$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4499cc5e-3afe-316c-ac35-d4fd295b7ba0.roa File: 4499cc5e-3afe-316c-ac35-d4fd295b7ba0.roa (raw, json) Hash identifier: VXURb7zZFDD1YyJMw2qAMusGmJtv1BX7V8uHm5pRkFI= Subject key identifier: D5:F2:33:F8:32:07:4C:C5:43:1F:D2:3F:71:4C:D3:97:13:F2:2A:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1CC7B74240F85BE15ACAA680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4499cc5e-3afe-316c-ac35-d4fd295b7ba0.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 200005 IP address blocks: 170.199.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:b7:42:40:f8:5b:e1:5a:ca:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=6cbeecc1-6fa8-4157-b0f7-247187e3f6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:5a:42:ae:0f:9a:0a:f3:e1:f5:af:6b:9c: 73:d0:82:4b:d8:e5:99:30:10:97:b4:3a:cd:f0:fc: ed:c9:2c:3e:bd:8e:82:30:ec:70:27:2e:ab:7b:d6: 2c:5c:69:ce:43:83:e4:a0:65:aa:0d:8a:12:17:5a: db:bd:f6:4a:a7:b4:49:0c:42:19:62:32:9d:c7:df: 2f:35:fd:5a:a4:f8:5e:fb:b3:9b:02:c1:cd:00:f3: 53:7f:72:22:56:7a:c1:df:e8:a6:4f:dd:db:c5:81: ff:7f:62:11:3d:04:76:00:81:91:27:cf:3b:28:a9: 72:a8:29:5a:9c:83:44:37:3d:43:fe:a0:38:cc:bf: 52:15:73:0b:a1:03:74:5b:2d:1f:5e:e9:79:8e:4a: 76:c7:32:af:00:1d:3f:bb:ec:04:b2:b9:0d:a6:fb: 06:97:a5:ce:84:ea:af:00:02:a3:cf:18:f2:5f:7a: a4:f6:54:88:c4:c3:d5:39:45:fc:77:de:1b:bc:32: e6:b1:1f:e7:a0:a4:f4:91:d5:72:3f:11:1f:11:a2: 26:73:b9:f4:68:d3:70:f7:7c:b0:bc:0a:53:7b:11: fe:86:cc:86:e8:14:d8:89:dc:1d:79:e6:eb:57:da: b1:74:55:3f:85:67:02:97:0b:92:65:6c:15:5c:ce: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:33:F8:32:07:4C:C5:43:1F:D2:3F:71:4C:D3:97:13:F2:2A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4499cc5e-3afe-316c-ac35-d4fd295b7ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.199.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d0:10:92:b7:18:16:8c:80:7d:1b:a0:15:a3:d9:22:65:a6: fd:bc:db:9b:f9:5f:c0:8d:c9:d1:e6:32:84:34:07:5b:a0:13: af:f5:9b:d2:c7:df:b3:5b:96:fc:fb:25:35:71:9e:f6:3f:19: 8b:6e:80:48:4e:04:14:66:c6:6e:c0:8e:2d:65:bb:44:99:2b: 7c:46:ba:d2:97:42:57:3b:10:bb:89:a3:0d:bf:4c:cf:8e:3c: 6f:bf:c1:b0:fd:55:65:a1:62:bd:66:44:69:fa:ab:34:b5:9d: b8:e5:b1:91:a7:61:b2:54:a7:00:c4:48:70:7c:f1:7a:d4:ae: fe:ad:6e:21:71:84:8b:7b:1b:aa:79:b8:35:96:2e:d2:67:ec: ae:b5:c2:f7:45:9f:97:26:80:db:6c:6b:c1:9c:7c:1b:3d:aa: ac:46:32:4a:f8:c8:93:88:8e:b1:2d:18:d6:c7:fb:3f:34:84: 5f:a2:31:17:f5:14:9e:95:a3:a5:96:ec:c1:32:21:74:83:07: 59:99:e5:57:86:b4:e4:82:f0:80:43:95:7a:94:68:c3:20:f7: ba:79:de:30:4d:33:fe:49:45:fe:5b:b8:88:fb:a0:75:bc:39: 22:15:8b:20:b9:45:ea:67:f1:72:3f:42:24:41:7d:b5:70:63: 47:dd:e5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx7dCQPhb4VrKpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NmNiZWVjYzEtNmZhOC00MTU3LWIwZjctMjQ3MTg3ZTNmNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYFaQq4Pmgrz4fWva5xz0IJL2OWZMBCXtDrN 8PztySw+vY6CMOxwJy6re9YsXGnOQ4PkoGWqDYoSF1rbvfZKp7RJDEIZYjKdx98v Nf1apPhe+7ObAsHNAPNTf3IiVnrB3+imT93bxYH/f2IRPQR2AIGRJ887KKlyqCla nINENz1D/qA4zL9SFXMLoQN0Wy0fXul5jkp2xzKvAB0/u+wEsrkNpvsGl6XOhOqv AAKjzxjyX3qk9lSIxMPVOUX8d94bvDLmsR/noKT0kdVyPxEfEaImc7n0aNNw93yw vApTexH+hsyG6BTYidwdeebrV9qxdFU/hWcClwuSZWwVXM6gdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXyM/gyB0zFQx/SP3FM05cT8irBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ5OWNjNWUtM2FmZS0z MTZjLWFjMzUtZDRmZDI5NWI3YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvQEJK3GBaMgH0boBWj2SJlpv2825v5X8CNydHmMoQ0B1ugE6/1m9LH 37Nblvz7JTVxnvY/GYtugEhOBBRmxm7Aji1lu0SZK3xGutKXQlc7ELuJow2/TM+O PG+/wbD9VWWhYr1mRGn6qzS1nbjlsZGnYbJUpwDESHB88XrUrv6tbiFxhIt7G6p5 uDWWLtJn7K61wvdFn5cmgNtsa8GcfBs9qqxGMkr4yJOIjrEtGNbH+z80hF+iMRf1 FJ6Vo6WW7MEyIXSDB1mZ5VeGtOSC8IBDlXqUaMMg97p53jBNM/5JRf5buIj7oHW8 OSIViyC5Repn8XI/QiRBfbVwY0fd5aQ= -----END CERTIFICATE-----Generated at Thu Sep 24 21:14:48 2026 by rpki-client