$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa File: a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa (raw, json) Hash identifier: MIbbNYVDaS5hVvFJpk3vZ7uW2MWAPlg92qu3DPPyoXk= Subject key identifier: F2:6F:A2:15:51:4E:0B:C7:FB:C0:0E:8F:4C:BB:AA:11:B5:5C:EE:CA Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8 Certificate serial: 010D0C9F4328584F14678B5C5EB2B272AFD5CD00 Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36610 IP address blocks: 199.68.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8b:5c:5e:b2:b2:72:af:d5:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=07623f27-8614-46cf-b548-d4e5cea4d24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:da:30:94:1f:15:53:e9:5a:1d:1b:a6:7f:17: dc:8f:24:ee:0c:90:34:6e:7e:28:81:27:33:11:15: 7a:2d:73:fa:a7:87:4b:84:3d:ca:ef:e9:45:86:9d: 38:de:91:ba:b0:13:a6:a1:7f:c7:a4:c4:6d:16:bb: a2:f8:e6:fe:37:d6:2a:e7:04:ae:2a:6d:9a:54:66: f9:f7:30:b9:76:72:1d:7a:1a:ae:11:45:ee:76:89: 61:c7:93:6a:f8:89:0c:e4:d3:dc:b8:b3:35:77:36: da:a6:e3:8e:27:07:17:96:b9:49:7b:28:3c:9d:f6: 85:e4:11:94:b0:d1:75:c7:58:15:64:ea:7c:05:02: 87:91:82:5d:90:fb:aa:5f:74:3c:91:fc:71:11:7f: ce:c6:c3:2a:9a:e9:e3:9d:1a:48:9d:5a:7c:0d:42: 89:3e:35:77:d1:ed:f3:19:d0:13:b0:88:b3:34:45: 5d:8c:d5:e9:0f:ce:27:80:27:0e:3c:3c:27:57:70: c8:dd:82:f9:cf:9c:96:b0:88:96:83:14:9a:97:f7: 23:69:60:32:fa:bb:3d:78:f3:91:f0:80:33:29:8f: ac:79:a7:e0:79:fb:cc:fa:35:8a:61:23:b8:c9:d9: 5f:f1:dd:9b:65:75:72:78:f2:71:ce:d3:9e:0f:7f: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6F:A2:15:51:4E:0B:C7:FB:C0:0E:8F:4C:BB:AA:11:B5:5C:EE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl X509v3 Authority Key Identifier: keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer sbgp-ipAddrBlock: critical IPv4: 199.68.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:02:50:d1:5f:ef:d1:1e:ae:65:ef:82:73:1b:f9:fe:4b:96: fd:b5:2a:42:df:a8:a0:4a:c7:3e:01:04:e4:88:41:de:02:0f: 79:b0:99:c7:07:78:8a:07:01:1b:c2:13:6d:c8:5c:b6:99:16: a6:ec:3e:af:d2:c4:99:9f:15:24:bb:6f:9c:c1:7f:65:bb:66: fd:43:49:7d:42:da:76:fd:a0:1a:89:9d:d1:2c:16:87:88:2d: 3c:9a:1c:6c:12:ee:c7:b9:32:72:ba:f2:f1:42:7c:8b:f2:fc: 11:11:a5:aa:4d:03:1e:01:52:95:3d:7a:8b:4e:d6:bc:94:37: fb:c1:4d:45:0d:22:8c:8c:91:8c:c1:d0:dc:90:a2:1d:13:8f: 7a:7b:e7:f3:db:93:75:2b:4a:5f:10:25:85:15:a4:f4:ba:3b: 22:d3:ba:b5:64:55:87:6c:b8:32:e3:05:2d:c7:0b:01:14:e0: 81:29:3f:94:6a:c9:66:68:7c:9e:dc:42:f9:b4:fb:1c:11:83: 9e:3b:5c:0c:c7:60:8c:5d:e4:6d:3e:7d:b0:d1:03:db:06:02: b5:41:94:0c:24:84:25:a7:0a:c8:df:eb:fc:f6:74:36:38:b1: 5e:1e:f1:a3:af:c9:ec:6c:ea:55:12:0d:86:80:f9:fb:6e:21: 6c:3d:42:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ4tcXrKycq/VzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3 OWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MDc2MjNmMjctODYxNC00NmNmLWI1NDgtZDRlNWNlYTRkMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNowlB8VU+laHRumfxfcjyTuDJA0bn4ogScz ERV6LXP6p4dLhD3K7+lFhp043pG6sBOmoX/HpMRtFrui+Ob+N9Yq5wSuKm2aVGb5 9zC5dnIdehquEUXudolhx5Nq+IkM5NPcuLM1dzbapuOOJwcXlrlJeyg8nfaF5BGU sNF1x1gVZOp8BQKHkYJdkPuqX3Q8kfxxEX/OxsMqmunjnRpInVp8DUKJPjV30e3z GdATsIizNEVdjNXpD84ngCcOPDwnV3DI3YL5z5yWsIiWgxSal/cjaWAy+rs9ePOR 8IAzKY+seafgefvM+jWKYSO4ydlf8d2bZXVyePJxztOeD3+9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJvohVRTgvH+8AOj0y7qhG1XO7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODMx YzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvYTk0NTdhM2QtNTZkZS0z ZTM4LWFiN2EtMGJhYmJhNTBjMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgzMWM0NjEtZTE3NS00MjY1LWEw ZWEtNTY1ZDhlNjE3OWI4LzI4MzFjNDYxLWUxNzUtNDI2NS1hMGVhLTU2NWQ4ZTYx NzliOC5jcmwwHwYDVR0jBBgwFoAUPbTzeq2Sc3Qop+VNhCPz1J+fhe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVk OGU2MTc5YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwCUNFf79EermXvgnMb+f5Llv21KkLfqKBKxz4BBOSIQd4CD3mwmccH eIoHARvCE23IXLaZFqbsPq/SxJmfFSS7b5zBf2W7Zv1DSX1C2nb9oBqJndEsFoeI LTyaHGwS7se5MnK68vFCfIvy/BERpapNAx4BUpU9eotO1ryUN/vBTUUNIoyMkYzB 0NyQoh0Tj3p75/Pbk3UrSl8QJYUVpPS6OyLTurVkVYdsuDLjBS3HCwEU4IEpP5Rq yWZofJ7cQvm0+xwRg547XAzHYIxd5G0+fbDRA9sGArVBlAwkhCWnCsjf6/z2dDY4 sV4e8aOvyexs6lUSDYaA+ftuIWw9Qto= -----END CERTIFICATE-----Generated at Sat Sep 26 18:52:48 2026 by rpki-client