$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c8daa929-a74d-3c47-b218-4c5184b03df6.roa File: c8daa929-a74d-3c47-b218-4c5184b03df6.roa (raw, json) Hash identifier: w5+CmL5FUS0F1Qm3NDnWaesFDrjMiDYI5OsbHzVotlM= Subject key identifier: AA:AE:A6:00:E8:3F:2E:C1:04:41:5D:D3:18:EB:AE:2A:F5:30:3C:47 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584F498821D408E5695479B33D00 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c8daa929-a74d-3c47-b218-4c5184b03df6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14291 IP address blocks: 199.45.244.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:21:d4:08:e5:69:54:79:b3:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf88d0db-0f6b-4d9f-b0c9-d59ea05c3d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:82:3a:5e:87:f9:b4:c5:cf:92:1a:15:f7: b2:a3:ef:30:1b:23:aa:79:8f:c4:52:68:0f:8f:f5: c0:39:e0:18:a3:2a:79:c9:09:ff:f2:d6:7a:9f:4e: dc:1b:cc:21:a8:14:91:a6:7d:00:36:df:5a:f1:82: 6a:3b:f5:a6:92:16:d4:0e:d0:f6:e1:b8:54:40:33: 63:a5:fb:29:7a:7e:8b:d2:f5:15:04:d8:f8:4d:f5: 99:f9:d7:bd:5e:35:78:4c:55:39:28:f6:0a:9b:f0: 30:b6:48:2a:a7:99:e3:f4:23:2e:92:31:4b:c7:ab: 86:29:83:11:25:48:74:3b:e6:17:de:4f:da:ef:5b: 93:a3:6e:05:04:2d:94:b2:1e:f4:2f:82:ac:ee:a5: e6:cd:f5:7a:c6:77:7c:c9:5e:35:16:d4:de:64:d8: ed:c9:7f:3f:86:ab:59:75:3b:ea:ec:dd:d1:d0:1a: cc:44:c0:0c:1d:d1:30:ee:f6:7b:df:f9:61:6c:d7: 14:4f:db:b9:d1:41:44:bb:20:f1:e5:9f:4d:4a:24: 31:23:d0:ec:19:71:c2:3a:68:52:8c:fe:bc:e5:9c: a0:98:e4:66:51:a9:ef:eb:15:09:16:5c:fd:8e:44: 31:1d:59:fd:d5:44:10:30:39:87:26:9c:03:a2:53: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AE:A6:00:E8:3F:2E:C1:04:41:5D:D3:18:EB:AE:2A:F5:30:3C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c8daa929-a74d-3c47-b218-4c5184b03df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 199.45.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:73:24:91:f7:be:fb:54:5d:47:c8:5d:fb:a8:2f:1b:5b:a0: fc:f6:99:99:92:8e:e7:ab:9e:d9:cd:22:3a:2a:0a:9a:d6:f4: 47:2e:ed:a5:2f:ab:ff:56:fc:4d:4b:01:56:d5:b1:2b:6b:4a: a2:cf:2c:38:b2:32:8d:9e:5c:bf:3d:5c:52:13:80:dd:17:1f: 3a:37:61:e4:d2:b6:95:5e:84:2f:18:99:5f:f3:9d:f0:7a:5c: 80:b8:da:88:cc:7b:0d:24:41:e3:64:57:cc:b4:fe:57:51:d0: 1d:5a:59:74:c0:fb:04:ec:5f:16:da:05:68:c5:63:f7:e5:d5: 93:34:88:ee:c0:ba:33:1e:37:71:2d:dc:5c:64:41:3e:62:28: 4c:b8:a2:f3:95:46:09:79:f0:a8:5f:0c:f4:fe:0b:0e:24:46: bf:0a:3a:77:2c:56:cb:1a:7f:b8:c8:fd:f3:c2:84:2d:12:fd: c5:2c:c1:86:0f:4f:d7:b1:3f:86:df:f0:76:ce:0e:f6:77:a5: 97:8a:12:df:4c:25:18:6e:8b:fe:54:e2:dc:52:43:d8:37:90: ed:e4:88:f8:cc:85:c0:94:e7:3b:1e:25:28:3a:b0:a0:e0:45: 34:ec:e9:49:e2:4d:bf:ed:60:34:d9:c6:21:57:14:87:4a:1e: ad:31:98:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCHUCOVpVHmzPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y4OGQwZGItMGY2Yi00ZDlmLWIwYzktZDU5ZWEwNWMzZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C+COl6H+bTFz5IaFfeyo+8wGyOqeY/EUmgP j/XAOeAYoyp5yQn/8tZ6n07cG8whqBSRpn0ANt9a8YJqO/WmkhbUDtD24bhUQDNj pfspen6L0vUVBNj4TfWZ+de9XjV4TFU5KPYKm/Awtkgqp5nj9CMukjFLx6uGKYMR JUh0O+YX3k/a71uTo24FBC2Ush70L4Ks7qXmzfV6xnd8yV41FtTeZNjtyX8/hqtZ dTvq7N3R0BrMRMAMHdEw7vZ73/lhbNcUT9u50UFEuyDx5Z9NSiQxI9DsGXHCOmhS jP685ZygmORmUanv6xUJFlz9jkQxHVn91UQQMDmHJpwDolM2qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqupgDoPy7BBEFd0xjrrir1MDxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvYzhkYWE5MjktYTc0ZC0z YzQ3LWIyMTgtNGM1MTg0YjAzZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRzJJH3vvtUXUfIXfuoLxtboPz2mZmSjuerntnNIjoqCprW9Ecu7aUv q/9W/E1LAVbVsStrSqLPLDiyMo2eXL89XFITgN0XHzo3YeTStpVehC8YmV/znfB6 XIC42ojMew0kQeNkV8y0/ldR0B1aWXTA+wTsXxbaBWjFY/fl1ZM0iO7AujMeN3Et 3FxkQT5iKEy4ovOVRgl58KhfDPT+Cw4kRr8KOncsVssaf7jI/fPChC0S/cUswYYP T9exP4bf8HbODvZ3pZeKEt9MJRhui/5U4txSQ9g3kO3kiPjMhcCU5zseJSg6sKDg RTTs6UniTb/tYDTZxiFXFIdKHq0xmFI= -----END CERTIFICATE-----Generated at Sat Sep 26 16:25:07 2026 by rpki-client