$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/855c56e0-ecaa-3f3c-a3c2-5e304b5fdf07.roa File: 855c56e0-ecaa-3f3c-a3c2-5e304b5fdf07.roa (raw, json) Hash identifier: vx5SGRowhsEe38SC+/hO6vMv+9LFNy5IO97PMqPfmoQ= Subject key identifier: 1D:60:3D:0D:60:F8:7C:22:7A:BD:A6:C7:DD:6D:55:49:16:6E:2E:16 Certificate issuer: /CN=9efc5ee4-5178-488a-abd0-63bc19c491eb Certificate serial: 010D0C9F4328584F4D1B73A7A4B25FE2251C9C60 Authority key identifier: 40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/855c56e0-ecaa-3f3c-a3c2-5e304b5fdf07.roa Signing time: Sat 26 Sep 2026 08:28:00 +0000 ROA not before: Sat 26 Sep 2026 08:28:00 +0000 ROA not after: Fri 25 Dec 2026 09:28:00 +0000 asID: 16642 IP address blocks: 199.229.34.0/23 maxlen: 23 199.229.34.0/24 maxlen: 24 199.229.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:1b:73:a7:a4:b2:5f:e2:25:1c:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efc5ee4-5178-488a-abd0-63bc19c491eb Validity Not Before: Sep 26 08:28:00 2026 GMT Not After : Dec 25 09:28:00 2026 GMT Subject: CN=09a59baa-3e46-424d-9085-48c6469efc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:6d:e3:63:1e:f1:ef:0c:b4:b5:ec:15:83: 66:1a:31:f2:a4:8d:62:9f:73:76:2a:18:38:93:c4: 13:6a:78:e9:c4:8d:e7:5e:dc:07:83:2a:45:f1:18: fc:e8:79:a9:d8:a4:2a:cb:78:39:91:ea:e2:46:d7: e9:33:88:1e:74:69:c3:d4:f4:52:ae:12:e6:f7:9f: 39:a9:fc:d6:44:81:22:5f:b3:a7:83:b3:c4:87:33: 09:9a:0e:98:a7:46:8e:43:3a:46:23:d8:62:2e:02: 47:81:b9:bc:3b:8d:50:f6:96:9f:3e:4e:82:a3:23: 33:f8:2b:a2:cb:74:7c:a8:e6:0e:d6:de:4d:9a:f8: 66:83:51:fa:3f:e4:88:7e:4b:b7:54:c7:e5:09:63: 40:a2:4d:fc:d1:13:db:61:25:b2:69:7d:cc:6a:1a: 1f:38:fe:99:07:11:0f:af:62:b8:a7:ff:8c:51:4f: 88:fb:ed:a2:e7:83:01:27:27:f9:32:79:cf:f8:1a: 35:8c:3e:78:8d:67:77:00:62:cf:bf:7e:68:96:15: ac:e5:05:1d:c3:b3:03:cc:6d:8d:a7:47:ae:1c:18: 0d:95:eb:95:48:ed:fe:eb:bf:08:04:32:ef:cd:91: 7e:3d:e5:20:93:59:d4:e2:17:a0:a2:5f:b0:61:02: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:3D:0D:60:F8:7C:22:7A:BD:A6:C7:DD:6D:55:49:16:6E:2E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/855c56e0-ecaa-3f3c-a3c2-5e304b5fdf07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl X509v3 Authority Key Identifier: keyid:40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer sbgp-ipAddrBlock: critical IPv4: 199.229.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f5:05:13:c2:41:67:c4:87:71:74:d0:72:72:9b:14:b5:7b: 22:e5:49:81:3a:79:a9:5d:cc:6a:b7:bd:2a:8b:20:29:ad:08: 04:79:d2:72:1f:40:09:11:62:a5:36:d4:88:4f:72:54:6e:a6: cb:72:27:5b:a6:1f:4a:97:3c:6e:5f:fe:56:c0:63:22:70:05: f2:2a:4b:6b:e4:67:e3:51:13:2e:45:d6:c1:5c:e2:46:1d:a5: a7:48:ce:72:af:63:67:b8:9a:19:2a:a2:63:00:e6:8d:39:ef: e4:56:b8:c0:ba:85:1e:d2:f5:b7:5f:94:d6:a8:7e:f3:f3:10: b9:d2:d3:dd:20:50:43:77:03:64:68:ed:b0:8d:fe:72:9b:22: 9d:aa:63:e1:ba:4c:83:12:48:83:17:ab:9a:e7:a0:01:42:4e: 55:9f:ef:41:c6:92:a2:bb:3d:b1:c0:95:89:44:3f:45:45:cc: 1a:ee:a1:f1:69:aa:9f:33:f3:f4:57:1b:23:a1:f2:47:c0:db: 45:9c:ab:e2:6d:bf:e6:9e:e3:20:ba:ec:61:bc:12:90:24:b1: aa:ef:ee:26:24:53:4f:07:d9:b8:7a:c2:90:1c:64:e0:14:f0: 5f:fe:3f:bf:f5:b7:83:f3:21:c1:44:a4:0d:7d:15:12:f5:7a: d5:0b:23:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9NG3OnpLJf4iUcnGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVmYzVlZTQtNTE3OC00ODhhLWFiZDAtNjNiYzE5YzQ5 MWViMB4XDTI2MDkyNjA4MjgwMFoXDTI2MTIyNTA5MjgwMFowLzEtMCsGA1UEAxMk MDlhNTliYWEtM2U0Ni00MjRkLTkwODUtNDhjNjQ2OWVmYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Vt42Me8e8MtLXsFYNmGjHypI1in3N2Khg4 k8QTanjpxI3nXtwHgypF8Rj86Hmp2KQqy3g5keriRtfpM4gedGnD1PRSrhLm9585 qfzWRIEiX7Ong7PEhzMJmg6Yp0aOQzpGI9hiLgJHgbm8O41Q9pafPk6CoyMz+Cui y3R8qOYO1t5Nmvhmg1H6P+SIfku3VMflCWNAok380RPbYSWyaX3MahofOP6ZBxEP r2K4p/+MUU+I++2i54MBJyf5MnnP+Bo1jD54jWd3AGLPv35olhWs5QUdw7MDzG2N p0euHBgNleuVSO3+678IBDLvzZF+PeUgk1nU4hegol+wYQLXQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1gPQ1g+Hwier2mx91tVUkWbi4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZWZj NWVlNC01MTc4LTQ4OGEtYWJkMC02M2JjMTljNDkxZWIvODU1YzU2ZTAtZWNhYS0z ZjNjLWEzYzItNWUzMDRiNWZkZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWVmYzVlZTQtNTE3OC00ODhhLWFi ZDAtNjNiYzE5YzQ5MWViLzllZmM1ZWU0LTUxNzgtNDg4YS1hYmQwLTYzYmMxOWM0 OTFlYi5jcmwwHwYDVR0jBBgwFoAUQFl+DVrb8fUYrriSlFLYMY0G5FkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZWZjNWVlNC01MTc4LTQ4OGEtYWJkMC02M2Jj MTljNDkxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx+UiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv1BRPCQWfEh3F00HJymxS1eyLlSYE6ealdzGq3vSqLICmtCAR50nIf QAkRYqU21IhPclRupstyJ1umH0qXPG5f/lbAYyJwBfIqS2vkZ+NREy5F1sFc4kYd padIznKvY2e4mhkqomMA5o057+RWuMC6hR7S9bdflNaofvPzELnS090gUEN3A2Ro 7bCN/nKbIp2qY+G6TIMSSIMXq5rnoAFCTlWf70HGkqK7PbHAlYlEP0VFzBruofFp qp8z8/RXGyOh8kfA20Wcq+Jtv+ae4yC67GG8EpAksarv7iYkU08H2bh6wpAcZOAU 8F/+P7/1t4PzIcFEpA19FRL1etULI/I= -----END CERTIFICATE-----Generated at Sat Sep 26 13:57:22 2026 by rpki-client