$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa File: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (raw, json) Hash identifier: W938gBpCdWuFcF8eSZXQ7VBUwdZ9ax/9w58TVeoyWXA= Subject key identifier: EA:81:7B:F5:0B:CD:6F:3E:6E:C2:5E:E8:EE:FE:52:54:C2:E7:23:E8 Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Certificate serial: 010D0C9F4328584F13024AC59B4BBA6C5183F400 Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 40346 IP address blocks: 199.48.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4a:c5:9b:4b:ba:6c:51:83:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=41ce3a12-f6da-4d4e-a593-4c30c5046544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:e6:36:a1:00:ce:e5:3a:eb:20:d9:d0:b8: f6:2f:72:76:7d:4a:ca:22:53:db:79:17:9f:48:85: 34:32:01:07:20:de:7e:00:bc:b5:d6:f1:de:dd:85: 16:ac:65:4c:fc:6d:e6:24:77:95:3a:73:72:7f:b4: 39:1d:a0:aa:c7:06:4a:06:c2:b7:a4:8a:0b:a4:29: a5:7b:cf:24:3b:40:6b:7e:d6:68:73:6f:9e:46:f0: cc:80:ed:63:f3:28:84:93:e1:fe:21:00:ea:b6:81: 49:f8:67:6b:76:09:05:dc:1e:ba:f2:92:e0:ea:3a: 2e:0f:a7:4e:af:e3:36:d0:da:1c:50:67:84:37:08: 1d:d8:d4:2a:85:42:d7:1d:7a:53:65:15:f0:d2:72: 36:5d:2c:59:6b:ef:e2:2b:ec:44:b2:e1:0b:86:aa: 9f:b4:e2:0d:1e:2f:81:b8:6c:1b:63:ef:74:07:1a: bf:0b:cd:86:b6:35:1e:26:1f:3e:13:30:98:50:f9: 04:e6:8d:58:78:43:dd:5e:03:aa:58:60:5b:ab:53: c6:41:04:cf:d3:3f:09:3f:20:2c:81:7a:4f:b6:0c: 3d:20:35:21:a8:4e:3e:dd:0a:44:ec:76:41:99:08: 3d:fd:ac:04:74:9a:dc:b3:17:3b:81:05:c5:22:3a: 07:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:7B:F5:0B:CD:6F:3E:6E:C2:5E:E8:EE:FE:52:54:C2:E7:23:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl X509v3 Authority Key Identifier: keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer sbgp-ipAddrBlock: critical IPv4: 199.48.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6e:62:09:25:97:23:bc:5f:25:ba:2c:70:d0:6c:8f:df:4d: dc:27:b9:1b:70:c4:90:7c:6e:3b:de:a3:25:65:42:23:7f:c4: e1:f9:f6:01:ca:97:9a:c4:14:f1:56:dd:8d:99:1b:3f:7d:f4: 61:fa:59:bf:4b:ef:96:05:a1:2c:24:b3:9b:32:79:06:e7:9b: 16:9c:2d:8d:88:63:cc:dc:85:dd:23:87:38:64:3d:78:e5:55: 17:20:ce:40:98:d1:96:47:5d:c6:0f:7f:db:de:72:67:a2:c3: 12:c1:00:55:9b:2b:11:34:69:bc:2c:a1:fa:0a:ae:cb:56:cd: 9a:8f:32:2f:91:51:e3:7a:be:b0:fa:56:ff:63:31:3c:71:a8: 8b:7e:df:ff:80:19:a5:3c:b3:e5:16:2a:2a:c8:59:d8:17:26: ad:a3:c8:15:c7:a3:01:ad:89:39:05:36:e6:bc:fd:fd:73:98: c8:25:c7:41:16:f3:16:de:15:a1:6f:e7:c3:7f:d3:e2:15:2c: b9:7a:b7:9f:d5:dd:9a:06:14:73:4e:57:98:bc:15:3d:aa:2e: 87:52:81:52:fa:d8:a8:aa:2b:97:be:73:be:96:d1:8d:74:a3: d3:33:c8:1f:14:d2:44:9e:8b:69:25:2d:2a:d5:88:a9:b9:8e: 39:23:b8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkrFm0u6bFGD9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl ZTFjMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NDFjZTNhMTItZjZkYS00ZDRlLWE1OTMtNGMzMGM1MDQ2NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYDmNqEAzuU66yDZ0Lj2L3J2fUrKIlPbeRef SIU0MgEHIN5+ALy11vHe3YUWrGVM/G3mJHeVOnNyf7Q5HaCqxwZKBsK3pIoLpCml e88kO0BrftZoc2+eRvDMgO1j8yiEk+H+IQDqtoFJ+GdrdgkF3B668pLg6jouD6dO r+M20NocUGeENwgd2NQqhULXHXpTZRXw0nI2XSxZa+/iK+xEsuELhqqftOINHi+B uGwbY+90Bxq/C82GtjUeJh8+EzCYUPkE5o1YeEPdXgOqWGBbq1PGQQTP0z8JPyAs gXpPtgw9IDUhqE4+3QpE7HZBmQg9/awEdJrcsxc7gQXFIjoHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqBe/ULzW8+bsJe6O7+UlTC5yPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvY2RkYmJkMWEtNmExNC0z YzQyLThmMWEtYzYzYzE3ZTI3OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy ZDg3M2VlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVuYgkllyO8XyW6LHDQbI/fTdwnuRtwxJB8bjveoyVlQiN/xOH59gHK l5rEFPFW3Y2ZGz999GH6Wb9L75YFoSwks5syeQbnmxacLY2IY8zchd0jhzhkPXjl VRcgzkCY0ZZHXcYPf9vecmeiwxLBAFWbKxE0abwsofoKrstWzZqPMi+RUeN6vrD6 Vv9jMTxxqIt+3/+AGaU8s+UWKirIWdgXJq2jyBXHowGtiTkFNua8/f1zmMglx0EW 8xbeFaFv58N/0+IVLLl6t5/V3ZoGFHNOV5i8FT2qLodSgVL62KiqK5e+c76W0Y10 o9MzyB8U0kSei2klLSrViKm5jjkjuFY= -----END CERTIFICATE-----Generated at Fri Oct 9 02:03:25 2026 by rpki-client