$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa File: a99aabb6-8e99-34c2-9db7-d6869db9145e.roa (raw, json) Hash identifier: kJO8348BZ1ibI2ePF6pyPTK7nnbmDNbowmQyXhyRUVE= Subject key identifier: BB:1E:54:24:BD:75:74:DE:97:E2:D2:50:C0:DC:0A:50:C7:E4:5D:F6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F411288250E86F2A22B2A7280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 199.1.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:88:25:0e:86:f2:a2:2b:2a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=21fa1c62-094a-44a5-8e32-d2a9b806593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:23:b6:8a:fa:0a:74:27:f8:20:ce:be:f9: 3a:ab:4b:b4:24:32:a7:de:ce:03:bb:05:0a:18:87: a9:e0:63:b1:ef:f3:5f:99:d0:86:4c:41:56:dd:69: c7:95:6e:01:87:ee:12:da:1f:7f:b3:44:e0:a3:c6: d1:0d:38:41:f5:c5:d6:89:58:21:dc:40:e9:9b:02: 36:6d:c3:bb:17:2b:32:08:8d:83:ca:6a:7a:df:a2: af:8d:de:2d:b4:cf:2e:5e:18:22:13:fd:8c:5f:ec: a5:af:c0:79:db:0a:f5:90:3f:18:ea:de:dd:38:74: 9b:f2:cf:f4:d7:65:c3:b4:97:d6:8c:31:71:90:af: ce:7f:a7:4f:02:45:b1:bb:5c:1a:83:68:6c:4e:9a: 4d:22:d9:24:1a:f7:e5:ed:7f:33:74:0f:c1:35:16: 7d:f4:63:3b:f4:69:d8:e9:d2:e0:f7:7c:79:cd:fe: d8:ed:53:c7:f0:0c:1f:4a:cf:ab:7b:7d:5c:13:5a: 15:40:e4:7f:32:fc:f9:05:18:5a:56:6f:cd:89:e4: 6b:f7:77:50:a6:dc:e9:fe:9d:74:39:df:74:00:00: 09:bc:71:05:e4:e6:79:6a:1f:75:1b:05:9f:e4:48: ed:b4:80:fc:2a:53:cb:a4:32:7d:eb:07:7a:1a:9d: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:54:24:BD:75:74:DE:97:E2:D2:50:C0:DC:0A:50:C7:E4:5D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 199.1.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8c:18:d9:3e:ac:79:34:3c:db:d5:94:18:bf:db:93:8f:6a: 0c:c5:53:c7:c2:41:8c:d8:37:61:f5:97:e3:c8:42:19:52:78: 5b:7a:39:d4:36:44:8b:50:a3:bb:71:26:1a:a2:e4:0c:54:e6: 7f:17:d3:a4:72:4a:87:2b:1e:8e:dc:5c:20:3b:02:13:55:d0: 97:c3:fd:31:7f:11:af:4d:a4:a5:54:69:2d:58:5b:dd:08:8a: 7b:cd:47:aa:53:8a:9b:a3:c9:fa:23:b6:d4:59:03:77:2d:d3: 1a:95:25:f7:6c:04:2c:91:08:84:f9:27:64:57:c1:46:39:f2: 4b:55:2c:b0:ef:f5:0c:42:e5:4c:2a:d2:3d:b0:80:77:8d:4c: 4f:3b:51:cc:15:25:dc:56:4c:68:7c:e1:e6:2a:43:9c:b0:4a: 68:aa:6f:6e:47:52:90:14:67:90:1e:27:67:6f:2e:c5:6b:f6: ca:83:f8:65:62:d3:82:e9:f3:5e:55:03:e1:51:81:03:37:5c: 37:7e:12:6d:91:89:86:24:62:c0:24:96:2b:61:bb:86:46:ff: 9e:de:2d:9c:f0:08:c3:ac:9f:cd:88:b3:a9:d5:00:8d:4a:c3: 62:35:ce:23:74:6f:27:83:47:80:a0:8f:d1:bc:db:38:d3:62: 7b:3d:ca:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoglDobyoisqcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjFmYTFjNjItMDk0YS00NGE1LThlMzItZDJhOWI4MDY1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl8jtor6CnQn+CDOvvk6q0u0JDKn3s4DuwUK GIep4GOx7/NfmdCGTEFW3WnHlW4Bh+4S2h9/s0Tgo8bRDThB9cXWiVgh3EDpmwI2 bcO7FysyCI2Dymp636Kvjd4ttM8uXhgiE/2MX+ylr8B52wr1kD8Y6t7dOHSb8s/0 12XDtJfWjDFxkK/Of6dPAkWxu1wag2hsTppNItkkGvfl7X8zdA/BNRZ99GM79GnY 6dLg93x5zf7Y7VPH8AwfSs+re31cE1oVQOR/Mvz5BRhaVm/NieRr93dQptzp/p10 Od90AAAJvHEF5OZ5ah91GwWf5EjttID8KlPLpDJ96wd6Gp0ZOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLseVCS9dXTel+LSUMDcClDH5F32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTk5YWFiYjYtOGU5OS0z NGMyLTlkYjctZDY4NjlkYjkxNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxwGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmMGNk+rHk0PNvVlBi/25OPagzFU8fCQYzYN2H1l+PIQhlSeFt6OdQ2 RItQo7txJhqi5AxU5n8X06RySocrHo7cXCA7AhNV0JfD/TF/Ea9NpKVUaS1YW90I invNR6pTipujyfojttRZA3ct0xqVJfdsBCyRCIT5J2RXwUY58ktVLLDv9QxC5Uwq 0j2wgHeNTE87UcwVJdxWTGh84eYqQ5ywSmiqb25HUpAUZ5AeJ2dvLsVr9sqD+GVi 04Lp815VA+FRgQM3XDd+Em2RiYYkYsAklithu4ZG/57eLZzwCMOsn82Is6nVAI1K w2I1ziN0byeDR4Cgj9G82zjTYns9yqY= -----END CERTIFICATE-----Generated at Thu Sep 24 10:57:42 2026 by rpki-client