$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4240d433-01e5-3bfc-a858-aa5e95c2552c.roa File: 4240d433-01e5-3bfc-a858-aa5e95c2552c.roa (raw, json) Hash identifier: WtFRr3OlqazHnl2dCq5q5WzKd92dUQ2+pIIaEe4kdXM= Subject key identifier: B4:25:7E:2E:24:5B:11:CC:6F:2F:AB:1E:F0:66:48:5D:E4:37:F8:F0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DE045943060D122236440 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4240d433-01e5-3bfc-a858-aa5e95c2552c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397242 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:e0:45:94:30:60:d1:22:23:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ebd6985a-3de8-4c5c-8714-48196928f8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:1b:d8:bf:5b:8d:92:a9:98:57:54:fb:04: 3b:48:1a:aa:09:5a:3b:e8:0e:37:1a:ab:d0:99:46: 14:7f:99:6b:f6:88:5f:b5:be:76:57:91:e8:1f:08: 26:cc:97:da:9c:a7:9e:3f:26:ed:36:41:a5:e2:ef: 7e:8d:e6:56:16:ea:52:b9:21:b4:04:6d:0c:7b:88: c5:12:53:ce:52:b4:05:3f:fd:df:47:24:7e:1c:9c: 2f:2e:31:09:df:b4:86:a1:f8:c9:56:83:0c:94:1c: 95:db:37:3e:d7:f8:cd:f3:ae:6c:20:75:2d:76:6f: 1b:83:12:90:18:e1:88:1d:ef:ce:cb:b1:e6:8b:64: e4:31:38:b8:c8:43:6f:21:34:20:0a:92:0f:f0:ce: e3:be:e4:5e:2f:24:66:6a:58:9c:b4:33:11:29:18: 7a:21:aa:ae:c5:53:7d:06:c7:8a:9c:e7:2c:45:00: 5a:44:d1:35:0d:95:07:2a:8c:06:37:41:c2:51:64: ef:87:ae:6c:80:ba:be:0a:df:6c:ac:df:33:fb:f7: bb:e8:5e:4e:d2:c6:f4:17:2b:79:3c:f4:83:93:db: a1:85:75:61:dd:90:1f:35:0d:77:3d:31:32:1e:83: b2:97:ca:cf:ab:25:5a:22:91:d8:be:9b:af:29:e9: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:7E:2E:24:5B:11:CC:6F:2F:AB:1E:F0:66:48:5D:E4:37:F8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4240d433-01e5-3bfc-a858-aa5e95c2552c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cd:1e:5c:61:47:a6:52:3b:ae:1c:db:8e:33:b1:63:5e:14: 12:47:71:e7:d1:6c:99:47:b0:0c:8b:12:db:de:86:0a:60:73: fb:30:49:ed:05:3e:1e:be:c5:10:1e:82:ac:d1:be:a1:9f:67: 4d:51:fc:84:85:9c:31:a8:27:bc:68:74:cd:41:fe:d5:a8:8c: 95:d8:49:18:b2:c1:b4:32:fb:7e:60:4f:99:b7:34:43:d9:3c: 76:9d:1c:a8:d6:91:62:0c:65:c3:59:8a:8b:ab:be:57:41:0d: 3f:c0:a2:69:49:fc:14:ed:96:f3:19:2f:88:05:50:12:48:b2: 0b:ed:74:d5:7a:2b:4d:6f:9b:39:2c:0c:76:62:d9:ad:03:2b: f6:5d:8c:db:4b:04:e1:3c:8d:8a:ce:88:02:fa:4c:91:97:a2: af:24:b2:6c:de:c5:51:6d:65:f2:a8:ab:9e:b3:dd:3c:8e:de: 38:77:5b:27:33:6f:2f:83:26:d1:a6:6f:24:fd:04:ab:84:56: 4d:e4:d8:0b:09:bd:2d:76:25:57:33:0e:fd:6b:1a:03:36:ad: ee:cc:07:85:ab:4a:e8:d5:f6:b2:88:a0:0b:da:85:b7:97:d1: 51:ba:59:74:37:38:e0:fb:4a:47:8f:09:5e:48:a8:ba:13:74: 1d:d4:99:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfeBFlDBg0SIjZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWJkNjk4NWEtM2RlOC00YzVjLTg3MTQtNDgxOTY5MjhmOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBAb2L9bjZKpmFdU+wQ7SBqqCVo76A43GqvQ mUYUf5lr9ohftb52V5HoHwgmzJfanKeePybtNkGl4u9+jeZWFupSuSG0BG0Me4jF ElPOUrQFP/3fRyR+HJwvLjEJ37SGofjJVoMMlByV2zc+1/jN865sIHUtdm8bgxKQ GOGIHe/Oy7Hmi2TkMTi4yENvITQgCpIP8M7jvuReLyRmalictDMRKRh6IaquxVN9 BseKnOcsRQBaRNE1DZUHKowGN0HCUWTvh65sgLq+Ct9srN8z+/e76F5O0sb0Fyt5 PPSDk9uhhXVh3ZAfNQ13PTEyHoOyl8rPqyVaIpHYvpuvKenaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQlfi4kWxHMby+rHvBmSF3kN/jwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDI0MGQ0MzMtMDFlNS0z YmZjLWE4NTgtYWE1ZTk1YzI1NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvNHlxhR6ZSO64c244zsWNeFBJHcefRbJlHsAyLEtvehgpgc/swSe0F Ph6+xRAegqzRvqGfZ01R/ISFnDGoJ7xodM1B/tWojJXYSRiywbQy+35gT5m3NEPZ PHadHKjWkWIMZcNZiourvldBDT/AomlJ/BTtlvMZL4gFUBJIsgvtdNV6K01vmzks DHZi2a0DK/ZdjNtLBOE8jYrOiAL6TJGXoq8ksmzexVFtZfKoq56z3TyO3jh3Wycz by+DJtGmbyT9BKuEVk3k2AsJvS12JVczDv1rGgM2re7MB4WrSujV9rKIoAvahbeX 0VG6WXQ3OOD7SkePCV5IqLoTdB3UmXY= -----END CERTIFICATE-----Generated at Fri Sep 25 15:05:03 2026 by rpki-client