$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa File: ba884675-a4bc-3586-8ccc-a30e17668325.roa (raw, json) Hash identifier: GqfjTQnE9mVPGFNr+2Sk0uHFUAkZFsVZkQrIAabD7Ic= Subject key identifier: E9:A7:98:EE:41:93:A1:63:7C:33:58:F0:E3:F5:8B:EA:53:83:A4:62 Certificate issuer: /CN=cce65795-3b77-4225-98f0-89e8bfcf275c Certificate serial: 010D0C9F4328584F698D811306CB7537D4758140 Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 8070 IP address blocks: 199.15.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:81:13:06:cb:75:37:d4:75:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=f8bdd540-94d0-47c4-a7bb-28d7f00a8bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:9c:d7:a6:9d:fe:b1:24:08:ac:75:ac:c4: 4c:45:5b:ef:26:8f:82:b7:f8:99:82:88:c1:29:f4: d0:f0:ef:4a:3f:e0:90:58:ae:51:7a:1f:ce:f0:5b: 8b:f9:76:a6:15:09:ea:82:25:5b:4c:7a:45:5b:e3: 2b:95:33:50:a3:9b:e5:07:1d:9e:b9:37:3e:d4:3e: dc:d3:2f:88:1f:d5:96:7a:c7:3c:da:ee:66:7c:90: 0b:d9:ef:99:f1:c5:d2:09:d5:12:0a:1b:15:d7:e8: a6:16:d5:bd:ff:f0:66:51:1e:94:d0:5d:6c:28:a1: 35:7a:10:f1:c3:c3:37:c5:1c:31:d7:d7:3e:77:90: 29:b2:d3:80:ac:6c:b2:cb:16:42:f6:60:dd:35:4b: eb:e2:bb:42:9f:1a:7c:79:66:87:9a:4a:cd:d8:20: 78:a3:58:8b:a6:fe:4f:5d:24:88:58:3d:b8:bd:d8: d8:ec:e9:14:80:9c:dc:25:6c:0d:59:ad:87:87:67: a7:f6:9b:4d:2d:46:20:bf:4f:3f:4e:ce:76:4b:73: 42:2f:16:63:78:ec:fe:96:82:b9:7a:79:41:99:c6: 99:65:90:94:35:a8:8b:93:e5:ba:ae:83:e3:8c:6c: b6:c7:c7:fa:b4:33:c1:f4:e2:1a:b0:6b:8d:63:df: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A7:98:EE:41:93:A1:63:7C:33:58:F0:E3:F5:8B:EA:53:83:A4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl X509v3 Authority Key Identifier: keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer sbgp-ipAddrBlock: critical IPv4: 199.15.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:eb:d0:70:c8:28:0d:cc:7e:7a:45:3f:33:8a:dd:f2:05:80: 2a:40:50:af:f7:bc:8f:32:d4:a6:bd:33:2c:08:5f:a8:52:82: a1:62:b4:92:84:00:18:cd:ed:f1:9a:d0:cb:7b:7c:23:7f:c2: 09:ee:09:ec:63:7b:3e:62:71:19:cc:a4:34:35:74:1b:e1:0d: 96:97:80:cf:40:68:94:b6:af:bc:6d:c2:52:c6:a5:62:d0:6f: 8d:12:18:89:c7:dc:c5:69:da:72:91:4b:81:8d:58:3a:af:50: 79:a6:a9:21:46:c6:f1:39:31:3b:99:91:c1:02:e5:cf:c2:94: da:ce:7a:fd:d0:b5:23:f3:18:a4:01:27:0a:7b:76:12:d4:14: 2f:a9:42:b2:b7:55:7e:64:4d:e9:04:65:36:47:33:93:e0:00: d9:92:57:80:4b:81:01:f2:57:08:97:ea:46:de:8d:55:a9:77: a6:08:14:32:1b:b8:88:6a:2b:a4:c8:8f:9d:e3:f2:b7:f3:41: 7d:12:f1:63:15:bc:02:5e:61:9c:d6:38:52:77:93:29:c4:3a: 52:83:0f:f8:5b:c6:ec:14:e7:e6:2e:fa:d2:f3:18:eb:6a:47: 96:f6:ca:ae:89:71:7c:01:d5:94:a6:21:80:53:22:4d:e8:e8: 5a:61:57:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYETBst1N9R1gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NlNjU3OTUtM2I3Ny00MjI1LTk4ZjAtODllOGJmY2Yy NzVjMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZjhiZGQ1NDAtOTRkMC00N2M0LWE3YmItMjhkN2YwMGE4YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFGc16ad/rEkCKx1rMRMRVvvJo+Ct/iZgojB KfTQ8O9KP+CQWK5Reh/O8FuL+XamFQnqgiVbTHpFW+MrlTNQo5vlBx2euTc+1D7c 0y+IH9WWesc82u5mfJAL2e+Z8cXSCdUSChsV1+imFtW9//BmUR6U0F1sKKE1ehDx w8M3xRwx19c+d5ApstOArGyyyxZC9mDdNUvr4rtCnxp8eWaHmkrN2CB4o1iLpv5P XSSIWD24vdjY7OkUgJzcJWwNWa2Hh2en9ptNLUYgv08/Ts52S3NCLxZjeOz+loK5 enlBmcaZZZCUNaiLk+W6roPjjGy2x8f6tDPB9OIasGuNY9/Y3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmnmO5Bk6FjfDNY8OP1i+pTg6RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2 NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4YmZjZjI3NWMvYmE4ODQ2NzUtYTRiYy0z NTg2LThjY2MtYTMwZTE3NjY4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NlNjU3OTUtM2I3Ny00MjI1LTk4 ZjAtODllOGJmY2YyNzVjL2NjZTY1Nzk1LTNiNzctNDIyNS05OGYwLTg5ZThiZmNm Mjc1Yy5jcmwwHwYDVR0jBBgwFoAUPcZcrflEVZKVwKVsknQ/AGpyi4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4 YmZjZjI3NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxw+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3r0HDIKA3MfnpFPzOK3fIFgCpAUK/3vI8y1Ka9MywIX6hSgqFitJKE ABjN7fGa0Mt7fCN/wgnuCexjez5icRnMpDQ1dBvhDZaXgM9AaJS2r7xtwlLGpWLQ b40SGInH3MVp2nKRS4GNWDqvUHmmqSFGxvE5MTuZkcEC5c/ClNrOev3QtSPzGKQB Jwp7dhLUFC+pQrK3VX5kTekEZTZHM5PgANmSV4BLgQHyVwiX6kbejVWpd6YIFDIb uIhqK6TIj53j8rfzQX0S8WMVvAJeYZzWOFJ3kynEOlKDD/hbxuwU5+Yu+tLzGOtq R5b2yq6JcXwB1ZSmIYBTIk3o6FphV7E= -----END CERTIFICATE-----Generated at Thu Oct 15 10:54:24 2026 by rpki-client