$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa File: 07cdf4ff-3d86-3034-9063-bc02000bef1e.roa (raw, json) Hash identifier: QYMJuDcgpoigIVkUFlAawQzPJlOywVXzHQQJc0iZYVo= Subject key identifier: CA:CE:FB:27:37:24:AE:9E:C7:7E:5F:17:0A:B0:27:96:4C:2E:2F:53 Certificate issuer: /CN=e9986c58-4c7a-450f-9355-1382b40eb86e Certificate serial: 010D0C9F4328584EF2E7709827916BEAB5A7F800 Authority key identifier: 93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 23166 IP address blocks: 198.98.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:70:98:27:91:6b:ea:b5:a7:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9986c58-4c7a-450f-9355-1382b40eb86e Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=f47e9f90-b61f-4870-b75b-3fd7aa89c312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:42:e4:ba:69:bf:39:68:b0:26:4f:48:a5: 45:ca:9f:32:e6:09:51:29:57:10:2b:53:18:95:a5: e5:29:7a:b0:3d:54:c3:00:15:de:4a:bb:ec:0e:b5: bc:a9:b8:4c:a5:d6:6d:ee:cd:50:2b:76:98:49:e9: 2d:66:b3:00:bc:9a:23:d8:c1:cd:3d:67:9e:ff:82: 97:17:0e:08:68:76:1f:64:e8:08:26:93:8f:98:b8: 63:05:fc:10:57:64:e5:5f:cc:1b:bb:20:e2:4a:ba: 3d:b5:39:6a:9d:61:7d:bd:6f:9f:b6:19:35:c9:97: 09:32:db:d8:59:c9:6b:2c:85:99:2d:d1:9c:94:57: de:8f:b3:3a:6c:15:eb:87:20:a7:9f:00:c3:5f:f3: bd:36:76:dc:d4:77:5d:a5:88:1a:23:35:ef:53:1e: 75:a4:03:d5:67:a6:30:72:2b:dd:3c:da:4f:8b:63: 77:99:57:2b:3e:66:92:b8:e9:67:b9:f6:f0:76:4b: 50:fe:98:d1:66:53:1d:2c:30:45:1f:ef:85:57:24: 68:df:df:a4:e4:3d:a3:f8:aa:46:6a:cc:04:9c:c2: f1:1f:d2:a2:74:84:61:b3:11:4f:5b:bb:2b:95:88: c6:b8:a6:8a:9c:4d:f0:1b:0f:01:44:6e:60:c5:32: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:FB:27:37:24:AE:9E:C7:7E:5F:17:0A:B0:27:96:4C:2E:2F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl X509v3 Authority Key Identifier: keyid:93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer sbgp-ipAddrBlock: critical IPv4: 198.98.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:41:e4:ef:44:be:bb:a0:24:cc:07:d0:3b:15:de:5c:9f:44: ca:95:7b:f8:3a:de:2b:b3:a0:a2:36:33:8c:37:be:c8:cb:07: 30:c1:26:bd:ad:65:74:dc:f6:3f:7c:3b:f8:b2:f8:80:bf:6e: 01:03:06:23:28:82:1e:25:10:ae:b1:20:25:62:02:6c:c5:35: e3:4f:9a:d3:d9:b6:88:8b:77:11:1b:5d:14:16:56:2c:3e:8a: 94:f8:d5:c6:eb:2c:41:49:d2:64:8c:58:d0:18:11:b5:0a:9c: e1:a4:dc:2a:15:bb:47:f0:9d:60:f9:09:48:07:c9:70:5d:19: 4c:80:fa:f9:b8:c6:e9:d5:fc:48:5e:b5:38:41:79:6b:bc:28: 6d:d1:21:29:b1:c3:60:e9:84:38:8b:bd:fa:ce:3b:27:49:3a: f5:95:ab:42:a6:ad:8f:95:1e:5b:a0:06:79:dd:b8:20:ac:6a: 47:03:11:b7:6c:50:a7:9a:f0:65:38:17:7e:f8:97:94:dc:45: b7:b2:12:25:2b:7b:a2:3d:72:f1:3a:0f:f1:ef:5d:9c:74:84: 05:dd:33:17:44:40:80:32:9a:bb:09:3f:cf:98:0c:3d:32:2c: b9:b1:d5:21:09:a2:dd:98:0c:c3:df:2f:18:9e:3c:04:2c:bf: 84:f5:68:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53CYJ5Fr6rWn+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5ODZjNTgtNGM3YS00NTBmLTkzNTUtMTM4MmI0MGVi ODZlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ3ZTlmOTAtYjYxZi00ODcwLWI3NWItM2ZkN2FhODljMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKZC5LppvzlosCZPSKVFyp8y5glRKVcQK1MY laXlKXqwPVTDABXeSrvsDrW8qbhMpdZt7s1QK3aYSektZrMAvJoj2MHNPWee/4KX Fw4IaHYfZOgIJpOPmLhjBfwQV2TlX8wbuyDiSro9tTlqnWF9vW+fthk1yZcJMtvY WclrLIWZLdGclFfej7M6bBXrhyCnnwDDX/O9Nnbc1HddpYgaIzXvUx51pAPVZ6Yw civdPNpPi2N3mVcrPmaSuOlnufbwdktQ/pjRZlMdLDBFH++FVyRo39+k5D2j+KpG aswEnMLxH9KidIRhsxFPW7srlYjGuKaKnE3wGw8BRG5gxTIp8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrO+yc3JK6ex35fFwqwJ5ZMLi9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4 NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgyYjQwZWI4NmUvMDdjZGY0ZmYtM2Q4Ni0z MDM0LTkwNjMtYmMwMjAwMGJlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTk5ODZjNTgtNGM3YS00NTBmLTkz NTUtMTM4MmI0MGViODZlL2U5OTg2YzU4LTRjN2EtNDUwZi05MzU1LTEzODJiNDBl Yjg2ZS5jcmwwHwYDVR0jBBgwFoAUkzlG6Mya5VpVi9GIhZcr1cjmHSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgy YjQwZWI4NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdB5O9EvrugJMwH0DsV3lyfRMqVe/g63iuzoKI2M4w3vsjLBzDBJr2t ZXTc9j98O/iy+IC/bgEDBiMogh4lEK6xICViAmzFNeNPmtPZtoiLdxEbXRQWViw+ ipT41cbrLEFJ0mSMWNAYEbUKnOGk3CoVu0fwnWD5CUgHyXBdGUyA+vm4xunV/Ehe tThBeWu8KG3RISmxw2DphDiLvfrOOydJOvWVq0KmrY+VHlugBnnduCCsakcDEbds UKea8GU4F374l5TcRbeyEiUre6I9cvE6D/HvXZx0hAXdMxdEQIAymrsJP8+YDD0y LLmx1SEJot2YDMPfLxiePAQsv4T1aEA= -----END CERTIFICATE-----Generated at Thu Sep 24 22:33:34 2026 by rpki-client