$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/80f7ffb0-6a48-3986-8e80-c7937e9f8241.roa File: 80f7ffb0-6a48-3986-8e80-c7937e9f8241.roa (raw, json) Hash identifier: PRYjRzKFH8so/pEKq6XpmDdZkj4a5i1LA2AC+sLo21k= Subject key identifier: 34:D1:A5:B4:C2:A8:0B:D3:1E:5D:CB:D4:14:E4:7E:A0:E7:0F:12:72 Certificate issuer: /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Certificate serial: 010D0C9F4328584F542E9FAA321FFD3C20DEDF80 Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/80f7ffb0-6a48-3986-8e80-c7937e9f8241.roa Signing time: Mon 28 Sep 2026 21:17:18 +0000 ROA not before: Mon 28 Sep 2026 21:17:18 +0000 ROA not after: Sun 27 Dec 2026 22:17:18 +0000 asID: 32586 IP address blocks: 199.102.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:2e:9f:aa:32:1f:fd:3c:20:de:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Validity Not Before: Sep 28 21:17:18 2026 GMT Not After : Dec 27 22:17:18 2026 GMT Subject: CN=b5ce6f54-3e15-4043-8c95-3bf33b73fa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:ed:bc:68:6f:2f:c6:7c:90:6d:28:fa:f2: f3:e7:ef:92:49:11:fa:3a:3d:69:5b:af:ca:15:83: 27:c0:43:30:88:9a:e7:54:27:aa:99:4c:08:e4:db: 4b:47:24:e0:eb:13:00:44:d0:f0:55:ca:79:a3:67: bd:c6:07:29:d8:cc:9f:ec:15:20:fb:8f:bd:98:68: b0:39:f7:65:7c:74:56:e6:3e:e7:90:ab:3e:7f:40: 90:e4:4a:b7:4a:1e:b5:45:b7:7a:e2:d2:71:4f:d5: 95:99:79:9b:63:7d:15:be:ec:a6:e2:c1:46:6b:8c: a5:b0:5f:f9:c3:11:f2:18:17:6f:2a:0c:2a:16:c4: e2:11:54:89:2f:c4:fd:63:77:bc:18:81:9c:4a:c0: ca:60:91:77:fd:3f:00:55:11:33:01:ed:95:03:6b: b5:49:bf:1b:7d:00:81:90:54:81:c9:1c:d7:5d:7d: a8:4e:9d:63:18:8c:e7:9f:ef:e1:a5:46:52:41:05: 31:57:e0:d2:e6:78:3b:96:74:22:ce:09:ab:27:06: 76:34:32:71:e4:7b:ff:ba:9f:62:02:40:33:68:21: 30:29:27:a3:47:4d:38:3b:73:9a:34:b9:c9:2d:2c: b0:9d:3b:8a:b5:ca:59:b0:99:59:2d:c1:a8:df:52: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:A5:B4:C2:A8:0B:D3:1E:5D:CB:D4:14:E4:7E:A0:E7:0F:12:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/80f7ffb0-6a48-3986-8e80-c7937e9f8241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl X509v3 Authority Key Identifier: keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer sbgp-ipAddrBlock: critical IPv4: 199.102.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:37:72:24:5e:dd:0a:a2:b2:a7:5a:fc:71:22:ec:6e:17:63: 9c:a3:d9:76:fa:ba:e8:a6:26:fa:51:5e:ed:48:bf:18:cd:d8: cb:36:03:02:1e:72:8d:54:c4:6d:cd:1f:ac:c3:3a:6f:50:a6: 61:80:40:c4:b2:2c:a5:af:70:fb:2f:3a:02:17:ca:03:52:93: 61:0b:1c:74:8a:c6:28:66:5c:c4:b4:12:dd:a9:31:97:cc:fe: 4e:10:94:4f:1e:1c:c8:53:3d:b2:fb:59:1c:54:cf:71:cb:0a: b4:46:18:5e:e6:94:1b:dd:04:12:23:e8:24:32:79:d8:8e:16: 66:75:4d:0b:de:1c:39:9c:e2:82:06:d6:ae:eb:9e:ce:4b:05: fe:b1:98:13:5f:c4:a0:ae:30:c2:bf:5b:02:a9:70:b6:65:74: cf:18:0b:4d:0c:df:43:e9:c8:47:fc:b8:25:72:4f:57:81:5e: 53:64:83:90:1c:82:73:27:6a:ea:f8:bd:14:ef:09:4f:10:45: 68:10:c4:e8:1c:cb:8b:49:b5:c1:0d:98:a5:da:df:98:a8:43: 87:0f:82:69:12:07:db:b9:99:bc:07:5b:41:7c:00:c5:e5:0c: b6:7c:05:f1:32:8e:c0:94:e5:56:c5:ad:93:3b:de:1d:b5:29: 66:25:80:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ULp+qMh/9PCDe34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFj NmRmMB4XDTI2MDkyODIxMTcxOFoXDTI2MTIyNzIyMTcxOFowLzEtMCsGA1UEAxMk YjVjZTZmNTQtM2UxNS00MDQzLThjOTUtM2JmMzNiNzNmYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjijtvGhvL8Z8kG0o+vLz5++SSRH6Oj1pW6/K FYMnwEMwiJrnVCeqmUwI5NtLRyTg6xMARNDwVcp5o2e9xgcp2Myf7BUg+4+9mGiw OfdlfHRW5j7nkKs+f0CQ5Eq3Sh61Rbd64tJxT9WVmXmbY30Vvuym4sFGa4ylsF/5 wxHyGBdvKgwqFsTiEVSJL8T9Y3e8GIGcSsDKYJF3/T8AVREzAe2VA2u1Sb8bfQCB kFSByRzXXX2oTp1jGIznn+/hpUZSQQUxV+DS5ng7lnQizgmrJwZ2NDJx5Hv/up9i AkAzaCEwKSejR004O3OaNLnJLSywnTuKtcpZsJlZLcGo31Lq2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTRpbTCqAvTHl3L1BTkfqDnDxJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3 ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvODBmN2ZmYjAtNmE0OC0z OTg2LThlODAtYzc5MzdlOWY4MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTQwN2Y1OGQtMjdhOC00MmE1LWI3 M2UtMWZlMzUwODFjNmRmLzE0MDdmNThkLTI3YTgtNDJhNS1iNzNlLTFmZTM1MDgx YzZkZi5jcmwwHwYDVR0jBBgwFoAUqXHCIBuAdC31fIHIgg2qq+D9GyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUz NTA4MWM2ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ3ciRe3Qqisqda/HEi7G4XY5yj2Xb6uuimJvpRXu1IvxjN2Ms2AwIe co1UxG3NH6zDOm9QpmGAQMSyLKWvcPsvOgIXygNSk2ELHHSKxihmXMS0Et2pMZfM /k4QlE8eHMhTPbL7WRxUz3HLCrRGGF7mlBvdBBIj6CQyediOFmZ1TQveHDmc4oIG 1q7rns5LBf6xmBNfxKCuMMK/WwKpcLZldM8YC00M30PpyEf8uCVyT1eBXlNkg5Ac gnMnaur4vRTvCU8QRWgQxOgcy4tJtcENmKXa35ioQ4cPgmkSB9u5mbwHW0F8AMXl DLZ8BfEyjsCU5VbFrZM73h21KWYlgBU= -----END CERTIFICATE-----Generated at Tue Oct 6 19:03:53 2026 by rpki-client