$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa File: 2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa (raw, json) Hash identifier: JgEZz0oyk29N7kvmA0vUDBY603xyKiZtGcfAmLkxQuc= Subject key identifier: 41:47:E1:D8:3C:60:4F:94:E3:B6:EC:87:3C:DA:09:DD:62:6D:1D:17 Certificate issuer: /CN=9b13d137-bc85-4935-b740-e59f0078def5 Certificate serial: 010D0C9F4328584F6F22EADAD3C4042D288C9580 Authority key identifier: E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 40443 IP address blocks: 198.133.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:ea:da:d3:c4:04:2d:28:8c:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b13d137-bc85-4935-b740-e59f0078def5 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=43698acd-c21f-4efd-9e5f-238a2be66877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:ba:d1:5f:b5:ab:02:ce:80:85:4d:0f:63: 04:5a:db:23:ad:cd:8c:22:f0:87:25:27:a1:77:64: 82:fa:2f:16:3b:f0:0c:79:19:83:43:7e:78:6d:61: 04:ea:c4:5d:2d:3a:5c:85:08:c2:02:0b:4c:57:80: 6b:02:86:93:75:47:86:14:78:87:34:a1:3e:26:ad: 6d:0d:f8:fc:76:55:c2:46:ad:f9:91:b3:23:df:ec: 42:e6:5f:c5:6e:fc:65:63:b2:32:22:6d:88:42:50: e7:b4:25:26:f9:b0:20:0e:71:1d:4e:5b:52:7f:59: 30:76:8c:f3:0f:f5:62:15:1e:6f:4f:08:d0:a0:d9: 6b:6b:f3:96:94:da:af:0e:9a:e7:53:09:2a:5f:33: 0c:ac:80:18:03:d5:58:46:0c:69:82:44:ba:4b:7a: 65:39:b2:ea:30:24:e2:8a:a6:39:14:bd:2e:50:ff: c0:85:ce:d5:c0:1d:b5:5a:70:bb:a8:d9:69:cf:4e: 84:61:32:80:5f:66:f6:5f:28:e3:49:95:9b:bc:61: 71:65:7f:47:f5:f8:45:56:53:e6:63:74:a1:b8:4f: 00:01:6f:6c:e2:8a:09:b4:2c:b0:f6:2f:23:cc:78: ff:8d:5f:77:21:56:35:12:79:bc:ee:4b:2b:2c:e8: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:47:E1:D8:3C:60:4F:94:E3:B6:EC:87:3C:DA:09:DD:62:6D:1D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl X509v3 Authority Key Identifier: keyid:E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer sbgp-ipAddrBlock: critical IPv4: 198.133.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ea:b8:d3:24:3c:5f:da:66:6c:11:6f:a5:cd:df:1f:91:3b: ff:71:07:11:2d:6b:56:db:ea:58:96:e6:15:8b:91:f1:aa:fd: cd:d2:00:d2:11:bf:dc:c3:ac:62:af:ff:05:4a:58:97:ca:c6: b1:c1:f7:0d:80:11:50:8e:55:cb:67:69:2b:96:ed:7a:a4:f5: 7c:6b:58:84:4f:07:aa:1b:ba:81:4b:8a:2e:6a:48:24:3d:94: 1c:34:14:66:53:5b:5c:73:58:a0:44:cf:7c:63:aa:9e:88:27: f9:af:06:e7:7a:b9:1f:5b:88:56:66:98:db:4c:ff:d4:f4:5a: 34:ac:3f:78:d8:96:2a:c2:4a:7f:95:d9:b5:48:dd:b4:3d:c6: a8:66:e5:d4:60:b8:d5:95:58:9e:0a:39:76:41:14:ee:7c:4c: 31:4d:48:b7:77:fd:29:b2:d8:33:67:15:44:85:82:47:47:56: 26:4f:ba:0a:9a:c4:67:80:1e:29:75:07:2c:a9:a6:79:68:fb: 44:c2:ac:98:26:a2:4a:fe:b3:4c:81:22:da:9e:97:ca:f2:3d: b6:ea:27:55:96:ae:d8:5b:83:1f:6c:b8:15:d7:3d:64:59:4f: 68:47:3a:3d:37:13:8f:2c:e8:a7:f1:ea:ea:23:e4:92:98:7b: 22:db:d0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIura08QELSiMlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxM2QxMzctYmM4NS00OTM1LWI3NDAtZTU5ZjAwNzhk ZWY1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDM2OThhY2QtYzIxZi00ZWZkLTllNWYtMjM4YTJiZTY2ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXa60V+1qwLOgIVND2MEWtsjrc2MIvCHJSeh d2SC+i8WO/AMeRmDQ354bWEE6sRdLTpchQjCAgtMV4BrAoaTdUeGFHiHNKE+Jq1t Dfj8dlXCRq35kbMj3+xC5l/FbvxlY7IyIm2IQlDntCUm+bAgDnEdTltSf1kwdozz D/ViFR5vTwjQoNlra/OWlNqvDprnUwkqXzMMrIAYA9VYRgxpgkS6S3plObLqMCTi iqY5FL0uUP/Ahc7VwB21WnC7qNlpz06EYTKAX2b2XyjjSZWbvGFxZX9H9fhFVlPm Y3ShuE8AAW9s4ooJtCyw9i8jzHj/jV93IVY1Enm87ksrLOjBtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFH4dg8YE+U47bshzzaCd1ibR0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjEz ZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlmMDA3OGRlZjUvMmI0ZGM1YTktZDIzOS0z ZjQ0LTgzYmMtOTA2NmE1MTk0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWIxM2QxMzctYmM4NS00OTM1LWI3 NDAtZTU5ZjAwNzhkZWY1LzliMTNkMTM3LWJjODUtNDkzNS1iNzQwLWU1OWYwMDc4 ZGVmNS5jcmwwHwYDVR0jBBgwFoAU4NQR1rs6X3q3iAaKYkcCM+IWTlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjEzZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlm MDA3OGRlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPquNMkPF/aZmwRb6XN3x+RO/9xBxEta1bb6liW5hWLkfGq/c3SANIR v9zDrGKv/wVKWJfKxrHB9w2AEVCOVctnaSuW7Xqk9XxrWIRPB6obuoFLii5qSCQ9 lBw0FGZTW1xzWKBEz3xjqp6IJ/mvBud6uR9biFZmmNtM/9T0WjSsP3jYlirCSn+V 2bVI3bQ9xqhm5dRguNWVWJ4KOXZBFO58TDFNSLd3/Smy2DNnFUSFgkdHViZPugqa xGeAHil1Byyppnlo+0TCrJgmokr+s0yBItqel8ryPbbqJ1WWrthbgx9suBXXPWRZ T2hHOj03E48s6Kfx6uoj5JKYeyLb0J4= -----END CERTIFICATE-----Generated at Mon Oct 12 18:37:25 2026 by rpki-client