$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa File: 1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json) Hash identifier: WCsdaKXuK+9Oxq5EjN8Lf5sUhWlh5HiYIUNsM9p0CCc= Subject key identifier: C1:DA:6E:F1:10:20:7A:23:73:D3:0E:35:32:81:63:95:FF:1D:B9:40 Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Certificate serial: 010D0C9F4328584F3CE2A310B58C67F4ABF5AD00 Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 3855 IP address blocks: 199.96.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a3:10:b5:8c:67:f4:ab:f5:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=97d6ce82-31c6-4cef-8405-2ff041fc502e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:a7:b9:15:28:84:4a:67:54:8c:fb:d0:d8: 45:39:ac:d4:7a:6f:a0:54:a8:6c:78:97:ca:92:55: 1b:47:3f:36:94:b1:6e:87:42:45:2e:e7:17:78:99: ac:37:13:57:2f:79:c6:71:a8:a4:2c:fb:1b:a8:58: 2d:5f:04:59:ad:df:36:d6:ed:99:0a:cb:0b:f3:33: 8d:a7:c6:90:ba:26:fb:b8:fa:18:55:3e:4c:7c:06: d0:87:cc:d4:8a:17:25:fd:87:2a:f7:69:51:f6:de: 11:ac:42:47:a6:6e:f8:a6:84:d1:57:2d:9f:e0:a6: 3a:5f:cb:69:8a:24:ca:47:3d:db:4e:f3:ef:fa:8a: b8:07:7d:42:03:66:2d:a2:1f:1e:41:f8:df:4a:a0: c0:7d:7b:33:94:7b:5d:2a:c8:72:e4:72:36:2b:be: d1:23:f6:d0:34:8b:d4:11:49:b8:4f:1d:4f:da:f7: c7:d6:66:87:10:b5:bf:62:12:77:29:df:73:07:76: e3:72:57:9e:0e:69:a6:3d:c3:d9:f2:8a:cd:11:91: 41:b0:e9:68:0c:d7:49:72:5a:a2:1e:78:3f:12:a6: 28:fc:bd:c8:b7:05:a3:c6:58:f9:27:e1:5a:f1:f4: fd:18:66:32:28:45:ed:8d:2d:cf:30:91:0e:d2:4a: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:6E:F1:10:20:7A:23:73:D3:0E:35:32:81:63:95:FF:1D:B9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl X509v3 Authority Key Identifier: keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer sbgp-ipAddrBlock: critical IPv4: 199.96.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b6:d1:1c:e6:a9:b7:54:69:12:af:a5:33:f7:be:5e:9e:ac: 3f:dd:4e:d9:eb:90:da:0c:7c:ee:4f:d2:9d:eb:d9:0f:5e:0a: 31:c3:00:79:c6:f6:cc:02:b9:20:9e:de:b7:5f:b5:8d:a3:8d: e4:8e:60:fb:b1:80:b4:24:0c:48:b1:4e:e2:33:86:87:fa:a1: d7:f5:9d:0d:d7:b5:18:07:3f:c6:55:ce:b0:5f:f6:2f:d6:2d: a2:02:4b:2e:bb:7e:04:fa:83:6c:b6:fd:67:85:0e:03:9e:24: 0c:f3:4d:97:61:bc:82:89:2a:0d:d7:6e:ca:0b:5a:1e:80:b8: 8f:1b:70:da:8e:b5:4d:01:b0:c1:a8:25:ac:fd:f8:0c:77:a7: 3d:3e:b5:1a:6c:09:70:a6:f3:a5:ee:2b:b5:ce:a3:68:24:2e: ef:7f:ca:7b:3d:e2:0d:2a:2e:c8:8d:bd:6b:86:68:e5:ca:62: 70:55:4b:74:e9:1e:94:c6:9d:f3:f3:74:92:6f:3c:c6:e2:9b: 31:17:fa:aa:28:50:8b:7c:a9:92:5b:e1:ef:83:24:54:ae:79: 8d:cd:e2:34:cf:c0:d2:de:4a:9c:83:db:80:5f:02:28:90:52: 28:60:f6:b4:fb:71:a6:6a:c0:21:b3:42:e2:ce:d2:07:43:eb: 81:34:9f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qMQtYxn9Kv1rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk Mzc4MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OTdkNmNlODItMzFjNi00Y2VmLTg0MDUtMmZmMDQxZmM1MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPqnuRUohEpnVIz70NhFOazUem+gVKhseJfK klUbRz82lLFuh0JFLucXeJmsNxNXL3nGcaikLPsbqFgtXwRZrd821u2ZCssL8zON p8aQuib7uPoYVT5MfAbQh8zUihcl/Ycq92lR9t4RrEJHpm74poTRVy2f4KY6X8tp iiTKRz3bTvPv+oq4B31CA2Ytoh8eQfjfSqDAfXszlHtdKshy5HI2K77RI/bQNIvU EUm4Tx1P2vfH1maHELW/YhJ3Kd9zB3bjcleeDmmmPcPZ8orNEZFBsOloDNdJclqi Hng/EqYo/L3ItwWjxlj5J+Fa8fT9GGYyKEXtjS3PMJEO0kpUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHabvEQIHojc9MONTKBY5X/HblAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1 YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvMWYxNDk4YTYtMmJlYy0z OTc2LTg0YTYtNzJjNWJhYTAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm20RzmqbdUaRKvpTP3vl6erD/dTtnrkNoMfO5P0p3r2Q9eCjHDAHnG 9swCuSCe3rdftY2jjeSOYPuxgLQkDEixTuIzhof6odf1nQ3XtRgHP8ZVzrBf9i/W LaICSy67fgT6g2y2/WeFDgOeJAzzTZdhvIKJKg3XbsoLWh6AuI8bcNqOtU0BsMGo Jaz9+Ax3pz0+tRpsCXCm86XuK7XOo2gkLu9/yns94g0qLsiNvWuGaOXKYnBVS3Tp HpTGnfPzdJJvPMbimzEX+qooUIt8qZJb4e+DJFSueY3N4jTPwNLeSpyD24BfAiiQ Uihg9rT7caZqwCGzQuLO0gdD64E0n+4= -----END CERTIFICATE-----Generated at Wed Sep 23 17:35:34 2026 by rpki-client