$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/c7d849b9-f86b-3371-80ac-0f53a3141f55.roa File: c7d849b9-f86b-3371-80ac-0f53a3141f55.roa (raw, json) Hash identifier: e02e3NZZu7/jsVTHrQRZ5xKyRFOgzMBzE7LtXTNG47E= Subject key identifier: AF:B8:C7:0B:49:20:AD:54:F2:13:C7:7C:8B:90:2C:D3:91:30:4E:72 Certificate issuer: /CN=d9f6ac92-07b5-4554-9d60-881006aaf145 Certificate serial: 010D0C9F4328584F69E19FDCB2D34F2C981C1CC0 Authority key identifier: AE:F7:F3:BE:68:5A:2E:46:D8:C6:9D:14:6B:56:5F:D9:43:C4:EC:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/c7d849b9-f86b-3371-80ac-0f53a3141f55.roa Signing time: Tue 06 Oct 2026 15:49:56 +0000 ROA not before: Tue 06 Oct 2026 15:49:56 +0000 ROA not after: Mon 04 Jan 2027 16:49:56 +0000 asID: 402898 IP address blocks: 198.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:e1:9f:dc:b2:d3:4f:2c:98:1c:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f6ac92-07b5-4554-9d60-881006aaf145 Validity Not Before: Oct 6 15:49:56 2026 GMT Not After : Jan 4 16:49:56 2027 GMT Subject: CN=53f49034-6c18-4e7a-b2d0-d7e63a27cc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:dc:cf:dd:9b:55:a0:db:32:eb:64:cc:90: 47:f7:a6:4d:bb:f1:00:21:70:84:24:5b:00:b4:f6: 7a:af:01:99:04:ca:b6:33:f5:a5:f8:05:40:b4:06: 50:58:6c:27:a2:53:54:8b:9b:c0:21:da:a9:da:0b: 67:a1:47:72:43:64:d9:1f:ab:b6:82:28:25:ae:37: 67:a5:c1:df:ce:4f:2f:46:20:55:66:19:79:94:b2: 60:cc:c4:53:3b:7f:0b:7f:5b:de:ab:3a:60:b1:8a: 51:6b:38:5c:d7:ad:bc:13:9b:ff:f8:89:98:98:98: 79:63:31:df:4f:7d:24:97:97:06:f8:05:b9:fa:bc: f5:38:a1:bf:d7:ff:d9:51:5e:57:73:46:08:f2:75: 80:9f:80:1f:0f:40:f1:a0:38:5c:4e:5c:e8:ae:81: 1f:6e:13:73:5f:f0:f0:76:a8:00:d0:00:f1:03:98: 9c:44:17:44:3f:bd:43:4b:5f:6f:df:97:49:cf:7c: 79:11:b1:f9:91:76:43:71:d2:dd:08:27:97:80:93: ee:d0:f9:a3:29:6a:3a:ef:54:2d:1f:c7:f8:b2:6f: f9:4e:45:2a:81:15:42:f2:f8:b9:a0:63:54:e5:38: 84:18:32:4b:2f:b3:13:23:ab:12:ae:53:8a:60:7d: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B8:C7:0B:49:20:AD:54:F2:13:C7:7C:8B:90:2C:D3:91:30:4E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/c7d849b9-f86b-3371-80ac-0f53a3141f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.crl X509v3 Authority Key Identifier: keyid:AE:F7:F3:BE:68:5A:2E:46:D8:C6:9D:14:6B:56:5F:D9:43:C4:EC:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer sbgp-ipAddrBlock: critical IPv4: 198.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6c:07:9c:54:42:57:3d:23:99:61:84:ba:07:5f:ea:df:76: 14:b7:f0:ed:83:fc:00:cc:4a:3e:97:e1:09:17:49:73:e4:61: 93:e3:49:5d:5f:ac:f5:d7:c3:9f:03:29:00:42:e8:e3:6c:cb: 3b:88:35:06:08:36:ed:3f:cf:a6:11:34:46:48:2c:93:72:3f: 89:7a:8c:79:d2:4b:c7:d3:0e:08:08:80:fd:38:f0:69:2d:61: 0c:70:5f:29:3f:e6:06:b3:8e:e3:53:c0:a0:6c:3d:46:64:c9: 62:e5:9d:79:40:50:04:02:7f:9b:f2:4f:6e:41:98:91:d9:69: 6d:14:bc:94:68:0c:f8:3a:bc:fc:4d:5a:5b:d0:af:cb:54:42: 71:72:18:42:19:90:06:61:3c:5c:af:00:12:6c:53:05:1d:5f: c5:57:b2:45:2e:75:b3:c8:2f:15:ad:97:fd:44:76:b9:f5:20: 1a:47:7b:ad:18:6f:09:53:a8:e1:a1:c1:fe:94:f0:a3:8a:c4: 3b:e0:4d:ab:2c:89:82:e2:aa:ad:61:46:fd:60:cd:46:5d:da: a5:b8:dd:b3:50:ac:cd:f4:2b:e1:b9:3f:d1:06:92:bc:d2:cc: e9:18:46:1c:bd:04:66:6c:5f:79:9f:39:30:98:80:68:c7:55: ac:93:6d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9p4Z/cstNPLJgcHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmNmFjOTItMDdiNS00NTU0LTlkNjAtODgxMDA2YWFm MTQ1MB4XDTI2MTAwNjE1NDk1NloXDTI3MDEwNDE2NDk1NlowLzEtMCsGA1UEAxMk NTNmNDkwMzQtNmMxOC00ZTdhLWIyZDAtZDdlNjNhMjdjYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMzcz92bVaDbMutkzJBH96ZNu/EAIXCEJFsA tPZ6rwGZBMq2M/Wl+AVAtAZQWGwnolNUi5vAIdqp2gtnoUdyQ2TZH6u2giglrjdn pcHfzk8vRiBVZhl5lLJgzMRTO38Lf1veqzpgsYpRazhc1628E5v/+ImYmJh5YzHf T30kl5cG+AW5+rz1OKG/1//ZUV5Xc0YI8nWAn4AfD0DxoDhcTlzoroEfbhNzX/Dw dqgA0ADxA5icRBdEP71DS19v35dJz3x5EbH5kXZDcdLdCCeXgJPu0PmjKWo671Qt H8f4sm/5TkUqgRVC8vi5oGNU5TiEGDJLL7MTI6sSrlOKYH3hmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+4xwtJIK1U8hPHfIuQLNORME5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kOWY2 YWM5Mi0wN2I1LTQ1NTQtOWQ2MC04ODEwMDZhYWYxNDUvYzdkODQ5YjktZjg2Yi0z MzcxLTgwYWMtMGY1M2EzMTQxZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZDlmNmFjOTItMDdiNS00NTU0LTlk NjAtODgxMDA2YWFmMTQ1L2Q5ZjZhYzkyLTA3YjUtNDU1NC05ZDYwLTg4MTAwNmFh ZjE0NS5jcmwwHwYDVR0jBBgwFoAUrvfzvmhaLkbYxp0Ua1Zf2UPE7AowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kOWY2YWM5Mi0wN2I1LTQ1NTQtOWQ2MC04ODEw MDZhYWYxNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxobkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABsB5xUQlc9I5lhhLoHX+rfdhS38O2D/ADMSj6X4QkXSXPkYZPjSV1f rPXXw58DKQBC6ONsyzuINQYINu0/z6YRNEZILJNyP4l6jHnSS8fTDggIgP048Gkt YQxwXyk/5gazjuNTwKBsPUZkyWLlnXlAUAQCf5vyT25BmJHZaW0UvJRoDPg6vPxN WlvQr8tUQnFyGEIZkAZhPFyvABJsUwUdX8VXskUudbPILxWtl/1Edrn1IBpHe60Y bwlTqOGhwf6U8KOKxDvgTassiYLiqq1hRv1gzUZd2qW43bNQrM30K+G5P9EGkrzS zOkYRhy9BGZsX3mfOTCYgGjHVayTbV8= -----END CERTIFICATE-----Generated at Sun Oct 11 20:46:48 2026 by rpki-client