$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/aced4a36-b9bb-3910-8c25-abf33895be33.roa File: aced4a36-b9bb-3910-8c25-abf33895be33.roa (raw, json) Hash identifier: dDnA8OCrn71PHL/bB9pOUQx0EOFlgLX1XFdCoP0Vqqg= Subject key identifier: 14:35:84:9D:4E:D9:95:53:54:03:CF:A0:45:4D:7C:43:8D:31:AA:1A Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584EE224B108654FF6B20028EE00 Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/aced4a36-b9bb-3910-8c25-abf33895be33.roa Signing time: Wed 19 Aug 2026 00:55:08 +0000 ROA not before: Wed 19 Aug 2026 00:55:08 +0000 ROA not after: Tue 17 Nov 2026 01:55:08 +0000 asID: 3152 IP address blocks: 198.49.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:24:b1:08:65:4f:f6:b2:00:28:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Aug 19 00:55:08 2026 GMT Not After : Nov 17 01:55:08 2026 GMT Subject: CN=ce530dd7-777a-455a-b918-e69b526bb2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:c8:7c:a8:8c:39:d9:f4:80:c1:64:28:94: c4:4b:e7:0c:37:d1:67:45:d8:ad:58:5b:98:47:0d: 81:6d:38:c2:da:33:e4:41:da:1a:a5:be:47:7d:67: 5b:ee:bc:70:3b:cd:06:e2:31:76:55:16:53:53:c1: 5d:f7:c4:ef:0c:6a:91:23:3a:08:02:96:8e:df:c1: ed:23:82:2e:24:b8:9d:9d:f7:5c:13:64:8b:24:b9: 74:41:bd:2b:08:50:2c:50:a9:b2:93:43:30:ab:1a: e8:01:d6:08:42:28:eb:6b:ae:d5:a9:ae:75:f7:b9: 7c:d3:93:17:c4:87:04:17:4e:8f:bd:45:f3:4a:3e: 2d:9d:01:81:fa:92:95:17:f9:09:2e:c2:26:2b:3c: 5e:c1:19:c4:07:af:b2:aa:84:f8:2a:3f:3e:1f:1f: f4:9d:93:d2:72:04:a1:6d:13:0c:63:44:94:ee:91: 87:ed:a7:f1:31:25:3a:fb:5f:b6:36:67:2d:6b:24: 69:28:b9:e8:60:0a:3c:d8:f7:84:73:f5:09:d5:62: 84:b9:5d:fb:3e:dd:69:66:f8:e7:af:03:97:5d:b9: 06:b7:5c:69:d9:f3:51:31:81:36:d6:ac:29:ba:15: e1:ce:17:ac:26:06:f6:15:7b:af:84:06:84:d1:6b: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:35:84:9D:4E:D9:95:53:54:03:CF:A0:45:4D:7C:43:8D:31:AA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/aced4a36-b9bb-3910-8c25-abf33895be33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: 198.49.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:08:54:61:90:ba:86:33:fd:53:da:d0:af:82:8d:cb:32:d8: d9:6e:97:42:e7:33:96:d4:c4:c6:ca:0e:4f:8d:4f:c8:84:2e: b2:46:ef:3a:7d:e7:95:76:da:65:65:85:02:c5:92:e5:d0:26: fb:de:80:0c:21:9d:a8:69:1b:61:5b:9b:4b:3a:93:40:cf:d7: fc:cf:4c:9f:a5:6c:f9:78:60:9f:ac:c7:af:90:a4:57:18:b9: 96:6c:7f:6b:9e:6a:e2:10:b4:f6:84:5b:f2:63:c7:b4:eb:1a: ed:5c:13:66:81:c4:6d:fc:01:eb:79:3f:9a:db:e3:9f:bb:e9: 59:97:d8:f1:f4:c4:cd:5f:f3:c5:5c:c8:b9:e4:9e:b2:c7:93: 40:a1:a3:ba:aa:5d:85:49:e6:27:e8:50:ba:c9:0f:94:c8:ba: 29:92:08:7b:42:a0:bc:60:c3:ed:00:84:6c:2c:97:b9:35:69: 62:65:9b:b8:9b:8c:72:18:6a:14:b2:d3:5c:69:4d:fd:b5:66: 87:95:83:2b:5b:ce:46:1e:87:4a:85:23:99:71:df:81:23:a9: a1:5f:f7:a1:8e:72:dc:4c:c6:02:6b:c3:3e:9a:83:26:53:bc: 4d:1f:45:fd:47:63:a8:f0:c6:08:31:d6:49:d8:e3:db:00:2c: 0a:42:66:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJLEIZU/2sgAo7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI2MDgxOTAwNTUwOFoXDTI2MTExNzAxNTUwOFowLzEtMCsGA1UEAxMk Y2U1MzBkZDctNzc3YS00NTVhLWI5MTgtZTY5YjUyNmJiMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTXIfKiMOdn0gMFkKJTES+cMN9FnRditWFuY Rw2BbTjC2jPkQdoapb5HfWdb7rxwO80G4jF2VRZTU8Fd98TvDGqRIzoIApaO38Ht I4IuJLidnfdcE2SLJLl0Qb0rCFAsUKmyk0MwqxroAdYIQijra67Vqa5197l805MX xIcEF06PvUXzSj4tnQGB+pKVF/kJLsImKzxewRnEB6+yqoT4Kj8+Hx/0nZPScgSh bRMMY0SU7pGH7afxMSU6+1+2NmctayRpKLnoYAo82PeEc/UJ1WKEuV37Pt1pZvjn rwOXXbkGt1xp2fNRMYE21qwpuhXhzhesJgb2FXuvhAaE0Wv2YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ1hJ1O2ZVTVAPPoEVNfEONMaoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvYWNlZDRhMzYtYjliYi0z OTEwLThjMjUtYWJmMzM4OTViZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwIVGGQuoYz/VPa0K+Cjcsy2Nlul0LnM5bUxMbKDk+NT8iELrJG7zp9 55V22mVlhQLFkuXQJvvegAwhnahpG2Fbm0s6k0DP1/zPTJ+lbPl4YJ+sx6+QpFcY uZZsf2ueauIQtPaEW/Jjx7TrGu1cE2aBxG38Aet5P5rb45+76VmX2PH0xM1f88Vc yLnknrLHk0Cho7qqXYVJ5ifoULrJD5TIuimSCHtCoLxgw+0AhGwsl7k1aWJlm7ib jHIYahSy01xpTf21ZoeVgytbzkYeh0qFI5lx34EjqaFf96GOctxMxgJrwz6agyZT vE0fRf1HY6jwxggx1knY49sALApCZmE= -----END CERTIFICATE-----Generated at Sun Sep 20 10:05:43 2026 by rpki-client