$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa File: 8e361a8f-c2a7-30c1-872e-d892d5132b12.roa (raw, json) Hash identifier: 0CRWajqRmamGETwKGPgC3bUx2zsJ2DWFfYEbvXKy6DI= Subject key identifier: 21:01:8C:04:10:B0:C5:6C:B4:1D:23:2C:31:41:E0:50:34:C8:54:71 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584F268D08182026A9155F06F15C Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 198.169.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:08:18:20:26:a9:15:5f:06:f1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=3d45c1f7-fb77-4a90-8f27-6e5a00ffcf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:95:79:c0:b1:a4:13:b8:77:04:91:9d:c4: 3b:65:62:91:3f:41:1b:27:7d:24:a3:63:ff:e0:5e: d2:dc:25:2a:74:b9:4b:b8:b1:28:90:9c:a5:34:24: 48:cf:c2:99:b8:ae:3e:f2:b3:33:23:b4:aa:35:89: e7:ed:72:16:58:12:40:81:be:b3:5b:03:74:91:cb: 53:8d:e8:89:db:f9:34:6b:17:ee:84:9b:d5:2f:a4: 1e:69:63:32:21:75:36:78:c5:ca:28:5e:fa:e3:f3: f6:5a:65:e5:30:4e:ad:68:01:de:36:bd:51:92:f1: e7:3e:14:0a:33:97:17:41:c4:f4:fe:92:1e:22:ff: a8:19:95:d9:2f:e8:19:8a:8c:e4:87:3a:c3:1b:4f: b1:f9:0e:cd:32:3c:6f:79:40:33:dc:af:d8:0a:b1: d4:66:a5:81:54:7d:70:84:d1:5f:36:70:a7:e3:14: 29:9b:98:ee:80:85:4f:ee:b6:6d:56:03:9f:ac:f8: 2d:67:5e:2b:8b:45:91:05:ba:06:e9:83:7e:7d:a3: b2:0a:17:17:ae:e4:4b:3c:92:72:ed:aa:2d:02:42: d0:39:71:4e:03:2f:4b:2b:8e:f4:fe:dd:00:65:5f: 79:07:80:03:e3:9d:82:e9:ec:cd:54:eb:f1:70:27: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:8C:04:10:B0:C5:6C:B4:1D:23:2C:31:41:E0:50:34:C8:54:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 198.169.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:58:2e:bc:1b:43:40:cf:08:6c:d0:3a:ab:1b:6a:c2:3a:6b: a1:59:82:e7:64:a9:78:3d:f6:1e:1d:6c:fc:7c:3a:84:25:17: 54:5f:db:b4:15:b5:55:d0:98:ac:03:87:95:e8:e5:d5:de:0d: 27:1f:d4:22:fd:66:0c:65:a2:cf:c4:92:7c:bc:0d:14:d7:07: 7b:69:c4:fa:ab:6d:23:48:62:21:1f:00:1d:87:76:93:3f:06: 4c:26:47:83:a2:0b:54:65:7f:7d:8f:e7:12:a2:3e:8b:c1:82: 2b:1f:2e:47:93:57:3a:b7:84:03:e8:69:24:25:97:8c:ad:ef: f9:6c:ad:dd:54:6f:1b:bd:ca:47:40:3e:a9:ed:d3:a6:62:cf: 0b:14:45:9e:19:8a:a1:07:7d:5f:35:2c:ee:bb:2c:bd:58:99: bf:fc:93:e8:09:76:df:e9:14:02:6f:f1:77:4b:c0:48:2b:6c: e2:92:1f:7f:ec:92:36:c5:8c:f4:4e:e8:5d:b9:74:75:56:fd: e6:d6:eb:74:0d:c6:69:20:22:32:74:57:d9:77:5f:e3:58:c4: 3f:5d:9c:5b:27:d0:8b:70:00:d6:70:bb:15:6f:47:04:f1:27: 68:71:ae:bd:9e:4b:ad:f4:aa:98:e4:5b:1c:29:35:62:ab:ec: c7:e0:ed:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQgYICapFV8G8VwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk M2Q0NWMxZjctZmI3Ny00YTkwLThmMjctNmU1YTAwZmZjZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmWVecCxpBO4dwSRncQ7ZWKRP0EbJ30ko2P/ 4F7S3CUqdLlLuLEokJylNCRIz8KZuK4+8rMzI7SqNYnn7XIWWBJAgb6zWwN0kctT jeiJ2/k0axfuhJvVL6QeaWMyIXU2eMXKKF764/P2WmXlME6taAHeNr1RkvHnPhQK M5cXQcT0/pIeIv+oGZXZL+gZiozkhzrDG0+x+Q7NMjxveUAz3K/YCrHUZqWBVH1w hNFfNnCn4xQpm5jugIVP7rZtVgOfrPgtZ14ri0WRBboG6YN+faOyChcXruRLPJJy 7aotAkLQOXFOAy9LK470/t0AZV95B4AD452C6ezNVOvxcCfz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEBjAQQsMVstB0jLDFB4FA0yFRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGUzNjFhOGYtYzJhNy0z MGMxLTg3MmUtZDg5MmQ1MTMyYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhYLrwbQ0DPCGzQOqsbasI6a6FZgudkqXg99h4dbPx8OoQlF1Rf27QV tVXQmKwDh5Xo5dXeDScf1CL9Zgxlos/Ekny8DRTXB3tpxPqrbSNIYiEfAB2HdpM/ BkwmR4OiC1Rlf32P5xKiPovBgisfLkeTVzq3hAPoaSQll4yt7/lsrd1Ubxu9ykdA Pqnt06ZizwsURZ4ZiqEHfV81LO67LL1Ymb/8k+gJdt/pFAJv8XdLwEgrbOKSH3/s kjbFjPRO6F25dHVW/ebW63QNxmkgIjJ0V9l3X+NYxD9dnFsn0ItwANZwuxVvRwTx J2hxrr2eS630qpjkWxwpNWKr7Mfg7QU= -----END CERTIFICATE-----Generated at Tue Sep 29 02:45:09 2026 by rpki-client