$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa File: 13e06fb3-a846-3ab0-944b-535af99476d5.roa (raw, json) Hash identifier: gXAfxe9qnUq+uOisTcPcSngtcYQsLwnISXO4ZB0HUDk= Subject key identifier: 56:20:F9:F6:17:D1:8A:0C:87:FC:16:93:0F:36:F1:C8:B1:BC:EE:C4 Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F4328584F4972B9797207BF33F3B78A80 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21534 IP address blocks: 199.59.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b9:79:72:07:bf:33:f3:b7:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b622ab3d-ba95-425a-a1ee-adc7e6d75fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:26:17:ce:4c:e6:5c:10:a6:36:57:1b:c0: 3e:8f:e6:f9:dd:b3:67:b8:9d:1b:0a:61:39:4d:d6: 19:ff:69:e2:32:95:a9:f9:25:b3:76:ca:33:78:46: c0:6e:5b:62:56:b0:62:03:e4:39:28:ee:22:da:2c: 24:6a:74:16:08:eb:aa:dc:db:2c:28:89:cb:fe:78: 76:75:cf:de:af:3e:f6:25:10:9f:78:a4:a4:b4:2c: 9a:1b:41:b0:f5:15:51:14:2c:c4:ca:b4:f1:2f:18: b9:e2:c3:13:15:ff:5b:95:d3:81:25:72:6b:40:2c: cc:3c:58:d8:f9:ee:73:3b:08:66:be:09:e9:37:d5: 11:01:8e:af:4b:26:96:c7:a4:dc:eb:53:08:ea:f6: 0f:18:ce:9c:f5:bb:3e:77:58:0a:93:ea:6b:d9:63: 47:12:35:42:e1:b2:77:fa:c1:6a:39:01:78:6f:a9: 6d:33:91:c0:cd:5d:cb:cf:ba:39:6b:4c:e3:11:94: a8:1d:29:e9:b0:bc:75:20:ba:ec:13:fc:e6:e3:39: c9:98:7e:ed:65:ab:1b:c1:47:88:40:9f:df:74:91: d7:97:3e:01:73:f5:ff:f5:54:d1:ad:8f:d5:55:a1: 84:5a:e8:c7:83:20:3e:e5:13:fd:44:20:18:36:0e: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:F9:F6:17:D1:8A:0C:87:FC:16:93:0F:36:F1:C8:B1:BC:EE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.59.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2d:9a:06:6f:86:91:b2:fd:7a:d0:d5:7f:f8:b3:f3:79:c9: 99:c6:2a:33:32:25:6b:04:88:8f:d2:cc:96:0f:ae:6b:39:e0: c2:e4:b0:63:df:91:ff:f9:e4:26:4c:41:45:c7:0f:0a:29:d8: b2:ba:b3:a7:53:ee:e1:2a:b4:5f:63:b0:8a:82:d9:07:2b:27: be:1e:6c:ab:09:50:0c:78:35:4a:ae:14:00:cd:8d:07:67:6e: 04:e0:f9:23:67:80:3b:c6:10:b3:21:1a:4a:7e:3a:6d:3e:aa: ed:65:4d:76:10:2c:35:94:2d:88:2f:3b:f4:a2:82:33:c2:1b: dc:1c:5b:5d:b4:66:bf:b4:7f:c3:ea:eb:47:55:1c:66:ef:97: 49:63:2c:2f:cc:e8:4d:b4:69:50:4d:79:56:cb:b7:37:2c:e3: 3a:7b:44:55:c5:1e:5a:e6:de:84:a6:63:c5:b1:29:6b:ad:28: ea:e3:a8:15:ba:5c:4e:f0:2f:a5:6b:fa:34:51:33:bc:be:0d: 13:c1:f5:2f:01:96:13:ef:e6:f2:12:06:b7:4b:fb:cb:f9:fa: 5c:f0:b6:4e:93:8d:9c:bd:5a:1d:65:be:61:fe:70:2a:86:1d: ac:78:f8:60:28:c8:e7:6c:03:e2:b5:06:c7:6a:2b:e4:5e:e1: 36:b1:a2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcrl5cge/M/O3ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjYyMmFiM2QtYmE5NS00MjVhLWExZWUtYWRjN2U2ZDc1ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRomF85M5lwQpjZXG8A+j+b53bNnuJ0bCmE5 TdYZ/2niMpWp+SWzdsozeEbAbltiVrBiA+Q5KO4i2iwkanQWCOuq3NssKInL/nh2 dc/erz72JRCfeKSktCyaG0Gw9RVRFCzEyrTxLxi54sMTFf9bldOBJXJrQCzMPFjY +e5zOwhmvgnpN9URAY6vSyaWx6Tc61MI6vYPGM6c9bs+d1gKk+pr2WNHEjVC4bJ3 +sFqOQF4b6ltM5HAzV3Lz7o5a0zjEZSoHSnpsLx1ILrsE/zm4znJmH7tZasbwUeI QJ/fdJHXlz4Bc/X/9VTRrY/VVaGEWujHgyA+5RP9RCAYNg4pdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYg+fYX0YoMh/wWkw828cixvO7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvMTNlMDZmYjMtYTg0Ni0z YWIwLTk0NGItNTM1YWY5OTQ3NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxztEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwtmgZvhpGy/XrQ1X/4s/N5yZnGKjMyJWsEiI/SzJYPrms54MLksGPf kf/55CZMQUXHDwop2LK6s6dT7uEqtF9jsIqC2QcrJ74ebKsJUAx4NUquFADNjQdn bgTg+SNngDvGELMhGkp+Om0+qu1lTXYQLDWULYgvO/SigjPCG9wcW120Zr+0f8Pq 60dVHGbvl0ljLC/M6E20aVBNeVbLtzcs4zp7RFXFHlrm3oSmY8WxKWutKOrjqBW6 XE7wL6Vr+jRRM7y+DRPB9S8BlhPv5vISBrdL+8v5+lzwtk6TjZy9Wh1lvmH+cCqG Hax4+GAoyOdsA+K1BsdqK+Re4Taxojg= -----END CERTIFICATE-----Generated at Sun Oct 4 02:42:57 2026 by rpki-client