$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa File: f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa (raw, json) Hash identifier: ju1LRTfsM7tGBEyg5Bq47WGT43qtpJgkBRvVjyOnZiA= Subject key identifier: CF:1B:78:07:E8:EE:C5:F3:74:35:A7:22:AD:68:52:A0:25:61:99:6A Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584F497579026559ABEB083F3A80 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396185 IP address blocks: 207.171.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:79:02:65:59:ab:eb:08:3f:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=385f1349-a230-4004-a675-3823c6c99c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fb:6c:0d:cb:63:60:61:37:37:99:38:b7:05: a7:f3:73:da:a6:e1:d9:2e:53:5b:8a:4a:dd:84:ad: 66:56:04:55:5c:18:33:56:26:25:de:c0:28:09:e4: ca:d0:7c:39:fd:41:24:3b:a3:aa:d1:a4:c3:18:5f: 43:d7:6d:4b:29:29:2f:d8:c9:68:a4:91:85:7b:ad: 36:6b:e7:18:c4:f8:6c:7f:c3:04:5d:aa:72:15:05: 9c:1d:ed:de:f1:c0:94:df:58:2a:77:de:fe:5a:19: 60:ba:d7:d4:5a:3d:33:57:3e:28:e1:d3:a0:a3:f3: ff:bd:8f:73:ca:dd:a9:24:28:3c:b5:77:5d:bc:bb: 6f:f4:5e:53:84:e3:c9:b5:79:8d:ee:31:4b:eb:f8: da:22:69:ab:e1:74:19:a2:74:00:6b:29:c9:57:51: a1:3b:c8:ff:21:d8:8a:bb:57:4a:7d:70:d5:9e:09: 7c:f4:88:5f:fd:1f:6b:d8:bb:f0:4b:74:48:5f:9f: 1f:92:3d:bc:50:5b:5b:f7:b7:d5:de:00:89:b5:4d: 1e:1c:95:88:66:7b:32:51:b4:83:96:b3:7c:60:01: 7a:ea:96:a3:bb:87:fa:ae:ec:7b:97:09:85:18:dd: 96:c8:89:ba:17:b8:13:bd:d5:c3:90:8f:21:ac:83: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1B:78:07:E8:EE:C5:F3:74:35:A7:22:AD:68:52:A0:25:61:99:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f13ae96c-3c94-3736-bd9e-6092b0bf4d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:88:7b:5c:a1:44:51:09:a7:9d:6a:59:42:45:af:a2:fe:c3: e1:fd:7d:01:ca:8f:ee:aa:9e:cb:0c:eb:f1:d1:ad:eb:67:9e: 9e:ea:84:39:66:6b:a6:c1:f4:7f:24:f4:b8:84:36:f9:6d:42: 80:83:47:d0:e5:f9:78:02:ce:5b:15:56:e9:dd:5e:f1:57:7b: 5b:ac:b0:8b:17:6e:d8:79:7c:ec:94:8f:73:14:da:12:8d:9f: 3f:02:06:f1:7b:53:89:68:cb:bc:a2:ec:a6:4e:c3:0b:1e:de: 6f:17:39:3a:4b:d2:a2:87:8b:11:5c:5d:48:95:61:52:7f:c0: 20:fa:39:cf:72:1d:0a:4a:e1:fc:e5:de:40:4d:cd:86:52:36: 7e:69:a0:78:87:18:cf:66:c5:a1:cd:57:7d:e4:f7:06:a0:d3: b1:fa:7a:6d:82:ef:b0:ec:27:bb:dc:61:0b:3d:af:21:92:26: 0c:99:fd:d0:4b:d9:06:9f:30:50:cd:ed:a6:45:2d:d7:8a:51: a7:fd:e3:36:5d:9c:37:c9:b1:80:3a:4e:52:3b:64:0a:42:8e: 30:fb:6e:06:1a:87:70:bf:1b:55:0f:48:0c:7a:aa:38:26:cc: 98:58:02:46:0e:3f:4b:1a:00:73:fe:75:e8:83:88:e5:62:af: 78:72:2e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXkCZVmr6wg/OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzg1ZjEzNDktYTIzMC00MDA0LWE2NzUtMzgyM2M2Yzk5Yzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvtsDctjYGE3N5k4twWn83PapuHZLlNbikrd hK1mVgRVXBgzViYl3sAoCeTK0Hw5/UEkO6Oq0aTDGF9D121LKSkv2MlopJGFe602 a+cYxPhsf8MEXapyFQWcHe3e8cCU31gqd97+WhlgutfUWj0zVz4o4dOgo/P/vY9z yt2pJCg8tXddvLtv9F5ThOPJtXmN7jFL6/jaImmr4XQZonQAaynJV1GhO8j/IdiK u1dKfXDVngl89Ihf/R9r2LvwS3RIX58fkj28UFtb97fV3gCJtU0eHJWIZnsyUbSD lrN8YAF66paju4f6rux7lwmFGN2WyIm6F7gTvdXDkI8hrIN/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8beAfo7sXzdDWnIq1oUqAlYZlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZjEzYWU5NmMtM2M5NC0z NzM2LWJkOWUtNjA5MmIwYmY0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6vGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuIe1yhRFEJp51qWUJFr6L+w+H9fQHKj+6qnssM6/HRretnnp7qhDlm a6bB9H8k9LiENvltQoCDR9Dl+XgCzlsVVundXvFXe1ussIsXbth5fOyUj3MU2hKN nz8CBvF7U4loy7yi7KZOwwse3m8XOTpL0qKHixFcXUiVYVJ/wCD6Oc9yHQpK4fzl 3kBNzYZSNn5poHiHGM9mxaHNV33k9wag07H6em2C77DsJ7vcYQs9ryGSJgyZ/dBL 2QafMFDN7aZFLdeKUaf94zZdnDfJsYA6TlI7ZApCjjD7bgYah3C/G1UPSAx6qjgm zJhYAkYOP0saAHP+deiDiOVir3hyLig= -----END CERTIFICATE-----Generated at Fri Sep 25 23:53:40 2026 by rpki-client