$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa File: 3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa (raw, json) Hash identifier: gLDwWZ3ZfD0+ISmoBzvseVzmJ2w42FR5KV79wh3QtQI= Subject key identifier: AE:8B:8F:D7:01:07:14:F8:26:A1:C0:CF:11:6B:20:5A:6A:9C:EE:18 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584F3E47D395F7D336E31CA63A70 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 394353 IP address blocks: 199.9.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d3:95:f7:d3:36:e3:1c:a6:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=19cbafff-2bbc-4282-8e88-3fc8a67bc260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:17:27:33:84:7f:78:22:36:96:b9:89:3d: 2f:fb:8e:e1:61:62:26:73:fd:5f:03:18:95:68:dd: da:56:c4:d2:92:3f:fc:8a:7b:a3:e8:60:02:91:b9: 5e:78:8a:9d:4c:df:46:5b:e9:99:5a:6e:70:18:f8: f9:62:d5:1d:5c:30:01:fb:3d:90:ae:74:0b:76:be: e0:43:7f:28:9c:01:a2:01:58:e2:b7:80:91:1e:93: 39:44:71:42:71:48:d2:50:43:6a:eb:0c:42:a0:40: 26:f1:39:49:1b:68:1d:bd:54:21:e2:7b:7a:9a:1b: 92:09:25:3a:30:c0:ad:40:99:3a:41:38:f3:21:7b: e6:be:14:7e:3a:d5:00:bc:ec:8f:01:e2:9d:bd:69: 64:11:f8:bd:48:bf:b1:02:c6:20:fe:d6:a6:9b:16: b3:91:f7:b4:5d:d3:cd:d8:d6:da:76:58:39:97:cc: 3c:a1:7b:9c:65:d8:a6:ef:7f:24:39:9f:45:3d:12: f6:d1:78:ab:53:f0:f4:25:14:f4:2a:96:db:33:5a: 01:16:bb:10:b8:57:c2:ed:3a:86:0b:cc:8c:cd:3a: f0:61:88:8a:23:f2:23:9c:43:f9:05:02:39:83:4f: f5:17:bd:a8:3f:a1:d7:df:ee:d8:4c:a5:48:7f:20: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:8F:D7:01:07:14:F8:26:A1:C0:CF:11:6B:20:5A:6A:9C:EE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1d:a1:f1:af:e3:99:dd:f7:d4:01:e8:fb:e2:49:8f:85:a1: e1:70:b0:7a:0b:ab:f0:fb:49:31:76:ce:59:b8:48:a2:fc:13: 8e:08:91:43:7f:c7:fa:35:a2:cc:4a:75:a0:4d:4b:0a:33:1b: f9:13:84:c7:d9:e9:5a:ae:69:55:33:bd:20:3f:d8:57:08:d0: 83:0b:a2:44:31:9f:5b:ab:7e:46:d0:f3:82:02:96:b6:5e:c8: f4:b5:35:ed:e6:0f:ff:c0:83:84:d1:a4:75:9f:25:62:5b:93: b4:62:74:95:b3:c4:8f:fb:34:05:62:d8:07:58:15:80:13:43: 2e:df:d7:03:6d:c3:a8:2e:b8:48:39:d3:02:13:b9:3e:90:f6: e1:6c:ea:7d:a6:1f:c4:0e:67:90:42:58:c9:6b:2e:69:0f:04: 30:5f:aa:3f:32:76:11:e5:dd:bd:87:9e:20:cd:91:37:87:dc: 13:60:99:2d:d1:fb:b8:ab:dc:87:db:4a:19:32:b7:eb:92:dd: ce:8f:50:81:13:9e:e6:33:35:33:5c:de:ee:e5:e3:fe:58:37: dd:9f:bb:6f:b9:57:6c:6a:95:ce:77:6e:dc:2d:5b:19:b1:51: 9c:ea:cf:b5:aa:ad:2c:2f:4c:21:70:74:9b:f1:5a:ca:d5:9d: 5a:aa:c4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9OV99M24xymOnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MTljYmFmZmYtMmJiYy00MjgyLThlODgtM2ZjOGE2N2JjMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5QXJzOEf3giNpa5iT0v+47hYWImc/1fAxiV aN3aVsTSkj/8inuj6GACkbleeIqdTN9GW+mZWm5wGPj5YtUdXDAB+z2QrnQLdr7g Q38onAGiAVjit4CRHpM5RHFCcUjSUENq6wxCoEAm8TlJG2gdvVQh4nt6mhuSCSU6 MMCtQJk6QTjzIXvmvhR+OtUAvOyPAeKdvWlkEfi9SL+xAsYg/tammxazkfe0XdPN 2Nbadlg5l8w8oXucZdim738kOZ9FPRL20XirU/D0JRT0KpbbM1oBFrsQuFfC7TqG C8yMzTrwYYiKI/IjnEP5BQI5g0/1F72oP6HX3+7YTKVIfyAHsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6Lj9cBBxT4JqHAzxFrIFpqnO4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvM2RmYzkwNmItZjk5NC0z YWI5LTkzZmMtZjJmNDlkYjA4YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkdofGv45nd99QB6PviSY+FoeFwsHoLq/D7STF2zlm4SKL8E44IkUN/ x/o1osxKdaBNSwozG/kThMfZ6VquaVUzvSA/2FcI0IMLokQxn1urfkbQ84IClrZe yPS1Ne3mD//Ag4TRpHWfJWJbk7RidJWzxI/7NAVi2AdYFYATQy7f1wNtw6guuEg5 0wITuT6Q9uFs6n2mH8QOZ5BCWMlrLmkPBDBfqj8ydhHl3b2HniDNkTeH3BNgmS3R +7ir3IfbShkyt+uS3c6PUIETnuYzNTNc3u7l4/5YN92fu2+5V2xqlc53btwtWxmx UZzqz7WqrSwvTCFwdJvxWsrVnVqqxFo= -----END CERTIFICATE-----Generated at Thu Oct 8 20:48:55 2026 by rpki-client