$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa File: 114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json) Hash identifier: 4Hq70Zs3ONWGRgypDyF/p7FKOXzzGreX81hoXHjh8Sc= Subject key identifier: 6E:DD:6F:86:3A:07:17:51:88:AE:1A:8E:3E:7C:82:FF:B8:7E:47:72 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F4328584F549D6880A5C51C79079D67E0 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 26459 IP address blocks: 199.250.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:68:80:a5:c5:1c:79:07:9d:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=3f8945e3-5be4-4ed8-a15f-4d06b52709a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:a5:f7:cb:a4:61:b4:cc:a9:ee:eb:8d:b7: 76:87:8f:2d:21:e0:b8:1b:f0:6a:7c:dc:f8:a6:36: 52:f1:25:75:fe:19:97:15:c3:dc:ed:ed:32:1c:6a: bd:1c:6f:af:77:3d:cb:b3:31:0f:3d:76:a6:4b:0b: 4f:e5:25:37:b0:31:98:9d:42:54:6e:e6:e8:88:5b: dc:86:6e:65:00:5c:74:40:ec:ff:21:1e:bf:d7:7f: 80:4e:a0:97:d6:cc:65:fe:5a:fe:cb:06:f5:13:ab: d2:0d:dc:a7:a1:f9:10:78:1f:5c:49:1d:18:52:08: 5a:94:82:38:e6:7a:63:49:c4:20:68:c4:1d:34:4f: ad:c1:5e:bc:79:41:c8:10:52:0f:bb:b9:33:8e:40: 05:59:1c:7a:ce:59:39:90:60:27:03:63:c4:91:a2: c1:f3:20:a0:28:e5:5f:30:c9:78:c8:17:6a:f7:65: 05:89:23:91:ff:e9:e1:0e:b5:d1:2e:2a:e4:cb:b4: 32:da:24:f7:22:aa:e6:d7:da:fd:29:9e:92:dd:3f: fb:71:68:89:9c:2d:4d:66:bf:a1:1e:a0:91:80:42: 96:5a:5e:26:be:4f:79:9c:8f:d8:89:67:bf:c2:35: 54:02:03:33:90:27:4e:cd:33:66:79:fc:2a:16:63: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DD:6F:86:3A:07:17:51:88:AE:1A:8E:3E:7C:82:FF:B8:7E:47:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv4: 199.250.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6d:34:5d:dd:c8:36:c1:6d:1b:58:3d:85:83:8b:1c:5a:54: 9f:04:13:da:8e:49:02:08:83:30:d8:35:96:64:b1:5d:6d:54: c9:cf:1c:ff:1b:4b:48:f8:ae:08:c5:89:a5:21:bb:01:f0:2a: ae:3a:fb:3c:43:0c:71:7d:e4:4e:36:99:c9:c4:ee:93:3f:51: 68:4a:b3:f9:bf:89:71:d3:8b:74:2b:a7:0a:9a:4d:d6:a4:70: e6:e9:56:de:02:33:12:d9:e4:61:28:1a:b3:49:42:4d:12:68: 20:75:72:d5:4e:8f:17:c4:97:76:90:50:a5:b7:62:c3:25:8b: eb:da:9b:4c:c5:6b:f1:88:98:c2:36:0e:23:b8:c6:e0:11:c8: c6:e3:2f:d7:65:47:a1:c7:3c:55:a9:0c:fc:9a:a6:08:a5:23: 51:e4:0f:df:e6:b7:a2:58:bf:c9:32:4e:e8:00:28:d8:e4:ec: 78:03:bd:c1:c5:99:91:40:17:b2:d9:0b:f3:e8:f8:a4:8d:2a: 47:1b:57:f2:2b:42:46:ac:41:a8:83:94:b3:57:a7:03:b6:b5: f6:4d:9c:11:66:d2:d5:a0:89:66:e5:32:59:d3:2b:a6:a2:de: 91:67:1b:0a:c9:01:8c:4e:d0:a2:74:90:f8:6a:04:2f:bd:49: 70:01:2f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWiApcUceQedZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk M2Y4OTQ1ZTMtNWJlNC00ZWQ4LWExNWYtNGQwNmI1MjcwOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTGl98ukYbTMqe7rjbd2h48tIeC4G/BqfNz4 pjZS8SV1/hmXFcPc7e0yHGq9HG+vdz3LszEPPXamSwtP5SU3sDGYnUJUbuboiFvc hm5lAFx0QOz/IR6/13+ATqCX1sxl/lr+ywb1E6vSDdynofkQeB9cSR0YUghalII4 5npjScQgaMQdNE+twV68eUHIEFIPu7kzjkAFWRx6zlk5kGAnA2PEkaLB8yCgKOVf MMl4yBdq92UFiSOR/+nhDrXRLirky7Qy2iT3Iqrm19r9KZ6S3T/7cWiJnC1NZr+h HqCRgEKWWl4mvk95nI/YiWe/wjVUAgMzkCdOzTNmefwqFmPMtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7db4Y6BxdRiK4ajj58gv+4fkdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvMTE0YzIzZWItZDJmNy0z YTQzLTgyNjYtNDY0ZTgxODM2ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJtNF3dyDbBbRtYPYWDixxaVJ8EE9qOSQIIgzDYNZZksV1tVMnPHP8b S0j4rgjFiaUhuwHwKq46+zxDDHF95E42mcnE7pM/UWhKs/m/iXHTi3QrpwqaTdak cObpVt4CMxLZ5GEoGrNJQk0SaCB1ctVOjxfEl3aQUKW3YsMli+vam0zFa/GImMI2 DiO4xuARyMbjL9dlR6HHPFWpDPyapgilI1HkD9/mt6JYv8kyTugAKNjk7HgDvcHF mZFAF7LZC/Po+KSNKkcbV/IrQkasQaiDlLNXpwO2tfZNnBFm0tWgiWblMlnTK6ai 3pFnGwrJAYxO0KJ0kPhqBC+9SXABLxo= -----END CERTIFICATE-----Generated at Fri Oct 9 01:02:46 2026 by rpki-client