$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/e40baa11-132d-3b7f-bc9c-bfa339ef7ef4.roa File: e40baa11-132d-3b7f-bc9c-bfa339ef7ef4.roa (raw, json) Hash identifier: o3CgAV7OoU1Ro7nfhHuk/YyS5CvyLqtZzPfdwCVHvnk= Subject key identifier: 5B:23:02:51:2F:D7:D0:A4:62:CE:20:D1:96:F1:3E:05:E5:8B:F2:38 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584F49770DBD15D5044F423BE200 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/e40baa11-132d-3b7f-bc9c-bfa339ef7ef4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14362 IP address blocks: 199.33.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:0d:bd:15:d5:04:4f:42:3b:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a7bef10-9237-4731-9de2-ed024bed0e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:d1:df:37:44:b1:37:9e:a3:ff:69:b1:b1: 26:8f:67:8c:b3:b9:ef:bb:26:76:90:7f:6b:8c:03: 13:98:6f:9e:76:5e:85:b3:f7:38:af:77:8b:d2:38: c3:49:96:36:04:f1:73:fe:7b:b9:d2:09:53:82:5d: a8:78:73:a5:ad:37:89:a2:77:82:a2:36:cb:83:89: 57:4c:bc:ce:6d:d0:87:ab:4d:59:d8:d0:c1:1c:6c: 21:13:59:c4:85:6f:da:33:5f:70:2a:83:62:a1:8b: 16:68:87:76:cd:2e:f7:13:09:1c:4d:03:ed:5e:89: 2e:8b:ce:65:69:f2:9c:0a:95:c4:fa:40:9c:69:42: 76:43:86:0c:87:dd:d0:f6:4b:62:d8:15:6b:61:95: 8f:23:db:20:1e:62:0d:52:c5:e4:9d:e6:c5:90:05: 81:ff:e0:26:dc:ed:94:b8:36:57:da:b0:36:58:5d: 31:cf:fd:3d:32:aa:b3:ca:32:d7:f8:10:f3:90:af: e8:b5:c6:39:46:11:21:1e:79:66:e6:68:d4:ef:1d: a3:07:14:64:de:d5:95:8d:e0:af:48:24:6a:29:24: fa:db:1c:c6:93:94:f5:42:e1:63:d4:ab:84:a1:d1: 9d:7c:1c:f5:93:67:e5:a2:0e:d7:b4:f4:10:fc:75: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:23:02:51:2F:D7:D0:A4:62:CE:20:D1:96:F1:3E:05:E5:8B:F2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/e40baa11-132d-3b7f-bc9c-bfa339ef7ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:da:21:66:68:80:f5:b4:00:e3:6c:39:51:6a:51:f5:7d:73: 5b:68:6d:93:1c:94:35:83:f9:24:69:d3:df:a4:64:f0:b0:e6: c0:fd:2e:6d:a4:8a:88:7f:f9:97:d9:ba:e5:51:b3:e6:09:9a: 54:7b:8a:83:85:01:9d:2b:86:d5:09:e2:40:da:71:ed:13:33: 2b:be:45:85:5f:96:e3:24:74:89:c2:7f:85:a7:ac:8e:62:bd: b4:21:b7:02:56:ed:c7:61:ad:58:2b:07:8b:7a:66:54:f9:be: f6:c5:5d:3c:ec:07:a7:9d:9e:5b:96:38:06:8e:17:36:20:d7: a6:94:e8:0a:50:2e:03:5b:6f:42:8c:da:38:0f:cd:ae:67:69: c0:e0:77:5b:e5:ba:f4:6b:db:fb:52:9b:17:54:e8:70:c1:4a: 58:6c:68:9f:bc:b8:d9:aa:cd:33:3a:6a:5a:a4:7d:9d:9e:ee: 5e:21:3c:93:f2:a8:45:58:34:06:e2:bd:d6:92:13:ac:60:1a: 54:97:6c:c4:b3:1e:57:55:0f:cd:8d:74:43:5a:bf:3b:e6:d0: 8c:0d:0b:96:48:64:83:98:77:c6:45:15:09:80:64:da:48:c1: bc:66:82:8b:ee:ca:d1:b7:a3:e9:c5:fd:34:7f:21:df:dd:3b: 1d:f1:78:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdw29FdUET0I74gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2E3YmVmMTAtOTIzNy00NzMxLTlkZTItZWQwMjRiZWQwZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmjR3zdEsTeeo/9psbEmj2eMs7nvuyZ2kH9r jAMTmG+edl6Fs/c4r3eL0jjDSZY2BPFz/nu50glTgl2oeHOlrTeJoneCojbLg4lX TLzObdCHq01Z2NDBHGwhE1nEhW/aM19wKoNioYsWaId2zS73EwkcTQPtXokui85l afKcCpXE+kCcaUJ2Q4YMh93Q9kti2BVrYZWPI9sgHmINUsXknebFkAWB/+Am3O2U uDZX2rA2WF0xz/09MqqzyjLX+BDzkK/otcY5RhEhHnlm5mjU7x2jBxRk3tWVjeCv SCRqKST62xzGk5T1QuFj1KuEodGdfBz1k2flog7XtPQQ/HU8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsjAlEv19CkYs4g0ZbxPgXli/I4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvZTQwYmFhMTEtMTMyZC0z YjdmLWJjOWMtYmZhMzM5ZWY3ZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPaIWZogPW0AONsOVFqUfV9c1tobZMclDWD+SRp09+kZPCw5sD9Lm2k ioh/+ZfZuuVRs+YJmlR7ioOFAZ0rhtUJ4kDace0TMyu+RYVfluMkdInCf4WnrI5i vbQhtwJW7cdhrVgrB4t6ZlT5vvbFXTzsB6ednluWOAaOFzYg16aU6ApQLgNbb0KM 2jgPza5nacDgd1vluvRr2/tSmxdU6HDBSlhsaJ+8uNmqzTM6alqkfZ2e7l4hPJPy qEVYNAbivdaSE6xgGlSXbMSzHldVD82NdENavzvm0IwNC5ZIZIOYd8ZFFQmAZNpI wbxmgovuytG3o+nF/TR/Id/dOx3xeO8= -----END CERTIFICATE-----Generated at Sat Oct 3 13:19:30 2026 by rpki-client