$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8af7e41-afa8-3fe9-a94f-5240a0a7255b.roa File: a8af7e41-afa8-3fe9-a94f-5240a0a7255b.roa (raw, json) Hash identifier: YyHbFxqkqT4hCn4r+HB5Qr0+uGvzdnay1/ju8KzIKcE= Subject key identifier: 3B:5A:42:AC:F4:33:3B:BB:0B:BD:4C:40:DC:6A:00:53:3B:A8:42:42 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E94F82405FFF144CDE660 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8af7e41-afa8-3fe9-a94f-5240a0a7255b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397227 IP address blocks: 199.7.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:94:f8:24:05:ff:f1:44:cd:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f468cecd-50d0-42c7-9760-cc38a6ee6c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:6d:9c:45:15:18:c1:a3:93:24:2d:e5:9e: 8c:92:44:29:5b:06:85:d0:1f:3e:80:44:f1:e4:4e: dc:17:a2:31:70:0a:11:40:05:a9:6c:94:af:4c:c9: 39:72:b3:5f:27:4a:a5:ce:7f:6e:64:00:32:39:01: 60:ea:0e:6c:8e:2b:e4:eb:75:3b:34:eb:60:2e:e4: c4:4b:12:29:5e:a0:fe:c4:17:eb:cd:79:ef:3b:a6: 84:cd:68:3d:ab:1c:79:01:9f:5a:e3:48:2c:be:07: 6b:9c:33:98:49:a2:41:49:89:71:f5:38:47:d8:bb: 35:79:69:72:f4:cf:c6:f1:0d:6f:39:5b:24:00:c8: e9:94:12:12:d7:85:f5:28:6a:7f:cf:ff:65:b0:ba: 4b:91:f1:65:df:d7:84:24:a0:99:59:7b:ec:3c:82: fd:df:03:85:ab:60:d5:b3:a3:4d:95:da:2d:8b:d3: 96:8c:45:2e:e7:e0:d6:96:bb:af:00:c5:03:a0:47: 43:ae:eb:d5:ea:63:28:3b:f6:12:2a:9c:d4:d2:2e: 5a:16:06:b2:22:bc:df:ee:26:8c:34:de:b1:a3:b0: 21:c7:6b:30:b1:15:c0:e1:b9:24:33:52:c6:d5:2d: 0a:8f:6d:4c:47:1d:34:18:5f:7f:b7:61:df:99:66: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5A:42:AC:F4:33:3B:BB:0B:BD:4C:40:DC:6A:00:53:3B:A8:42:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8af7e41-afa8-3fe9-a94f-5240a0a7255b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:70:bd:84:f2:fb:a3:e2:ed:fe:64:35:f6:7c:10:89:01:e7: 2e:eb:f8:94:9e:0d:f9:17:ef:63:76:b6:3e:28:d5:49:2b:db: e3:9b:12:75:c2:7a:99:79:0c:d2:4e:4d:27:85:69:fc:4c:31: d7:99:98:99:b6:e3:2a:6f:53:b6:77:c4:d2:b7:7f:43:27:e2: af:7e:d3:ab:ce:78:c9:48:66:57:04:c0:0a:41:2e:e0:7b:d9: b4:ee:87:ff:a5:7d:8b:9d:29:13:eb:af:e6:c9:43:d5:88:67: b2:1d:1b:d1:61:e2:4a:71:fd:c1:08:62:bc:57:40:31:83:67: 88:6e:e9:04:1d:d5:be:db:4a:f4:b0:b3:62:c5:6d:ee:22:67: 8b:c7:14:ec:e8:ee:21:01:4a:64:fd:2a:e3:9d:f7:60:d8:18: 56:7d:7c:c6:ee:b6:11:33:a1:ab:61:d8:ac:26:e6:7e:bf:18: bc:e9:db:34:9f:43:dd:22:79:64:60:a4:b9:12:48:75:a8:46: df:45:b6:4a:b7:5d:22:03:48:fa:66:f0:39:2e:77:d7:58:94: 2a:ba:11:d4:a7:c4:a0:8f:7c:88:71:d6:2e:dc:f4:30:69:11: 22:99:ed:15:67:65:7d:23:10:b5:c3:f5:50:ad:25:4f:17:78: ef:95:54:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfpT4JAX/8UTN5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ2OGNlY2QtNTBkMC00MmM3LTk3NjAtY2MzOGE2ZWU2YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQdtnEUVGMGjkyQt5Z6MkkQpWwaF0B8+gETx 5E7cF6IxcAoRQAWpbJSvTMk5crNfJ0qlzn9uZAAyOQFg6g5sjivk63U7NOtgLuTE SxIpXqD+xBfrzXnvO6aEzWg9qxx5AZ9a40gsvgdrnDOYSaJBSYlx9ThH2Ls1eWly 9M/G8Q1vOVskAMjplBIS14X1KGp/z/9lsLpLkfFl39eEJKCZWXvsPIL93wOFq2DV s6NNldoti9OWjEUu5+DWlruvAMUDoEdDruvV6mMoO/YSKpzU0i5aFgayIrzf7iaM NN6xo7Ahx2swsRXA4bkkM1LG1S0Kj21MRx00GF9/t2HfmWbaQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtaQqz0Mzu7C71MQNxqAFM7qEJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYThhZjdlNDEtYWZhOC0z ZmU5LWE5NGYtNTI0MGEwYTcyNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJwvYTy+6Pi7f5kNfZ8EIkB5y7r+JSeDfkX72N2tj4o1Ukr2+ObEnXC epl5DNJOTSeFafxMMdeZmJm24ypvU7Z3xNK3f0Mn4q9+06vOeMlIZlcEwApBLuB7 2bTuh/+lfYudKRPrr+bJQ9WIZ7IdG9Fh4kpx/cEIYrxXQDGDZ4hu6QQd1b7bSvSw s2LFbe4iZ4vHFOzo7iEBSmT9KuOd92DYGFZ9fMbuthEzoath2Kwm5n6/GLzp2zSf Q90ieWRgpLkSSHWoRt9Ftkq3XSIDSPpm8Dkud9dYlCq6EdSnxKCPfIhx1i7c9DBp ESKZ7RVnZX0jELXD9VCtJU8XeO+VVGw= -----END CERTIFICATE-----Generated at Sat Sep 26 14:48:45 2026 by rpki-client