$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa File: 98962ffc-7137-39c6-954d-ea2ac9a1f644.roa (raw, json) Hash identifier: FMtnwN3UzAWw+f1DabHJUXM4LlWMZry1MNeBQ7+1Lls= Subject key identifier: 0B:BC:A3:79:32:73:CC:C8:3A:FC:6E:22:8D:8A:91:75:E6:ED:A4:A2 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584F3A17DCFAAC24EBCD02883500 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 29900 IP address blocks: 162.218.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:dc:fa:ac:24:eb:cd:02:88:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=c8eb1da8-bc53-4f2f-905d-d1cf12945b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c3:5c:7a:86:2a:82:f8:c8:93:95:9f:5d:43: c6:b2:db:ab:a5:c0:ae:fa:39:91:5c:a6:9b:a9:5c: fa:0e:46:0e:1d:43:a1:6e:30:7f:b5:6e:c3:ea:42: 15:c4:ac:38:7f:a7:37:3b:2c:18:72:fe:d1:30:d3: b1:30:80:bc:a5:d7:6b:e5:de:7a:6c:a9:29:4d:65: 83:47:bb:82:c7:e0:13:61:ce:fd:4d:94:48:ad:65: a8:a7:03:4d:c7:5a:78:b9:62:64:60:03:a6:f8:32: 5f:65:5b:9a:6e:39:a6:b7:0d:73:59:cc:61:cd:6e: 5e:a2:dd:b0:30:ea:a0:92:ee:30:f2:50:7c:7e:cb: 5c:67:3f:bd:0e:0f:65:99:0e:bd:a7:cc:98:f5:c9: 3d:d8:b4:6d:c0:73:58:9a:b2:e0:1a:e0:4a:33:43: e7:d1:ae:25:2e:2b:44:1b:16:03:a0:e0:b0:4f:38: 01:d9:7c:d8:e9:c2:c0:da:84:24:62:76:e0:73:49: 8f:cb:dc:23:f3:9b:b6:ce:dc:f7:c8:fc:21:b0:a9: 33:0a:ed:7d:4d:f1:4f:8f:b9:14:99:6c:73:38:cc: 6e:9c:4a:54:a6:c8:20:49:ea:2f:b0:84:23:3b:96: 18:1a:f6:66:0d:c7:e1:d5:5e:5a:c9:7a:04:42:ec: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BC:A3:79:32:73:CC:C8:3A:FC:6E:22:8D:8A:91:75:E6:ED:A4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1c:f0:4c:56:b5:ea:e3:0d:74:ff:2e:7b:3b:b8:b9:ec:ff: 86:29:54:d5:b3:9e:c8:a1:cb:7e:51:bf:03:4a:b0:24:c1:f2: 67:0e:3f:f0:29:a3:e8:d4:88:1a:7a:4d:65:68:ff:7e:9e:ef: 7b:e9:f2:a4:97:18:b2:25:49:6b:b0:25:d5:15:dc:c3:a8:62: 0d:a6:74:8d:f9:62:f1:7f:c7:06:df:88:50:8b:58:c7:2b:6c: 0a:ee:3b:f1:4c:44:30:85:04:7d:9d:1a:ab:fa:56:9b:6f:a9: 0b:90:c4:35:1e:88:49:64:c1:bf:f6:b4:a9:96:84:15:f7:47: 7a:55:df:9f:2f:fa:69:14:9f:41:bf:3a:cc:b4:0d:1c:f8:4f: 8b:dd:66:6b:74:4d:27:1f:58:e1:6d:bb:c8:71:03:95:28:c6: c6:7e:66:b1:e9:29:8f:e9:d7:32:2a:14:6c:71:59:7a:ca:80: 69:41:4d:5e:f3:0c:9d:41:ae:53:48:9a:b9:9d:26:81:31:49: 52:e7:4c:56:a7:29:26:f0:6c:77:7c:cb:96:29:04:1b:0b:47: 32:b8:14:60:7b:f9:ad:36:cd:03:8b:87:eb:c8:df:49:35:c5: 7a:62:53:23:0f:8d:76:67:06:af:f6:01:4b:1f:03:d7:16:48: f9:32:29:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9z6rCTrzQKINQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YzhlYjFkYTgtYmM1My00ZjJmLTkwNWQtZDFjZjEyOTQ1YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMNceoYqgvjIk5WfXUPGsturpcCu+jmRXKab qVz6DkYOHUOhbjB/tW7D6kIVxKw4f6c3OywYcv7RMNOxMIC8pddr5d56bKkpTWWD R7uCx+ATYc79TZRIrWWopwNNx1p4uWJkYAOm+DJfZVuabjmmtw1zWcxhzW5eot2w MOqgku4w8lB8fstcZz+9Dg9lmQ69p8yY9ck92LRtwHNYmrLgGuBKM0Pn0a4lLitE GxYDoOCwTzgB2XzY6cLA2oQkYnbgc0mPy9wj85u2ztz3yPwhsKkzCu19TfFPj7kU mWxzOMxunEpUpsggSeovsIQjO5YYGvZmDcfh1V5ayXoEQuxlzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu8o3kyc8zIOvxuIo2KkXXm7aSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvOTg5NjJmZmMtNzEzNy0z OWM2LTk1NGQtZWEyYWM5YTFmNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkc8ExWterjDXT/Lns7uLns/4YpVNWznsihy35RvwNKsCTB8mcOP/Ap o+jUiBp6TWVo/36e73vp8qSXGLIlSWuwJdUV3MOoYg2mdI35YvF/xwbfiFCLWMcr bAruO/FMRDCFBH2dGqv6VptvqQuQxDUeiElkwb/2tKmWhBX3R3pV358v+mkUn0G/ Osy0DRz4T4vdZmt0TScfWOFtu8hxA5UoxsZ+ZrHpKY/p1zIqFGxxWXrKgGlBTV7z DJ1BrlNImrmdJoExSVLnTFanKSbwbHd8y5YpBBsLRzK4FGB7+a02zQOLh+vI30k1 xXpiUyMPjXZnBq/2AUsfA9cWSPkyKeg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:21:55 2026 by rpki-client