$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa File: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json) Hash identifier: AorMV6Cc176Jvm3iIcG9qIu4AebRDQkmmou5+GhpEtk= Subject key identifier: E1:C9:5D:F0:B1:E2:BF:8F:95:6D:F2:82:7C:8F:15:EF:59:4F:3B:9E Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584F49764ABA7411C63732A326C0 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32931 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:4a:ba:74:11:c6:37:32:a3:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a726498-62a9-474c-a8af-32f02a8a7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:e1:6a:a8:8a:51:19:4e:ab:cd:64:4e:8d: 74:f4:1d:bb:89:6c:e8:e3:22:05:70:89:ac:f6:82: 65:ba:ae:25:1a:b0:e0:ba:9e:86:33:6b:42:e6:9c: fa:73:dc:b2:7e:f2:47:78:b8:37:80:af:f1:4e:cb: 52:53:24:06:ce:c5:e9:6b:64:cc:b4:3c:bd:14:88: de:21:f5:93:e4:9b:2b:cb:5a:67:57:ba:6a:04:aa: 08:4a:b9:41:ea:b3:6b:b6:c0:26:f8:3c:0e:1b:84: a6:c6:bb:70:23:27:60:a9:71:57:7a:70:e9:79:90: 95:78:5b:89:30:a8:96:32:77:45:cd:69:78:1c:0a: 09:c5:52:02:7c:73:4e:5a:ab:b4:9a:3d:c4:d1:7a: bf:13:2c:1e:c3:b0:03:25:e7:92:48:e7:a3:8b:46: 50:ab:94:dc:67:8d:1d:42:e6:ac:2b:35:0a:01:be: 8f:a1:33:bf:c7:85:8a:e9:8c:76:b4:c3:3f:b1:98: 9d:7f:a6:ff:8d:c2:1b:41:4f:1a:09:ac:24:bb:61: 78:ce:f0:7a:b2:9d:bf:d8:f7:86:5c:dc:35:4e:56: d3:6b:bc:2e:24:f2:fe:ec:80:4c:cf:4f:d4:98:67: ab:92:36:dc:25:ae:f2:18:31:b9:07:75:be:ea:f0: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:5D:F0:B1:E2:BF:8F:95:6D:F2:82:7C:8F:15:EF:59:4F:3B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d5:63:4a:52:ef:b3:07:1e:f8:42:39:f4:af:5e:e1:74:e4: 9e:36:9d:df:6c:da:f4:f3:fc:ed:43:99:15:52:25:09:26:2d: e9:65:c1:46:c8:1f:d0:0b:fc:bb:7c:f8:3d:52:04:88:a5:84: 1d:7e:de:0c:cd:79:3c:69:00:b5:28:03:c2:bf:ed:f8:d1:dd: e6:90:81:7b:c4:72:98:3d:7a:42:47:5c:c1:b8:8d:61:8f:f9: bf:71:ea:14:6e:8d:9e:08:fe:36:b5:59:8f:ac:00:f1:3b:3b: 1b:d8:ed:6c:86:21:4a:7d:36:de:fb:6e:4a:15:c9:bb:df:3f: 5b:88:0a:d0:7d:a9:fd:e5:bd:1a:67:f5:a0:5e:fb:64:11:3c: 47:cd:0d:38:41:9e:9e:c3:71:e0:3a:37:58:40:9a:d8:04:33: 7d:1e:e9:9c:ce:9f:e8:78:5f:d6:d6:6c:35:dc:a1:6a:ff:f1: 75:36:7b:7d:08:ea:39:95:87:2e:d8:70:e3:9d:86:6a:e5:6b: 48:f8:95:00:27:5a:26:8e:cf:51:8f:f0:1b:c7:4e:ad:ae:a7: 11:c8:d1:43:4f:96:17:1b:93:cc:42:6e:c0:f5:a0:c5:0e:70: fc:d0:6b:d2:7c:a0:25:72:41:38:23:ed:a1:30:48:a1:5e:0f: 69:29:fb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdkq6dBHGNzKjJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGE3MjY0OTgtNjJhOS00NzRjLWE4YWYtMzJmMDJhOGE3ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGvhaqiKURlOq81kTo109B27iWzo4yIFcIms 9oJluq4lGrDgup6GM2tC5pz6c9yyfvJHeLg3gK/xTstSUyQGzsXpa2TMtDy9FIje IfWT5Jsry1pnV7pqBKoISrlB6rNrtsAm+DwOG4SmxrtwIydgqXFXenDpeZCVeFuJ MKiWMndFzWl4HAoJxVICfHNOWqu0mj3E0Xq/Eywew7ADJeeSSOeji0ZQq5TcZ40d QuasKzUKAb6PoTO/x4WK6Yx2tMM/sZidf6b/jcIbQU8aCawku2F4zvB6sp2/2PeG XNw1TlbTa7wuJPL+7IBMz0/UmGerkjbcJa7yGDG5B3W+6vB+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHJXfCx4r+PlW3ygnyPFe9ZTzueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYjZhNmE5NjEtZjRlMi0z NTE1LWEzZTMtNDRhOWI4NDMzNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXVY0pS77MHHvhCOfSvXuF05J42nd9s2vTz/O1DmRVSJQkmLellwUbI H9AL/Lt8+D1SBIilhB1+3gzNeTxpALUoA8K/7fjR3eaQgXvEcpg9ekJHXMG4jWGP +b9x6hRujZ4I/ja1WY+sAPE7OxvY7WyGIUp9Nt77bkoVybvfP1uICtB9qf3lvRpn 9aBe+2QRPEfNDThBnp7DceA6N1hAmtgEM30e6ZzOn+h4X9bWbDXcoWr/8XU2e30I 6jmVhy7YcOOdhmrla0j4lQAnWiaOz1GP8BvHTq2upxHI0UNPlhcbk8xCbsD1oMUO cPzQa9J8oCVyQTgj7aEwSKFeD2kp+8Q= -----END CERTIFICATE-----Generated at Tue Oct 6 23:21:42 2026 by rpki-client