$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa File: 8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa (raw, json) Hash identifier: Xq769wGf61G7Wc9Vu38iqBlzAua+BuEsTkX/BjfXIF4= Subject key identifier: 91:A4:4B:64:0F:D1:0A:04:D1:F2:96:70:01:C6:2A:30:9E:BD:D6:05 Certificate issuer: /CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Certificate serial: 010D0C9F4328584F4C3D4E139FEA179EE51B09C0 Authority key identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 394026 IP address blocks: 199.20.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4e:13:9f:ea:17:9e:e5:1b:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d3ca8481-b87e-47bb-9c3b-e7215426422d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:fb:14:ff:53:f8:42:1b:b6:de:23:ae:1c: 8b:7b:90:08:e0:cc:42:6a:da:70:1f:0d:5c:45:74: 8b:af:28:f1:f7:09:6a:8c:af:52:3b:15:78:d6:81: e4:7f:8f:b0:44:60:63:47:4b:02:00:71:9c:2e:92: f9:6c:c3:41:b4:b9:60:14:4c:c1:6c:e0:17:98:91: 7f:56:a1:03:af:d3:d7:3d:0b:92:94:6a:3c:8a:be: cd:f2:8c:cc:47:75:0d:cd:d9:11:48:75:4d:45:d6: 46:25:89:b8:cb:da:8e:3f:7d:46:7f:a1:f4:25:22: 72:a6:1d:0d:f0:df:fb:48:14:56:00:9a:9f:b1:12: d9:d9:f2:fa:36:48:93:f1:c9:a2:c0:f2:c1:67:b8: a6:da:0d:40:68:59:6a:c5:56:2a:a9:bd:e7:51:7c: a1:91:67:b1:73:3a:59:23:2e:6c:53:44:d5:11:67: fd:60:02:7d:25:27:9f:b1:bb:69:9e:da:44:07:e4: a1:b7:fd:b5:6c:f6:f1:e0:c6:c0:27:cd:ec:32:87: 57:3d:6b:ff:d8:ea:b1:7e:6c:11:be:c6:21:0e:f6: 95:ac:00:5f:f3:d6:ec:e1:2c:22:15:49:df:ac:b0: 19:17:6f:c2:56:16:16:bb:bf:2b:9c:5d:a6:aa:9d: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:4B:64:0F:D1:0A:04:D1:F2:96:70:01:C6:2A:30:9E:BD:D6:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl X509v3 Authority Key Identifier: keyid:8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer sbgp-ipAddrBlock: critical IPv4: 199.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1e:1b:6f:24:91:74:f6:eb:05:a9:3a:03:31:39:34:af:21: 69:b8:9d:37:d2:94:88:26:9a:dc:b0:f5:aa:07:b3:73:ec:90: c1:5f:fc:0e:a2:53:27:c2:41:62:40:d8:6f:0c:a7:e8:56:53: 7b:38:dd:98:ff:81:45:ca:2c:95:c0:e2:02:2a:50:cd:38:b9: 29:d9:7c:43:3b:7d:f5:b8:29:c4:e9:cf:6b:32:33:40:b5:43: 2c:aa:2f:6d:8f:fc:72:fe:54:f7:c2:47:53:17:1e:5d:c9:55: 65:df:19:ed:26:5b:0d:c3:1f:d5:db:4d:bf:0b:a6:6a:2d:57: dc:9e:00:9d:70:60:d4:19:79:52:43:3c:9d:28:78:6c:14:33: 98:4f:6b:06:36:40:4b:04:01:63:64:93:55:0c:a3:bc:f0:61: d1:57:3b:47:91:b6:e8:ae:7a:e2:f8:a6:ae:ce:2d:93:4c:a7: 3c:69:12:79:b3:37:f6:67:47:75:d7:76:13:d0:6f:91:59:cb: b6:9f:2b:be:a4:b8:49:7f:5a:90:04:56:5f:2f:fa:6f:67:a8: c8:e5:46:62:2b:7c:4d:b1:e4:ac:91:66:cc:3b:1a:1a:73:47: a9:14:9f:c0:22:e6:f4:40:cd:de:30:9a:f8:29:02:5e:2d:ba: 33:20:0a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPU4Tn+oXnuUbCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdiOTIyZDUtZWI4ZS00MDI4LWFiYTgtMmUyODJjMGI1 ZTc2MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDNjYTg0ODEtYjg3ZS00N2JiLTljM2ItZTcyMTU0MjY0MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMb7FP9T+EIbtt4jrhyLe5AI4MxCatpwHw1c RXSLryjx9wlqjK9SOxV41oHkf4+wRGBjR0sCAHGcLpL5bMNBtLlgFEzBbOAXmJF/ VqEDr9PXPQuSlGo8ir7N8ozMR3UNzdkRSHVNRdZGJYm4y9qOP31Gf6H0JSJyph0N 8N/7SBRWAJqfsRLZ2fL6NkiT8cmiwPLBZ7im2g1AaFlqxVYqqb3nUXyhkWexczpZ Iy5sU0TVEWf9YAJ9JSefsbtpntpEB+Sht/21bPbx4MbAJ83sModXPWv/2OqxfmwR vsYhDvaVrABf89bs4SwiFUnfrLAZF2/CVhYWu78rnF2mqp0SKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGkS2QP0QoE0fKWcAHGKjCevdYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80N2I5 MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMwYjVlNzYvOGM1YjI1ZjktM2ZiNS0z NjZlLWE1NGQtNjJjMDQ4MWVjMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDdiOTIyZDUtZWI4ZS00MDI4LWFi YTgtMmUyODJjMGI1ZTc2LzQ3YjkyMmQ1LWViOGUtNDAyOC1hYmE4LTJlMjgyYzBi NWU3Ni5jcmwwHwYDVR0jBBgwFoAUjqrnZALdtYpJrZ2Djyippda33J0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4 MmMwYjVlNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8eG28kkXT26wWpOgMxOTSvIWm4nTfSlIgmmtyw9aoHs3PskMFf/A6i UyfCQWJA2G8Mp+hWU3s43Zj/gUXKLJXA4gIqUM04uSnZfEM7ffW4KcTpz2syM0C1 QyyqL22P/HL+VPfCR1MXHl3JVWXfGe0mWw3DH9XbTb8LpmotV9yeAJ1wYNQZeVJD PJ0oeGwUM5hPawY2QEsEAWNkk1UMo7zwYdFXO0eRtuiueuL4pq7OLZNMpzxpEnmz N/ZnR3XXdhPQb5FZy7afK76kuEl/WpAEVl8v+m9nqMjlRmIrfE2x5KyRZsw7Ghpz R6kUn8Ai5vRAzd4wmvgpAl4tujMgCsk= -----END CERTIFICATE-----Generated at Sun Oct 4 12:59:32 2026 by rpki-client