$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa File: 18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa (raw, json) Hash identifier: nCH5w8sQl7b/IaWtykRhpO834A/SkrtecCJKj0Zf2Vg= Subject key identifier: B7:CA:BB:7F:EE:96:37:EB:9F:30:6E:CC:7E:0E:47:F7:33:70:B9:65 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584EEA875557247D1DD99B69F8C0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 22709 IP address blocks: 199.101.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:55:57:24:7d:1d:d9:9b:69:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=44977847-102a-4082-9895-9194903b6c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:a1:a3:60:0e:81:78:7f:35:ad:5f:74:8a: ee:a8:cd:b2:48:86:f7:80:64:fa:f3:9c:01:03:6e: e1:4c:f8:a4:7b:5f:25:00:98:e4:96:d8:60:f8:90: ed:ca:bc:50:c4:0d:f7:20:16:c6:92:9f:c0:f5:f3: 87:bc:63:44:9f:4f:dc:47:fd:ec:d4:76:19:08:7f: b4:35:0f:f8:34:c9:47:4e:4f:69:5f:a8:ef:06:ba: 1d:2d:22:ed:65:f2:50:78:17:86:50:f6:9a:49:45: 27:7f:14:6d:74:b0:44:fa:7a:42:0c:32:1a:59:f2: 0a:93:f8:86:de:79:a2:28:57:ea:8b:c6:9a:1c:9c: be:f0:30:2a:33:76:e4:7b:77:9c:e0:4c:10:34:2d: fc:33:f1:e0:50:76:63:97:36:74:70:39:08:66:b5: 4f:a1:fb:ec:b9:40:02:d2:37:05:1f:9d:d5:c6:b1: 37:a6:73:5e:67:97:1d:cd:c4:19:8c:30:7e:6b:35: 7b:6d:ec:92:69:cd:55:27:b9:89:2e:e2:74:f3:94: b0:17:c8:d1:3e:55:44:e1:a9:a0:d7:bb:93:41:56: 33:9a:8d:14:20:32:32:13:06:4f:dd:c2:be:cc:f4: a3:2c:80:8e:19:5c:7c:45:82:7d:1a:d1:cf:54:39: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:BB:7F:EE:96:37:EB:9F:30:6E:CC:7E:0E:47:F7:33:70:B9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 199.101.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:49:b3:75:81:bf:89:14:f6:30:cd:2a:51:12:9c:af:91:79: 1d:0a:c6:44:ba:5c:9e:aa:f5:f9:9d:f1:28:db:89:f6:ed:f4: 42:15:9c:c9:0e:b0:78:2d:78:13:57:ff:3c:9a:b6:3c:62:1f: 25:c9:1f:48:e7:3c:dd:09:44:29:90:55:12:1f:58:b7:22:c7: 74:cb:4e:64:16:9a:4e:eb:6d:0c:2f:f0:b6:d1:f9:fd:e9:db: 52:b3:9e:3c:4c:4f:bb:73:b8:e4:fe:75:ad:18:73:90:c1:19: f7:7f:7e:4a:7b:a4:54:0d:bf:64:3f:d6:30:4e:59:a5:02:3f: 01:9f:35:3b:6f:46:52:ef:a7:2a:de:cb:64:5e:f4:8b:1c:d4: e6:bc:bd:ac:c9:1e:72:62:0c:50:da:14:40:bd:17:d0:ce:df: d0:54:57:82:96:c4:cb:b6:52:01:6e:09:73:e4:03:b2:6d:1d: f7:f4:d8:61:f2:bc:d0:86:b4:79:b6:5f:8c:b0:42:7e:bd:28: 36:a2:33:09:07:82:35:df:ec:8c:aa:e7:5c:a8:f5:eb:7a:10: 7f:44:87:6d:fa:12:a0:3f:dd:dc:18:d9:79:55:db:cf:a0:bc: 32:4c:e3:45:f6:4b:56:65:fa:f3:3e:fe:82:39:50:49:04:62: bb:84:25:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1VXJH0d2Ztp+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ5Nzc4NDctMTAyYS00MDgyLTk4OTUtOTE5NDkwM2I2Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhWho2AOgXh/Na1fdIruqM2ySIb3gGT685wB A27hTPike18lAJjklthg+JDtyrxQxA33IBbGkp/A9fOHvGNEn0/cR/3s1HYZCH+0 NQ/4NMlHTk9pX6jvBrodLSLtZfJQeBeGUPaaSUUnfxRtdLBE+npCDDIaWfIKk/iG 3nmiKFfqi8aaHJy+8DAqM3bke3ec4EwQNC38M/HgUHZjlzZ0cDkIZrVPofvsuUAC 0jcFH53VxrE3pnNeZ5cdzcQZjDB+azV7beySac1VJ7mJLuJ085SwF8jRPlVE4amg 17uTQVYzmo0UIDIyEwZP3cK+zPSjLICOGVx8RYJ9GtHPVDmvXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfKu3/uljfrnzBuzH4OR/czcLllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvMThlNzQ5ZDEtZjBlMy0z ZjI3LTk1OTgtZGUyZWI3YzUzZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhJs3WBv4kU9jDNKlESnK+ReR0KxkS6XJ6q9fmd8Sjbifbt9EIVnMkO sHgteBNX/zyatjxiHyXJH0jnPN0JRCmQVRIfWLcix3TLTmQWmk7rbQwv8LbR+f3p 21KznjxMT7tzuOT+da0Yc5DBGfd/fkp7pFQNv2Q/1jBOWaUCPwGfNTtvRlLvpyre y2Re9Isc1Oa8vazJHnJiDFDaFEC9F9DO39BUV4KWxMu2UgFuCXPkA7JtHff02GHy vNCGtHm2X4ywQn69KDaiMwkHgjXf7Iyq51yo9et6EH9Eh236EqA/3dwY2XlV28+g vDJM40X2S1Zl+vM+/oI5UEkEYruEJRg= -----END CERTIFICATE-----Generated at Sun Sep 27 01:24:30 2026 by rpki-client