$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa File: 8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa (raw, json) Hash identifier: 6ZXUpE7CS9iKFyK40O5r+QeDFPhWcFWo4ElzYEWjl0c= Subject key identifier: 63:8D:E5:3D:1D:8D:5C:A1:BA:E8:7C:4D:CB:14:26:8D:73:B6:00:54 Certificate issuer: /CN=5e580e37-3db1-41d1-ae09-7e84348caffd Certificate serial: 010D0C9F4328584EFF77795CA3CD7F0F19C69E80 Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 17207 IP address blocks: 198.59.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:79:5c:a3:cd:7f:0f:19:c6:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=adeb08a8-d963-4906-9d3f-ee331216add1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:ad:e4:f1:b5:89:1c:3f:5a:60:45:79:d1: 5c:db:bf:1c:fb:5b:87:1b:e5:47:2a:35:21:cc:5b: b8:18:de:30:7d:92:bf:b7:5b:79:f8:5d:4c:13:5b: 61:81:71:4f:58:13:7c:db:14:20:c6:25:2c:66:cc: 91:f8:8e:f4:1f:a0:78:17:4a:8b:6e:f6:b2:2a:9e: 70:10:c1:67:7a:e5:fb:5f:00:f2:4e:ed:66:f0:f0: 35:a1:2e:61:0f:6f:ee:4f:6e:9e:92:6f:f5:2c:95: f9:ba:e6:60:82:c3:1e:62:fb:b0:6f:af:a3:a3:17: 42:82:f8:74:eb:07:0a:5d:76:82:d2:c1:2a:3c:af: 29:6f:da:0d:14:cf:6d:05:a7:04:7e:0b:63:71:53: 26:02:7c:23:48:68:df:08:a7:bc:21:a8:a4:01:fa: 74:4c:0b:5e:d2:fd:ea:f5:98:1f:c4:32:02:b0:a4: d8:49:5a:a7:e6:92:4f:4e:be:73:fa:03:aa:b5:be: 47:03:b6:b3:41:71:3b:f2:76:17:4e:f4:db:3b:de: 63:31:ec:89:fa:56:2d:12:a4:b1:e7:f4:e4:bf:23: 58:d0:cd:99:31:19:07:0f:c7:aa:6a:70:82:c5:17: 50:15:d2:ed:ff:3e:ef:34:46:08:5b:40:11:71:70: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8D:E5:3D:1D:8D:5C:A1:BA:E8:7C:4D:CB:14:26:8D:73:B6:00:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl X509v3 Authority Key Identifier: keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer sbgp-ipAddrBlock: critical IPv4: 198.59.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:62:d0:a5:fc:84:76:74:2e:1a:3f:ea:26:88:e0:52:94:05: a0:9d:6f:4a:44:e6:61:b6:9c:c1:6f:89:04:d1:19:0c:ee:89: f3:7f:42:69:19:5c:5e:41:55:33:f7:21:d6:53:35:ba:f1:28: 3e:59:3e:ff:ec:ff:52:79:de:49:46:90:70:96:3e:57:e1:1a: be:7e:02:ac:f1:9c:e4:32:fd:74:a4:dd:21:1b:fa:14:2a:cf: 63:65:10:0d:c1:1a:eb:9e:2d:0c:1f:c1:1b:cc:48:bc:7a:c1: 13:c5:3f:bf:88:3f:5e:4e:e9:b4:51:8e:b6:82:25:d0:4e:93: 06:b3:2f:0a:85:f7:fd:90:3e:cb:2a:1c:35:a9:ce:c5:d2:24: 86:39:08:c9:b5:54:af:e8:4a:3b:f5:af:13:75:c2:9e:75:ef: 8c:f6:25:f0:97:85:9c:7e:36:df:a1:00:74:d6:b4:d7:b1:f7: 84:5c:25:26:22:69:e7:0b:dd:b5:4f:87:36:11:5e:c6:e5:2b: 48:b9:0a:33:13:8e:e9:76:31:83:ed:2b:92:9f:f3:35:a5:54: 9e:76:75:50:10:bf:61:db:72:5d:81:2a:54:40:8b:14:81:7e: c2:84:5f:3e:c6:c2:a2:7e:b3:46:2b:79:88:51:01:b3:0e:97: a3:ae:e0:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3lco81/DxnGnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU1ODBlMzctM2RiMS00MWQxLWFlMDktN2U4NDM0OGNh ZmZkMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk YWRlYjA4YTgtZDk2My00OTA2LTlkM2YtZWUzMzEyMTZhZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOet5PG1iRw/WmBFedFc278c+1uHG+VHKjUh zFu4GN4wfZK/t1t5+F1ME1thgXFPWBN82xQgxiUsZsyR+I70H6B4F0qLbvayKp5w EMFneuX7XwDyTu1m8PA1oS5hD2/uT26ekm/1LJX5uuZggsMeYvuwb6+joxdCgvh0 6wcKXXaC0sEqPK8pb9oNFM9tBacEfgtjcVMmAnwjSGjfCKe8IaikAfp0TAte0v3q 9ZgfxDICsKTYSVqn5pJPTr5z+gOqtb5HA7azQXE78nYXTvTbO95jMeyJ+lYtEqSx 5/TkvyNY0M2ZMRkHD8eqanCCxRdQFdLt/z7vNEYIW0ARcXCAMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGON5T0djVyhuuh8TcsUJo1ztgBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4 MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4Y2FmZmQvOGJkODhhM2EtNzU4MC0z YzNlLThjZDMtOGVjM2QwNWJhNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWU1ODBlMzctM2RiMS00MWQxLWFl MDktN2U4NDM0OGNhZmZkLzVlNTgwZTM3LTNkYjEtNDFkMS1hZTA5LTdlODQzNDhj YWZmZC5jcmwwHwYDVR0jBBgwFoAU/b7HR9PNGy3n92RgnwNBlGpLmE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0 MzQ4Y2FmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZi0KX8hHZ0Lho/6iaI4FKUBaCdb0pE5mG2nMFviQTRGQzuifN/QmkZ XF5BVTP3IdZTNbrxKD5ZPv/s/1J53klGkHCWPlfhGr5+AqzxnOQy/XSk3SEb+hQq z2NlEA3BGuueLQwfwRvMSLx6wRPFP7+IP15O6bRRjraCJdBOkwazLwqF9/2QPssq HDWpzsXSJIY5CMm1VK/oSjv1rxN1wp5174z2JfCXhZx+Nt+hAHTWtNex94RcJSYi aecL3bVPhzYRXsblK0i5CjMTjul2MYPtK5Kf8zWlVJ52dVAQv2Hbcl2BKlRAixSB fsKEXz7GwqJ+s0YreYhRAbMOl6Ou4JA= -----END CERTIFICATE-----Generated at Sat Sep 26 16:59:11 2026 by rpki-client