$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/ef47a195-86d8-3fee-ba83-6788a644c769.roa File: ef47a195-86d8-3fee-ba83-6788a644c769.roa (raw, json) Hash identifier: lwATMKMEOnSbZv40VUzZOs65XgjmrC9A3wr+44j83Y0= Subject key identifier: AA:49:CD:F4:E2:F5:FE:CC:17:2C:39:00:F2:C3:EF:FA:C8:4A:84:3D Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584F1E8B9A4D8B847E6C36C74000 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/ef47a195-86d8-3fee-ba83-6788a644c769.roa Signing time: Wed 09 Sep 2026 16:10:59 +0000 ROA not before: Wed 09 Sep 2026 16:10:59 +0000 ROA not after: Tue 08 Dec 2026 17:10:59 +0000 asID: 174 IP address blocks: 198.145.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:8b:9a:4d:8b:84:7e:6c:36:c7:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Sep 9 16:10:59 2026 GMT Not After : Dec 8 17:10:59 2026 GMT Subject: CN=7aaaa7f6-227f-4231-811d-963d981122b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:aa:6f:2c:c9:e8:48:91:41:aa:3a:0e:09: f7:59:d5:a7:df:b1:be:b9:d1:f1:73:fc:ae:a0:8d: 05:b0:2b:97:61:f6:6e:f6:b6:4f:d2:a4:ed:fe:4b: 2a:bf:6e:c7:3a:9b:df:65:51:40:78:77:bd:5d:7b: bc:62:dc:60:b5:45:96:4e:6d:cb:ae:88:91:3c:d7: 10:a7:9b:26:da:b4:fd:0e:89:fe:b0:d9:a4:c1:cf: ca:84:8c:76:a4:22:72:f7:d5:d0:e0:52:a1:1e:ac: bd:4d:ab:28:23:d7:99:a9:23:2a:7b:85:7e:07:d7: af:5a:4d:8c:cf:07:cb:28:85:9b:61:cc:91:62:67: ff:03:f6:41:59:08:ba:3a:0c:d9:c2:dc:df:da:d8: 9d:0a:60:4e:7b:36:7c:f3:69:20:b9:9d:c3:60:1f: ef:a8:bf:1a:34:24:d3:cd:a5:1a:02:79:09:e0:b9: db:0a:d0:01:70:69:c1:ba:0c:14:c3:7e:37:3c:1d: 6e:6c:48:a1:ad:61:71:ce:50:3d:ea:e5:16:c3:ef: d7:fa:c4:68:57:00:c1:1f:f6:40:90:07:cd:57:12: c1:f3:f3:d7:99:54:2e:9b:71:25:48:c2:45:b3:d8: b5:b4:13:4b:c6:9d:e7:50:32:e8:47:62:c6:2e:66: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:49:CD:F4:E2:F5:FE:CC:17:2C:39:00:F2:C3:EF:FA:C8:4A:84:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/ef47a195-86d8-3fee-ba83-6788a644c769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cd:ba:0c:a9:ec:8c:f2:1b:7f:9a:b4:4a:5a:18:0b:e2:60: 98:6d:74:33:28:ed:50:45:af:8d:d4:f9:2c:c2:54:ce:67:e2: e6:a9:66:ed:46:bd:6b:b1:ca:b2:c1:57:1d:b3:00:d7:63:04: 3b:c5:4b:3a:d6:b7:16:cf:a6:74:99:56:68:ff:e9:91:e6:63: 7c:be:31:dd:a1:68:b6:07:52:41:1a:b2:cf:de:20:ea:f5:99: b1:48:97:53:fe:d4:d9:58:37:59:75:d8:b8:37:67:f0:cf:1c: b8:2b:1d:83:a9:b6:73:f6:90:c3:82:8d:2f:69:8d:bf:ee:27: 72:fd:fb:f0:34:4b:25:34:fa:49:6e:dd:13:22:19:50:03:d0: 53:2c:11:56:ba:96:f7:ec:ab:7b:8a:76:55:9f:06:78:fa:cb: 21:0a:98:db:c0:2f:69:ca:b8:a7:c7:9d:5f:0e:99:e9:a1:8d: 88:44:03:07:99:a1:c6:e1:4d:3a:4e:90:23:61:64:dc:81:9b: fd:ee:d7:99:d6:03:bf:95:bf:8a:71:01:10:f4:a1:13:a7:48: 33:5d:3d:0f:9b:ae:aa:6d:5e:cf:22:90:6d:66:29:55:df:bc: e8:4c:98:37:5c:4f:a6:0a:8d:fb:5d:b8:1d:6d:71:83:0b:65: 53:4a:a5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ei5pNi4R+bDbHQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDkwOTE2MTA1OVoXDTI2MTIwODE3MTA1OVowLzEtMCsGA1UEAxMk N2FhYWE3ZjYtMjI3Zi00MjMxLTgxMWQtOTYzZDk4MTEyMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qKqbyzJ6EiRQao6Dgn3WdWn37G+udHxc/yu oI0FsCuXYfZu9rZP0qTt/ksqv27HOpvfZVFAeHe9XXu8YtxgtUWWTm3LroiRPNcQ p5sm2rT9Don+sNmkwc/KhIx2pCJy99XQ4FKhHqy9TasoI9eZqSMqe4V+B9evWk2M zwfLKIWbYcyRYmf/A/ZBWQi6OgzZwtzf2tidCmBOezZ882kguZ3DYB/vqL8aNCTT zaUaAnkJ4LnbCtABcGnBugwUw343PB1ubEihrWFxzlA96uUWw+/X+sRoVwDBH/ZA kAfNVxLB8/PXmVQum3ElSMJFs9i1tBNLxp3nUDLoR2LGLmal9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpJzfTi9f7MFyw5APLD7/rISoQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvZWY0N2ExOTUtODZkOC0z ZmVlLWJhODMtNjc4OGE2NDRjNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjNugyp7IzyG3+atEpaGAviYJhtdDMo7VBFr43U+SzCVM5n4uapZu1G vWuxyrLBVx2zANdjBDvFSzrWtxbPpnSZVmj/6ZHmY3y+Md2haLYHUkEass/eIOr1 mbFIl1P+1NlYN1l12Lg3Z/DPHLgrHYOptnP2kMOCjS9pjb/uJ3L9+/A0SyU0+klu 3RMiGVAD0FMsEVa6lvfsq3uKdlWfBnj6yyEKmNvAL2nKuKfHnV8OmemhjYhEAweZ ocbhTTpOkCNhZNyBm/3u15nWA7+Vv4pxARD0oROnSDNdPQ+brqptXs8ikG1mKVXf vOhMmDdcT6YKjftduB1tcYMLZVNKpT0= -----END CERTIFICATE-----Generated at Sun Sep 20 13:17:26 2026 by rpki-client