$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: MnhCaE4wrqUERsoQEL7qlb4AujPdvf3puQo4Um1W9nM= Subject key identifier: C5:65:FF:1E:FF:37:DE:65:D3:5F:3B:F3:78:9E:2F:DA:5B:69:76:4F Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584F4975666BD64A33B03F4D1500 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:66:6b:d6:4a:33:b0:3f:4d:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=357ae2e3-2e26-4acd-b8e8-34cfa18dac12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:28:4f:99:21:0a:59:4a:a8:7c:1c:0a:8e: cb:81:6c:f0:76:aa:0a:e5:5c:b3:af:ce:98:9f:b2: 66:0c:2f:52:31:0f:19:3b:d2:61:90:ee:4f:0c:21: a4:de:8e:b4:d2:f1:ef:de:14:97:9a:4b:41:b4:ad: c4:71:0d:cb:a5:00:ae:0b:00:cd:53:5d:eb:3d:d2: 1f:a8:9d:e8:e2:d5:da:d8:b9:89:28:48:ea:23:5f: 33:09:9c:ac:0b:eb:29:42:71:a0:21:83:d2:8d:7c: 6a:3f:90:a2:8f:00:8d:c3:6c:88:89:da:cc:32:d2: 1c:05:f4:1d:0b:75:22:50:13:b3:a2:b5:7e:e4:65: 3f:d5:08:69:a8:ef:40:52:73:cf:4d:38:7b:7e:b8: 3d:56:ae:a4:ac:4c:54:fe:57:c0:17:c9:fa:5b:c4: 92:70:dd:77:7e:9a:c9:e3:ba:df:ea:72:a5:f2:76: f0:f9:c0:fb:5e:92:24:ec:b8:df:b9:85:89:23:78: d0:23:77:89:d5:89:c1:c4:06:94:88:29:8e:79:1f: e4:84:d1:f5:27:3c:8d:ea:f7:6e:33:cb:7f:c7:18: 50:d4:ed:80:a8:ae:35:68:cb:f7:89:32:b7:22:98: 4c:8f:c3:3c:55:8c:be:e1:a8:65:5c:37:7c:d9:aa: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:65:FF:1E:FF:37:DE:65:D3:5F:3B:F3:78:9E:2F:DA:5B:69:76:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:15:4f:49:8a:18:5a:84:e4:a1:be:03:23:bf:3d:a5:7e:d4: bc:c9:44:b1:3a:2a:69:14:f7:ef:90:5e:08:32:82:07:e0:2a: 7e:1e:e9:49:22:5a:8c:bc:bf:aa:ac:0d:84:e4:b0:74:1c:a7: f6:8a:5d:80:3b:7c:06:b3:7f:e7:04:e5:da:ad:9c:6a:b0:f3: 34:08:34:f2:8f:d4:c8:b5:a4:b6:8d:8f:56:99:8f:0c:ad:73: 7a:8a:f7:52:9e:24:27:35:cb:30:e5:52:63:e9:21:0b:0e:ed: c8:2a:e3:aa:32:31:7d:dd:6b:f8:61:82:fe:c2:b7:54:aa:3c: a4:90:a1:b7:54:e1:38:8d:bf:a3:85:59:e8:35:80:6e:d8:79: 17:b9:98:53:03:d3:20:fb:2c:97:05:fa:2e:b0:e1:d7:a4:76: ae:c6:df:0e:d3:d8:08:93:1c:a4:0d:c6:be:5f:e3:e6:4c:a5: 9f:01:6e:e4:cd:e1:b4:dc:c0:7e:f3:d7:18:7e:6a:da:7d:78: 34:2a:1e:d1:2e:d1:fe:76:6a:54:eb:11:98:54:28:ac:b9:42: 23:9a:5a:12:e7:ce:0c:48:e3:05:f0:2e:f1:4f:bd:ab:37:20: 00:bd:e8:5f:c3:83:85:71:90:ef:56:25:c1:0a:a2:c5:aa:9c: bd:8a:35:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWZr1kozsD9NFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzU3YWUyZTMtMmUyNi00YWNkLWI4ZTgtMzRjZmExOGRhYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/IoT5khCllKqHwcCo7LgWzwdqoK5Vyzr86Y n7JmDC9SMQ8ZO9JhkO5PDCGk3o600vHv3hSXmktBtK3EcQ3LpQCuCwDNU13rPdIf qJ3o4tXa2LmJKEjqI18zCZysC+spQnGgIYPSjXxqP5CijwCNw2yIidrMMtIcBfQd C3UiUBOzorV+5GU/1QhpqO9AUnPPTTh7frg9Vq6krExU/lfAF8n6W8SScN13fprJ 47rf6nKl8nbw+cD7XpIk7LjfuYWJI3jQI3eJ1YnBxAaUiCmOeR/khNH1JzyN6vdu M8t/xxhQ1O2AqK41aMv3iTK3IphMj8M8VYy+4ahlXDd82ar7kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVl/x7/N95l018783ieL9pbaXZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIVT0mKGFqE5KG+AyO/PaV+1LzJRLE6KmkU9++QXggyggfgKn4e6Uki Woy8v6qsDYTksHQcp/aKXYA7fAazf+cE5dqtnGqw8zQINPKP1Mi1pLaNj1aZjwyt c3qK91KeJCc1yzDlUmPpIQsO7cgq46oyMX3da/hhgv7Ct1SqPKSQobdU4TiNv6OF Weg1gG7YeRe5mFMD0yD7LJcF+i6w4dekdq7G3w7T2AiTHKQNxr5f4+ZMpZ8BbuTN 4bTcwH7z1xh+atp9eDQqHtEu0f52alTrEZhUKKy5QiOaWhLnzgxI4wXwLvFPvas3 IAC96F/Dg4VxkO9WJcEKosWqnL2KNcA= -----END CERTIFICATE-----Generated at Sun Oct 11 09:27:59 2026 by rpki-client