$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/84586933-ffcc-38da-9918-3525a8c24c8a.roa File: 84586933-ffcc-38da-9918-3525a8c24c8a.roa (raw, json) Hash identifier: iot3W3kSmOS4o+Jmxz1Z8eezl6SzEv2yCQkq3ibBs5U= Subject key identifier: 50:65:4B:D6:4C:EE:CB:73:5A:DF:1F:8D:9B:B5:F6:54:15:3F:ED:EF Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F3A17CBA9E40A249901E79120 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/84586933-ffcc-38da-9918-3525a8c24c8a.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 400662 IP address blocks: 137.239.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cb:a9:e4:0a:24:99:01:e7:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=34e5e2d3-7211-421a-b432-c9e189de4aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7d:89:0d:e3:eb:0d:8c:0b:2a:c4:e8:53:bf: fe:5d:91:16:5d:60:f9:ca:05:00:63:29:4a:aa:ea: 4b:21:a9:78:29:4b:08:2d:fc:06:e7:a1:a6:b6:39: 77:36:a5:61:5a:08:f5:db:40:24:07:d0:37:7f:52: 59:d5:0a:8f:b3:9e:6c:b9:00:6b:8b:57:71:81:53: fe:d9:36:af:27:f3:75:11:e6:bc:7a:1d:98:fa:dd: 7a:23:77:31:53:97:16:03:77:d4:db:f0:ea:e9:17: 42:dd:05:bb:e8:1f:87:ba:ba:a8:d9:0d:9b:40:50: bf:e8:92:81:1d:6d:28:a7:1c:b5:34:55:52:25:d6: 3a:9f:03:f6:86:e4:95:5d:4a:f6:cf:77:61:3c:e8: 88:56:9c:17:5a:0a:9d:84:07:6a:b2:ea:7f:04:01: 2a:c0:a1:f1:ec:1f:89:49:4e:15:49:35:00:2b:ba: 57:ca:13:af:c8:cc:28:b8:8f:ca:cb:03:71:a5:cc: fa:33:59:62:6e:0b:ce:98:44:83:8c:96:9a:db:89: a6:62:01:60:3a:fc:c5:93:81:00:90:be:87:27:8e: f7:c2:a8:3c:b3:b2:ba:1e:79:3d:8a:ae:eb:11:04: 58:25:9b:30:b9:e3:e4:39:f0:69:4d:34:60:f8:71: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:65:4B:D6:4C:EE:CB:73:5A:DF:1F:8D:9B:B5:F6:54:15:3F:ED:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/84586933-ffcc-38da-9918-3525a8c24c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 137.239.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:29:7a:56:52:f2:e8:0a:0e:bf:ea:89:0b:60:bf:a0:e6:8f: 6d:94:53:7a:a1:a4:1d:3e:c2:5c:67:d2:07:bd:5a:a4:c5:68: b9:44:e5:19:b6:16:94:43:3b:ce:a6:c2:32:26:24:21:d6:05: 91:c9:21:4e:f8:ae:7b:d0:c4:6c:8e:0c:85:1e:e3:bf:7e:5a: ef:77:6b:63:7e:7a:f6:f6:06:17:4b:7c:e8:98:ac:c7:64:5b: ed:30:4e:b8:1a:a2:2f:f0:60:73:6c:94:62:21:32:07:8f:f3: ed:21:68:10:a9:a2:88:84:c5:e5:79:a6:b2:09:f3:e0:45:5d: 30:51:a7:5d:a4:70:99:02:f1:45:85:13:ab:28:82:fe:22:54: 1e:ba:17:bd:79:64:14:26:09:e3:96:8a:fa:b1:bc:26:72:8d: 51:e0:cc:23:b9:45:a2:ed:fb:60:ed:4c:16:f1:0c:3e:db:75: e4:e8:fa:98:de:03:e6:5d:c7:c8:45:31:94:1e:7a:88:1b:59: 26:e1:64:86:2a:02:01:59:ae:28:c8:ae:6e:f9:b4:fc:05:f1: ae:29:df:99:33:e8:74:90:6e:5b:e0:a0:1f:bc:76:55:aa:10: 45:e3:6a:71:96:12:a7:e8:3f:b1:90:15:d1:b1:a7:62:b6:82: 7d:6c:16:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8up5AokmQHnkSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MzRlNWUyZDMtNzIxMS00MjFhLWI0MzItYzllMTg5ZGU0YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H2JDePrDYwLKsToU7/+XZEWXWD5ygUAYylK qupLIal4KUsILfwG56Gmtjl3NqVhWgj120AkB9A3f1JZ1QqPs55suQBri1dxgVP+ 2TavJ/N1Eea8eh2Y+t16I3cxU5cWA3fU2/Dq6RdC3QW76B+Hurqo2Q2bQFC/6JKB HW0opxy1NFVSJdY6nwP2huSVXUr2z3dhPOiIVpwXWgqdhAdqsup/BAEqwKHx7B+J SU4VSTUAK7pXyhOvyMwouI/KywNxpcz6M1libgvOmESDjJaa24mmYgFgOvzFk4EA kL6HJ473wqg8s7K6Hnk9iq7rEQRYJZswuePkOfBpTTRg+HGPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBlS9ZM7stzWt8fjZu19lQVP+3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvODQ1ODY5MzMtZmZjYy0z OGRhLTk5MTgtMzUyNWE4YzI0YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFie/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4pelZS8ugKDr/qiQtgv6Dmj22UU3qhpB0+wlxn0ge9WqTFaLlE5Rm2 FpRDO86mwjImJCHWBZHJIU74rnvQxGyODIUe479+Wu93a2N+evb2BhdLfOiYrMdk W+0wTrgaoi/wYHNslGIhMgeP8+0haBCpooiExeV5prIJ8+BFXTBRp12kcJkC8UWF E6sogv4iVB66F715ZBQmCeOWivqxvCZyjVHgzCO5RaLt+2DtTBbxDD7bdeTo+pje A+Zdx8hFMZQeeogbWSbhZIYqAgFZrijIrm75tPwF8a4p35kz6HSQblvgoB+8dlWq EEXjanGWEqfoP7GQFdGxp2K2gn1sFuA= -----END CERTIFICATE-----Generated at Sun Sep 27 10:42:11 2026 by rpki-client