$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/4a661891-cbf2-3e62-93ec-d59154405c47.roa File: 4a661891-cbf2-3e62-93ec-d59154405c47.roa (raw, json) Hash identifier: 6REm4thYbr/ae03uIpZGFaw5Lq3xY1K+6NCFJPdyRR0= Subject key identifier: EA:39:88:59:4B:CF:A3:D6:94:40:15:AD:A9:44:0E:4D:89:B9:94:74 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584ED9C74FF4D087C2BEEE936480 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/4a661891-cbf2-3e62-93ec-d59154405c47.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 20016 IP address blocks: 198.145.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:4f:f4:d0:87:c2:be:ee:93:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=ec2bef0d-39e6-4de7-82ce-eefd17afe30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:74:e7:18:00:8d:2c:61:c4:f2:5d:d5:77:df: c8:cc:e7:0f:e0:59:7c:b3:7a:80:40:6f:25:6e:1e: 36:7b:33:86:66:94:42:2c:51:9c:6c:b0:78:85:8e: 7f:50:2d:2c:f8:b8:03:23:10:6e:81:c6:52:24:68: 95:d2:5d:f0:b8:ab:c9:8f:40:22:a8:72:b4:57:ab: 9f:7e:94:c1:39:68:a8:e8:d7:82:f8:ee:3d:7d:65: 7b:7a:c6:98:68:cc:d2:6a:71:f5:85:c8:e9:f4:e5: b1:c7:e5:4a:98:27:5c:79:7b:99:35:b0:48:19:fc: c6:08:1d:d1:66:10:07:52:50:83:73:b7:06:31:ad: 3c:ff:d5:05:0d:b9:72:6c:bd:09:ce:b6:bc:52:5f: 8b:94:ae:0d:fd:53:a3:e1:4a:20:74:6b:74:28:98: f2:39:98:40:42:35:42:91:b9:7c:ac:8f:1e:28:50: 61:5c:95:3f:cb:d3:0f:4d:15:0c:98:06:a1:f2:4f: 01:26:56:e3:92:0e:08:3c:73:fa:67:db:17:b0:52: 85:47:f5:f4:e1:b7:90:fe:f2:c8:e0:21:b6:28:ec: ab:b4:70:f5:a6:56:e0:72:6e:24:d4:74:16:e7:ab: 6c:31:63:ce:ec:17:b2:b1:d7:f6:57:48:8d:76:99: 8c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:39:88:59:4B:CF:A3:D6:94:40:15:AD:A9:44:0E:4D:89:B9:94:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/4a661891-cbf2-3e62-93ec-d59154405c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:90:20:58:44:2c:8b:dd:cd:7d:1e:fd:37:b4:02:02:35:3d: 72:96:86:e8:de:20:16:cd:a5:cf:72:ac:a5:c9:2b:14:94:1c: ee:23:b7:13:61:a8:bb:8f:cf:96:52:84:d7:37:0f:21:9d:ee: 6c:0b:a8:0f:ff:9f:45:57:a0:28:7b:a4:9f:c6:d5:db:12:89: 2a:ed:c6:60:00:0a:d8:ab:89:d7:33:5c:6e:78:b7:82:28:b7: 5c:ff:3a:a3:19:3b:b1:23:c8:51:b8:95:10:f5:6e:f2:0e:c7: d6:f6:43:18:51:6b:09:60:68:09:ef:b4:aa:60:0a:ab:d3:fb: e5:3c:fb:ee:ef:62:bb:16:e1:2f:e2:2a:bd:fc:93:97:12:44: 3b:6f:d5:34:e9:29:5b:7f:8d:de:13:db:12:1c:55:f5:ca:0f: c0:62:24:81:92:5e:c0:c2:22:29:2f:cb:d4:49:05:c7:35:45: 8e:94:55:c9:4e:3c:b6:5b:cc:d5:b3:36:9f:24:e9:5f:36:fd: 75:80:ca:cb:70:80:3d:f8:a9:95:ac:da:33:d9:24:88:33:25: 07:23:1e:14:89:bc:bc:85:67:a4:9f:0e:bf:e1:52:74:80:3e: bf:6a:8c:09:6b:fa:5d:dd:53:50:f0:2d:82:8d:8c:82:02:6a: 4b:cc:e8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx0/00IfCvu6TZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZWMyYmVmMGQtMzllNi00ZGU3LTgyY2UtZWVmZDE3YWZlMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXTnGACNLGHE8l3Vd9/IzOcP4Fl8s3qAQG8l bh42ezOGZpRCLFGcbLB4hY5/UC0s+LgDIxBugcZSJGiV0l3wuKvJj0AiqHK0V6uf fpTBOWio6NeC+O49fWV7esaYaMzSanH1hcjp9OWxx+VKmCdceXuZNbBIGfzGCB3R ZhAHUlCDc7cGMa08/9UFDblybL0Jzra8Ul+LlK4N/VOj4UogdGt0KJjyOZhAQjVC kbl8rI8eKFBhXJU/y9MPTRUMmAah8k8BJlbjkg4IPHP6Z9sXsFKFR/X04beQ/vLI 4CG2KOyrtHD1plbgcm4k1HQW56tsMWPO7Beysdf2V0iNdpmMVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOo5iFlLz6PWlEAVralEDk2JuZR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvNGE2NjE4OTEtY2JmMi0z ZTYyLTkzZWMtZDU5MTU0NDA1YzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmQIFhELIvdzX0e/Te0AgI1PXKWhujeIBbNpc9yrKXJKxSUHO4jtxNh qLuPz5ZShNc3DyGd7mwLqA//n0VXoCh7pJ/G1dsSiSrtxmAACtiridczXG54t4Io t1z/OqMZO7EjyFG4lRD1bvIOx9b2QxhRawlgaAnvtKpgCqvT++U8++7vYrsW4S/i Kr38k5cSRDtv1TTpKVt/jd4T2xIcVfXKD8BiJIGSXsDCIikvy9RJBcc1RY6UVclO PLZbzNWzNp8k6V82/XWAystwgD34qZWs2jPZJIgzJQcjHhSJvLyFZ6SfDr/hUnSA Pr9qjAlr+l3dU1DwLYKNjIICakvM6MI= -----END CERTIFICATE-----Generated at Mon Sep 21 11:01:29 2026 by rpki-client