$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/7aa1bdcd-b30f-3d06-a42b-2c83f8d11680.roa File: 7aa1bdcd-b30f-3d06-a42b-2c83f8d11680.roa (raw, json) Hash identifier: YGD+fdYDJcxAl+ziRNWS6/deDcbQceEzufmXLt0At38= Subject key identifier: 13:94:E0:C2:C2:D6:D2:5F:E5:CD:6E:78:91:C6:96:AD:06:A6:E9:C5 Certificate issuer: /CN=798bf3ed-aca7-485e-a776-a77340c2d405 Certificate serial: 010D0C9F4328584FB81B2EF0F3663860E52D1CA0 Authority key identifier: D1:44:2B:A8:9B:8C:FB:3D:5C:F9:24:39:9B:B5:F0:38:D1:B3:E7:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/7aa1bdcd-b30f-3d06-a42b-2c83f8d11680.roa Signing time: Tue 03 Nov 2026 16:18:57 +0000 ROA not before: Tue 03 Nov 2026 16:18:57 +0000 ROA not after: Mon 01 Feb 2027 16:18:57 +0000 asID: 1299 IP address blocks: 199.101.158.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/798bf3ed-aca7-485e-a776-a77340c2d405.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/798bf3ed-aca7-485e-a776-a77340c2d405.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:1b:2e:f0:f3:66:38:60:e5:2d:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798bf3ed-aca7-485e-a776-a77340c2d405 Validity Not Before: Nov 3 16:18:57 2026 GMT Not After : Feb 1 16:18:57 2027 GMT Subject: CN=2feefbaf-bb08-4c9f-9083-3c124812e1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2f:a9:79:f1:5c:73:cd:a3:ee:c4:3f:6d:e3: 28:1d:1c:63:f0:e1:f7:15:ad:9b:9b:7e:4d:ba:6f: 2f:d8:cb:20:bc:6b:5d:72:7f:83:32:77:9d:37:ab: f8:2d:9c:5a:0d:d1:a8:49:bf:50:1f:67:19:df:9c: 52:54:21:62:9d:49:b5:57:b6:a4:59:13:25:0c:d8: 6a:2b:7b:ff:0d:d0:15:06:c9:c1:40:8a:93:49:fd: 4f:30:42:b4:5f:6d:c9:fb:f0:be:da:7d:d4:57:bd: 33:32:cc:91:98:2c:d8:2f:4b:48:35:a2:50:49:48: 7b:a0:48:79:d9:44:5f:dc:80:8f:32:06:4c:cf:d6: e7:75:a0:23:d5:d1:6b:0a:b8:99:0b:b4:2b:d9:32: 42:61:08:18:d2:5d:5c:bd:f0:6d:13:6e:8c:7f:5d: f3:f7:ce:14:5e:89:6e:1a:9f:17:23:91:36:bb:00: b8:11:24:33:c0:cd:53:3b:90:ba:e1:16:94:93:9a: 1b:d4:02:4e:74:be:cb:f4:1c:eb:da:6b:0e:82:b9: 0f:b3:88:bc:4c:37:aa:3d:48:d8:1d:17:38:f5:21: dc:b0:7b:a1:6b:e4:d6:00:f5:9d:3f:0b:eb:b7:aa: d0:cd:d9:33:aa:2d:49:21:26:17:ab:0c:1b:6f:d5: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:94:E0:C2:C2:D6:D2:5F:E5:CD:6E:78:91:C6:96:AD:06:A6:E9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/7aa1bdcd-b30f-3d06-a42b-2c83f8d11680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/798bf3ed-aca7-485e-a776-a77340c2d405.crl X509v3 Authority Key Identifier: keyid:D1:44:2B:A8:9B:8C:FB:3D:5C:F9:24:39:9B:B5:F0:38:D1:B3:E7:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405.cer sbgp-ipAddrBlock: critical IPv4: 199.101.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:09:db:49:85:3c:a7:c3:50:40:f0:4b:c0:ad:2b:40:f5:d1: a7:db:9a:68:6d:4f:92:70:ed:7a:3d:8c:77:4d:eb:2e:b6:08: 1c:11:ac:56:14:97:62:13:ad:67:5b:88:e4:93:8c:d2:a1:1c: c9:66:6c:8e:5b:dd:da:70:09:24:4f:a2:60:8a:ff:d2:75:9e: 36:eb:dd:da:15:15:fd:24:47:87:b7:9e:e1:22:39:c1:c0:ae: 42:6e:57:0c:7a:ce:99:61:62:89:92:e5:8f:1f:67:13:8d:6b: 03:e7:5b:f1:fb:56:8c:84:46:70:49:8c:84:ce:95:37:24:8b: 5b:32:9c:9a:fd:65:95:5d:6a:d9:87:7a:73:29:70:ae:86:04: 9b:03:f0:32:a6:61:7d:75:e7:18:b5:56:da:86:38:5f:89:05: 58:fc:36:0c:bc:4a:89:ce:bf:f4:57:09:42:3e:53:da:14:fd: ce:c5:bc:e9:e4:27:14:de:92:fe:d2:c5:5b:c4:87:39:15:e3: a3:32:ad:4e:0a:49:40:10:72:19:db:89:15:2a:23:c2:9f:68: 28:15:e8:4b:29:d1:d2:f7:c8:99:57:00:59:93:d9:b5:09:e3: 85:ce:0e:a1:be:08:b4:7a:ab:51:3d:1a:69:7c:00:c2:fb:b3: 45:cf:e8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+4Gy7w82Y4YOUtHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4YmYzZWQtYWNhNy00ODVlLWE3NzYtYTc3MzQwYzJk NDA1MB4XDTI2MTEwMzE2MTg1N1oXDTI3MDIwMTE2MTg1N1owLzEtMCsGA1UEAxMk MmZlZWZiYWYtYmIwOC00YzlmLTkwODMtM2MxMjQ4MTJlMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC+pefFcc82j7sQ/beMoHRxj8OH3Fa2bm35N um8v2MsgvGtdcn+DMnedN6v4LZxaDdGoSb9QH2cZ35xSVCFinUm1V7akWRMlDNhq K3v/DdAVBsnBQIqTSf1PMEK0X23J+/C+2n3UV70zMsyRmCzYL0tINaJQSUh7oEh5 2URf3ICPMgZMz9bndaAj1dFrCriZC7Qr2TJCYQgY0l1cvfBtE26Mf13z984UXolu Gp8XI5E2uwC4ESQzwM1TO5C64RaUk5ob1AJOdL7L9Bzr2msOgrkPs4i8TDeqPUjY HRc49SHcsHuha+TWAPWdPwvrt6rQzdkzqi1JISYXqwwbb9XZ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOU4MLC1tJf5c1ueJHGlq0GpunFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OThi ZjNlZC1hY2E3LTQ4NWUtYTc3Ni1hNzczNDBjMmQ0MDUvN2FhMWJkY2QtYjMwZi0z ZDA2LWE0MmItMmM4M2Y4ZDExNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4YmYzZWQtYWNhNy00ODVlLWE3 NzYtYTc3MzQwYzJkNDA1Lzc5OGJmM2VkLWFjYTctNDg1ZS1hNzc2LWE3NzM0MGMy ZDQwNS5jcmwwHwYDVR0jBBgwFoAU0UQrqJuM+z1c+SQ5m7XwONGz56wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OThiZjNlZC1hY2E3LTQ4NWUtYTc3Ni1hNzcz NDBjMmQ0MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEJ20mFPKfDUEDwS8CtK0D10afbmmhtT5Jw7Xo9jHdN6y62CBwRrFYU l2ITrWdbiOSTjNKhHMlmbI5b3dpwCSRPomCK/9J1njbr3doVFf0kR4e3nuEiOcHA rkJuVwx6zplhYomS5Y8fZxONawPnW/H7VoyERnBJjITOlTcki1synJr9ZZVdatmH enMpcK6GBJsD8DKmYX115xi1VtqGOF+JBVj8Ngy8SonOv/RXCUI+U9oU/c7FvOnk JxTekv7SxVvEhzkV46MyrU4KSUAQchnbiRUqI8KfaCgV6Esp0dL3yJlXAFmT2bUJ 44XODqG+CLR6q1E9Gml8AML7s0XP6Js= -----END CERTIFICATE-----Generated at Thu Nov 5 02:53:17 2026 by rpki-client