$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b85657ae-c0af-3b3a-98c3-5564225bce51.roa File: b85657ae-c0af-3b3a-98c3-5564225bce51.roa (raw, json) Hash identifier: BN9zfhyiU9oGJhjsE4z/5XVzoaM0R6WIZ41FmfanSwQ= Subject key identifier: 92:0C:F7:95:B8:1F:55:58:D8:D6:F3:22:DB:5A:B5:2B:E4:6F:BD:89 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584F13023910880B9E749D59EF40 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b85657ae-c0af-3b3a-98c3-5564225bce51.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 15296 IP address blocks: 199.216.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:39:10:88:0b:9e:74:9d:59:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=29e4a0d4-f5b4-4482-813f-2cdddce3ba0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:39:49:89:81:d3:81:76:6a:54:ad:be:60: 29:5e:1a:40:f3:89:04:f5:d9:51:0e:3b:85:55:72: e9:58:28:68:3e:70:a5:6d:da:94:9a:ab:98:29:b5: c1:75:16:a2:2c:a1:e0:5a:31:ec:bf:71:de:57:28: 57:a7:f4:48:ed:2a:ba:c7:58:41:ef:e5:48:1e:c0: 29:34:8f:28:db:8d:9d:1d:64:40:47:64:f8:e3:0a: 34:b1:e0:87:e1:5d:0a:40:89:10:06:ff:c0:34:c3: 44:df:04:3e:26:a7:eb:0e:82:c9:c8:1b:02:34:d1: dd:38:a1:40:51:b3:08:d7:4b:db:47:72:96:86:f3: ee:8b:98:d1:ce:00:4f:d5:77:21:10:93:b7:9d:ae: 34:2b:d4:d7:d7:5e:4a:fc:a5:b6:3c:83:82:70:ca: 86:89:2a:d9:ad:f8:11:02:44:11:10:22:7c:09:2e: 0d:76:8f:92:d0:44:a7:90:dd:5b:57:60:b0:d1:0e: 88:ac:42:65:dd:79:b0:8b:ef:d1:9e:9c:74:19:fb: f0:ac:56:85:e0:15:d8:91:ff:e0:08:84:6d:17:3c: c7:b1:72:c2:24:68:4e:30:f5:d4:1b:a3:70:ad:2d: f3:dd:de:fd:9f:08:fd:06:72:8a:e9:0c:31:23:08: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0C:F7:95:B8:1F:55:58:D8:D6:F3:22:DB:5A:B5:2B:E4:6F:BD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b85657ae-c0af-3b3a-98c3-5564225bce51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:77:5d:91:c7:b1:4c:6b:e0:24:29:b6:13:9c:19:63:33:99: 2f:c5:f7:22:c2:ff:8d:45:21:f5:b9:85:ce:79:a1:4c:ab:47: 57:44:e3:b1:3b:89:8a:40:6d:c1:95:fa:cb:1b:19:cd:3c:6f: a8:53:19:34:5f:5f:1d:9b:d6:7c:76:68:6c:c0:21:a2:0a:aa: 31:a4:7a:6f:a6:86:23:9d:74:ba:c2:ea:23:2b:fa:8e:78:21: 5d:29:0d:a0:46:1e:bc:a4:df:44:5e:31:0b:e9:37:85:30:3f: 4e:a5:f6:df:5c:f7:3d:94:73:7f:6c:0c:4f:b2:48:75:0c:e2: f3:8e:a7:b6:77:b0:83:4f:c7:31:b4:03:d2:25:c0:5b:57:f7: 71:f0:95:90:68:87:5e:6c:50:a9:cc:8a:26:f6:43:1d:35:42: ca:e9:1e:f6:eb:d7:8f:f4:c7:95:b8:7c:76:14:a2:31:6a:c8: e3:2b:07:06:07:0f:1d:f8:fa:b4:8c:fd:1b:6a:33:3d:90:54: 63:57:16:bb:30:a9:4f:32:dd:91:4f:ac:fc:ab:2c:68:ad:33: e6:26:50:dc:fc:35:b1:bf:de:7a:2d:54:09:2a:9c:19:c1:94: 57:fc:f7:b8:02:17:03:2e:f0:40:b8:be:e5:d1:8a:a9:30:7a: 0d:58:f3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjkQiAuedJ1Z70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MjllNGEwZDQtZjViNC00NDgyLTgxM2YtMmNkZGRjZTNiYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXI5SYmB04F2alStvmApXhpA84kE9dlRDjuF VXLpWChoPnClbdqUmquYKbXBdRaiLKHgWjHsv3HeVyhXp/RI7Sq6x1hB7+VIHsAp NI8o242dHWRAR2T44wo0seCH4V0KQIkQBv/ANMNE3wQ+JqfrDoLJyBsCNNHdOKFA UbMI10vbR3KWhvPui5jRzgBP1XchEJO3na40K9TX115K/KW2PIOCcMqGiSrZrfgR AkQRECJ8CS4Ndo+S0ESnkN1bV2Cw0Q6IrEJl3Xmwi+/Rnpx0GfvwrFaF4BXYkf/g CIRtFzzHsXLCJGhOMPXUG6NwrS3z3d79nwj9BnKK6QwxIwgnhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIM95W4H1VY2NbzIttatSvkb72JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvYjg1NjU3YWUtYzBhZi0z YjNhLTk4YzMtNTU2NDIyNWJjZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx3XZHHsUxr4CQpthOcGWMzmS/F9yLC/41FIfW5hc55oUyrR1dE47E7 iYpAbcGV+ssbGc08b6hTGTRfXx2b1nx2aGzAIaIKqjGkem+mhiOddLrC6iMr+o54 IV0pDaBGHryk30ReMQvpN4UwP06l9t9c9z2Uc39sDE+ySHUM4vOOp7Z3sINPxzG0 A9IlwFtX93HwlZBoh15sUKnMiib2Qx01QsrpHvbr14/0x5W4fHYUojFqyOMrBwYH Dx34+rSM/RtqMz2QVGNXFrswqU8y3ZFPrPyrLGitM+YmUNz8NbG/3notVAkqnBnB lFf897gCFwMu8EC4vuXRiqkweg1Y83Y= -----END CERTIFICATE-----Generated at Fri Sep 25 15:13:38 2026 by rpki-client