$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa File: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json) Hash identifier: OclsuEiAkPlScXXGMPfKJ74DOZDeAu0o4+1vx13KeZY= Subject key identifier: 7D:CC:D9:55:59:23:9A:46:AA:74:E1:BD:33:85:19:12:A9:1C:FD:C3 Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Certificate serial: 010D0C9F4328584F5A3303AA3CB07DB513955E00 Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 36667 IP address blocks: 198.35.120.0/21 maxlen: 24 2620:c:8000::/48 maxlen: 48 2620:109:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:03:aa:3c:b0:7d:b5:13:95:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=37d75a3b-4738-4cf4-bc08-357176e17784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:98:aa:f0:9b:08:5a:50:16:99:31:42:1d: a7:cc:65:81:67:9f:ac:7c:82:98:24:40:f6:05:ec: 8f:2d:59:55:d8:dd:a4:04:80:f7:dc:3d:06:4b:43: 06:24:39:8f:23:54:fe:b9:b2:77:2e:fc:61:48:1a: 69:a1:d2:c3:70:00:7b:77:1a:40:c6:06:d1:33:70: 1d:3a:cf:e9:36:df:fa:dc:20:90:9c:9c:3e:a7:58: a3:ed:2a:f0:f6:01:86:ce:2b:ba:08:66:ab:ae:1e: 6f:0c:9b:3d:e2:1f:8e:50:79:d7:ea:96:9a:f3:c6: f8:cb:b3:88:bd:d7:b9:10:32:d6:07:3f:c0:e9:3c: 62:6a:4e:3c:8f:e5:c1:08:8b:27:20:c7:f2:5b:12: ab:6d:34:1d:3b:00:3b:b9:1b:48:51:e7:bb:dd:fd: e2:61:fd:5a:be:7e:5e:2c:8a:59:98:2f:47:30:64: 13:e3:47:0a:c2:d5:02:94:66:7e:12:07:bf:48:6c: bf:cd:f2:26:fe:28:d6:26:cc:e4:fe:89:39:15:98: c1:72:6d:1e:40:c4:1f:7c:ec:93:00:55:44:7b:25: ca:4b:2d:ff:a0:21:c7:65:89:5a:e4:5e:ee:23:1c: 03:c1:9e:bc:a9:ba:0d:76:b6:26:fb:85:df:96:71: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CC:D9:55:59:23:9A:46:AA:74:E1:BD:33:85:19:12:A9:1C:FD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl X509v3 Authority Key Identifier: keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer sbgp-ipAddrBlock: critical IPv4: 198.35.120.0/21 IPv6: 2620:c:8000::/48 2620:109:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c5:56:1f:93:58:5a:92:29:23:a6:fb:3b:ed:8e:33:7a:cc: 39:a2:0d:53:01:35:a8:8e:95:0a:ec:1f:fa:2b:3b:d8:23:67: 86:ae:f7:1f:ba:06:92:46:a7:03:01:52:24:65:bf:b8:3a:42: ef:ab:9c:e5:e4:5f:cd:6b:08:a7:02:b7:26:5f:22:65:6f:67: fd:16:bb:b9:86:e1:bf:0e:c5:ee:67:f1:62:e6:0f:35:24:8c: b0:a2:46:12:80:32:3b:b9:a5:56:c0:ca:4d:06:04:8d:65:04: 85:ef:be:8b:58:31:56:da:37:7f:1c:f0:0b:d7:96:14:9c:99: 79:17:84:98:31:33:eb:1d:4c:c4:48:3e:87:54:6a:9c:2e:32: c8:14:d1:96:2f:09:66:fd:c0:ae:93:01:1a:be:b9:84:ef:1f: 46:0d:d4:1e:69:75:eb:90:12:c7:5e:f2:0d:1a:18:97:1f:ee: 10:07:6a:21:4f:76:d2:f2:bc:58:b9:b6:2b:b6:92:ee:e3:c1: 26:6c:fc:da:93:0f:cc:e3:f1:57:ae:a8:89:35:f4:1b:57:7c: a2:64:21:3c:c9:47:fa:36:35:1e:87:92:5a:01:4d:9f:2b:b8: 5a:d3:78:11:aa:5e:95:d6:9e:68:85:0b:d3:f9:0d:46:50:57: 56:11:99:c4 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE9aMwOqPLB9tROVXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2 OTIyMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzdkNzVhM2ItNDczOC00Y2Y0LWJjMDgtMzU3MTc2ZTE3Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixGYqvCbCFpQFpkxQh2nzGWBZ5+sfIKYJED2 BeyPLVlV2N2kBID33D0GS0MGJDmPI1T+ubJ3LvxhSBppodLDcAB7dxpAxgbRM3Ad Os/pNt/63CCQnJw+p1ij7Srw9gGGziu6CGarrh5vDJs94h+OUHnX6paa88b4y7OI vde5EDLWBz/A6Txiak48j+XBCIsnIMfyWxKrbTQdOwA7uRtIUee73f3iYf1avn5e LIpZmC9HMGQT40cKwtUClGZ+Ege/SGy/zfIm/ijWJszk/ok5FZjBcm0eQMQffOyT AFVEeyXKSy3/oCHHZYla5F7uIxwDwZ68qboNdrYm+4XflnFJuwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFH3M2VVZI5pGqnThvTOFGRKpHP3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQx ZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMWM4ZTU1ZTQtYTk3Ny0z NWU3LWE5OGYtZWIyOGI2ZmE5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZkMWZlM2ItN2UyNC00ZDI3LWJi MTAtYmViOWNlMmQ2OTIyL2FmZDFmZTNiLTdlMjQtNGQyNy1iYjEwLWJlYjljZTJk NjkyMi5jcmwwHwYDVR0jBBgwFoAU76MsHlY0EPKfNjNb4XPd5lnEiQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5 Y2UyZDY5MjIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDxiN4MBgE AgACMBIDBwAmIAAMgAADBwQmIAEJYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUcVWH5NYWpIpI6b7O+2O M3rMOaINUwE1qI6VCuwf+is72CNnhq73H7oGkkanAwFSJGW/uDpC76uc5eRfzWsI pwK3Jl8iZW9n/Ra7uYbhvw7F7mfxYuYPNSSMsKJGEoAyO7mlVsDKTQYEjWUEhe++ i1gxVto3fxzwC9eWFJyZeReEmDEz6x1MxEg+h1RqnC4yyBTRli8JZv3ArpMBGr65 hO8fRg3UHml165ASx17yDRoYlx/uEAdqIU920vK8WLm2K7aS7uPBJmz82pMPzOPx V66oiTX0G1d8omQhPMlH+jY1HoeSWgFNnyu4WtN4EapeldaeaIUL0/kNRlBXVhGZ xA== -----END CERTIFICATE-----Generated at Fri Oct 30 13:11:33 2026 by rpki-client