$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11/f8eb55cc-70d8-3995-8701-671ee9188814.roa File: f8eb55cc-70d8-3995-8701-671ee9188814.roa (raw, json) Hash identifier: RsmaJJ8ON3vjZ1154iQ+mV/eJttYmR5ZdyX6KgKdYYs= Subject key identifier: CF:2D:A8:40:13:7A:EE:9C:3B:33:8F:C8:34:B7:B4:97:00:49:3C:EF Certificate issuer: /CN=3817c70b-5228-491f-937d-54ed165ccd11 Certificate serial: 010D0C9F4328584FA57652D798501D31A76EC500 Authority key identifier: 7B:22:71:BB:C0:EB:87:59:32:87:A1:B7:E2:45:8D:9B:1F:20:60:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11/f8eb55cc-70d8-3995-8701-671ee9188814.roa Signing time: Wed 28 Oct 2026 00:02:14 +0000 ROA not before: Wed 28 Oct 2026 00:02:14 +0000 ROA not after: Tue 26 Jan 2027 01:02:14 +0000 asID: 132576 IP address blocks: 199.197.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11/3817c70b-5228-491f-937d-54ed165ccd11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11/3817c70b-5228-491f-937d-54ed165ccd11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:76:52:d7:98:50:1d:31:a7:6e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3817c70b-5228-491f-937d-54ed165ccd11 Validity Not Before: Oct 28 00:02:14 2026 GMT Not After : Jan 26 01:02:14 2027 GMT Subject: CN=1a210b88-982d-4a8c-8dcb-ec0b9978e64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:60:29:c1:f6:f2:74:85:07:4c:4b:cd:6e: 36:c2:08:cb:9c:66:d2:a1:2e:84:2e:61:db:40:5f: 2f:35:db:90:51:c9:42:19:f9:d7:dd:1d:25:e1:9e: ec:c1:da:e3:76:12:1d:3c:48:59:e0:81:ca:4e:ac: 4b:d8:45:93:55:e4:60:42:43:33:1b:0d:ee:dc:c2: 91:2c:d7:6d:ea:38:5b:0b:17:fc:9d:1d:d8:e7:ca: 6e:3f:9c:fc:2a:94:2a:f1:b8:b7:bf:5c:27:7b:cf: 4a:28:46:7b:f9:1c:a3:11:c5:d1:9a:9c:e4:3f:12: e4:2e:87:59:7a:e5:f9:81:11:ba:dc:8b:1f:b1:8d: 6d:9b:48:63:38:e1:1c:c7:09:69:f5:f5:88:fe:a3: d9:50:c8:aa:79:d5:6e:49:61:4f:e9:47:d7:cc:63: 1f:66:09:c4:0e:37:80:d7:f2:f7:41:d1:f9:73:f4: 96:a4:24:2e:de:4d:d8:bb:c9:5c:b4:a6:f4:ea:18: d6:10:cc:1b:2d:05:1a:2f:c6:0f:e0:9e:69:c7:6f: ba:c3:00:47:72:19:1d:0b:00:2d:9d:42:eb:fa:1b: 41:4c:15:5c:dc:4b:24:c9:52:c3:15:6e:9a:f7:a6: 89:73:5f:47:cc:9c:04:a5:4f:b0:4a:73:4a:20:a7: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:A8:40:13:7A:EE:9C:3B:33:8F:C8:34:B7:B4:97:00:49:3C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11/f8eb55cc-70d8-3995-8701-671ee9188814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11/3817c70b-5228-491f-937d-54ed165ccd11.crl X509v3 Authority Key Identifier: keyid:7B:22:71:BB:C0:EB:87:59:32:87:A1:B7:E2:45:8D:9B:1F:20:60:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3817c70b-5228-491f-937d-54ed165ccd11.cer sbgp-ipAddrBlock: critical IPv4: 199.197.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d2:8d:2f:a4:26:72:90:c2:82:af:74:82:38:f8:1f:07:60: 5c:93:08:db:68:66:58:69:6d:98:39:45:36:bd:4e:1c:a3:76: 90:58:19:20:5a:13:85:6b:4f:55:f7:04:fb:b8:7b:01:27:df: ec:e5:77:7b:20:5f:85:bd:e3:74:48:32:be:a8:22:19:c9:5c: 5a:29:71:4a:02:04:06:81:f9:a3:bb:c1:f3:84:73:85:35:02: 8d:ae:e1:3b:a6:dd:9c:ba:e2:d4:f3:40:fc:cf:64:34:93:c4: 8d:40:14:39:0e:ef:24:c5:6a:6d:ae:12:c3:b7:4e:a5:da:06: e6:c6:2b:de:c6:23:a0:b3:ed:fd:14:66:db:d2:2b:71:c4:df: 9e:25:f7:51:27:18:a8:00:05:31:8a:ec:5d:22:45:02:fa:4c: d5:9d:c1:36:09:09:d5:14:f3:ad:6d:c7:24:e2:c5:f1:37:ae: 66:cb:ff:46:ee:83:1b:e6:bf:8a:0d:6c:6a:6e:f2:12:1c:33: 3d:c5:2c:51:cf:5a:19:2a:3c:1e:a8:e7:e9:3e:ad:56:44:52: 54:24:26:34:2b:5e:cf:e9:65:be:9c:67:ff:47:ab:50:90:27: e5:38:23:14:93:56:de:12:f5:00:c4:49:b0:96:1a:f7:2a:3b: 04:79:79:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ldlLXmFAdMaduxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgxN2M3MGItNTIyOC00OTFmLTkzN2QtNTRlZDE2NWNj ZDExMB4XDTI2MTAyODAwMDIxNFoXDTI3MDEyNjAxMDIxNFowLzEtMCsGA1UEAxMk MWEyMTBiODgtOTgyZC00YThjLThkY2ItZWMwYjk5NzhlNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7FgKcH28nSFB0xLzW42wgjLnGbSoS6ELmHb QF8vNduQUclCGfnX3R0l4Z7swdrjdhIdPEhZ4IHKTqxL2EWTVeRgQkMzGw3u3MKR LNdt6jhbCxf8nR3Y58puP5z8KpQq8bi3v1wne89KKEZ7+RyjEcXRmpzkPxLkLodZ euX5gRG63IsfsY1tm0hjOOEcxwlp9fWI/qPZUMiqedVuSWFP6UfXzGMfZgnEDjeA 1/L3QdH5c/SWpCQu3k3Yu8lctKb06hjWEMwbLQUaL8YP4J5px2+6wwBHchkdCwAt nULr+htBTBVc3EskyVLDFW6a96aJc19HzJwEpU+wSnNKIKezNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8tqEATeu6cOzOPyDS3tJcASTzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zODE3 YzcwYi01MjI4LTQ5MWYtOTM3ZC01NGVkMTY1Y2NkMTEvZjhlYjU1Y2MtNzBkOC0z OTk1LTg3MDEtNjcxZWU5MTg4ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzgxN2M3MGItNTIyOC00OTFmLTkz N2QtNTRlZDE2NWNjZDExLzM4MTdjNzBiLTUyMjgtNDkxZi05MzdkLTU0ZWQxNjVj Y2QxMS5jcmwwHwYDVR0jBBgwFoAUeyJxu8Drh1kyh6G34kWNmx8gYEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zODE3YzcwYi01MjI4LTQ5MWYtOTM3ZC01NGVk MTY1Y2NkMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvSjS+kJnKQwoKvdII4+B8HYFyTCNtoZlhpbZg5RTa9ThyjdpBYGSBa E4VrT1X3BPu4ewEn3+zld3sgX4W943RIMr6oIhnJXFopcUoCBAaB+aO7wfOEc4U1 Ao2u4Tum3Zy64tTzQPzPZDSTxI1AFDkO7yTFam2uEsO3TqXaBubGK97GI6Cz7f0U ZtvSK3HE354l91EnGKgABTGK7F0iRQL6TNWdwTYJCdUU861txyTixfE3rmbL/0bu gxvmv4oNbGpu8hIcMz3FLFHPWhkqPB6o5+k+rVZEUlQkJjQrXs/pZb6cZ/9Hq1CQ J+U4IxSTVt4S9QDESbCWGvcqOwR5eZA= -----END CERTIFICATE-----Generated at Sun Nov 1 17:33:37 2026 by rpki-client