$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa File: 854cc417-9964-39fb-bc3c-89da106824ca.roa (raw, json) Hash identifier: aLKxN2QrxePFHJHlL9m2xRnGoKtPcxCIPhWOr6/7TcM= Subject key identifier: 05:4D:4F:55:F9:8A:F4:A2:D2:6F:1A:82:4E:54:C5:C8:8E:01:08:10 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584F4973D57DAC6FF22C40E35280 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21777 IP address blocks: 199.33.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d5:7d:ac:6f:f2:2c:40:e3:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4271ec31-279f-4511-9ecf-b057610edf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:20:fa:b0:c0:fc:e1:81:62:e7:83:24:79: 77:c1:23:bc:01:94:2a:a0:67:7e:fe:4a:9e:24:81: bd:fb:2a:59:88:0c:a4:db:29:b4:6a:70:ae:75:cb: d8:d3:5b:1e:c6:59:cf:82:99:6c:6d:c3:49:b4:ad: f9:93:7d:27:f9:63:3b:e4:aa:7e:a4:f1:3a:a6:fe: ce:73:37:ea:f6:97:26:ea:58:76:14:90:bf:54:b6: 6a:4a:75:ff:34:c5:81:0a:0b:ea:74:31:b1:c8:52: 22:e5:8b:a8:6c:14:87:b9:af:c4:91:89:5d:2f:8d: 47:e6:84:19:9d:81:1f:89:f0:05:19:c0:5a:96:65: 32:d9:be:9e:e7:e8:27:4c:e0:4b:1c:26:dd:60:62: c8:58:ae:e9:ae:d9:45:b6:d0:f2:93:63:b5:c7:95: e2:b1:75:4d:e1:ed:7d:b0:3e:f2:f4:8b:ed:80:2e: 32:92:4f:af:cf:b8:39:a7:c0:0e:7f:e0:c3:53:22: 35:3a:02:49:c8:df:f3:a5:f0:f2:df:8e:77:a9:1f: ba:2a:5d:15:30:52:b0:af:3c:84:66:72:5a:f6:ee: a9:de:72:47:03:6b:bb:18:2e:68:d4:36:b8:ed:33: 2e:18:d3:a8:03:8b:dc:97:47:fe:19:c4:66:95:8f: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:4F:55:F9:8A:F4:A2:D2:6F:1A:82:4E:54:C5:C8:8E:01:08:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d7:29:2e:b3:49:36:18:1b:eb:7a:ae:86:06:e0:f8:b9:84: 41:f1:6e:a7:68:4e:d6:f2:a8:35:5d:1c:71:a6:0d:3a:7c:7a: 78:cc:2f:59:48:41:a1:81:1e:01:51:c5:ad:52:f9:e6:05:cb: 74:3a:75:74:91:bd:d7:36:b7:37:bc:8a:9b:b3:db:ff:35:5c: 0a:08:c0:83:16:d6:62:34:cd:4f:f0:2c:67:19:6c:0d:f5:b7: fe:b9:6d:bd:75:ce:43:46:8e:09:02:1b:36:44:27:76:b7:c4: bb:1d:a5:2c:f7:1e:1e:9b:9c:a5:16:2b:37:91:c2:34:3e:50: e6:6c:5a:04:23:f7:b8:a1:22:3c:69:6a:ff:d1:3d:51:69:29: 27:73:77:18:a5:f0:18:24:fd:cc:35:cf:08:42:d1:3d:db:86: e9:ef:4b:44:38:c1:37:3b:73:e1:b6:3b:f9:4e:5b:1e:ec:bc: dd:73:46:3a:6a:2f:9d:ce:98:51:10:49:ef:f5:d5:26:40:1d: e4:42:71:95:85:88:2b:3e:48:28:fc:5d:13:fa:c3:3f:44:93: a2:3b:fa:7b:b6:67:94:4c:db:9f:0c:47:47:ba:c9:94:c5:61: 21:50:2d:cf:26:df:fe:bd:8a:3d:0e:cd:70:65:13:00:ce:d9: 3f:63:13:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9V9rG/yLEDjUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDI3MWVjMzEtMjc5Zi00NTExLTllY2YtYjA1NzYxMGVkZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMEg+rDA/OGBYueDJHl3wSO8AZQqoGd+/kqe JIG9+ypZiAyk2ym0anCudcvY01sexlnPgplsbcNJtK35k30n+WM75Kp+pPE6pv7O czfq9pcm6lh2FJC/VLZqSnX/NMWBCgvqdDGxyFIi5YuobBSHua/EkYldL41H5oQZ nYEfifAFGcBalmUy2b6e5+gnTOBLHCbdYGLIWK7prtlFttDyk2O1x5XisXVN4e19 sD7y9IvtgC4ykk+vz7g5p8AOf+DDUyI1OgJJyN/zpfDy3453qR+6Kl0VMFKwrzyE ZnJa9u6p3nJHA2u7GC5o1Da47TMuGNOoA4vcl0f+GcRmlY/nowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVNT1X5ivSi0m8agk5UxciOAQgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvODU0Y2M0MTctOTk2NC0z OWZiLWJjM2MtODlkYTEwNjgyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7XKS6zSTYYG+t6roYG4Pi5hEHxbqdoTtbyqDVdHHGmDTp8enjML1lI QaGBHgFRxa1S+eYFy3Q6dXSRvdc2tze8ipuz2/81XAoIwIMW1mI0zU/wLGcZbA31 t/65bb11zkNGjgkCGzZEJ3a3xLsdpSz3Hh6bnKUWKzeRwjQ+UOZsWgQj97ihIjxp av/RPVFpKSdzdxil8Bgk/cw1zwhC0T3bhunvS0Q4wTc7c+G2O/lOWx7svN1zRjpq L53OmFEQSe/11SZAHeRCcZWFiCs+SCj8XRP6wz9Ek6I7+nu2Z5RM258MR0e6yZTF YSFQLc8m3/69ij0OzXBlEwDO2T9jEyk= -----END CERTIFICATE-----Generated at Sat Sep 26 05:54:35 2026 by rpki-client