$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/da36e96c-a5d2-3da1-91e8-cf4ead6d7239.roa File: da36e96c-a5d2-3da1-91e8-cf4ead6d7239.roa (raw, json) Hash identifier: Pb/lm3Tk8pXoevFrJvZOhjivFYXt/v6O/AlPE1F9w48= Subject key identifier: 04:AF:5E:44:3D:B4:4C:CD:99:CC:AE:EA:4A:E6:79:F2:98:FC:12:6A Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584F21458B5C5D58543D99C8BA00 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/da36e96c-a5d2-3da1-91e8-cf4ead6d7239.roa Signing time: Thu 10 Sep 2026 15:37:15 +0000 ROA not before: Thu 10 Sep 2026 15:37:15 +0000 ROA not after: Wed 09 Dec 2026 16:37:15 +0000 asID: 3152 IP address blocks: 198.125.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:45:8b:5c:5d:58:54:3d:99:c8:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Sep 10 15:37:15 2026 GMT Not After : Dec 9 16:37:15 2026 GMT Subject: CN=f6305bee-79f2-4f45-9e9b-92067b6379a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:e9:16:83:85:a7:41:7a:a2:19:ff:10:e0: 2b:7b:4e:03:78:fb:b9:bf:20:7c:3c:36:05:88:ab: df:bb:a1:c4:43:bb:cf:72:b8:13:bc:98:f1:31:e6: bd:8f:62:a5:44:77:2d:a7:33:f7:91:19:2c:9c:dd: 74:42:88:82:d1:dd:68:30:46:d4:f2:1b:fd:52:7e: 26:bf:19:ac:68:2a:da:c0:fa:07:b2:78:1b:59:eb: d3:5d:da:a3:bb:cd:3e:65:a7:f2:e8:00:de:54:2e: a2:09:39:bc:c8:d7:ea:f7:04:62:db:58:d0:6c:4b: 4b:52:70:85:b6:bf:e4:fc:c4:f7:48:44:13:4d:6a: d9:f0:55:18:d6:fe:30:ed:66:63:71:ba:88:e0:a7: 00:34:dc:9d:39:9a:dc:4f:d0:81:cd:1d:1b:6b:6a: f6:44:ef:15:00:50:c2:9d:49:7e:b1:2d:ef:26:4f: 0a:37:ff:f1:8a:db:08:57:d3:ca:0a:d7:aa:1d:9b: 82:5d:c8:d0:37:46:ab:81:0a:c4:0e:1c:13:c7:fe: f3:60:df:cd:17:04:a7:d7:04:bb:8b:a6:da:b8:d4: 6f:d5:26:1b:b2:b5:57:12:fe:a5:9d:24:5e:0c:37: 7e:63:85:a0:38:85:35:e6:1c:06:90:d2:2a:ce:a8: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AF:5E:44:3D:B4:4C:CD:99:CC:AE:EA:4A:E6:79:F2:98:FC:12:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/da36e96c-a5d2-3da1-91e8-cf4ead6d7239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 198.125.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a4:9a:2f:de:cd:cc:b6:29:3c:69:22:63:c0:32:a6:8b:d2: aa:ce:2b:96:25:5d:91:7d:44:b1:48:0a:69:81:5a:85:2a:33: 8d:c1:72:b1:7b:9c:3b:81:54:b4:8f:59:98:ef:ec:55:fe:d4: e0:ec:32:61:d8:73:6f:4b:c3:e8:b8:d0:4a:c3:f2:97:3e:14: c5:16:da:c3:61:1d:b4:e4:93:3a:69:d0:e9:cf:44:fa:4a:0c: 8c:20:80:9e:2e:ae:cf:c5:ba:4c:21:29:35:a4:3c:d4:3b:66: 13:f4:d2:b8:b0:e0:e3:d7:03:75:c3:cb:a7:7d:e1:94:cd:ba: 3a:86:22:fe:c2:cb:46:d3:de:64:ba:c2:f7:b5:cc:7b:8b:88: c4:90:90:74:06:08:89:12:99:85:07:b7:f7:46:50:d7:f9:e1: cb:53:f9:ca:56:f3:58:0c:d7:d1:d1:65:78:c3:c2:39:f1:ae: f8:85:9f:93:37:b2:aa:93:87:07:a8:16:a9:b6:37:71:7e:61: 35:6b:b7:9d:9a:38:dc:13:c1:87:22:54:12:64:4a:0b:45:41: 1c:b3:6e:a9:9d:64:52:ed:ac:e7:17:62:90:fa:d4:ba:6a:75: 4c:ab:d4:81:95:44:f7:9c:0e:a2:48:0c:85:3a:71:54:68:47: d3:bf:b8:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8hRYtcXVhUPZnIugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI2MDkxMDE1MzcxNVoXDTI2MTIwOTE2MzcxNVowLzEtMCsGA1UEAxMk ZjYzMDViZWUtNzlmMi00ZjQ1LTllOWItOTIwNjdiNjM3OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDpFoOFp0F6ohn/EOAre04DePu5vyB8PDYF iKvfu6HEQ7vPcrgTvJjxMea9j2KlRHctpzP3kRksnN10QoiC0d1oMEbU8hv9Un4m vxmsaCrawPoHsngbWevTXdqju80+Zafy6ADeVC6iCTm8yNfq9wRi21jQbEtLUnCF tr/k/MT3SEQTTWrZ8FUY1v4w7WZjcbqI4KcANNydOZrcT9CBzR0ba2r2RO8VAFDC nUl+sS3vJk8KN//xitsIV9PKCteqHZuCXcjQN0argQrEDhwTx/7zYN/NFwSn1wS7 i6bauNRv1SYbsrVXEv6lnSReDDd+Y4WgOIU15hwGkNIqzqiSvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASvXkQ9tEzNmcyu6krmefKY/BJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvZGEzNmU5NmMtYTVkMi0z ZGExLTkxZTgtY2Y0ZWFkNmQ3MjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxn00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAekmi/ezcy2KTxpImPAMqaL0qrOK5YlXZF9RLFICmmBWoUqM43BcrF7 nDuBVLSPWZjv7FX+1ODsMmHYc29Lw+i40ErD8pc+FMUW2sNhHbTkkzpp0OnPRPpK DIwggJ4urs/FukwhKTWkPNQ7ZhP00riw4OPXA3XDy6d94ZTNujqGIv7Cy0bT3mS6 wve1zHuLiMSQkHQGCIkSmYUHt/dGUNf54ctT+cpW81gM19HRZXjDwjnxrviFn5M3 sqqThweoFqm2N3F+YTVrt52aONwTwYciVBJkSgtFQRyzbqmdZFLtrOcXYpD61Lpq dUyr1IGVRPecDqJIDIU6cVRoR9O/uLs= -----END CERTIFICATE-----Generated at Sun Sep 20 12:38:23 2026 by rpki-client