$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa File: 5fe97fce-61be-3557-b7c1-edbd8078a492.roa (raw, json) Hash identifier: QO9OpB25ATjAeBg8LxFBLHSIZF0Rwq/4/KLQzNEercs= Subject key identifier: CF:5E:E3:26:AB:B2:82:1A:7F:54:C4:E8:18:98:55:DC:05:E9:0B:24 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F498AD54DBADE3109094B1C80 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400662 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d5:4d:ba:de:31:09:09:4b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3722a99-44b4-409f-a421-75eb50494f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:56:36:d4:95:9a:85:ac:b4:23:1b:e4:cc: d8:95:86:d0:5d:76:d9:4b:81:9c:5b:a7:58:f9:87: 8a:0b:38:dd:4e:c5:5d:2c:81:55:57:06:9d:24:fe: bd:ce:63:a6:fa:4a:5e:64:a6:0f:aa:e3:63:bc:f2: 78:0f:ec:92:33:93:0f:8b:24:b6:bb:3b:2f:ea:5a: 28:d5:2a:cc:3f:98:9d:d8:d6:59:bc:93:55:a4:e4: 27:49:07:ad:67:b0:28:95:db:d2:0a:ce:bc:e8:d9: f7:0a:96:e3:3b:1c:12:db:33:07:9c:0f:b8:32:1b: 3c:4a:74:72:55:66:88:41:16:f9:d3:41:48:97:52: ef:46:62:df:6a:c4:bc:8c:48:e2:b7:19:27:7f:95: a9:91:79:06:ac:19:96:52:75:c7:7f:73:ef:33:31: dd:fd:3a:37:5e:a1:cc:13:8d:fe:a8:d8:ea:89:34: a8:fd:5d:7d:d7:35:6f:1b:70:2f:e1:42:cd:44:e8: 86:46:ba:b8:c9:af:6f:2a:84:4b:39:e6:ef:01:c3: 60:ba:29:02:e1:59:4e:da:3a:c6:9c:a2:bf:6d:ea: e3:84:17:a4:17:ce:89:f8:e0:c0:a1:31:32:15:c7: 57:36:9d:28:b8:4b:3d:33:a1:3d:29:2a:9f:47:2b: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5E:E3:26:AB:B2:82:1A:7F:54:C4:E8:18:98:55:DC:05:E9:0B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:01:a8:3a:7f:3f:d5:6d:a8:9e:b2:cf:18:88:e7:7e:7c:fb: b7:2f:6f:c9:e8:cc:bb:eb:22:e7:51:90:d2:0e:f1:24:21:67: b8:b4:e2:4d:02:54:7b:f6:5c:75:ed:08:b0:8a:9f:15:96:d2: de:c0:e5:b4:7d:cc:bd:d8:d1:9a:b9:24:0a:9d:f6:05:50:d1: 8c:59:29:86:4a:ef:76:92:97:ff:38:f2:ab:4a:bc:2d:da:5a: 03:a0:43:f8:24:66:d7:20:6a:ed:1e:cb:d9:31:1d:8e:e2:2a: 08:3f:82:2a:05:18:10:7c:9a:1e:d1:a9:b0:7f:6e:02:39:23: 46:86:3f:24:85:10:4f:a3:c0:b3:11:42:24:5a:8b:32:2a:a5: 39:f7:02:0a:5f:2c:b0:6c:3b:6a:84:fe:1d:66:2d:ea:e5:1c: 03:ba:9d:a9:f1:a7:9b:c1:fb:62:8f:c3:62:6e:a5:db:1d:80: 72:39:fb:1a:b4:59:65:63:ba:ee:86:28:59:d5:27:6a:94:00: 76:82:12:da:ef:7b:3b:25:da:f4:d3:94:46:5f:83:cf:f5:b7: 1e:ec:d4:38:64:6f:0d:09:3f:04:d1:9c:6a:70:c8:40:97:ac: c6:c2:1f:32:aa:62:c5:14:fb:fd:66:95:e8:93:38:7c:69:03: f1:38:a7:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JitVNut4xCQlLHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM3MjJhOTktNDRiNC00MDlmLWE0MjEtNzVlYjUwNDk0ZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTxWNtSVmoWstCMb5MzYlYbQXXbZS4GcW6dY +YeKCzjdTsVdLIFVVwadJP69zmOm+kpeZKYPquNjvPJ4D+ySM5MPiyS2uzsv6loo 1SrMP5id2NZZvJNVpOQnSQetZ7AoldvSCs686Nn3CpbjOxwS2zMHnA+4Mhs8SnRy VWaIQRb500FIl1LvRmLfasS8jEjitxknf5WpkXkGrBmWUnXHf3PvMzHd/To3XqHM E43+qNjqiTSo/V191zVvG3Av4ULNROiGRrq4ya9vKoRLOebvAcNguikC4VlO2jrG nKK/berjhBekF86J+ODAoTEyFcdXNp0ouEs9M6E9KSqfRyv6UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9e4yarsoIaf1TE6BiYVdwF6QskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvNWZlOTdmY2UtNjFiZS0z NTU3LWI3YzEtZWRiZDgwNzhhNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgBqDp/P9VtqJ6yzxiI5358+7cvb8nozLvrIudRkNIO8SQhZ7i04k0C VHv2XHXtCLCKnxWW0t7A5bR9zL3Y0Zq5JAqd9gVQ0YxZKYZK73aSl/848qtKvC3a WgOgQ/gkZtcgau0ey9kxHY7iKgg/gioFGBB8mh7RqbB/bgI5I0aGPySFEE+jwLMR QiRaizIqpTn3AgpfLLBsO2qE/h1mLerlHAO6nanxp5vB+2KPw2JupdsdgHI5+xq0 WWVjuu6GKFnVJ2qUAHaCEtrvezsl2vTTlEZfg8/1tx7s1Dhkbw0JPwTRnGpwyECX rMbCHzKqYsUU+/1mleiTOHxpA/E4p6Q= -----END CERTIFICATE-----Generated at Tue Sep 29 02:57:00 2026 by rpki-client