$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa File: f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa (raw, json) Hash identifier: rP9KSEZytRSqA0fqTn/guaWJ/iwWrzg/5l56prgHqE8= Subject key identifier: 22:3B:76:1D:AC:C3:66:62:58:AF:68:CF:30:DA:22:30:94:4A:38:C2 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584EE921EE0CF3C7F8ABED851A80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 8987 IP address blocks: 198.251.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ee:0c:f3:c7:f8:ab:ed:85:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=ced2ffb4-4e4a-45c7-8160-84e4e1ecb024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:97:b4:d9:0e:86:61:cf:30:a1:98:f5:24: f1:fe:54:22:f1:e6:95:99:4a:ad:1f:d5:23:80:b5: 26:be:e1:53:19:67:f1:1c:02:b3:4e:04:05:62:74: 9d:48:d4:a3:1b:2c:ab:2b:0d:9c:0c:b9:d4:c1:9d: 87:b2:51:6d:66:8b:1d:02:e3:53:2b:36:56:be:eb: 61:13:07:45:00:b4:31:ca:7a:67:c6:c6:e5:b8:8b: e5:c8:0e:ac:a9:90:9c:7a:42:3f:1c:3c:e5:4c:5f: 7e:0f:48:b4:80:45:fd:32:1b:aa:67:6d:f4:d8:9e: 8e:6e:99:be:18:0d:76:b7:4a:fe:47:96:1b:d5:42: 61:dc:ee:65:77:b4:fd:f5:dd:fc:ff:cd:4b:41:a4: 94:f3:41:40:9f:e4:fd:f5:86:b2:2f:c5:98:f4:46: ab:6c:0a:94:cb:e6:d0:3b:53:ee:05:60:3e:ab:0b: aa:c8:31:c4:e6:f8:5c:e6:d8:95:6e:9c:dd:ac:cc: 28:42:ed:a2:ff:0c:f3:01:49:5e:94:67:92:95:47: 35:36:9c:65:fa:ba:a2:3b:ac:32:fb:07:86:b8:54: 28:73:87:de:35:8e:bf:24:1a:f1:61:89:23:d7:2f: 71:d9:18:b2:92:82:46:91:45:ab:49:ff:4b:c2:81: 0a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:76:1D:AC:C3:66:62:58:AF:68:CF:30:DA:22:30:94:4A:38:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 198.251.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:93:b1:fb:9a:eb:6d:0d:d1:b7:d7:38:19:68:06:e1:8a:1f: 5e:a1:95:fb:9a:ca:98:aa:cf:43:54:3f:1d:75:10:ce:f0:88: 55:60:6e:e9:ac:a2:e2:fe:e2:b4:5c:75:46:7d:7b:a8:a6:8b: 0b:11:a5:c5:20:19:37:13:3c:56:c0:12:e4:28:99:29:b3:55: da:35:b0:4a:93:ed:d6:ac:aa:11:08:94:da:55:b8:28:54:51: d5:2f:09:be:11:07:71:53:42:60:60:57:9c:70:d5:d7:ed:ac: cd:a5:3b:cb:ee:7f:1d:54:0b:fc:fc:5f:f5:5d:5e:a1:16:1b: f2:3f:18:61:45:b3:74:38:e7:1c:09:4a:03:92:9d:39:fe:17: d6:6c:9a:07:01:83:da:6e:c7:eb:9c:24:c3:63:db:20:0e:69: cb:35:5a:c4:06:04:fc:30:2c:dc:03:01:61:18:2c:17:c6:d9: 2f:41:da:5f:a2:4f:d9:88:8d:a5:ec:e4:4f:8d:cc:71:b5:8e: 6e:0d:58:e2:e3:f3:af:2f:02:b9:6b:40:bf:07:77:5f:8b:2e: 20:e3:19:7b:0a:8a:41:b1:61:b0:1f:e7:5a:aa:30:42:64:ff: c5:44:ec:2d:25:08:86:af:ee:6c:41:b2:ea:50:1e:23:c8:39: 9f:ce:da:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIe4M88f4q+2FGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk Y2VkMmZmYjQtNGU0YS00NWM3LTgxNjAtODRlNGUxZWNiMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e2XtNkOhmHPMKGY9STx/lQi8eaVmUqtH9Uj gLUmvuFTGWfxHAKzTgQFYnSdSNSjGyyrKw2cDLnUwZ2HslFtZosdAuNTKzZWvuth EwdFALQxynpnxsbluIvlyA6sqZCcekI/HDzlTF9+D0i0gEX9MhuqZ2302J6Obpm+ GA12t0r+R5Yb1UJh3O5ld7T99d38/81LQaSU80FAn+T99YayL8WY9EarbAqUy+bQ O1PuBWA+qwuqyDHE5vhc5tiVbpzdrMwoQu2i/wzzAUlelGeSlUc1Npxl+rqiO6wy +weGuFQoc4feNY6/JBrxYYkj1y9x2RiykoJGkUWrSf9LwoEKXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI7dh2sw2ZiWK9ozzDaIjCUSjjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjBmN2IxNGMtYWM5YS0z MzY1LWFkNWItY2UzMTZmMjlkODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxvvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaTsfua620N0bfXOBloBuGKH16hlfuaypiqz0NUPx11EM7wiFVgbums ouL+4rRcdUZ9e6imiwsRpcUgGTcTPFbAEuQomSmzVdo1sEqT7dasqhEIlNpVuChU UdUvCb4RB3FTQmBgV5xw1dftrM2lO8vufx1UC/z8X/VdXqEWG/I/GGFFs3Q45xwJ SgOSnTn+F9ZsmgcBg9pux+ucJMNj2yAOacs1WsQGBPwwLNwDAWEYLBfG2S9B2l+i T9mIjaXs5E+NzHG1jm4NWOLj868vArlrQL8Hd1+LLiDjGXsKikGxYbAf51qqMEJk /8VE7C0lCIav7mxBsupQHiPIOZ/O2nI= -----END CERTIFICATE-----Generated at Sat Sep 5 07:18:51 2026 by rpki-client