$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa File: cb4a05db-d9d9-3a66-8b98-918d6b164822.roa (raw, json) Hash identifier: /DkAPl/Y0dOVJr0SZvs+3IfMxQxg828VneG6KzCtElk= Subject key identifier: FC:35:F8:C8:D3:F8:38:94:EC:D3:BD:3E:FF:8A:AC:6B:27:55:31:BF Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584F49770D7C0924E571D7F22080 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14362 IP address blocks: 199.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:0d:7c:09:24:e5:71:d7:f2:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a02dd6f-69c7-46f0-b6fd-8db136e558a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:f8:b1:63:d4:ad:b9:aa:2c:1d:4f:49:10: 6b:14:70:03:9c:bf:10:3e:90:25:2a:ec:e8:bd:c7: 72:66:45:1e:fa:77:5f:69:18:ca:3f:63:67:18:b0: 74:6e:9f:03:01:63:f8:03:4d:ea:f1:1b:a0:45:67: e4:15:41:15:db:4f:24:22:8d:f9:05:8a:64:65:3f: f2:cb:f2:59:36:1e:9b:29:de:aa:10:e7:04:a0:bc: f3:78:ae:88:21:65:09:d4:7f:7b:11:bb:c4:0e:99: aa:74:04:d9:37:a4:5f:bc:f9:f5:be:e2:4d:a8:b2: 42:b1:c1:25:ba:f2:4c:9a:7e:4b:e5:aa:af:38:7f: 13:77:0d:4e:8c:5a:dd:38:31:45:22:cb:36:64:24: 0d:13:ad:ef:df:1b:13:38:5c:21:ac:e6:d8:77:84: d8:5f:69:75:ca:7d:6b:71:e3:aa:f0:0b:53:d7:ed: 2f:8c:4d:0c:5c:4b:b8:5e:3c:92:31:ce:c6:02:1c: c7:42:e9:df:f5:b7:33:24:19:37:f1:47:92:05:5f: a6:7d:dc:ce:a2:08:31:fd:7e:e9:15:ed:48:15:50: 7c:34:e2:92:8d:31:93:c4:af:74:89:01:97:da:de: 85:ac:db:bb:44:a4:c1:f7:8b:b0:91:05:76:6f:b4: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:F8:C8:D3:F8:38:94:EC:D3:BD:3E:FF:8A:AC:6B:27:55:31:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b8:a2:5e:5a:8e:2e:a3:9d:43:59:83:81:21:6a:a1:41:58: 5e:dc:e8:9e:40:ba:3f:fe:4d:a4:ef:9d:8d:ee:e1:a8:c2:fb: 41:33:da:b8:3d:64:50:a9:a3:74:55:bf:01:d4:31:2b:e3:1a: 06:02:6e:ac:c6:b0:96:4a:69:61:43:ab:6c:40:a8:c2:9e:b7: a2:6a:30:8a:38:ba:49:46:ca:71:ad:67:47:96:b3:f6:9e:2a: 25:06:29:c1:5b:53:6b:00:2f:7a:a2:a7:06:35:da:63:5e:f3: 67:41:ea:c6:7c:7a:65:19:6c:fd:a3:3b:00:75:29:5e:3b:c6: bf:16:ea:af:ee:3a:49:4d:83:65:68:e0:b3:cb:a0:f8:f1:8d: 83:09:1b:b9:0f:1e:88:87:10:27:76:17:b0:b4:d8:06:55:8b: 0a:42:5e:15:cb:96:a7:61:76:e3:31:ff:5f:ce:43:c7:d9:b6: 51:5d:49:80:0c:ed:8b:c0:78:95:0a:d4:a3:c8:c8:a7:82:0c: 77:d0:6a:a6:c7:8f:90:3e:2a:5b:ec:60:25:07:4b:56:cf:0e: aa:2d:67:cd:4e:78:ec:74:e6:9a:50:40:b5:38:a7:73:cc:ca: 02:45:13:2e:f7:04:a1:ce:67:60:1d:a5:b3:28:67:bd:51:28: 80:37:ac:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdw18CSTlcdfyIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmEwMmRkNmYtNjljNy00NmYwLWI2ZmQtOGRiMTM2ZTU1OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHr4sWPUrbmqLB1PSRBrFHADnL8QPpAlKuzo vcdyZkUe+ndfaRjKP2NnGLB0bp8DAWP4A03q8RugRWfkFUEV208kIo35BYpkZT/y y/JZNh6bKd6qEOcEoLzzeK6IIWUJ1H97EbvEDpmqdATZN6RfvPn1vuJNqLJCscEl uvJMmn5L5aqvOH8Tdw1OjFrdODFFIss2ZCQNE63v3xsTOFwhrObYd4TYX2l1yn1r ceOq8AtT1+0vjE0MXEu4XjySMc7GAhzHQunf9bczJBk38UeSBV+mfdzOoggx/X7p Fe1IFVB8NOKSjTGTxK90iQGX2t6FrNu7RKTB94uwkQV2b7R/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw1+MjT+DiU7NO9Pv+KrGsnVTG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvY2I0YTA1ZGItZDlkOS0z YTY2LThiOTgtOTE4ZDZiMTY0ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF24ol5aji6jnUNZg4EhaqFBWF7c6J5Auj/+TaTvnY3u4ajC+0Ez2rg9 ZFCpo3RVvwHUMSvjGgYCbqzGsJZKaWFDq2xAqMKet6JqMIo4uklGynGtZ0eWs/ae KiUGKcFbU2sAL3qipwY12mNe82dB6sZ8emUZbP2jOwB1KV47xr8W6q/uOklNg2Vo 4LPLoPjxjYMJG7kPHoiHECd2F7C02AZViwpCXhXLlqdhduMx/1/OQ8fZtlFdSYAM 7YvAeJUK1KPIyKeCDHfQaqbHj5A+KlvsYCUHS1bPDqotZ81OeOx05ppQQLU4p3PM ygJFEy73BKHOZ2AdpbMoZ71RKIA3rIE= -----END CERTIFICATE-----Generated at Tue Sep 29 05:09:29 2026 by rpki-client