$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa File: 3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa (raw, json) Hash identifier: 9fIYwqkZ7qxQR8He/zT+qvN4LB+fkegpKXuw86X6NCI= Subject key identifier: DB:72:90:CA:F9:90:48:81:E4:1D:B6:F3:C5:EC:CB:08:DA:69:76:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4973EB33CE2F75CD9CD8DE60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 198.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:eb:33:ce:2f:75:cd:9c:d8:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b27d7cd4-12e2-46b6-b56c-1ec9dc114915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:62:f7:0e:c9:cc:5e:21:9f:49:11:fe:e0: ee:8c:ff:bf:6d:fc:46:84:0a:b4:f9:19:14:94:f7: 94:60:cc:69:d2:20:b0:a5:9d:2f:52:5a:2b:8a:c9: 77:59:d3:56:da:e8:40:c5:3e:4c:fd:b8:80:ab:1d: 42:cc:85:b9:e9:de:da:ce:98:e2:04:4d:77:85:55: 84:92:f7:45:4f:c4:3a:74:e1:77:eb:3e:df:64:a0: 0a:d0:c9:8e:69:aa:63:02:0f:27:05:15:c9:d7:e9: cd:d4:a4:aa:d9:cc:86:0c:ae:cb:f0:0a:26:b1:df: 08:81:1e:04:96:39:58:cb:4a:22:1a:a0:3e:70:d1: fa:04:e9:d2:69:c3:ec:b6:91:9a:ac:2b:43:61:a2: 45:b9:28:fc:76:50:f9:20:04:0b:90:d3:78:9f:d1: a7:f2:86:9a:b0:bd:3a:54:5d:8d:55:d0:88:ee:3d: 57:a6:db:95:77:fb:dc:87:76:02:9e:30:e0:a8:60: 10:b3:b0:e4:0f:2a:a9:f1:ee:a0:21:91:dc:02:9a: 19:a0:76:0a:e4:42:9b:21:95:55:87:25:1f:35:a1: ec:1b:ab:43:18:84:f9:66:d9:2c:79:0b:d4:60:14: 5a:b5:e6:2c:02:b4:20:20:4f:7d:cb:87:70:31:03: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:90:CA:F9:90:48:81:E4:1D:B6:F3:C5:EC:CB:08:DA:69:76:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 198.74.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cb:f4:35:83:77:b0:cf:76:df:1d:64:da:7a:99:2c:1b:1d: 38:a7:a9:c3:63:fa:23:d8:76:ea:4b:d7:1f:40:83:bc:3c:c8: 9d:2e:f7:75:40:87:cf:41:3c:65:7e:dc:19:c1:b1:b0:e5:64: 79:8c:c5:fa:3c:03:f0:0e:06:d9:1d:f1:e4:10:00:3f:e6:d9: 94:14:ad:8f:79:a0:2d:b7:4b:10:ee:20:da:bc:85:9d:06:99: 17:3d:5f:0d:59:e3:d4:c7:6c:11:22:83:00:2d:f0:5a:e8:43: d1:94:4a:32:b2:36:a6:24:d2:f1:5a:80:20:04:7a:08:93:34: 16:1e:4f:77:2b:25:a6:26:08:59:a6:ee:e2:ff:0d:e3:95:f7: ca:fe:46:ca:c1:a7:fc:c3:09:b1:ad:22:fe:0e:62:58:8b:1e: fd:92:b6:7f:60:2a:57:75:7b:d2:f6:31:24:67:e9:40:f6:09: 21:32:c2:22:84:fa:89:c7:cd:ae:47:5b:b9:dd:10:89:1f:69: 25:c0:ed:70:14:5d:bf:94:dd:96:44:af:a3:bd:a7:c4:9b:4d: d0:73:9e:16:d9:df:62:66:a8:c8:98:e4:20:16:7f:74:0b:01: 5f:bd:a7:f1:4e:a3:d4:c8:d6:a7:d3:d5:e8:84:68:55:43:81: b8:04:54:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+szzi91zZzY3mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjI3ZDdjZDQtMTJlMi00NmI2LWI1NmMtMWVjOWRjMTE0OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQZi9w7JzF4hn0kR/uDujP+/bfxGhAq0+RkU lPeUYMxp0iCwpZ0vUlorisl3WdNW2uhAxT5M/biAqx1CzIW56d7azpjiBE13hVWE kvdFT8Q6dOF36z7fZKAK0MmOaapjAg8nBRXJ1+nN1KSq2cyGDK7L8Aomsd8IgR4E ljlYy0oiGqA+cNH6BOnSacPstpGarCtDYaJFuSj8dlD5IAQLkNN4n9Gn8oaasL06 VF2NVdCI7j1XptuVd/vch3YCnjDgqGAQs7DkDyqp8e6gIZHcApoZoHYK5EKbIZVV hyUfNaHsG6tDGIT5ZtkseQvUYBRateYsArQgIE99y4dwMQP0PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtykMr5kEiB5B2288XsywjaaXbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUyOGRiN2MtNDEzYi0z YjZlLWI2ZGItZmE1Y2E3ODQ1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExkowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvL9DWDd7DPdt8dZNp6mSwbHTinqcNj+iPYdupL1x9Ag7w8yJ0u93VA h89BPGV+3BnBsbDlZHmMxfo8A/AOBtkd8eQQAD/m2ZQUrY95oC23SxDuINq8hZ0G mRc9Xw1Z49THbBEigwAt8FroQ9GUSjKyNqYk0vFagCAEegiTNBYeT3crJaYmCFmm 7uL/DeOV98r+RsrBp/zDCbGtIv4OYliLHv2Stn9gKld1e9L2MSRn6UD2CSEywiKE +onHza5HW7ndEIkfaSXA7XAUXb+U3ZZEr6O9p8SbTdBznhbZ32JmqMiY5CAWf3QL AV+9p/FOo9TI1qfT1eiEaFVDgbgEVCE= -----END CERTIFICATE-----Generated at Sat Sep 26 06:13:52 2026 by rpki-client