$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa File: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (raw, json) Hash identifier: Z9Gp50IGgJoT0xuHrFLiH6epLAFS0s5DshuAx3N2TTs= Subject key identifier: B4:DB:9B:19:9A:F9:3E:25:20:B3:B2:0F:A9:E3:FF:B0:BB:34:60:52 Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584F2EED0FB1ED45B19D96F6EE80 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 62642 IP address blocks: 198.51.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0f:b1:ed:45:b1:9d:96:f6:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=4104b20d-e944-49d3-8ad7-ad4ff682cf30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:f2:52:5d:d0:c6:d8:91:28:a2:d4:49:5f: f5:16:19:65:6b:93:f5:b4:b6:5d:eb:33:2a:db:53: 79:0b:39:82:ae:d0:5e:e3:33:dc:31:fc:b3:06:c9: b5:0d:09:88:19:08:16:2d:41:80:10:9a:40:d9:38: c3:58:de:09:45:cf:e0:3a:26:f6:da:91:9b:b5:46: 08:d8:1b:21:19:08:75:b8:56:75:45:82:c2:8b:5b: e6:8f:81:32:04:45:f1:ad:07:23:b8:1f:3b:e9:06: 70:e8:07:20:63:62:90:8e:00:25:60:21:65:80:83: 07:b2:2c:5c:09:d7:8e:7c:f3:c7:6b:84:ab:6c:70: 19:2f:7a:0e:c8:58:b3:3e:22:08:5e:dc:cd:ac:1d: 14:9b:fa:1f:c8:6c:8f:e7:82:74:2c:45:13:aa:2d: 2c:13:63:5d:ea:bc:1e:17:c1:02:10:fe:c4:0a:22: af:97:e0:41:1c:6d:a6:a7:79:2b:de:09:8c:18:30: 33:f0:49:76:2d:5f:ed:39:c5:b2:2c:41:ef:ed:cd: ac:1a:4e:e7:8d:9c:75:de:5c:af:b0:20:70:9b:87: 30:9a:50:0c:e3:a7:e9:d2:e4:39:97:cf:e3:a7:7d: 8b:c3:45:9e:f0:25:e3:88:d6:c8:2e:5a:59:03:45: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DB:9B:19:9A:F9:3E:25:20:B3:B2:0F:A9:E3:FF:B0:BB:34:60:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: 198.51.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b6:a0:85:42:54:16:94:79:ed:d8:25:42:71:ab:c2:f7:4c: 01:7a:b9:f7:ae:73:3f:96:18:86:c2:75:eb:de:7d:19:6b:df: 5e:0b:57:1b:80:c3:5f:2f:36:fc:66:65:f2:c6:be:92:83:86: 65:7b:b1:6b:3a:48:b2:0b:02:90:fe:34:22:52:21:ac:40:f2: 76:de:b8:0d:18:5b:bd:ff:b5:ba:ac:27:ad:e7:d3:29:58:bf: a1:93:cd:95:29:e2:0d:ab:50:fb:6e:b3:0f:a4:67:1c:ba:dc: 81:94:18:e0:a8:24:03:cd:6e:c7:f1:08:51:58:cd:c1:a9:c1: 73:6c:75:13:15:11:95:fd:6c:3e:59:b2:6a:c5:87:a4:49:86: 64:e0:e4:0d:66:6a:be:01:a1:55:34:a8:cf:31:c2:4e:2b:a7: 43:57:5f:1b:16:c1:df:98:f6:be:88:d0:47:04:90:02:f4:01: 98:a5:5a:71:7c:2f:71:0d:19:df:bc:07:e5:26:a4:b5:f8:15: 87:15:19:8e:20:fc:38:7e:d8:3d:60:47:5b:dd:ef:1a:2a:89: 15:3f:f3:33:88:09:b3:4d:7a:fb:65:06:bd:1e:aa:df:c9:d3: bd:89:06:2b:c3:c8:d8:73:d4:27:a9:24:ff:ed:70:0a:e3:c8: 2d:bf:8e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Q+x7UWxnZb27oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NDEwNGIyMGQtZTk0NC00OWQzLThhZDctYWQ0ZmY2ODJjZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSHyUl3QxtiRKKLUSV/1Fhlla5P1tLZd6zMq 21N5CzmCrtBe4zPcMfyzBsm1DQmIGQgWLUGAEJpA2TjDWN4JRc/gOib22pGbtUYI 2BshGQh1uFZ1RYLCi1vmj4EyBEXxrQcjuB876QZw6AcgY2KQjgAlYCFlgIMHsixc CdeOfPPHa4SrbHAZL3oOyFizPiIIXtzNrB0Um/ofyGyP54J0LEUTqi0sE2Nd6rwe F8ECEP7ECiKvl+BBHG2mp3kr3gmMGDAz8El2LV/tOcWyLEHv7c2sGk7njZx13lyv sCBwm4cwmlAM46fp0uQ5l8/jp32Lw0We8CXjiNbILlpZA0WaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTbmxma+T4lILOyD6nj/7C7NGBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWVhNGVlNjctMjY5OS0z YTBiLWE5NzgtMTNhN2IzNDViODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW2oIVCVBaUee3YJUJxq8L3TAF6ufeucz+WGIbCdevefRlr314LVxuA w18vNvxmZfLGvpKDhmV7sWs6SLILApD+NCJSIaxA8nbeuA0YW73/tbqsJ63n0ylY v6GTzZUp4g2rUPtusw+kZxy63IGUGOCoJAPNbsfxCFFYzcGpwXNsdRMVEZX9bD5Z smrFh6RJhmTg5A1mar4BoVU0qM8xwk4rp0NXXxsWwd+Y9r6I0EcEkAL0AZilWnF8 L3ENGd+8B+UmpLX4FYcVGY4g/Dh+2D1gR1vd7xoqiRU/8zOICbNNevtlBr0eqt/J 072JBivDyNhz1CepJP/tcArjyC2/jkc= -----END CERTIFICATE-----Generated at Fri Sep 25 01:49:48 2026 by rpki-client