$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa File: a2c3132b-e476-3eef-9ccd-b420407c2963.roa (raw, json) Hash identifier: cZD2iBAZiZLbfks+zRRY3SQS5pDi8cOqHNYM7sRxH18= Subject key identifier: C7:28:EF:E1:05:8A:E1:19:B7:5F:9C:28:80:0F:53:86:E6:5F:36:C8 Certificate issuer: /CN=1889ddcb-202e-4e86-8fb3-63c498cba935 Certificate serial: 010D0C9F4328584F49887543E4F8079A9784CEE0 Authority key identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401550 IP address blocks: 199.36.25.0/24 maxlen: 24 2602:f755::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:75:43:e4:f8:07:9a:97:84:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1889ddcb-202e-4e86-8fb3-63c498cba935 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3907a1b7-a2a1-4fc3-99d3-da723e9d60ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9f:2a:2b:65:d1:6f:af:ef:44:77:52:60:f7: d7:60:b1:bf:f9:17:b0:c0:c4:70:0a:8f:77:08:e1: 71:67:5a:7f:3c:75:99:07:2c:b4:24:33:cb:dd:1e: 61:29:6a:0f:cd:06:05:10:ca:ed:f7:ec:b6:83:e7: eb:8d:0c:d1:6b:39:92:47:27:d4:2b:3e:d0:1d:e4: 08:ab:34:9b:b1:0e:c9:a4:f9:b6:76:59:30:02:4d: 25:f5:73:ef:0a:d2:07:65:0b:b7:95:f2:96:a8:97: ca:a2:1c:29:8d:c9:5d:68:e3:26:95:48:d2:99:ae: 51:e6:2a:bb:15:d4:97:c6:10:4e:48:2f:0d:ff:b7: b8:e2:54:1d:c8:0a:c3:a5:2e:07:20:f0:80:e6:76: 68:68:34:a1:be:7b:6c:bd:ac:97:5a:c3:85:94:66: b7:83:39:ee:88:20:97:12:86:f3:b6:79:60:f2:8b: 74:f0:84:6c:c5:1a:97:a1:07:c8:bf:e1:4a:6b:87: c5:40:4c:32:bc:98:37:01:0a:94:2a:b2:8f:16:fd: 32:bd:32:d8:92:5d:3c:c1:a1:65:21:6b:3a:c4:41: 35:3d:9d:d4:78:b4:dc:59:fa:4b:af:0b:a7:a4:98: 09:34:ab:2e:9c:92:07:19:01:13:1b:71:79:39:28: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:28:EF:E1:05:8A:E1:19:B7:5F:9C:28:80:0F:53:86:E6:5F:36:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl X509v3 Authority Key Identifier: keyid:7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer sbgp-ipAddrBlock: critical IPv4: 199.36.25.0/24 IPv6: 2602:f755::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1f:15:9f:8c:fe:0d:c6:12:3d:d3:c0:53:8a:6f:b9:4b:b7: a0:30:ba:d8:b4:a1:04:9e:a5:ca:8f:9e:32:ae:1c:b8:82:8c: 1f:64:e2:ca:5f:35:2e:04:84:5e:e2:a7:c0:7a:bf:10:ed:13: 41:52:cb:be:30:5e:87:60:6a:a1:7b:26:43:92:e1:fa:bc:ee: af:b0:e4:df:ba:e3:54:f3:27:ac:83:a2:12:5d:74:64:cc:42: dd:3f:6c:1d:8b:47:9a:32:42:51:d6:20:cc:72:50:d0:ac:60: f0:11:69:d3:27:6a:d2:c7:e2:5b:c3:35:c6:97:60:8d:d1:ab: d8:b5:dc:5b:18:31:13:e9:27:82:28:9e:26:09:3a:4f:e3:69: 4f:c5:05:89:d0:2c:e9:b0:4b:97:bd:23:63:aa:3f:45:a3:47: 3a:aa:00:2e:9b:d5:09:c7:8c:15:ee:36:00:37:15:15:19:a3: ff:89:24:10:f4:79:2b:ef:a6:72:9a:7d:a5:63:31:b8:72:60: 59:5f:68:cc:3b:22:f7:79:26:12:d8:6c:ff:c1:26:86:29:f1: 55:a0:e5:da:88:13:20:ab:7e:04:57:d8:4e:27:b8:07:a9:0a: b0:88:0d:ed:8c:c1:cf:28:19:4b:e0:9a:b0:48:5c:2d:82:3c: 6c:f4:f5:97 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JiHVD5PgHmpeEzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4OWRkY2ItMjAyZS00ZTg2LThmYjMtNjNjNDk4Y2Jh OTM1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzkwN2ExYjctYTJhMS00ZmMzLTk5ZDMtZGE3MjNlOWQ2MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp8qK2XRb6/vRHdSYPfXYLG/+RewwMRwCo93 COFxZ1p/PHWZByy0JDPL3R5hKWoPzQYFEMrt9+y2g+frjQzRazmSRyfUKz7QHeQI qzSbsQ7JpPm2dlkwAk0l9XPvCtIHZQu3lfKWqJfKohwpjcldaOMmlUjSma5R5iq7 FdSXxhBOSC8N/7e44lQdyArDpS4HIPCA5nZoaDShvntsvayXWsOFlGa3gznuiCCX Eobztnlg8ot08IRsxRqXoQfIv+FKa4fFQEwyvJg3AQqUKrKPFv0yvTLYkl08waFl IWs6xEE1PZ3UeLTcWfpLrwunpJgJNKsunJIHGQETG3F5OShkNQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMco7+EFiuEZt1+cKIAPU4bmXzbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xODg5 ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0OThjYmE5MzUvYTJjMzEzMmItZTQ3Ni0z ZWVmLTljY2QtYjQyMDQwN2MyOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTg4OWRkY2ItMjAyZS00ZTg2LThm YjMtNjNjNDk4Y2JhOTM1LzE4ODlkZGNiLTIwMmUtNGU4Ni04ZmIzLTYzYzQ5OGNi YTkzNS5jcmwwHwYDVR0jBBgwFoAUe7xubQNRZo+yZciVOWEgqH6i/uAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xODg5ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0 OThjYmE5MzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxyQZMA4E AgACMAgDBgAmAvdVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHHxWfjP4NxhI908BTim+5S7egMLrYtKEE nqXKj54yrhy4gowfZOLKXzUuBIRe4qfAer8Q7RNBUsu+MF6HYGqheyZDkuH6vO6v sOTfuuNU8yesg6ISXXRkzELdP2wdi0eaMkJR1iDMclDQrGDwEWnTJ2rSx+JbwzXG l2CN0avYtdxbGDET6SeCKJ4mCTpP42lPxQWJ0CzpsEuXvSNjqj9Fo0c6qgAum9UJ x4wV7jYANxUVGaP/iSQQ9Hkr76Zymn2lYzG4cmBZX2jMOyL3eSYS2Gz/wSaGKfFV oOXaiBMgq34EV9hOJ7gHqQqwiA3tjMHPKBlL4JqwSFwtgjxs9PWX -----END CERTIFICATE-----Generated at Tue Oct 6 14:33:53 2026 by rpki-client