$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa File: b388c415-7d7e-3eed-8eef-44a4d358c737.roa (raw, json) Hash identifier: F/X8e+ltFgykNbUVwKB4IOcTpz3dE8XKn8mSp2b9smI= Subject key identifier: D6:C6:44:CE:6F:1F:9D:BF:4D:4C:8B:BC:3A:26:C9:02:C4:5D:8A:41 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584F90A30C088258BBEBF14627C0 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 394177 IP address blocks: 158.62.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:0c:08:82:58:bb:eb:f1:46:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=8ceb176d-b0e2-49d8-8057-504541e586b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:67:a2:7b:ec:cb:68:77:72:82:45:62:28: fc:46:e6:7a:c2:23:e9:1a:9f:5c:6f:91:8e:2d:ed: 0b:08:5e:fa:3c:0a:ba:3c:12:f6:6e:71:c6:c4:63: a9:cb:90:55:75:a5:d7:d3:08:ea:9a:84:be:42:b5: 4b:b3:21:da:17:2d:42:46:3d:8c:8d:df:2b:92:b8: 20:7a:c6:34:86:79:89:3c:d7:56:9d:7b:f1:7e:b5: 7a:d8:9a:c9:a2:00:10:ee:22:8f:18:c7:b3:41:b4: 65:7d:ba:e4:77:ef:a9:01:de:9a:9e:e2:3c:3b:d9: 43:2b:0c:66:7b:e1:61:ef:9f:49:af:da:72:ec:16: a3:e4:2d:16:3c:b7:0c:f1:b8:53:48:de:bd:0d:0b: 49:91:a0:b4:8f:8a:27:eb:c4:cc:c3:eb:cc:0f:34: 06:49:3a:fd:79:53:22:14:6d:16:2b:33:4d:fe:56: 61:87:c6:29:6f:de:5e:3e:ff:9d:3a:8b:83:97:5c: 91:3a:5c:62:38:02:4a:70:dd:fd:95:28:00:6d:cb: 66:bf:27:f7:0c:e8:a9:b6:8d:69:81:45:43:85:e0: e1:73:1b:0e:84:ea:32:e7:91:71:6d:67:6f:b1:d9: 96:a4:a9:14:f8:38:f4:58:88:64:95:57:0f:4a:2e: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:44:CE:6F:1F:9D:BF:4D:4C:8B:BC:3A:26:C9:02:C4:5D:8A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:29:bf:da:c1:fa:a7:03:ed:83:b2:17:ee:98:6a:79:88:eb: e0:1e:d1:ba:c9:96:2c:d7:35:63:3f:b7:8e:ab:eb:9e:b0:3a: 8b:7c:f5:33:28:3f:92:8d:50:2f:e7:db:b9:85:de:a5:29:ba: 7a:e1:c7:f4:c9:11:14:00:cf:57:c6:23:10:c0:5b:8f:79:41: d3:3d:e0:fc:e9:3e:3f:f1:44:30:63:fb:52:6f:5a:4f:45:39: 5d:62:f6:eb:38:d6:71:0d:48:f2:24:c7:0f:9f:3f:a5:d0:ca: 9e:50:9b:83:d0:36:ec:16:88:1f:7d:de:92:d2:6e:f5:cc:8d: 76:2c:87:46:2d:2b:fc:a8:d4:00:6e:f0:9d:45:34:9b:ee:d9: ae:58:ec:62:39:16:94:08:aa:61:96:6d:38:6c:2c:3a:40:07: b3:96:0f:ed:e6:46:2e:28:db:d8:98:ba:8d:c1:39:d3:44:cf: 53:b7:42:6b:eb:fc:36:e3:dc:51:fd:9b:9b:29:3f:7a:25:5a: a3:8d:00:5e:9b:70:07:25:e8:60:ac:39:a2:f4:5b:5e:ca:92: 7b:8a:f1:1b:75:0e:3a:e6:a5:3c:0b:57:5d:b0:af:be:7a:d5: 79:05:56:bd:8b:37:76:43:24:7b:81:80:a1:8a:e6:14:04:8a: 5c:f9:76:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowwIgli76/FGJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk OGNlYjE3NmQtYjBlMi00OWQ4LTgwNTctNTA0NTQxZTU4NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra9nonvsy2h3coJFYij8RuZ6wiPpGp9cb5GO Le0LCF76PAq6PBL2bnHGxGOpy5BVdaXX0wjqmoS+QrVLsyHaFy1CRj2Mjd8rkrgg esY0hnmJPNdWnXvxfrV62JrJogAQ7iKPGMezQbRlfbrkd++pAd6anuI8O9lDKwxm e+Fh759Jr9py7Baj5C0WPLcM8bhTSN69DQtJkaC0j4on68TMw+vMDzQGSTr9eVMi FG0WKzNN/lZhh8Ypb95ePv+dOouDl1yROlxiOAJKcN39lSgAbctmvyf3DOipto1p gUVDheDhcxsOhOoy55FxbWdvsdmWpKkU+Dj0WIhklVcPSi4QqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbGRM5vH52/TUyLvDomyQLEXYpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjM4OGM0MTUtN2Q3ZS0z ZWVkLThlZWYtNDRhNGQzNThjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYpv9rB+qcD7YOyF+6YanmI6+Ae0brJlizXNWM/t46r656wOot89TMo P5KNUC/n27mF3qUpunrhx/TJERQAz1fGIxDAW495QdM94PzpPj/xRDBj+1JvWk9F OV1i9us41nENSPIkxw+fP6XQyp5Qm4PQNuwWiB993pLSbvXMjXYsh0YtK/yo1ABu 8J1FNJvu2a5Y7GI5FpQIqmGWbThsLDpAB7OWD+3mRi4o29iYuo3BOdNEz1O3Qmvr /Dbj3FH9m5spP3olWqONAF6bcAcl6GCsOaL0W17KknuK8Rt1DjrmpTwLV12wr756 1XkFVr2LN3ZDJHuBgKGK5hQEilz5dgA= -----END CERTIFICATE-----Generated at Thu Nov 5 20:00:33 2026 by rpki-client