$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fa06e6-3b1e-31af-bce2-0428570f260e.roa File: 24fa06e6-3b1e-31af-bce2-0428570f260e.roa (raw, json) Hash identifier: nk2tlM2JTmdIX5jVaWFfdEk/PeqCpdR+UN5m1Su5YfA= Subject key identifier: A1:F0:17:E1:14:DB:89:91:91:A6:81:19:B2:18:CB:30:14:11:98:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2ABD27B88471324894F65500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fa06e6-3b1e-31af-bce2-0428570f260e.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396560 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:27:b8:84:71:32:48:94:f6:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=d410ae96-de28-4765-ba93-9863098f852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:a7:6f:b0:a7:0d:db:03:0f:68:15:63:1a: 7b:55:5f:49:72:32:64:a3:d2:d7:db:80:b7:f8:d0: bd:22:07:9f:1f:cd:e5:c1:f9:22:51:f6:70:00:41: 2d:28:f9:92:99:e5:ba:f7:84:ad:00:1a:a0:a4:47: 2a:6a:6b:c8:93:20:54:8e:7a:6d:81:3a:dc:9d:78: c1:9a:ea:e5:f8:ba:29:19:1b:9d:7b:91:6a:93:7c: 74:68:01:be:d2:87:02:20:3e:6b:84:9c:df:db:b9: d9:ce:de:48:ff:62:4b:5e:fe:4b:fc:df:a7:a4:b8: 04:b6:bb:ad:47:67:98:08:3d:4d:c6:39:54:e5:30: 7e:db:9f:21:b7:da:ec:6e:9c:17:8c:2d:7b:40:99: bb:7c:84:4c:46:28:78:fb:7b:dc:92:b9:aa:be:9a: 05:7f:ec:32:1f:4d:bc:1b:6e:0e:a0:01:0c:31:90: 87:33:f5:00:e7:50:38:9f:36:71:74:ec:7e:89:8c: 32:a7:61:40:57:fc:ca:c4:27:70:4c:77:24:58:ae: c8:c5:f1:d8:27:24:2e:9a:08:cb:31:b3:66:bc:ed: b9:e2:41:4e:63:0a:62:bc:72:6d:59:90:72:13:da: 5c:ae:02:a0:69:61:e6:5c:9b:6b:57:23:9e:47:9a: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F0:17:E1:14:DB:89:91:91:A6:81:19:B2:18:CB:30:14:11:98:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fa06e6-3b1e-31af-bce2-0428570f260e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:99:00:50:14:83:cf:92:81:e6:13:e8:8a:02:50:9c:58:93: 05:c5:5c:9f:99:c9:5f:d8:61:93:b5:ce:f9:b5:d5:b1:70:19: d0:ef:2b:8c:78:99:c1:ef:47:a9:fc:a1:a0:3e:36:98:9d:db: c6:33:31:5d:6c:50:7e:2f:62:3d:8d:13:ee:27:68:1e:97:59: e5:4f:c3:73:0d:94:b3:6e:82:58:28:c9:af:c8:d3:2d:2c:49: 68:27:ae:d2:1f:97:de:67:2a:80:6a:90:98:47:0a:2d:b3:c9: c0:b4:4c:f6:8e:5c:05:b3:05:3b:24:e5:17:b7:87:df:55:1f: 8c:7a:cb:ff:96:2e:72:ea:99:9c:fc:ea:57:4d:c9:55:a3:b7: c7:6d:bf:c3:8d:34:66:b4:88:a6:98:7e:e0:69:39:69:4e:1f: c0:21:78:57:3d:68:08:40:d2:62:6c:72:1c:ef:5b:8e:37:39: 08:f4:1b:d0:e0:8d:90:03:27:31:73:27:86:38:15:94:37:88: 91:4f:a9:3a:c6:81:1c:94:0b:0d:f0:06:ee:3b:2d:6b:c6:92: 2e:3a:17:7f:67:30:5a:72:80:a3:79:8c:64:5c:fe:28:a0:87: 28:e8:e3:9b:ea:8f:48:47:13:bb:ad:63:9d:34:fa:f7:c8:ac: 87:f0:8a:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvSe4hHEySJT2VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDQxMGFlOTYtZGUyOC00NzY1LWJhOTMtOTg2MzA5OGY4NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr6nb7CnDdsDD2gVYxp7VV9JcjJko9LX24C3 +NC9IgefH83lwfkiUfZwAEEtKPmSmeW694StABqgpEcqamvIkyBUjnptgTrcnXjB murl+LopGRude5Fqk3x0aAG+0ocCID5rhJzf27nZzt5I/2JLXv5L/N+npLgEtrut R2eYCD1NxjlU5TB+258ht9rsbpwXjC17QJm7fIRMRih4+3vckrmqvpoFf+wyH028 G24OoAEMMZCHM/UA51A4nzZxdOx+iYwyp2FAV/zKxCdwTHckWK7IxfHYJyQumgjL MbNmvO254kFOYwpivHJtWZByE9pcrgKgaWHmXJtrVyOeR5qz+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKHwF+EU24mRkaaBGbIYyzAUEZjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjRmYTA2ZTYtM2IxZS0z MWFmLWJjZTItMDQyODU3MGYyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXmQBQFIPPkoHmE+iKAlCcWJMFxVyfmclf2GGTtc75tdWxcBnQ7yuM eJnB70ep/KGgPjaYndvGMzFdbFB+L2I9jRPuJ2gel1nlT8NzDZSzboJYKMmvyNMt LEloJ67SH5feZyqAapCYRwots8nAtEz2jlwFswU7JOUXt4ffVR+Mesv/li5y6pmc /OpXTclVo7fHbb/DjTRmtIimmH7gaTlpTh/AIXhXPWgIQNJibHIc71uONzkI9BvQ 4I2QAycxcyeGOBWUN4iRT6k6xoEclAsN8AbuOy1rxpIuOhd/ZzBacoCjeYxkXP4o oIco6OOb6o9IRxO7rWOdNPr3yKyH8Ios -----END CERTIFICATE-----Generated at Mon Sep 21 17:14:41 2026 by rpki-client