$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa File: 11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa (raw, json) Hash identifier: Ky15qC/e5wqS26obss4p26ys6e6CVDkCUwgFZ57z3lo= Subject key identifier: 00:AC:7D:B0:93:17:6C:78:5C:16:57:7F:A3:DB:CD:2E:F2:AD:89:DB Certificate issuer: /CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Certificate serial: 010D0C9F4328584F4973CFC2BE6CB92106F75380 Authority key identifier: D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 199.189.36.0/24 maxlen: 24 199.189.37.0/24 maxlen: 24 199.189.38.0/24 maxlen: 24 199.189.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cf:c2:be:6c:b9:21:06:f7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5ab87973-798b-4a08-a025-7bd0e25f4c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:1c:1d:68:44:6e:63:32:04:62:96:1d:d7: b1:48:52:a2:92:2d:a6:b7:09:90:8a:b2:dd:5d:d4: 82:7b:c6:fc:18:bd:ea:c8:14:c0:29:32:d9:a3:92: 81:d9:c8:97:02:41:2b:f5:ea:0a:29:57:2c:3c:31: 1b:82:df:e2:c8:99:8e:c2:16:5a:ff:cc:f8:31:0f: c7:7e:21:2c:e8:c0:a7:d2:ac:c3:2f:48:54:4f:1c: 5f:b8:82:b0:e4:01:b2:72:38:97:39:62:19:a6:e7: 20:25:5a:16:dc:69:a8:4c:95:97:3e:6c:4e:8c:2a: 75:c0:3f:a6:91:c4:7d:3e:61:d6:59:64:9f:7a:44: 46:77:cd:dc:d0:07:fe:ed:ba:d4:e4:74:ff:9f:ac: 77:23:77:8f:9f:6c:7f:5b:b2:65:61:8f:cf:5e:c7: 11:99:5d:52:70:a7:2e:98:75:8c:91:96:83:a3:b3: 9a:eb:7c:03:25:1d:36:2f:01:92:fe:6d:94:01:99: 37:02:44:65:0a:b0:04:ee:23:da:bb:a5:8a:05:dc: ee:06:15:54:50:b9:b3:38:c8:b6:77:ec:fe:4d:75: c4:55:a3:cd:74:e2:f8:d3:3c:2e:3a:95:cf:80:8f: 93:30:5f:d6:af:fa:aa:b6:89:05:a2:36:f5:38:44: df:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AC:7D:B0:93:17:6C:78:5C:16:57:7F:A3:DB:CD:2E:F2:AD:89:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl X509v3 Authority Key Identifier: keyid:D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer sbgp-ipAddrBlock: critical IPv4: 199.189.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:db:75:02:b1:ee:ea:51:60:08:29:da:51:ea:05:8f:2f:b4: 49:df:66:08:e3:e9:64:c4:18:3a:85:b1:c4:3f:63:c1:ca:e2: af:92:14:7d:36:f2:22:5c:02:5f:05:5b:90:e6:df:db:1f:1e: dd:be:55:0f:a9:72:1b:23:0a:82:88:1e:d7:01:7c:ec:3c:f0: fb:77:aa:6a:19:4e:d4:12:a3:2d:8a:1f:31:b3:dc:8c:ff:e3: 24:ba:de:21:03:7d:7e:7c:e4:78:19:86:2c:bf:12:81:b0:2f: 82:15:49:d2:86:e3:23:bb:5d:76:2c:b3:5c:00:60:0b:b2:d4: e8:50:a3:be:d1:fb:93:87:de:37:4c:f1:27:4e:22:74:d0:4e: 96:23:75:d0:76:21:cb:40:a4:da:39:c6:93:2f:e3:af:84:c3: b7:aa:81:93:fc:52:56:0a:ba:c1:2d:68:8e:77:67:fa:ec:15: 18:51:5e:a0:80:b7:0d:97:f8:2b:a4:af:c3:76:79:09:dd:2c: 7a:c3:36:e5:18:c0:57:ed:36:c5:9d:06:a8:a1:89:6f:47:f1: 3e:54:67:68:88:5f:73:67:ca:b9:e1:9c:b1:4b:ad:20:10:8c: 33:a3:72:44:db:3d:94:3e:e1:e2:8b:c1:08:31:b8:94:77:95: 47:55:86:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8/Cvmy5IQb3U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwMjViZTEtZWI0Yi00Y2Y3LThjZmUtOWU0ZjUzMTE4 MDJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWFiODc5NzMtNzk4Yi00YTA4LWEwMjUtN2JkMGUyNWY0YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CwcHWhEbmMyBGKWHdexSFKiki2mtwmQirLd XdSCe8b8GL3qyBTAKTLZo5KB2ciXAkEr9eoKKVcsPDEbgt/iyJmOwhZa/8z4MQ/H fiEs6MCn0qzDL0hUTxxfuIKw5AGycjiXOWIZpucgJVoW3GmoTJWXPmxOjCp1wD+m kcR9PmHWWWSfekRGd83c0Af+7brU5HT/n6x3I3ePn2x/W7JlYY/PXscRmV1ScKcu mHWMkZaDo7Oa63wDJR02LwGS/m2UAZk3AkRlCrAE7iPau6WKBdzuBhVUULmzOMi2 d+z+TXXEVaPNdOL40zwuOpXPgI+TMF/Wr/qqtokFojb1OETfnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACsfbCTF2x4XBZXf6PbzS7yrYnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NjAy NWJlMS1lYjRiLTRjZjctOGNmZS05ZTRmNTMxMTgwMmQvMTFhYTdlZTYtMGViMy0z MzkwLTg0ODUtMWIyYzI5YjRjYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODYwMjViZTEtZWI0Yi00Y2Y3LThj ZmUtOWU0ZjUzMTE4MDJkLzg2MDI1YmUxLWViNGItNGNmNy04Y2ZlLTllNGY1MzEx ODAyZC5jcmwwHwYDVR0jBBgwFoAU2XU6rAwfy7QGAKlPNOGWXH2j5BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjAyNWJlMS1lYjRiLTRjZjctOGNmZS05ZTRm NTMxMTgwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx70kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjbdQKx7upRYAgp2lHqBY8vtEnfZgjj6WTEGDqFscQ/Y8HK4q+SFH02 8iJcAl8FW5Dm39sfHt2+VQ+pchsjCoKIHtcBfOw88Pt3qmoZTtQSoy2KHzGz3Iz/ 4yS63iEDfX585HgZhiy/EoGwL4IVSdKG4yO7XXYss1wAYAuy1OhQo77R+5OH3jdM 8SdOInTQTpYjddB2IctApNo5xpMv46+Ew7eqgZP8UlYKusEtaI53Z/rsFRhRXqCA tw2X+Cukr8N2eQndLHrDNuUYwFftNsWdBqihiW9H8T5UZ2iIX3NnyrnhnLFLrSAQ jDOjckTbPZQ+4eKLwQgxuJR3lUdVhhg= -----END CERTIFICATE-----Generated at Tue Sep 29 17:39:08 2026 by rpki-client