$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/943227b7-d711-3b9b-9c25-1cbd04043948.roa File: 943227b7-d711-3b9b-9c25-1cbd04043948.roa (raw, json) Hash identifier: 2HCOh+cDmH2vCfAMzgr8u8yXiDhYBLCRk0L2JbNuAFU= Subject key identifier: 51:EB:4D:25:2B:50:24:9B:D0:3C:E6:61:78:34:2A:A1:82:E8:4A:46 Certificate issuer: /CN=8962fffc-1831-44b7-9aec-c89910749170 Certificate serial: 010D0C9F4328584F0811057FE2E51B64D0717600 Authority key identifier: A2:1F:C5:6A:98:96:6E:A6:66:71:B3:15:D1:8D:9E:5A:9E:6B:92:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/943227b7-d711-3b9b-9c25-1cbd04043948.roa Signing time: Tue 01 Sep 2026 14:56:13 +0000 ROA not before: Tue 01 Sep 2026 14:56:13 +0000 ROA not after: Mon 30 Nov 2026 15:56:13 +0000 asID: 13335 IP address blocks: 198.200.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:11:05:7f:e2:e5:1b:64:d0:71:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8962fffc-1831-44b7-9aec-c89910749170 Validity Not Before: Sep 1 14:56:13 2026 GMT Not After : Nov 30 15:56:13 2026 GMT Subject: CN=124b4ca3-d3b4-4e58-9e17-ca2aeb4a236b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:ca:8b:12:ed:27:33:f1:83:66:66:95:74: e5:d8:16:86:6b:98:96:57:4c:78:5d:b0:38:6d:c1: e6:a4:5d:bc:05:9f:84:28:c9:73:30:7b:54:3a:11: d4:c3:f0:4d:7a:64:b4:bc:6f:8a:cd:92:cd:92:80: a5:ca:5c:bd:58:27:6b:7d:a8:02:3a:3f:3f:05:2b: 90:d7:de:36:63:b0:83:0e:d4:03:4c:aa:2f:9d:0f: 3e:87:86:7d:75:7e:ee:80:a3:12:87:51:5d:5f:39: b2:74:6f:9c:34:c1:a1:e3:94:8f:9c:46:0f:4b:03: 48:d0:32:ac:93:5a:ca:43:24:65:db:6d:35:ca:34: 25:1b:aa:8f:be:e7:05:a7:94:ab:2c:24:2b:9f:39: e2:94:04:fb:d5:69:b2:5c:ec:cb:a6:f8:de:8d:0e: 94:86:78:71:ac:4a:1f:b0:de:82:83:3c:cb:2d:06: fc:0c:7e:c5:6e:86:59:d1:f4:c5:c9:8d:f5:22:d1: 2e:07:71:c4:7d:83:1b:cc:7a:eb:53:0b:4d:d8:75: 59:dd:0b:9c:85:99:14:ed:ed:cc:a8:88:22:e2:3c: 97:93:fe:09:11:04:12:8c:3c:7f:b3:60:55:1e:3d: 84:3c:97:69:47:8d:da:da:1f:c5:b0:c0:f3:fb:d9: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EB:4D:25:2B:50:24:9B:D0:3C:E6:61:78:34:2A:A1:82:E8:4A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/943227b7-d711-3b9b-9c25-1cbd04043948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.crl X509v3 Authority Key Identifier: keyid:A2:1F:C5:6A:98:96:6E:A6:66:71:B3:15:D1:8D:9E:5A:9E:6B:92:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer sbgp-ipAddrBlock: critical IPv4: 198.200.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:24:ce:c8:79:d3:c5:dc:1a:6e:4d:24:06:59:b5:83:d1:93: 8e:2a:83:b1:b6:a7:e0:cc:5f:93:bc:22:ad:17:14:c5:d3:cb: d9:7b:3b:48:43:dc:da:d1:b5:0a:a9:c3:94:15:91:cd:0f:4c: cf:c1:3d:ed:ba:b3:b3:61:bc:74:69:01:ca:83:43:3c:7b:de: ed:ab:1e:e7:88:ec:92:e7:f5:9b:73:b8:9f:7e:8d:0a:57:7d: f9:ea:0d:9e:aa:97:a5:1b:0f:ee:5b:55:b1:39:eb:f6:8d:ad: df:af:d3:b8:96:28:3d:ef:45:9b:b0:42:f8:17:22:60:57:a5: 5f:c4:ec:c0:3d:c7:c6:6d:2c:52:0d:41:33:08:b9:46:21:a7: d0:12:89:f4:e0:5b:fc:8e:9c:07:85:c6:d0:d6:d6:8e:d4:65: 3c:ef:81:4b:1a:56:27:fb:d8:c8:d4:9c:8c:48:b4:d8:28:5a: 32:d9:b0:c9:a4:0d:af:e7:f7:59:6a:41:ed:c1:14:d2:55:2b: 84:5b:59:5f:84:34:ca:39:eb:08:c5:e4:b1:ba:81:c7:00:f1: 37:76:d1:15:ec:d1:f3:c4:04:c0:2b:e7:a5:6d:95:75:b6:f2: 88:e8:4a:05:f8:ae:60:4a:f2:49:5e:fb:6d:d5:a3:dc:04:c7: 30:d7:aa:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8IEQV/4uUbZNBxdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2MmZmZmMtMTgzMS00NGI3LTlhZWMtYzg5OTEwNzQ5 MTcwMB4XDTI2MDkwMTE0NTYxM1oXDTI2MTEzMDE1NTYxM1owLzEtMCsGA1UEAxMk MTI0YjRjYTMtZDNiNC00ZTU4LTllMTctY2EyYWViNGEyMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokPKixLtJzPxg2ZmlXTl2BaGa5iWV0x4XbA4 bcHmpF28BZ+EKMlzMHtUOhHUw/BNemS0vG+KzZLNkoClyly9WCdrfagCOj8/BSuQ 1942Y7CDDtQDTKovnQ8+h4Z9dX7ugKMSh1FdXzmydG+cNMGh45SPnEYPSwNI0DKs k1rKQyRl2201yjQlG6qPvucFp5SrLCQrnznilAT71WmyXOzLpvjejQ6UhnhxrEof sN6CgzzLLQb8DH7FboZZ0fTFyY31ItEuB3HEfYMbzHrrUwtN2HVZ3QuchZkU7e3M qIgi4jyXk/4JEQQSjDx/s2BVHj2EPJdpR43a2h/FsMDz+9nv5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHrTSUrUCSb0DzmYXg0KqGC6EpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTYy ZmZmYy0xODMxLTQ0YjctOWFlYy1jODk5MTA3NDkxNzAvOTQzMjI3YjctZDcxMS0z YjliLTljMjUtMWNiZDA0MDQzOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODk2MmZmZmMtMTgzMS00NGI3LTlh ZWMtYzg5OTEwNzQ5MTcwLzg5NjJmZmZjLTE4MzEtNDRiNy05YWVjLWM4OTkxMDc0 OTE3MC5jcmwwHwYDVR0jBBgwFoAUoh/FapiWbqZmcbMV0Y2eWp5rksAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTYyZmZmYy0xODMxLTQ0YjctOWFlYy1jODk5 MTA3NDkxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsinMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMkzsh508XcGm5NJAZZtYPRk44qg7G2p+DMX5O8Iq0XFMXTy9l7O0hD 3NrRtQqpw5QVkc0PTM/BPe26s7NhvHRpAcqDQzx73u2rHueI7JLn9ZtzuJ9+jQpX ffnqDZ6ql6UbD+5bVbE56/aNrd+v07iWKD3vRZuwQvgXImBXpV/E7MA9x8ZtLFIN QTMIuUYhp9ASifTgW/yOnAeFxtDW1o7UZTzvgUsaVif72MjUnIxItNgoWjLZsMmk Da/n91lqQe3BFNJVK4RbWV+ENMo56wjF5LG6gccA8Td20RXs0fPEBMAr56VtlXW2 8ojoSgX4rmBK8kle+23Vo9wExzDXqqY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:11:03 2026 by rpki-client