$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa File: ac48f340-e66d-3e30-8f20-abcd664e0251.roa (raw, json) Hash identifier: CyE1rmHmvQgaYgdIAw5QmVqy96yLYHzHlnIbR5zOPHE= Subject key identifier: AE:F3:62:A2:65:3C:D8:15:7F:36:E8:81:5E:3B:04:C2:78:EE:73:7B Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584F348273BDA9905744E539E740 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 27471 IP address blocks: 199.19.255.0/24 maxlen: 24 199.116.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:73:bd:a9:90:57:44:e5:39:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=4b6891a1-7dd5-48ed-adce-036cc69b7a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:75:7e:2d:da:73:b4:23:bd:95:3d:2b:ce: 20:46:55:98:1b:fc:d8:a2:4b:e3:f9:0d:d7:9b:2c: 24:ac:f6:87:04:18:d8:52:39:8f:ce:66:c0:cb:22: a1:82:e7:f9:01:d0:48:f7:85:f5:55:12:be:1b:90: a9:fa:b0:97:b4:d2:bf:05:d8:34:25:d3:11:e9:6e: b1:d2:e6:dc:ac:18:76:08:63:ec:6c:41:d0:10:04: 1e:a4:0f:c6:ce:5c:aa:0c:13:f4:02:f0:d9:35:d5: a8:d7:6c:96:f9:05:d4:60:83:c0:59:c2:71:e8:7e: 9f:54:c6:90:ef:a8:6a:29:ff:bc:c0:3d:17:21:30: 34:f5:fd:14:1b:91:83:84:44:e5:ad:4e:93:12:c8: 20:03:7c:16:2f:bf:1a:80:b1:43:1a:3d:f5:9a:66: bc:bf:66:33:59:69:19:83:9b:69:69:db:ed:f8:c0: 81:d6:14:57:44:e5:26:9e:fa:e1:2e:01:56:64:8e: b7:4c:e2:e8:d4:5b:9c:4a:3a:4e:e4:b8:cc:75:ef: 9b:55:51:31:9f:22:8f:4d:1a:47:fc:ea:30:95:dd: 84:79:fb:28:fe:33:be:3f:d7:3b:f9:25:19:d0:5b: 65:be:39:21:0f:a6:f6:06:49:03:a9:2a:b0:83:ee: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:62:A2:65:3C:D8:15:7F:36:E8:81:5E:3B:04:C2:78:EE:73:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 199.19.255.0/24 199.116.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:43:48:1e:d3:b4:c3:ff:63:c6:b6:e1:d6:f2:00:f0:56:b4: be:5a:23:b4:37:71:32:f6:2e:14:76:5c:c1:63:86:78:16:0e: bd:21:1f:1f:46:aa:ab:e8:a7:47:ad:ed:70:86:80:2c:79:97: 65:c7:85:3e:06:d2:fc:54:64:12:da:e8:b9:55:a2:4a:8a:8a: 62:75:bf:7e:48:44:a0:6a:56:b7:ba:2b:c4:55:66:0e:f9:97: 8a:c2:82:34:0d:05:c5:7e:dc:cc:bf:a8:b6:b5:a9:cd:4e:8e: a3:bc:f9:cc:f7:24:da:78:d8:09:cb:4b:26:e6:93:96:d7:5c: c8:f7:b0:29:10:44:fb:68:20:a5:e1:9a:24:4a:c9:be:d3:2e: 2b:7c:8a:1f:3d:a5:28:5a:f4:1e:66:10:94:20:17:08:8b:b6: 0b:ac:79:68:2d:00:1e:c2:66:20:b5:cf:55:54:cd:b1:43:3c: 71:93:bb:81:8f:a8:7c:0f:0f:44:d2:e3:d9:78:53:1d:52:4d: 08:76:90:94:bf:08:2e:54:03:33:0f:2b:5c:d6:c8:7f:f0:6a: 78:52:ee:56:fd:f1:80:ad:93:b4:89:29:7f:15:52:3f:6f:9f: be:75:1c:4c:82:63:3e:c2:33:2c:a5:a8:fa:4c:d5:c7:0e:13: 1a:56:e6:bd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE80gnO9qZBXROU550AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NGI2ODkxYTEtN2RkNS00OGVkLWFkY2UtMDM2Y2M2OWI3YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1h1fi3ac7QjvZU9K84gRlWYG/zYokvj+Q3X mywkrPaHBBjYUjmPzmbAyyKhguf5AdBI94X1VRK+G5Cp+rCXtNK/Bdg0JdMR6W6x 0ubcrBh2CGPsbEHQEAQepA/GzlyqDBP0AvDZNdWo12yW+QXUYIPAWcJx6H6fVMaQ 76hqKf+8wD0XITA09f0UG5GDhETlrU6TEsggA3wWL78agLFDGj31mma8v2YzWWkZ g5tpadvt+MCB1hRXROUmnvrhLgFWZI63TOLo1FucSjpO5LjMde+bVVExnyKPTRpH /Oowld2Eefso/jO+P9c7+SUZ0FtlvjkhD6b2BkkDqSqwg+55TQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK7zYqJlPNgVfzbogV47BMJ47nN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYWM0OGYzNDAtZTY2ZC0z ZTMwLThmMjAtYWJjZDY2NGUwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxxP/AwQA x3SsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGJDSB7TtMP/Y8a24dbyAPBWtL5aI7Q3cTL2LhR2XMFjhngW Dr0hHx9Gqqvop0et7XCGgCx5l2XHhT4G0vxUZBLa6LlVokqKimJ1v35IRKBqVre6 K8RVZg75l4rCgjQNBcV+3My/qLa1qc1OjqO8+cz3JNp42AnLSybmk5bXXMj3sCkQ RPtoIKXhmiRKyb7TLit8ih89pSha9B5mEJQgFwiLtguseWgtAB7CZiC1z1VUzbFD PHGTu4GPqHwPD0TS49l4Ux1STQh2kJS/CC5UAzMPK1zWyH/wanhS7lb98YCtk7SJ KX8VUj9vn751HEyCYz7CMyylqPpM1ccOExpW5r0= -----END CERTIFICATE-----Generated at Fri Sep 25 18:45:46 2026 by rpki-client