$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7/0db1ab61-d450-3aaa-8c43-16b6dafa74f0.roa File: 0db1ab61-d450-3aaa-8c43-16b6dafa74f0.roa (raw, json) Hash identifier: D4jpEO5FbUpLZR1dzj/+IcTfJ4qul4qo2xSAWdxBMVI= Subject key identifier: 59:90:FD:E7:15:08:A3:2A:6C:75:B5:36:43:9B:CC:82:00:E0:D7:82 Certificate issuer: /CN=b95d54a4-bf93-4b05-90ce-a564fd3e7dd7 Certificate serial: 010D0C9F4328584F32290CD1CDAFCFB91955A880 Authority key identifier: 5B:72:CA:DF:2B:FA:2F:5F:E9:2C:55:A8:F8:8B:CE:F6:A8:C6:60:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7/0db1ab61-d450-3aaa-8c43-16b6dafa74f0.roa Signing time: Wed 16 Sep 2026 16:48:35 +0000 ROA not before: Wed 16 Sep 2026 16:48:35 +0000 ROA not after: Tue 15 Dec 2026 17:48:35 +0000 asID: 33415 IP address blocks: 198.22.100.0/24 maxlen: 24 209.188.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:29:0c:d1:cd:af:cf:b9:19:55:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b95d54a4-bf93-4b05-90ce-a564fd3e7dd7 Validity Not Before: Sep 16 16:48:35 2026 GMT Not After : Dec 15 17:48:35 2026 GMT Subject: CN=bd83d6ec-fba1-444f-9c0b-2e7b47c60605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:25:5a:a2:68:2f:c6:6b:53:c1:1b:bf:6a: a6:46:c8:5d:3b:51:05:6b:4f:cc:6d:ae:d6:cd:11: 8b:0e:cb:4a:10:6c:7a:5d:b5:4f:a5:7f:97:9e:a6: ae:a3:4e:6d:08:30:6f:ec:d7:fc:4f:82:69:fe:29: a3:ac:83:21:6f:9b:a6:61:c3:5e:98:b8:05:ad:a7: af:a9:b2:2a:08:a1:7f:b6:31:c9:40:d1:78:23:13: 35:9b:88:27:49:83:a6:16:46:bf:40:55:f3:ca:4f: 41:ad:fe:f6:c5:93:93:93:e7:af:6c:91:af:5d:63: 64:ac:8c:0a:58:f2:6c:1c:78:dc:5b:c3:19:01:b3: c1:8a:c6:31:4a:2c:6b:c7:7c:0b:0a:42:71:09:c2: 66:e4:00:7f:55:88:a5:04:0f:f9:e9:ee:12:af:f9: c4:b4:71:18:b7:cb:31:80:68:7d:ac:57:8a:46:e3: 56:93:7c:d4:a7:e0:1f:63:16:b3:7e:d1:11:23:92: 38:7a:90:0c:ff:92:9a:c5:54:de:10:eb:20:35:88: e2:8d:67:94:4c:0b:85:2b:1c:78:77:b4:70:06:00: 10:53:89:fc:3e:88:d3:59:08:e0:34:4b:3c:82:66: d5:8e:f4:58:50:df:e4:90:dc:7d:6c:57:5b:19:32: a2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:90:FD:E7:15:08:A3:2A:6C:75:B5:36:43:9B:CC:82:00:E0:D7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7/0db1ab61-d450-3aaa-8c43-16b6dafa74f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7.crl X509v3 Authority Key Identifier: keyid:5B:72:CA:DF:2B:FA:2F:5F:E9:2C:55:A8:F8:8B:CE:F6:A8:C6:60:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95d54a4-bf93-4b05-90ce-a564fd3e7dd7.cer sbgp-ipAddrBlock: critical IPv4: 198.22.100.0/24 209.188.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cc:2b:e3:a7:72:1a:e2:f5:02:5b:68:04:ee:ea:ef:e9:67: 60:4c:af:ae:cc:d9:46:b5:1e:58:21:00:ba:c7:a5:da:a7:ae: 4e:cc:fe:89:16:ec:97:13:e2:44:0d:ad:8e:9c:aa:c1:b4:05: f5:9a:f5:72:23:31:8d:64:2e:1c:da:6d:03:af:81:b8:9b:a6: 21:ea:8b:78:61:ef:33:71:bc:e2:cf:fd:59:d3:7b:12:ac:90: 3e:c0:05:e6:e3:b5:80:dd:62:ef:59:c8:ee:a6:00:e8:cb:62: 48:37:99:f2:0e:f0:f1:92:7a:89:b3:f3:dd:be:f7:a6:53:51: 23:ca:75:0f:b5:50:86:84:29:ba:23:b6:05:c1:b1:e3:7d:f1: b2:c2:d3:e2:7d:1a:7b:43:6f:f0:99:da:35:d9:51:b0:5f:33: 48:b8:bb:fc:1f:e6:c9:34:ff:7f:75:73:69:9f:31:82:4f:48: 3a:42:d7:90:e9:e5:ee:eb:ea:1e:df:56:c5:6d:5e:52:45:c9: a0:fd:83:55:51:16:01:1b:ea:0b:70:3e:1b:92:9e:38:1c:8c: 16:a3:e4:47:24:02:aa:2e:e2:b6:1c:53:48:c6:43:25:e8:2b: 45:5c:1b:d2:fd:b7:cb:5b:d5:a6:4d:87:0f:1d:bb:58:c2:a3: cd:f3:5c:d9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8yKQzRza/PuRlVqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk1ZDU0YTQtYmY5My00YjA1LTkwY2UtYTU2NGZkM2U3 ZGQ3MB4XDTI2MDkxNjE2NDgzNVoXDTI2MTIxNTE3NDgzNVowLzEtMCsGA1UEAxMk YmQ4M2Q2ZWMtZmJhMS00NDRmLTljMGItMmU3YjQ3YzYwNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J8lWqJoL8ZrU8Ebv2qmRshdO1EFa0/Mba7W zRGLDstKEGx6XbVPpX+Xnqauo05tCDBv7Nf8T4Jp/imjrIMhb5umYcNemLgFraev qbIqCKF/tjHJQNF4IxM1m4gnSYOmFka/QFXzyk9Brf72xZOTk+evbJGvXWNkrIwK WPJsHHjcW8MZAbPBisYxSixrx3wLCkJxCcJm5AB/VYilBA/56e4Sr/nEtHEYt8sx gGh9rFeKRuNWk3zUp+AfYxazftERI5I4epAM/5KaxVTeEOsgNYjijWeUTAuFKxx4 d7RwBgAQU4n8PojTWQjgNEs8gmbVjvRYUN/kkNx9bFdbGTKi1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFmQ/ecVCKMqbHW1NkObzIIA4NeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iOTVk NTRhNC1iZjkzLTRiMDUtOTBjZS1hNTY0ZmQzZTdkZDcvMGRiMWFiNjEtZDQ1MC0z YWFhLThjNDMtMTZiNmRhZmE3NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYjk1ZDU0YTQtYmY5My00YjA1LTkw Y2UtYTU2NGZkM2U3ZGQ3L2I5NWQ1NGE0LWJmOTMtNGIwNS05MGNlLWE1NjRmZDNl N2RkNy5jcmwwHwYDVR0jBBgwFoAUW3LK3yv6L1/pLFWo+IvO9qjGYGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iOTVkNTRhNC1iZjkzLTRiMDUtOTBjZS1hNTY0 ZmQzZTdkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxhZkAwQA 0bxnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFXMK+Onchri9QJbaATu6u/pZ2BMr67M2Ua1HlghALrHpdqn rk7M/okW7JcT4kQNrY6cqsG0BfWa9XIjMY1kLhzabQOvgbibpiHqi3hh7zNxvOLP /VnTexKskD7ABebjtYDdYu9ZyO6mAOjLYkg3mfIO8PGSeomz892+96ZTUSPKdQ+1 UIaEKbojtgXBseN98bLC0+J9GntDb/CZ2jXZUbBfM0i4u/wf5sk0/391c2mfMYJP SDpC15Dp5e7r6h7fVsVtXlJFyaD9g1VRFgEb6gtwPhuSnjgcjBaj5EckAqou4rYc U0jGQyXoK0VcG9L9t8tb1aZNhw8du1jCo83zXNk= -----END CERTIFICATE-----Generated at Wed Sep 23 16:52:06 2026 by rpki-client