$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa File: 437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa (raw, json) Hash identifier: 8CbODXoUz3m07U1t7bMwLHDV+3OE6M+ZTfmBz4J3FkU= Subject key identifier: E9:A8:30:64:FC:E9:E1:90:73:92:05:1E:95:92:21:A2:04:82:EE:BA Certificate issuer: /CN=ca91b8b1-a975-4a43-947f-794da888c198 Certificate serial: 010D0C9F4328584F4542826C5D425337A3535580 Authority key identifier: 12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396982 IP address blocks: 204.138.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:82:6c:5d:42:53:37:a3:53:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca91b8b1-a975-4a43-947f-794da888c198 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=322677dc-59d6-41e7-8dcd-357af77c9b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:c8:54:72:c5:c6:f3:6f:b7:f1:95:41:84: a4:56:5d:fd:89:87:2a:20:aa:19:67:ca:b3:f4:66: 4e:89:eb:76:d9:f3:c8:fc:9a:f4:db:7e:b2:0b:87: ab:6d:9a:f2:c3:02:7b:b5:9f:3a:76:1f:d4:ec:20: 9d:1a:1f:73:70:37:be:ea:5a:e1:cd:31:ce:04:ba: 55:83:c0:d0:9d:a6:eb:b5:cd:db:fb:62:8b:42:d3: a5:42:95:28:b8:64:85:bd:ff:b2:f4:10:94:d4:73: 48:34:26:c7:29:93:16:fe:a9:ad:b1:af:8f:1d:79: 18:c2:c3:ec:11:46:da:d8:fc:c6:8f:43:df:af:88: 72:90:9e:86:5e:ed:c9:05:b9:50:f1:7d:d8:8a:24: 02:5a:88:00:7b:c9:17:8d:14:66:e4:27:b1:96:0f: 51:bd:f1:61:ac:60:30:60:ee:50:35:e7:70:91:6f: a9:f9:66:7a:9b:18:b2:1d:03:04:aa:5d:9b:1f:8e: 4e:23:71:fa:65:4d:f5:cf:2b:a7:bb:be:41:31:7e: 73:40:e4:be:9b:30:47:b7:f5:aa:c4:33:35:60:87: 81:b7:57:93:a4:34:6f:45:71:ad:4d:46:dd:66:e2: b3:eb:06:a5:d5:cc:0e:68:09:17:54:22:fb:6e:7a: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A8:30:64:FC:E9:E1:90:73:92:05:1E:95:92:21:A2:04:82:EE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl X509v3 Authority Key Identifier: keyid:12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer sbgp-ipAddrBlock: critical IPv4: 204.138.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:42:fd:e5:23:ef:81:1b:4c:be:19:a8:85:c6:9e:57:bc:fc: 91:6f:97:11:f3:f8:ef:97:fd:6c:a8:48:2f:18:b1:be:4b:a2: eb:cf:f1:f4:86:e6:3b:78:45:d1:8b:4e:72:a2:1f:2a:8c:ac: f6:18:90:d2:41:7c:6e:f4:a1:35:2f:ca:c2:5f:eb:d7:9f:cb: c4:3c:6b:53:34:9d:d8:5f:df:95:03:4e:d2:f5:e6:1a:5b:f4: a3:a4:c4:15:50:e4:2a:2f:f4:d9:16:5b:d5:1b:e6:79:15:fd: b8:20:64:92:49:48:21:79:25:76:5f:a6:f0:32:df:fa:83:b5: 3d:7e:50:e8:60:6e:36:b3:e3:56:99:ff:64:df:c7:b7:0f:b1: d6:b5:72:db:d2:99:ba:29:cb:7c:bd:3d:f7:d6:b4:a9:1a:fa: 38:4d:b6:d7:0b:80:c3:45:ff:d6:b4:44:0f:31:0e:da:69:31: a6:a3:59:5c:e2:a4:49:3d:8d:33:00:60:99:71:78:11:ea:20: ae:1d:8a:c8:05:65:d1:3c:cd:21:d7:73:fc:77:bf:f2:1e:1b: f7:b2:17:60:8d:43:d0:05:fe:1c:58:f8:56:b0:ba:02:c2:7a: 69:b9:25:60:7b:73:f5:c9:42:5c:57:d4:7f:0a:4c:f1:1e:c4: 67:6d:ae:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoJsXUJTN6NTVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E5MWI4YjEtYTk3NS00YTQzLTk0N2YtNzk0ZGE4ODhj MTk4MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk MzIyNjc3ZGMtNTlkNi00MWU3LThkY2QtMzU3YWY3N2M5YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ3IVHLFxvNvt/GVQYSkVl39iYcqIKoZZ8qz 9GZOiet22fPI/Jr0236yC4erbZrywwJ7tZ86dh/U7CCdGh9zcDe+6lrhzTHOBLpV g8DQnabrtc3b+2KLQtOlQpUouGSFvf+y9BCU1HNINCbHKZMW/qmtsa+PHXkYwsPs EUba2PzGj0Pfr4hykJ6GXu3JBblQ8X3YiiQCWogAe8kXjRRm5Cexlg9RvfFhrGAw YO5QNedwkW+p+WZ6mxiyHQMEql2bH45OI3H6ZU31zyunu75BMX5zQOS+mzBHt/Wq xDM1YIeBt1eTpDRvRXGtTUbdZuKz6wal1cwOaAkXVCL7bnqWqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmoMGT86eGQc5IFHpWSIaIEgu66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkx YjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRkYTg4OGMxOTgvNDM3ZDBlNmMtYTgxNS0z MTRkLThjYjAtZDRiNGVlMjQ2ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2E5MWI4YjEtYTk3NS00YTQzLTk0 N2YtNzk0ZGE4ODhjMTk4L2NhOTFiOGIxLWE5NzUtNGE0My05NDdmLTc5NGRhODg4 YzE5OC5jcmwwHwYDVR0jBBgwFoAUEpCo+yXzGPB41MR8iU/D1J6lieMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkxYjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRk YTg4OGMxOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNC/eUj74EbTL4ZqIXGnle8/JFvlxHz+O+X/WyoSC8Ysb5LouvP8fSG 5jt4RdGLTnKiHyqMrPYYkNJBfG70oTUvysJf69efy8Q8a1M0ndhf35UDTtL15hpb 9KOkxBVQ5Cov9NkWW9Ub5nkV/bggZJJJSCF5JXZfpvAy3/qDtT1+UOhgbjaz41aZ /2Tfx7cPsda1ctvSmbopy3y9PffWtKka+jhNttcLgMNF/9a0RA8xDtppMaajWVzi pEk9jTMAYJlxeBHqIK4disgFZdE8zSHXc/x3v/IeG/eyF2CNQ9AF/hxY+FawugLC emm5JWB7c/XJQlxX1H8KTPEexGdtrqY= -----END CERTIFICATE-----Generated at Sun Oct 4 07:11:59 2026 by rpki-client