$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03afefba-4630-36ec-b134-c0f50876f0fe.roa File: 03afefba-4630-36ec-b134-c0f50876f0fe.roa (raw, json) Hash identifier: jKVo0/KkUWZIdNHzJlpEvVc8S8A9vbQOXUm7l3DAGjc= Subject key identifier: 0F:F9:63:E3:A7:15:71:4E:27:3D:2D:FD:B9:DB:6D:6A:71:A9:61:5F Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F4975E95D2EB5F54835DC20C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03afefba-4630-36ec-b134-c0f50876f0fe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8987 IP address blocks: 199.180.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e9:5d:2e:b5:f5:48:35:dc:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=223c5115-8cc7-46ba-8120-e0949cd60dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:8a:83:ce:63:9f:4a:e3:2c:8f:72:63:31: f5:89:26:cb:8a:c4:c5:3f:e0:4f:54:de:4a:10:de: 08:93:ca:a8:b1:f2:41:27:86:09:94:f3:86:83:42: 1b:69:cf:4b:b3:14:15:70:2f:36:82:01:c2:5a:c6: 0a:cb:0c:da:3d:48:3e:ab:d7:3f:99:66:d8:ba:c2: 16:13:20:dd:33:22:15:23:c4:b9:55:c3:d9:7a:bb: c4:92:7a:e5:d2:42:86:a0:15:0a:ed:e3:2b:ec:3c: 54:93:85:37:93:85:ea:44:89:eb:aa:e4:cf:4a:7b: 1f:ad:60:73:69:b3:de:7d:28:08:8c:3c:b0:d8:d3: 0e:2d:a1:03:53:e9:aa:bd:da:68:22:29:f1:00:a9: 71:25:d8:e6:71:83:1f:68:04:eb:8d:f8:06:d8:51: 61:7c:a2:6f:76:b6:21:b5:9b:cb:96:18:14:3e:30: e0:08:ce:38:8a:7d:2a:7d:68:1e:32:ff:c6:37:6a: 4f:58:88:d0:92:4f:63:82:37:f7:7b:cc:51:eb:8a: 5d:cf:06:ae:97:4b:c4:72:76:70:73:8a:cd:37:28: c1:20:ad:b1:54:0d:c2:ce:cb:6d:c1:44:ae:df:be: a7:65:3a:5b:67:2e:aa:0d:b2:62:7a:6c:5a:1a:8b: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F9:63:E3:A7:15:71:4E:27:3D:2D:FD:B9:DB:6D:6A:71:A9:61:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03afefba-4630-36ec-b134-c0f50876f0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 199.180.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:45:d6:db:33:ff:f8:1f:65:eb:e0:04:bc:c4:2c:ac:11:dd: 65:44:c7:6a:ce:9c:55:c4:06:8d:39:cc:6c:64:cb:7a:0a:34: 81:6c:cb:eb:47:bf:54:76:00:46:63:ec:26:04:a1:f5:c9:2a: 96:75:c2:fc:4c:d4:60:80:73:2c:5d:87:6b:84:ff:c0:4f:45: d9:2d:77:33:98:09:ee:cd:50:9b:77:19:b8:fc:80:1f:5f:76: eb:59:02:af:f8:fb:80:b4:44:cc:46:fc:76:ce:a3:3a:a5:6c: 88:68:5f:eb:5f:a7:5c:70:6a:3f:f8:00:1e:81:5a:f5:4d:ba: a3:7d:ee:33:b8:77:fd:f1:f4:86:39:15:1c:fb:55:e0:de:24: 5c:50:cb:7b:f6:78:11:10:be:fa:ab:eb:00:fb:e3:2f:0d:32: 4c:e8:ff:32:22:6f:c5:48:8c:de:e3:d4:bb:4b:75:4d:99:82: 5f:8c:f2:89:af:62:90:cc:01:7b:f6:65:4e:63:54:67:f3:b5: 6d:dd:d7:97:f1:97:9b:04:f9:0d:41:a6:06:1a:d3:c3:01:0b: 73:2f:c3:ce:a2:40:e7:38:10:25:4e:56:d1:a8:a4:41:56:a7: 59:d9:1b:02:b3:51:16:f9:8f:42:2f:21:54:84:63:83:71:02: 4d:5a:7d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdeldLrX1SDXcIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjIzYzUxMTUtOGNjNy00NmJhLTgxMjAtZTA5NDljZDYwZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDSKg85jn0rjLI9yYzH1iSbLisTFP+BPVN5K EN4Ik8qosfJBJ4YJlPOGg0Ibac9LsxQVcC82ggHCWsYKywzaPUg+q9c/mWbYusIW EyDdMyIVI8S5VcPZervEknrl0kKGoBUK7eMr7DxUk4U3k4XqRInrquTPSnsfrWBz abPefSgIjDyw2NMOLaEDU+mqvdpoIinxAKlxJdjmcYMfaATrjfgG2FFhfKJvdrYh tZvLlhgUPjDgCM44in0qfWgeMv/GN2pPWIjQkk9jgjf3e8xR64pdzwaul0vEcnZw c4rNNyjBIK2xVA3CzsttwUSu376nZTpbZy6qDbJiemxaGospxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/5Y+OnFXFOJz0t/bnbbWpxqWFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDNhZmVmYmEtNDYzMC0z NmVjLWIxMzQtYzBmNTA4NzZmMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7TKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJF1tsz//gfZevgBLzELKwR3WVEx2rOnFXEBo05zGxky3oKNIFsy+tH v1R2AEZj7CYEofXJKpZ1wvxM1GCAcyxdh2uE/8BPRdktdzOYCe7NUJt3Gbj8gB9f dutZAq/4+4C0RMxG/HbOozqlbIhoX+tfp1xwaj/4AB6BWvVNuqN97jO4d/3x9IY5 FRz7VeDeJFxQy3v2eBEQvvqr6wD74y8NMkzo/zIib8VIjN7j1LtLdU2Zgl+M8omv YpDMAXv2ZU5jVGfztW3d15fxl5sE+Q1BpgYa08MBC3Mvw86iQOc4ECVOVtGopEFW p1nZGwKzURb5j0IvIVSEY4NxAk1afVk= -----END CERTIFICATE-----Generated at Fri Sep 25 07:12:13 2026 by rpki-client