$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa File: dc4b07de-971f-380d-8210-c351918b260b.roa (raw, json) Hash identifier: m4tHOIlPnOAxzrOwKKSZjAkhcup9PGxfd1Otc2y87Jo= Subject key identifier: E7:B8:D0:78:73:D0:60:88:2E:79:3D:17:92:0B:F8:74:25:AB:D8:50 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584F49755D9492A9D634369F8F00 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26512 IP address blocks: 199.119.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:5d:94:92:a9:d6:34:36:9f:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f90d752-b01e-4728-839a-2a60c6495732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:f7:37:e5:a9:e6:87:36:68:3a:e0:13:40: eb:62:ae:89:c6:b3:98:e7:d6:c2:bd:6c:bc:85:45: 7f:9b:b5:60:8e:fe:07:04:7b:0d:f7:25:47:d4:74: 37:ec:39:67:bf:8a:e0:2c:c1:ca:59:0b:81:e3:40: 09:ef:1f:8b:23:f8:77:e9:8f:b3:57:56:7f:8d:81: 61:79:fb:db:22:20:6e:b6:f5:a2:d4:a1:2c:70:42: 8d:e9:27:f8:62:00:57:3b:24:a9:ee:18:3f:8a:9f: 0e:68:f8:0e:a7:d9:07:7d:20:50:6e:d0:72:02:2d: f1:73:40:8e:e0:3d:dd:10:93:21:5b:e7:6f:e7:97: df:ce:29:d4:40:9e:ea:49:8a:df:ef:8c:c5:b2:0e: 62:df:50:e5:63:38:83:b3:48:c5:c3:b4:16:af:7c: 53:91:12:78:f6:59:1c:47:00:f7:62:62:91:59:20: 7a:64:2e:52:08:2f:f3:d4:89:06:ec:9e:7f:73:b2: f0:87:6f:35:d9:5c:5e:fc:87:c7:6d:6c:ed:46:ef: b5:3f:d2:7d:a8:d4:0c:c7:f0:74:be:f7:cb:c8:cd: 5d:64:87:0c:c6:8f:3c:1b:85:c2:37:66:04:05:59: 20:4c:a2:e2:94:89:83:ae:a1:84:8f:aa:a1:86:0f: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B8:D0:78:73:D0:60:88:2E:79:3D:17:92:0B:F8:74:25:AB:D8:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ea:a4:eb:f2:74:40:8a:b5:17:46:be:68:79:77:6a:1c:57: 23:33:b5:18:d5:5a:ff:08:8a:66:3e:97:8b:ac:68:3a:36:f2: c7:cf:ac:4c:c2:bf:ad:30:bb:c6:ee:f0:e5:49:21:d6:b2:7c: e3:9d:b0:4a:14:b3:15:be:0c:85:1d:4c:44:d6:41:1a:2f:00: c8:e3:98:57:a1:0d:aa:84:41:d3:59:32:82:af:c4:db:6c:1f: 75:13:90:6e:ee:0f:80:b3:b8:c6:53:3d:19:e8:53:47:8f:a9: 54:a6:5b:4e:6d:2a:66:16:f4:fa:33:fd:b3:6d:bd:fb:22:fd: 43:4d:c7:82:0f:a1:21:87:e1:2d:83:7e:59:85:83:d3:33:90: d0:54:cf:fb:38:72:e3:9d:1e:4a:7d:c9:d3:d2:d8:0b:f2:0a: f8:28:34:6e:24:d0:73:f1:a9:ed:a5:33:d9:bc:22:56:28:86: 22:e3:c2:b3:be:57:0d:70:fc:ca:21:1f:5d:3d:e0:32:27:83: a4:d4:31:12:8b:54:68:30:f6:26:46:4c:0b:b3:c7:20:76:81: 8a:fd:be:d4:78:39:6f:c0:4c:7b:3a:65:17:ef:a7:cc:46:ac: b9:36:c2:af:64:22:c5:13:59:07:98:a4:55:9d:79:a5:71:27: 94:ae:de:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdV2UkqnWNDafjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY5MGQ3NTItYjAxZS00NzI4LTgzOWEtMmE2MGM2NDk1NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorz3N+Wp5oc2aDrgE0DrYq6JxrOY59bCvWy8 hUV/m7Vgjv4HBHsN9yVH1HQ37Dlnv4rgLMHKWQuB40AJ7x+LI/h36Y+zV1Z/jYFh efvbIiButvWi1KEscEKN6Sf4YgBXOySp7hg/ip8OaPgOp9kHfSBQbtByAi3xc0CO 4D3dEJMhW+dv55ffzinUQJ7qSYrf74zFsg5i31DlYziDs0jFw7QWr3xTkRJ49lkc RwD3YmKRWSB6ZC5SCC/z1IkG7J5/c7Lwh2812Vxe/IfHbWztRu+1P9J9qNQMx/B0 vvfLyM1dZIcMxo88G4XCN2YEBVkgTKLilImDrqGEj6qhhg9U+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe40Hhz0GCILnk9F5IL+HQlq9hQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGM0YjA3ZGUtOTcxZi0z ODBkLTgyMTAtYzM1MTkxOGIyNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3qpOvydECKtRdGvmh5d2ocVyMztRjVWv8IimY+l4usaDo28sfPrEzC v60wu8bu8OVJIdayfOOdsEoUsxW+DIUdTETWQRovAMjjmFehDaqEQdNZMoKvxNts H3UTkG7uD4CzuMZTPRnoU0ePqVSmW05tKmYW9Poz/bNtvfsi/UNNx4IPoSGH4S2D flmFg9MzkNBUz/s4cuOdHkp9ydPS2AvyCvgoNG4k0HPxqe2lM9m8IlYohiLjwrO+ Vw1w/MohH1094DIng6TUMRKLVGgw9iZGTAuzxyB2gYr9vtR4OW/ATHs6ZRfvp8xG rLk2wq9kIsUTWQeYpFWdeaVxJ5Su3tY= -----END CERTIFICATE-----Generated at Tue Sep 29 16:50:11 2026 by rpki-client