$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa File: 1bb70b65-5f1d-3615-810a-87635980935f.roa (raw, json) Hash identifier: ANnwRyexzn0X06A82UxZYFtJ/l8sImZihpZOGb3OA90= Subject key identifier: 43:A2:C3:E5:A2:68:9C:B8:15:B6:85:A6:E2:50:FB:02:FC:29:17:58 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F454287852C5E2490925BFA50 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 16509 IP address blocks: 199.255.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:87:85:2c:5e:24:90:92:5b:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=a384cd5d-a654-41e1-9d42-544897bad36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:df:82:1e:40:82:01:38:1b:b7:2d:f0:89: 3e:c7:4e:2c:a6:18:1d:f1:2e:db:3c:bc:f9:ff:53: d1:7a:cf:4f:06:2e:4d:9a:33:46:69:1b:2f:98:02: 31:a1:17:c6:40:e4:2f:01:16:f1:c3:cc:ce:f6:e9: d3:67:17:a4:33:04:5b:ed:b6:60:cf:43:01:a9:2f: a5:63:03:52:5a:56:ad:04:b9:a3:f6:93:e5:ea:63: 94:c9:2e:15:e2:cf:98:0b:6d:64:a0:b9:24:4a:50: 79:24:81:5f:f2:20:46:32:65:73:e5:9e:5a:0d:18: 98:ca:b4:be:1d:c4:44:7b:ab:31:af:13:b9:ba:b7: db:27:0c:7e:0f:ee:a5:f4:4e:81:02:1f:3a:89:ca: 88:d9:fc:2b:e9:b6:0d:23:82:a9:bc:9a:88:d5:73: 09:d2:50:90:a2:15:59:65:72:40:9b:c9:7e:4a:9f: 7e:7c:02:c9:0e:d1:00:e7:62:51:32:79:04:fb:d7: 22:71:68:bb:22:e1:d4:8a:cf:23:72:ac:3e:2a:68: 66:56:31:0d:c1:0d:74:7e:83:ee:d9:a2:93:4a:f4: e7:39:43:b4:f6:1b:56:65:5e:76:92:9c:48:5c:04: f1:8c:eb:d6:2b:ca:28:27:62:af:13:5c:b7:70:06: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A2:C3:E5:A2:68:9C:B8:15:B6:85:A6:E2:50:FB:02:FC:29:17:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c3:5a:ed:9b:9e:7f:1c:b8:59:39:22:d8:f2:b2:34:f5:16: c0:26:f0:54:28:36:3a:03:fa:30:9c:7b:77:03:6a:ca:a7:9b: 26:14:3d:b0:c8:d0:d3:55:3a:15:b2:0e:56:48:9f:84:c6:61: 8d:79:2c:a3:7c:f7:da:12:42:18:40:9b:63:82:97:90:21:d8: 9d:32:05:88:a8:5a:ce:7f:99:22:ff:08:aa:c0:e1:b6:bb:ab: e7:d5:44:38:59:03:7e:a2:96:49:0a:36:fc:5d:ad:ad:21:e5: 3e:e4:8c:af:8d:a2:04:ad:5f:19:8a:e0:8d:70:60:c6:2b:9c: 5e:c2:cd:74:5c:22:af:4b:b8:83:0e:ea:7b:4e:20:da:b5:0f: 9c:74:f2:32:e3:77:2c:0e:09:ad:cb:d7:96:08:b7:c3:cc:c3: d3:68:67:e3:10:4c:a2:f0:9a:c2:e2:6c:39:4c:1c:ef:fd:32: 44:e1:ac:6a:97:89:cc:d3:dd:1f:98:ea:28:38:a0:b7:75:36: d2:25:16:99:62:8f:33:64:46:58:4a:a4:96:f9:63:03:08:d2: 08:c4:5f:99:a3:0d:ab:e8:00:3d:ec:60:33:5d:bf:59:5b:3b: 02:92:29:f2:1d:de:4e:1f:58:e7:6a:05:6b:16:34:62:65:e1: 9d:60:8a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoeFLF4kkJJb+lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YTM4NGNkNWQtYTY1NC00MWUxLTlkNDItNTQ0ODk3YmFkMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ/fgh5AggE4G7ct8Ik+x04sphgd8S7bPLz5 /1PRes9PBi5NmjNGaRsvmAIxoRfGQOQvARbxw8zO9unTZxekMwRb7bZgz0MBqS+l YwNSWlatBLmj9pPl6mOUyS4V4s+YC21koLkkSlB5JIFf8iBGMmVz5Z5aDRiYyrS+ HcREe6sxrxO5urfbJwx+D+6l9E6BAh86icqI2fwr6bYNI4KpvJqI1XMJ0lCQohVZ ZXJAm8l+Sp9+fALJDtEA52JRMnkE+9cicWi7IuHUis8jcqw+KmhmVjENwQ10foPu 2aKTSvTnOUO09htWZV52kpxIXATxjOvWK8ooJ2KvE1y3cAY8owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOiw+WiaJy4FbaFpuJQ+wL8KRdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWJiNzBiNjUtNWYxZC0z NjE1LTgxMGEtODc2MzU5ODA5MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjDWu2bnn8cuFk5ItjysjT1FsAm8FQoNjoD+jCce3cDasqnmyYUPbDI 0NNVOhWyDlZIn4TGYY15LKN899oSQhhAm2OCl5Ah2J0yBYioWs5/mSL/CKrA4ba7 q+fVRDhZA36ilkkKNvxdra0h5T7kjK+NogStXxmK4I1wYMYrnF7CzXRcIq9LuIMO 6ntOINq1D5x08jLjdywOCa3L15YIt8PMw9NoZ+MQTKLwmsLibDlMHO/9MkThrGqX iczT3R+Y6ig4oLd1NtIlFplijzNkRlhKpJb5YwMI0gjEX5mjDavoAD3sYDNdv1lb OwKSKfId3k4fWOdqBWsWNGJl4Z1gii4= -----END CERTIFICATE-----Generated at Mon Sep 28 20:58:48 2026 by rpki-client