$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/1d097218-c109-3e1b-bed9-9ccbab75aea9.roa File: 1d097218-c109-3e1b-bed9-9ccbab75aea9.roa (raw, json) Hash identifier: lwTBbOdO1AqcaSdaclvApCaSlfkfMa8VpMBSqVkvh8Q= Subject key identifier: D0:83:AD:3F:B7:74:F2:11:36:7F:33:AB:3B:95:55:76:7C:2B:3A:66 Certificate issuer: /CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Certificate serial: 010D0C9F4328584EFA123BFA96F6DED2AAB34440 Authority key identifier: E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/1d097218-c109-3e1b-bed9-9ccbab75aea9.roa Signing time: Thu 27 Aug 2026 14:37:20 +0000 ROA not before: Thu 27 Aug 2026 14:37:20 +0000 ROA not after: Wed 25 Nov 2026 15:37:20 +0000 asID: 14374 IP address blocks: 198.98.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:12:3b:fa:96:f6:de:d2:aa:b3:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Validity Not Before: Aug 27 14:37:20 2026 GMT Not After : Nov 25 15:37:20 2026 GMT Subject: CN=4f301781-fd2d-43cd-af95-50c7792f2621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:d3:1d:3c:e4:38:64:50:a3:d4:04:2d:e8: 99:60:85:08:34:00:bd:a9:27:10:36:fc:f5:75:22: 1b:04:45:e6:75:73:ec:ec:e6:e3:c4:3e:4b:8c:81: 9a:8a:18:bb:0d:e3:74:5d:4b:ca:6b:7a:04:f6:f5: 5b:78:75:0f:93:28:01:80:5f:26:3e:ca:82:eb:60: f9:6a:3e:7a:ca:f8:51:5a:ab:56:b8:63:57:0d:d2: 16:e7:99:ad:64:dc:c5:69:99:4e:1b:93:35:19:0f: 3f:77:48:b3:ba:0b:dd:37:d6:c5:e0:a7:f5:4f:7c: 36:c4:1a:04:3d:75:44:36:30:7b:0d:db:40:7f:c0: 1f:e9:34:95:d5:36:06:e2:22:20:b9:f2:3d:b4:af: fa:b5:a2:0e:fb:f7:4a:65:83:fc:c3:e9:b5:e6:31: eb:87:62:e8:a2:2b:32:71:96:93:fb:86:81:93:89: e8:d8:85:be:8e:85:d6:61:ea:9a:38:e1:90:6b:c8: db:26:7f:23:ea:cc:7a:dc:9c:3f:2d:0e:fd:fa:d2: 3c:a4:ae:d3:21:51:62:f1:3f:f4:f4:f7:bf:cd:bb: 09:ff:c1:f3:de:7b:3a:3c:3e:fc:57:7d:00:f4:cc: 3a:af:18:27:65:1d:22:f2:14:e9:d0:8e:de:f5:b8: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:83:AD:3F:B7:74:F2:11:36:7F:33:AB:3B:95:55:76:7C:2B:3A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/1d097218-c109-3e1b-bed9-9ccbab75aea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl X509v3 Authority Key Identifier: keyid:E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer sbgp-ipAddrBlock: critical IPv4: 198.98.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ef:98:43:d1:5d:4d:07:1c:ca:25:14:0c:3f:cc:08:04:ff: 75:9f:ec:dd:df:59:9e:09:ae:9f:84:26:3c:6c:f5:ee:13:7c: ca:1a:42:07:04:95:a9:29:7f:6f:1a:da:12:50:c5:c2:99:4e: f0:ec:39:63:e5:ef:52:38:d7:50:21:75:01:8a:30:24:af:e0: c3:f7:81:37:80:9c:0b:e1:d2:35:eb:b2:f7:a6:93:66:24:e7: e3:15:c0:81:40:57:29:46:98:d3:44:a2:4a:60:6a:99:98:5c: 60:3e:d0:01:0e:42:39:4c:25:77:87:89:08:61:5d:1b:28:c1: 23:37:95:8a:d7:83:5f:f8:b6:7e:ed:35:08:a4:eb:79:91:11: 50:62:5c:b3:fa:d6:76:17:1e:81:72:02:6c:1a:fc:b9:89:65: 60:af:f0:9b:d4:d4:74:64:5a:2f:5f:2f:ae:5c:44:a1:d7:b4: c2:d4:58:74:8b:d2:77:7d:ef:bf:f4:23:99:17:a3:6c:66:5f: 9b:4e:4b:ce:67:8a:41:1e:6e:02:fc:2e:1d:4f:4d:f3:01:95: 4f:26:1a:47:91:94:82:06:ce:78:1c:35:04:45:5e:a1:98:de: 52:7d:c7:c8:84:ff:db:19:88:b2:1f:25:7a:57:f4:7a:cf:2d: f7:ec:8e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76Ejv6lvbe0qqzREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5YmM0NDctNjdmOS00MGQxLThmM2QtYjg0Y2NhOTRj NDkzMB4XDTI2MDgyNzE0MzcyMFoXDTI2MTEyNTE1MzcyMFowLzEtMCsGA1UEAxMk NGYzMDE3ODEtZmQyZC00M2NkLWFmOTUtNTBjNzc5MmYyNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbfTHTzkOGRQo9QELeiZYIUINAC9qScQNvz1 dSIbBEXmdXPs7ObjxD5LjIGaihi7DeN0XUvKa3oE9vVbeHUPkygBgF8mPsqC62D5 aj56yvhRWqtWuGNXDdIW55mtZNzFaZlOG5M1GQ8/d0izugvdN9bF4Kf1T3w2xBoE PXVENjB7DdtAf8Af6TSV1TYG4iIgufI9tK/6taIO+/dKZYP8w+m15jHrh2Looisy cZaT+4aBk4no2IW+joXWYeqaOOGQa8jbJn8j6sx63Jw/LQ79+tI8pK7TIVFi8T/0 9Pe/zbsJ/8Hz3ns6PD78V30A9Mw6rxgnZR0i8hTp0I7e9bhszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCDrT+3dPIRNn8zqzuVVXZ8KzpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTli YzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRjY2E5NGM0OTMvMWQwOTcyMTgtYzEwOS0z ZTFiLWJlZDktOWNjYmFiNzVhZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvM2E5YmM0NDctNjdmOS00MGQxLThm M2QtYjg0Y2NhOTRjNDkzLzNhOWJjNDQ3LTY3ZjktNDBkMS04ZjNkLWI4NGNjYTk0 YzQ5My5jcmwwHwYDVR0jBBgwFoAU4BkXaXyFNkFc9GNzTtnvrH1dgt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTliYzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRj Y2E5NGM0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXvmEPRXU0HHMolFAw/zAgE/3Wf7N3fWZ4Jrp+EJjxs9e4TfMoaQgcE lakpf28a2hJQxcKZTvDsOWPl71I411AhdQGKMCSv4MP3gTeAnAvh0jXrsvemk2Yk 5+MVwIFAVylGmNNEokpgapmYXGA+0AEOQjlMJXeHiQhhXRsowSM3lYrXg1/4tn7t NQik63mREVBiXLP61nYXHoFyAmwa/LmJZWCv8JvU1HRkWi9fL65cRKHXtMLUWHSL 0nd977/0I5kXo2xmX5tOS85nikEebgL8Lh1PTfMBlU8mGkeRlIIGzngcNQRFXqGY 3lJ9x8iE/9sZiLIfJXpX9HrPLffsjt4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:38 2026 by rpki-client