:ce:ad:11:04:3c:3a:32:b8:d2: 79:e4:db:27:74:70:9d:a9:c5:a5:94:b7:d3:24:15: 46:5c:47:a5:35:ca:0b:0f:8b:49:cb:78:1d:bd:cc: 68:e7:70:8c:a5:73:ab:17:23:bc:94:a5:4e:11:91: f3:9c:2c:d2:39:37:e0:35:2c:b0:c2:bf:fa:22:5c: 9d:25:1a:2b:2f:37:5d:ad:aa:52:14:e2:fe:58:96: 70:10:3e:09:cc:11:48:df:7c:62:b7:27:f6:54:dd: 70:47:6a:40:8d:d3:15:56:40:92:56:a1:a7:ac:e1: ea:46:64:32:f0:a2:40:04:96:d2:2d:0a:b7:a6:ee: c2:b4:f6:f6:d7:b4:e7:0e:fa:c7:d0:2c:a8:92:d3: 99:bc:33:a6:bf:7d:c1:9e:ff:2b:8f:23:a1:9f:19: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:ED:29:4D:E1:25:F2:AF:6C:E3:72:D3:55:3F:19:98:C7:E2:43:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl X509v3 Authority Key Identifier: keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer sbgp-ipAddrBlock: critical IPv4: 199.101.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:27:19:b6:1b:dd:db:a4:f2:d6:fb:03:70:62:48:82:b9:05: ea:48:5c:77:2e:8c:a1:b7:5f:16:1e:fc:a4:e7:90:1d:97:f6: aa:38:45:e3:9a:88:63:e7:51:50:bf:aa:c6:b5:91:8c:70:11: b0:51:30:d8:47:06:1a:45:23:2a:8c:ad:b8:1d:e7:3a:67:ec: df:f1:2a:49:3e:b2:43:bb:73:f2:83:15:13:ec:43:98:f5:5d: 65:5c:86:97:36:64:67:e5:62:e9:3a:52:76:3f:1e:76:fb:85: 49:a3:0e:57:ea:5b:35:e0:18:38:7b:d2:e9:96:bf:c8:f2:43: e7:7f:dc:22:3f:fd:63:02:d1:74:68:57:6f:5d:e8:33:9f:0f: 34:82:66:cc:50:2e:9a:83:c1:f2:75:e3:58:05:0c:08:c9:a8: 68:a1:01:88:74:f7:74:42:fb:10:0a:2d:cd:7e:fa:32:0c:3c: 14:ae:52:c2:c2:f9:4f:fd:94:ad:e0:27:5e:b7:26:7f:97:4b: e0:63:1c:5f:0a:02:e3:94:7c:6d:13:e9:a9:72:bc:7a:58:7d: bd:c8:de:ca:0d:34:55:e3:6b:fa:47:b8:19:64:0c:8f:b6:c1: 07:eb:c4:b1:ff:09:35:e4:17:47:f1:34:f8:a9:62:50:81:1f: 8c:ce:c8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl6jUZtQqq2N+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz NTEzMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YzZiYTkzMzUtMzVhYy00YjhiLWIyNmItMjlkNzVlMDJlOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqjJt3d45qEIi4j7fW+AoDPwNGhbwVuPTyWI R76BeCL0hH3Im8b532Qt7OXbr1cCQ9EoWIlBzAeWdAUdd6SlqOn17zTNiSB4ES6T t5vJZCSukdU3tNNfa/kC4lcnRyLOrREEPDoyuNJ55NsndHCdqcWllLfTJBVGXEel NcoLD4tJy3gdvcxo53CMpXOrFyO8lKVOEZHznCzSOTfgNSywwr/6IlydJRorLzdd rapSFOL+WJZwED4JzBFI33xityf2VN1wR2pAjdMVVkCSVqGnrOHqRmQy8KJABJbS LQq3pu7CtPb217TnDvrH0CyoktOZvDOmv33Bnv8rjyOhnxk1eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHtKU3hJfKvbONy01U/GZjH4kOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZjI5ODNmNjAtZGY3NC0z NTkzLTgzZDYtOTY5OWFhNDQyNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3 MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMnGbYb3duk8tb7A3BiSIK5BepIXHcujKG3XxYe/KTnkB2X9qo4ReOa iGPnUVC/qsa1kYxwEbBRMNhHBhpFIyqMrbgd5zpn7N/xKkk+skO7c/KDFRPsQ5j1 XWVchpc2ZGflYuk6UnY/Hnb7hUmjDlfqWzXgGDh70umWv8jyQ+d/3CI//WMC0XRo V29d6DOfDzSCZsxQLpqDwfJ141gFDAjJqGihAYh093RC+xAKLc1++jIMPBSuUsLC +U/9lK3gJ163Jn+XS+BjHF8KAuOUfG0T6alyvHpYfb3I3soNNFXja/pHuBlkDI+2 wQfrxLH/CTXkF0fxNPipYlCBH4zOyBU= -----END CERTIFICATE-----Generated at Mon Sep 28 00:30:45 2026 by rpki-client