$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/b7990b25-9556-3a81-9453-eaf7466eb0e3.roa File: b7990b25-9556-3a81-9453-eaf7466eb0e3.roa (raw, json) Hash identifier: q/Q5GSLnaB4VOE0O1KDgMoX2fMBJD6AUfuGFfW67aZg= Subject key identifier: D2:97:2C:7F:D5:4B:BE:5B:D3:B1:A7:3D:4E:01:87:83:41:6F:BB:FE Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584F9638637104B279B0CA46BD80 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/b7990b25-9556-3a81-9453-eaf7466eb0e3.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 5650 IP address blocks: 199.30.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:63:71:04:b2:79:b0:ca:46:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=d55684cf-f4b5-44dc-8126-e951488a8e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:6c:0d:3c:bd:3e:b7:4c:82:60:8f:40:07: 42:96:43:fc:e9:81:ca:c5:30:94:53:77:dc:62:7e: 2e:e9:73:87:46:81:9a:0b:f3:e0:d1:81:7f:3c:f7: 34:0c:3b:1c:54:33:64:29:85:25:ad:d8:08:66:2e: ce:32:6e:8d:6c:92:3a:6f:42:35:d5:84:3a:46:8a: 0d:0d:28:32:4a:07:bb:eb:bc:63:cc:b4:4c:7c:35: 6b:55:f3:c5:be:75:70:d9:03:d4:45:9e:ab:a4:95: 98:c8:2d:b2:22:87:11:cb:f2:f3:b7:0c:b7:88:42: 4f:7b:7a:4e:b8:14:c5:a8:de:67:8d:97:10:81:07: c1:f4:ba:67:bd:76:9d:08:9c:62:df:0b:83:db:54: 9c:a2:bb:9a:6e:46:ce:78:fa:6a:6a:9b:25:c4:5d: 69:57:34:48:eb:20:28:65:4e:36:8c:24:40:45:df: e0:fc:90:01:ad:f5:91:32:b2:6b:e8:52:9e:30:5e: ea:ca:8f:5b:24:c3:26:9a:b5:98:9b:80:ef:41:06: 45:aa:a9:aa:34:70:a3:f9:87:12:23:01:d5:10:2d: 84:f7:c1:b2:6f:e0:ec:99:ff:ac:83:72:79:a9:d1: 84:5b:22:16:cd:43:55:63:dd:67:2a:05:c5:49:85: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:97:2C:7F:D5:4B:BE:5B:D3:B1:A7:3D:4E:01:87:83:41:6F:BB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/b7990b25-9556-3a81-9453-eaf7466eb0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0c:3e:7d:5b:eb:37:77:4c:4a:e2:df:b4:20:00:13:e3:7c: 00:ef:e9:c9:a2:2f:a6:5f:c4:2e:60:e7:06:b3:49:f2:e2:bf: fe:f4:e8:63:f6:b8:6f:c4:fe:f4:c5:86:03:5b:85:e3:3a:e7: 79:3e:56:eb:eb:32:a1:76:ad:59:5f:57:aa:c3:9d:8e:9f:c0: 9e:a4:b5:03:d6:0d:05:3c:29:b0:57:15:cb:8f:a0:9a:39:55: 21:8f:17:91:bb:2b:e8:90:df:45:8d:0c:46:38:3c:25:9b:e7: 42:70:8b:50:96:08:86:44:ac:71:90:22:06:dd:63:e5:3b:08: 74:25:62:f3:02:45:33:98:c0:77:45:ce:73:1b:89:b9:ab:40: 67:ce:5f:38:63:24:0f:cf:2d:51:f2:45:1c:46:e1:e5:18:2d: 18:38:8d:3a:6b:03:4e:b8:9d:92:a6:45:86:39:5a:9f:a7:5a: 8f:12:cd:d9:39:ea:6d:c3:23:7f:64:98:80:15:d7:71:ec:90: 49:f9:1c:a7:f3:15:33:6d:f2:f6:84:45:77:e7:a2:c9:6f:95: be:36:7c:6b:70:19:ec:df:7a:19:c8:f7:f5:d8:6e:36:ad:53: e0:f6:02:76:30:78:ad:d9:b3:79:d8:99:53:c6:7c:0d:06:95: c6:8c:fe:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGNxBLJ5sMpGvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk ZDU1Njg0Y2YtZjRiNS00NGRjLTgxMjYtZTk1MTQ4OGE4ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvNsDTy9PrdMgmCPQAdClkP86YHKxTCUU3fc Yn4u6XOHRoGaC/Pg0YF/PPc0DDscVDNkKYUlrdgIZi7OMm6NbJI6b0I11YQ6RooN DSgySge767xjzLRMfDVrVfPFvnVw2QPURZ6rpJWYyC2yIocRy/Lztwy3iEJPe3pO uBTFqN5njZcQgQfB9LpnvXadCJxi3wuD21ScoruabkbOePpqapslxF1pVzRI6yAo ZU42jCRARd/g/JABrfWRMrJr6FKeMF7qyo9bJMMmmrWYm4DvQQZFqqmqNHCj+YcS IwHVEC2E98Gyb+Dsmf+sg3J5qdGEWyIWzUNVY91nKgXFSYVjsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKXLH/VS75b07GnPU4Bh4NBb7v+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvYjc5OTBiMjUtOTU1Ni0z YTgxLTk0NTMtZWFmNzQ2NmViMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEMPn1b6zd3TEri37QgABPjfADv6cmiL6ZfxC5g5wazSfLiv/706GP2 uG/E/vTFhgNbheM653k+VuvrMqF2rVlfV6rDnY6fwJ6ktQPWDQU8KbBXFcuPoJo5 VSGPF5G7K+iQ30WNDEY4PCWb50Jwi1CWCIZErHGQIgbdY+U7CHQlYvMCRTOYwHdF znMbibmrQGfOXzhjJA/PLVHyRRxG4eUYLRg4jTprA064nZKmRYY5Wp+nWo8Szdk5 6m3DI39kmIAV13HskEn5HKfzFTNt8vaERXfnoslvlb42fGtwGezfehnI9/XYbjat U+D2AnYweK3Zs3nYmVPGfA0GlcaM/hw= -----END CERTIFICATE-----Generated at Sun Nov 15 12:15:40 2026 by rpki-client