$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca/1f497eeb-95e1-3c02-8c5b-03a718b7908a.roa File: 1f497eeb-95e1-3c02-8c5b-03a718b7908a.roa (raw, json) Hash identifier: KESgOmr80MBInCUHRfc7CVWpzd9FpnLAF/ZuyhA0lWs= Subject key identifier: 86:F8:9A:13:7A:E7:37:71:D6:26:AD:16:2F:9B:3B:92:63:65:C7:16 Certificate issuer: /CN=4fca7061-c24d-4ada-8e6f-48c509a421ca Certificate serial: 010D0C9F4328584F2D1ADD92FF766243BC3CC8A0 Authority key identifier: 35:52:57:AD:97:60:4C:33:75:B4:33:F0:A8:7A:42:8C:AB:E6:44:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca/1f497eeb-95e1-3c02-8c5b-03a718b7908a.roa Signing time: Mon 14 Sep 2026 21:20:57 +0000 ROA not before: Mon 14 Sep 2026 21:20:57 +0000 ROA not after: Sun 13 Dec 2026 22:03:44 +0000 asID: 7194 IP address blocks: 198.59.164.0/22 maxlen: 22 198.59.164.0/24 maxlen: 24 198.59.165.0/24 maxlen: 24 198.59.166.0/23 maxlen: 23 198.59.166.0/24 maxlen: 24 198.59.167.0/24 maxlen: 24 199.27.172.0/22 maxlen: 22 199.27.172.0/24 maxlen: 24 199.27.173.0/24 maxlen: 24 199.27.174.0/24 maxlen: 24 199.27.175.0/24 maxlen: 24 199.48.120.0/22 maxlen: 22 199.48.120.0/24 maxlen: 24 199.48.121.0/24 maxlen: 24 199.48.122.0/24 maxlen: 24 199.48.123.0/24 maxlen: 24 2606:2500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca/4fca7061-c24d-4ada-8e6f-48c509a421ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca/4fca7061-c24d-4ada-8e6f-48c509a421ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:1a:dd:92:ff:76:62:43:bc:3c:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fca7061-c24d-4ada-8e6f-48c509a421ca Validity Not Before: Sep 14 21:20:57 2026 GMT Not After : Dec 13 22:03:44 2026 GMT Subject: CN=310c824a-76fe-4b3f-bc03-307761ffa02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:d0:bc:ab:eb:e0:1f:75:d8:8e:7d:48:be: 6a:02:09:eb:b0:94:fd:89:e9:cb:4e:b4:63:0d:10: 72:91:8f:d8:c8:27:d4:81:67:07:1d:12:23:d7:ee: e8:55:c3:d5:5e:e7:95:cf:03:90:84:05:32:94:81: 78:22:7f:b8:28:a9:61:a3:cd:fe:37:50:51:46:69: 67:a5:f3:a2:f9:a7:fe:93:e6:24:2f:10:62:f2:45: f3:a0:a6:60:48:be:a6:04:7d:94:b4:75:6b:2e:42: 02:87:90:cb:61:ee:0d:37:4b:b3:dc:e2:47:06:6f: 80:4a:de:84:4a:1e:d2:e0:e4:84:e0:08:5d:85:ff: d6:ca:25:03:b5:9b:73:ae:ec:aa:28:c7:1b:28:fc: 36:3a:54:81:e7:6b:10:17:50:fa:0d:ae:e5:e8:21: d4:4b:b7:db:70:38:cc:6a:a6:6b:16:8d:14:63:6f: 0f:72:99:30:34:06:24:c2:36:83:e8:8e:4c:07:ac: 51:e4:91:e7:36:c9:8c:66:5d:47:32:6c:f9:8e:65: 27:7e:38:73:b8:28:2d:66:a8:c3:57:fa:0a:5c:e2: 51:28:03:bf:55:ef:92:8d:9d:11:fa:29:cf:b3:f9: 73:f9:be:dc:44:9a:f7:0e:b0:f2:51:4b:dc:cf:7a: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F8:9A:13:7A:E7:37:71:D6:26:AD:16:2F:9B:3B:92:63:65:C7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca/1f497eeb-95e1-3c02-8c5b-03a718b7908a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca/4fca7061-c24d-4ada-8e6f-48c509a421ca.crl X509v3 Authority Key Identifier: keyid:35:52:57:AD:97:60:4C:33:75:B4:33:F0:A8:7A:42:8C:AB:E6:44:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4fca7061-c24d-4ada-8e6f-48c509a421ca.cer sbgp-ipAddrBlock: critical IPv4: 198.59.164.0/22 199.27.172.0/22 199.48.120.0/22 IPv6: 2606:2500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:9c:5f:e6:f7:06:c1:7f:38:2d:3b:b6:25:26:83:d5:42:f3: 73:44:07:4c:8f:fc:63:98:e4:a6:0a:b0:dd:39:91:cd:83:04: 15:94:99:e8:e0:b7:ce:15:b8:fb:d4:fc:07:67:e2:11:b7:13: d8:82:8f:5f:18:29:58:a7:c4:18:0f:a3:1f:fe:1d:43:d6:07: f0:62:14:9b:74:b6:71:38:5f:43:ab:8f:3e:31:18:69:d2:f7: 8b:14:78:bc:05:bb:76:19:4b:02:ce:82:12:de:67:2c:bb:24: 54:4e:c2:f1:ca:93:b3:31:c7:73:27:6b:f5:0d:e7:23:ce:a7: 54:33:3c:69:0a:af:e4:7e:7b:96:fe:f8:16:2d:43:20:d4:86: 9d:b3:fb:0d:11:dd:5c:a7:8b:77:d0:ab:e4:1a:61:1d:32:ae: e6:df:b0:fc:64:7e:23:ca:69:3e:63:56:21:a9:67:ef:1f:b0: b4:26:37:7b:aa:a5:81:0d:9e:ad:c2:61:4c:c8:d3:06:a3:c0: 51:1f:a6:ee:f6:c2:5e:42:27:57:8f:b1:3c:d3:43:3f:ab:f6: 2b:bb:f3:fa:ea:2e:a1:3a:1a:39:ee:f4:93:9a:f6:46:b2:ea: 43:2b:41:36:ef:1c:52:3b:50:c2:f3:54:51:f7:4d:e2:95:56: 3b:77:8d:1f -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE8tGt2S/3ZiQ7w8yKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjYTcwNjEtYzI0ZC00YWRhLThlNmYtNDhjNTA5YTQy MWNhMB4XDTI2MDkxNDIxMjA1N1oXDTI2MTIxMzIyMDM0NFowLzEtMCsGA1UEAxMk MzEwYzgyNGEtNzZmZS00YjNmLWJjMDMtMzA3NzYxZmZhMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFDQvKvr4B912I59SL5qAgnrsJT9ienLTrRj DRBykY/YyCfUgWcHHRIj1+7oVcPVXueVzwOQhAUylIF4In+4KKlho83+N1BRRmln pfOi+af+k+YkLxBi8kXzoKZgSL6mBH2UtHVrLkICh5DLYe4NN0uz3OJHBm+ASt6E Sh7S4OSE4Ahdhf/WyiUDtZtzruyqKMcbKPw2OlSB52sQF1D6Da7l6CHUS7fbcDjM aqZrFo0UY28PcpkwNAYkwjaD6I5MB6xR5JHnNsmMZl1HMmz5jmUnfjhzuCgtZqjD V/oKXOJRKAO/Ve+SjZ0R+inPs/lz+b7cRJr3DrDyUUvcz3osUwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFIb4mhN65zdx1iatFi+bO5JjZccWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80ZmNh NzA2MS1jMjRkLTRhZGEtOGU2Zi00OGM1MDlhNDIxY2EvMWY0OTdlZWItOTVlMS0z YzAyLThjNWItMDNhNzE4Yjc5MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGZjYTcwNjEtYzI0ZC00YWRhLThl NmYtNDhjNTA5YTQyMWNhLzRmY2E3MDYxLWMyNGQtNGFkYS04ZTZmLTQ4YzUwOWE0 MjFjYS5jcmwwHwYDVR0jBBgwFoAUNVJXrZdgTDN1tDPwqHpCjKvmRHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80ZmNhNzA2MS1jMjRkLTRhZGEtOGU2Zi00OGM1 MDlhNDIxY2EuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCxjukAwQC xxusAwQCxzB4MA0EAgACMAcDBQAmBiUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMacX+b3BsF/OC07tiUm g9VC83NEB0yP/GOY5KYKsN05kc2DBBWUmejgt84VuPvU/Adn4hG3E9iCj18YKVin xBgPox/+HUPWB/BiFJt0tnE4X0Orjz4xGGnS94sUeLwFu3YZSwLOghLeZyy7JFRO wvHKk7Mxx3Mna/UN5yPOp1QzPGkKr+R+e5b++BYtQyDUhp2z+w0R3Vyni3fQq+Qa YR0yrubfsPxkfiPKaT5jViGpZ+8fsLQmN3uqpYENnq3CYUzI0wajwFEfpu72wl5C J1ePsTzTQz+r9iu78/rqLqE6Gjnu9JOa9kay6kMrQTbvHFI7UMLzVFH3TeKVVjt3 jR8= -----END CERTIFICATE-----Generated at Tue Sep 22 03:27:45 2026 by rpki-client