$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa File: be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa (raw, json) Hash identifier: REsrHjLbK2yua3Shxjq8Qku7fsDgsSSzrhcJ1ErKIO8= Subject key identifier: E3:DE:49:AC:81:19:8C:B7:64:59:14:9A:68:BA:E8:1A:0F:05:3F:77 Certificate issuer: /CN=afc34129-e2da-4364-a9df-4c6c4db3d903 Certificate serial: 010D0C9F4328584F225D07A752F553AC97FDBE80 Authority key identifier: FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 399829 IP address blocks: 198.160.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:07:a7:52:f5:53:ac:97:fd:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc34129-e2da-4364-a9df-4c6c4db3d903 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=3251d325-efdd-450a-9675-c98be5874779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:d9:9b:21:e9:7c:9b:1e:fc:3f:e4:d0:20: e6:ea:63:ac:c1:83:d2:04:f3:4b:7f:6c:ae:a2:f9: 62:bf:67:87:8d:5c:4c:f1:d9:4a:45:24:24:f0:8f: 78:49:44:d2:41:41:ab:4a:60:89:9c:00:56:36:80: 8a:a5:81:8d:ec:1b:c0:08:d1:2c:5f:af:3c:4f:b4: 50:9d:87:b7:23:10:47:d0:29:68:57:c6:54:a3:f0: 15:c3:40:a6:ec:dd:1f:f6:99:da:f1:48:56:6c:6c: ce:c5:e8:7b:7e:f0:43:25:87:fa:31:59:bf:b6:ac: 87:35:a9:27:24:c7:b4:66:d8:91:12:cb:33:6b:46: ae:02:a6:00:d1:ee:51:90:cf:38:e9:1b:9c:49:f8: 2a:dc:b2:12:a7:c9:23:78:ff:88:86:5b:9f:5e:78: 11:7f:97:38:46:3d:05:d5:b1:a0:39:34:bf:3b:49: 12:4a:5b:7d:9e:b9:e9:0d:f7:52:4f:5c:ab:22:1a: e3:88:60:c7:4f:9b:b1:f1:b4:ed:44:cb:b6:b0:a0: b0:ea:c5:2a:4d:dd:97:b9:9e:94:1b:7e:69:75:fb: 90:af:71:59:da:40:8a:21:fa:8a:12:5c:7e:f4:d3: 2d:6a:6e:ad:ad:d0:0b:a2:7d:77:4f:34:5b:49:06: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:49:AC:81:19:8C:B7:64:59:14:9A:68:BA:E8:1A:0F:05:3F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl X509v3 Authority Key Identifier: keyid:FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer sbgp-ipAddrBlock: critical IPv4: 198.160.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:64:47:14:93:fc:49:8b:b8:2b:e8:af:0f:ee:42:17:d9:2c: a6:ce:68:79:9d:9b:2e:c9:40:74:e3:cf:0f:8f:b6:95:bb:f0: 70:56:f9:8e:a0:fa:16:b3:30:b0:7a:2e:b2:6a:ea:db:59:15: 9f:44:79:c7:f0:83:75:0f:b7:f4:36:bb:76:15:80:e6:8b:06: 89:c4:8a:55:db:d3:c8:7c:74:16:05:23:07:18:30:f6:f2:34: cf:57:72:c9:fd:48:98:03:de:70:85:98:59:aa:25:ee:6d:7e: fd:da:30:a4:0d:1a:ff:e0:24:f3:ff:d7:2c:01:c2:eb:30:9e: 23:72:3a:e3:28:d9:6f:d6:a8:aa:fa:26:56:6c:c4:2d:a6:60: 2a:13:9d:2e:76:f4:43:ce:4e:e8:fd:a5:62:90:d4:0e:77:30: 95:e7:9c:31:2b:d3:57:9e:5b:ca:9b:b3:aa:98:83:34:84:b5: cf:5c:af:38:6a:32:98:27:2a:a1:a9:67:6a:73:b8:62:3b:05: 20:d0:90:3a:ed:a0:ce:eb:46:20:00:b8:16:1f:ac:4f:e5:80: 80:98:15:61:c2:65:8a:c9:ed:60:6f:36:ea:35:80:53:1f:41: ec:80:2c:3e:60:40:ef:00:ec:45:dc:1f:68:2b:05:75:dd:59: e4:e6:54:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQenUvVTrJf9voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMzQxMjktZTJkYS00MzY0LWE5ZGYtNGM2YzRkYjNk OTAzMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MzI1MWQzMjUtZWZkZC00NTBhLTk2NzUtYzk4YmU1ODc0Nzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK7ZmyHpfJse/D/k0CDm6mOswYPSBPNLf2yu ovliv2eHjVxM8dlKRSQk8I94SUTSQUGrSmCJnABWNoCKpYGN7BvACNEsX688T7RQ nYe3IxBH0CloV8ZUo/AVw0Cm7N0f9pna8UhWbGzOxeh7fvBDJYf6MVm/tqyHNakn JMe0ZtiREssza0auAqYA0e5RkM846RucSfgq3LISp8kjeP+IhlufXngRf5c4Rj0F 1bGgOTS/O0kSSlt9nrnpDfdST1yrIhrjiGDHT5ux8bTtRMu2sKCw6sUqTd2XuZ6U G35pdfuQr3FZ2kCKIfqKElx+9NMtam6trdALon13TzRbSQY/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPeSayBGYy3ZFkUmmi66BoPBT93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hZmMz NDEyOS1lMmRhLTQzNjQtYTlkZi00YzZjNGRiM2Q5MDMvYmUyOGQxZDItOTQ2Mi0z YzMzLTk2NWQtNDhiNWViOWNjNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWZjMzQxMjktZTJkYS00MzY0LWE5 ZGYtNGM2YzRkYjNkOTAzL2FmYzM0MTI5LWUyZGEtNDM2NC1hOWRmLTRjNmM0ZGIz ZDkwMy5jcmwwHwYDVR0jBBgwFoAU/8e01i+y7v5+terFLv43UqXP+9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hZmMzNDEyOS1lMmRhLTQzNjQtYTlkZi00YzZj NGRiM2Q5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5kRxST/EmLuCvorw/uQhfZLKbOaHmdmy7JQHTjzw+PtpW78HBW+Y6g +hazMLB6LrJq6ttZFZ9Eecfwg3UPt/Q2u3YVgOaLBonEilXb08h8dBYFIwcYMPby NM9Xcsn9SJgD3nCFmFmqJe5tfv3aMKQNGv/gJPP/1ywBwuswniNyOuMo2W/WqKr6 JlZsxC2mYCoTnS529EPOTuj9pWKQ1A53MJXnnDEr01eeW8qbs6qYgzSEtc9crzhq MpgnKqGpZ2pzuGI7BSDQkDrtoM7rRiAAuBYfrE/lgICYFWHCZYrJ7WBvNuo1gFMf QeyALD5gQO8A7EXcH2grBXXdWeTmVOg= -----END CERTIFICATE-----Generated at Tue Sep 22 14:46:49 2026 by rpki-client