$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa File: e331092c-40d6-3d9f-b461-e6d085e36eaf.roa (raw, json) Hash identifier: 9I/Zx0FUwnT1K4m1pUwq3nL0Utt/2nhkpY0d1v+dILw= Subject key identifier: 08:3E:0E:E2:B0:90:C9:41:7D:29:B8:CC:41:6B:45:0A:CD:21:C4:7A Certificate issuer: /CN=becbd46f-127a-435b-9440-3a213828408a Certificate serial: 010D0C9F4328584F4972E520DEC7295AEC87B900 Authority key identifier: 64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30166 IP address blocks: 199.68.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e5:20:de:c7:29:5a:ec:87:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=becbd46f-127a-435b-9440-3a213828408a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba531fc4-49e9-4e9a-8960-08ff3f0bcc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:b1:fc:39:b8:f4:f7:d7:75:ff:99:1b:ad: 1e:11:27:8e:bd:d9:96:d5:dc:81:25:bc:a6:7f:43: 93:e9:52:95:43:7e:ed:89:4c:07:27:a6:ee:91:66: f8:cd:e6:8d:86:9a:0d:58:74:a4:6c:19:e7:30:af: bb:31:92:04:d6:38:97:de:32:56:ab:e1:d1:04:05: 3d:b4:bd:dc:34:27:dc:c3:b7:09:3f:cf:c7:8c:29: 45:86:f6:47:13:ea:2f:c0:b6:6d:3c:e2:ef:9b:31: a9:f1:3e:16:d6:ac:25:5d:96:39:78:83:14:24:8d: 53:bd:fe:63:a3:fb:c3:bf:ed:c2:c3:ee:1b:1a:68: 64:6d:6d:bc:cd:80:92:65:9d:93:f8:79:e1:b5:53: 97:74:5b:a4:b7:e2:ca:38:bb:e3:ca:d5:73:68:8a: c1:59:d8:0b:8e:62:5a:0e:62:f7:2c:34:c6:c9:92: d5:6e:15:51:2d:a1:38:28:72:7e:6b:dc:32:94:fa: 74:dd:06:17:ef:1a:f7:78:69:8a:d1:eb:77:b7:a6: f1:b1:f4:73:77:a1:a6:f4:85:8c:94:f5:bd:06:18: ca:aa:f4:bf:23:15:17:15:d9:5e:81:59:dc:15:a2: d9:7d:ad:dc:6e:a2:97:8b:7c:d4:dd:fe:a6:e0:80: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3E:0E:E2:B0:90:C9:41:7D:29:B8:CC:41:6B:45:0A:CD:21:C4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.crl X509v3 Authority Key Identifier: keyid:64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer sbgp-ipAddrBlock: critical IPv4: 199.68.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0d:18:ac:d1:50:35:b6:57:c0:0b:d4:15:3b:73:01:3e:da: 54:7d:5d:e0:83:f3:c3:8a:c8:94:f4:fa:f3:0d:15:bb:fc:e0: d4:76:6a:8c:56:67:47:bc:67:b9:e0:44:ff:93:b9:9c:76:91: 62:5f:09:c3:63:11:c4:41:7f:d0:b8:ea:4b:dc:c6:0e:49:9e: 74:34:23:fa:27:6e:7e:26:1c:9f:6f:5d:1b:4c:67:d8:40:6e: 7f:ab:a4:3b:e7:d2:0a:05:5a:e9:55:2d:12:6a:53:61:3b:63: 92:21:60:06:57:ab:f6:99:41:97:31:d0:82:40:98:c9:96:3f: fb:05:9b:35:d1:8e:62:52:9e:70:41:68:f2:8f:8e:b6:82:10: 27:72:d2:ec:a0:73:16:a0:0d:49:57:3b:0d:bc:4c:0a:d9:bd: e9:ab:d9:5b:60:bb:d4:3e:79:e8:5d:83:e1:18:b3:0e:f4:52: 9d:9a:f8:0c:f4:8e:f4:0d:26:c5:0a:4f:c5:22:a0:10:28:a4: 53:eb:ee:23:ff:5d:c2:6f:69:51:b2:5b:df:a5:4f:ba:b2:e1: 88:ce:ae:75:06:c4:0a:dd:64:7a:4d:34:e8:df:f5:2c:fd:0f: 92:1f:ea:4d:41:15:b2:50:90:d8:45:ce:a1:f6:79:da:74:fe: 86:85:33:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuUg3scpWuyHuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVjYmQ0NmYtMTI3YS00MzViLTk0NDAtM2EyMTM4Mjg0 MDhhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE1MzFmYzQtNDllOS00ZTlhLTg5NjAtMDhmZjNmMGJjYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk6x/Dm49PfXdf+ZG60eESeOvdmW1dyBJbym f0OT6VKVQ37tiUwHJ6bukWb4zeaNhpoNWHSkbBnnMK+7MZIE1jiX3jJWq+HRBAU9 tL3cNCfcw7cJP8/HjClFhvZHE+ovwLZtPOLvmzGp8T4W1qwlXZY5eIMUJI1Tvf5j o/vDv+3Cw+4bGmhkbW28zYCSZZ2T+HnhtVOXdFukt+LKOLvjytVzaIrBWdgLjmJa DmL3LDTGyZLVbhVRLaE4KHJ+a9wylPp03QYX7xr3eGmK0et3t6bxsfRzd6Gm9IWM lPW9BhjKqvS/IxUXFdlegVncFaLZfa3cbqKXi3zU3f6m4IDtGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg+DuKwkMlBfSm4zEFrRQrNIcR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZWNi ZDQ2Zi0xMjdhLTQzNWItOTQ0MC0zYTIxMzgyODQwOGEvZTMzMTA5MmMtNDBkNi0z ZDlmLWI0NjEtZTZkMDg1ZTM2ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmVjYmQ0NmYtMTI3YS00MzViLTk0 NDAtM2EyMTM4Mjg0MDhhL2JlY2JkNDZmLTEyN2EtNDM1Yi05NDQwLTNhMjEzODI4 NDA4YS5jcmwwHwYDVR0jBBgwFoAUZKwaGuWrxfvAtmLklV69dQ2D8JAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZWNiZDQ2Zi0xMjdhLTQzNWItOTQ0MC0zYTIx MzgyODQwOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0QcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4NGKzRUDW2V8AL1BU7cwE+2lR9XeCD88OKyJT0+vMNFbv84NR2aoxW Z0e8Z7ngRP+TuZx2kWJfCcNjEcRBf9C46kvcxg5JnnQ0I/onbn4mHJ9vXRtMZ9hA bn+rpDvn0goFWulVLRJqU2E7Y5IhYAZXq/aZQZcx0IJAmMmWP/sFmzXRjmJSnnBB aPKPjraCECdy0uygcxagDUlXOw28TArZvemr2Vtgu9Q+eehdg+EYsw70Up2a+Az0 jvQNJsUKT8UioBAopFPr7iP/XcJvaVGyW9+lT7qy4YjOrnUGxArdZHpNNOjf9Sz9 D5If6k1BFbJQkNhFzqH2edp0/oaFM8w= -----END CERTIFICATE-----Generated at Fri Sep 25 21:47:28 2026 by rpki-client