$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa File: 460a070d-2ded-3e86-9735-47539cf8b568.roa (raw, json) Hash identifier: xPd0Lnt5n6+dPjT50uXHTKZv6bCJmVhkc6mabYUHP1E= Subject key identifier: A4:F1:1B:93:15:B7:85:19:67:70:65:84:C9:CE:4E:47:CA:0E:3D:2A Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584F0D6CEB851FD1907044F46700 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 198.29.16.0/22 maxlen: 24 198.29.22.0/24 maxlen: 24 198.29.23.0/24 maxlen: 24 198.29.24.0/24 maxlen: 24 198.29.25.0/24 maxlen: 24 198.29.26.0/24 maxlen: 24 2602:f9e7:20::/45 maxlen: 48 2602:f9e7:28::/46 maxlen: 48 2602:f9e7:2c::/46 maxlen: 48 2602:f9e7:40::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:eb:85:1f:d1:90:70:44:f4:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e709d69d-fa1a-4fa8-bbb0-f68b53c3cc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:82:9a:f4:0d:24:92:68:df:29:c7:2f:cf: 13:e4:14:f8:88:42:07:c4:a2:95:88:a2:b9:ab:66: 6d:ac:06:35:1d:b7:9d:ea:1d:b3:6d:47:db:96:79: a8:f9:46:8e:5b:6e:b0:27:e5:02:16:7d:ab:bc:7f: 2c:51:98:45:97:18:a3:fc:91:d4:91:4c:6c:89:fa: 36:d8:a5:b6:72:70:7c:8f:0c:a2:fd:97:d3:a7:1a: e8:ce:39:48:8b:19:fc:91:b2:2d:a3:7e:ef:e7:1e: 53:8f:0a:43:ec:61:14:72:84:85:13:1f:4a:fa:83: 3f:3e:c4:d2:85:cd:97:30:93:a3:f1:cf:92:b0:b2: 3f:fe:c5:1c:e2:8c:ed:c6:f6:2d:61:16:a8:eb:5c: 3e:29:b1:3d:47:98:43:18:1e:e6:31:f8:4e:c2:fb: 07:7e:59:c4:6b:28:f9:b7:03:c2:c5:f6:66:46:4c: 75:b3:2d:68:15:fa:7b:51:5f:db:a9:2f:2e:70:67: 42:67:dd:15:6a:f0:28:96:25:e9:4b:86:ed:d1:aa: b0:ab:85:5b:1c:95:75:69:a5:3e:3a:d7:6a:e8:ad: 4c:39:0c:ef:37:9f:52:62:3f:ca:6e:2b:c0:a1:96: 57:51:eb:e8:e6:d1:24:7b:55:de:89:f0:0c:59:1a: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F1:1B:93:15:B7:85:19:67:70:65:84:C9:CE:4E:47:CA:0E:3D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.16.0/22 198.29.22.0-198.29.26.255 IPv6: 2602:f9e7:20::/44 2602:f9e7:40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:74:eb:ee:61:80:cb:8a:31:d4:07:13:01:a5:2e:82:f1:f6: a6:27:70:3c:cc:d4:74:72:1a:c8:bb:f6:4d:e5:0c:2b:40:41: fc:7c:19:3c:27:0a:20:a0:bc:36:c0:5d:7b:67:45:1f:10:27: dd:ea:db:94:24:ce:fd:02:bb:8b:45:2c:bb:4c:6f:30:39:fb: 4a:7b:00:8d:fe:d3:2e:d4:cd:d8:96:99:73:8c:4a:fb:60:a6: 2f:d3:65:30:31:75:67:2d:09:4c:14:12:8d:5a:e9:71:58:36: 18:e1:b5:6f:8c:6e:42:db:af:c0:9e:4a:f1:56:55:ca:cd:9d: a2:80:af:05:a2:e8:3d:77:f0:21:db:b2:5b:dc:7d:9d:a7:36: b4:fd:77:22:0c:ed:97:88:bd:79:50:ef:ad:43:db:6a:96:11: 86:06:45:32:a7:e6:4d:f1:8c:4c:24:33:af:88:47:be:ca:a8: 16:bb:3f:fa:df:98:e3:b8:80:e0:e2:48:80:70:b8:b8:df:8d: fd:14:f1:6c:0b:ad:f9:85:68:6a:0a:6e:f6:77:55:80:a6:04: c5:f6:96:ad:f6:dd:ee:8a:91:18:e1:cd:6a:a1:77:b0:15:92: 06:30:dd:b5:3b:0f:fd:25:77:a3:76:11:94:78:11:a2:fd:fa: c5:0b:7f:23 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE8NbOuFH9GQcET0ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTcwOWQ2OWQtZmExYS00ZmE4LWJiYjAtZjY4YjUzYzNjYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9+CmvQNJJJo3ynHL88T5BT4iEIHxKKViKK5 q2ZtrAY1Hbed6h2zbUfblnmo+UaOW26wJ+UCFn2rvH8sUZhFlxij/JHUkUxsifo2 2KW2cnB8jwyi/ZfTpxrozjlIixn8kbIto37v5x5TjwpD7GEUcoSFEx9K+oM/PsTS hc2XMJOj8c+SsLI//sUc4oztxvYtYRao61w+KbE9R5hDGB7mMfhOwvsHflnEayj5 twPCxfZmRkx1sy1oFfp7UV/bqS8ucGdCZ90VavAoliXpS4bt0aqwq4VbHJV1aaU+ Otdq6K1MOQzvN59SYj/KbivAoZZXUevo5tEke1XeifAMWRooWQIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFKTxG5MVt4UZZ3BlhMnOTkfKDj0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvNDYwYTA3MGQtMmRlZC0z ZTg2LTk3MzUtNDc1MzljZjhiNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUAwQCxh0QMAwD BAHGHRYDBADGHRowGAQCAAIwEgMHBCYC+ecAIAMHAiYC+ecAQDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD dOvuYYDLijHUBxMBpS6C8famJ3A8zNR0chrIu/ZN5QwrQEH8fBk8JwogoLw2wF17 Z0UfECfd6tuUJM79AruLRSy7TG8wOftKewCN/tMu1M3YlplzjEr7YKYv02UwMXVn LQlMFBKNWulxWDYY4bVvjG5C26/AnkrxVlXKzZ2igK8Foug9d/Ah27Jb3H2dpza0 /XciDO2XiL15UO+tQ9tqlhGGBkUyp+ZN8YxMJDOviEe+yqgWuz/635jjuIDg4kiA cLi43439FPFsC635hWhqCm72d1WApgTF9pat9t3uipEY4c1qoXewFZIGMN21Ow/9 JXejdhGUeBGi/frFC38j -----END CERTIFICATE-----Generated at Sun Oct 4 22:51:05 2026 by rpki-client