$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/3ca47921-b749-3fb4-b68d-b032102b6b64.roa File: 3ca47921-b749-3fb4-b68d-b032102b6b64.roa (raw, json) Hash identifier: iF817292OlfDmKitUwRW9PaA8DkGQ9Tl8K079Xt3j70= Subject key identifier: 98:77:A5:A5:37:55:3B:9A:E4:A0:4D:95:6B:67:A8:00:FA:B3:1F:19 Certificate issuer: /CN=5e91ef34-870d-4a8e-ae98-0c8f58366d21 Certificate serial: 010D0C9F4328584F80923E47C978893E182FF570 Authority key identifier: 8A:48:95:E2:9E:BD:C3:A0:F5:5F:A6:2D:4B:32:88:82:60:03:AA:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/3ca47921-b749-3fb4-b68d-b032102b6b64.roa Signing time: Wed 14 Oct 2026 18:53:35 +0000 ROA not before: Wed 14 Oct 2026 18:53:35 +0000 ROA not after: Tue 12 Jan 2027 19:53:35 +0000 asID: 29851 IP address blocks: 198.179.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/5e91ef34-870d-4a8e-ae98-0c8f58366d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/5e91ef34-870d-4a8e-ae98-0c8f58366d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:92:3e:47:c9:78:89:3e:18:2f:f5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e91ef34-870d-4a8e-ae98-0c8f58366d21 Validity Not Before: Oct 14 18:53:35 2026 GMT Not After : Jan 12 19:53:35 2027 GMT Subject: CN=e98cb41a-4d58-4f1f-9969-978acd92a046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:bd:e4:b3:31:21:73:42:7a:3c:82:57:b3: 82:de:99:9d:63:bb:1c:3d:d8:77:b3:01:92:47:c2: 6c:d2:81:fd:d1:b7:d0:dc:55:a3:ab:eb:f1:74:34: 68:a2:24:8a:43:b5:03:1d:59:7f:2c:96:b8:6e:fe: 6f:e5:9b:29:c5:62:bd:7e:c0:d6:34:2d:7f:33:29: c4:ea:41:b2:31:0d:84:9f:79:79:b4:a7:b5:ea:1e: cc:d9:de:57:88:d8:3b:ea:03:b0:88:88:2a:84:50: d6:17:db:6c:fa:04:6c:bc:5d:6c:34:b9:10:4d:a7: 87:23:b8:99:19:87:ef:5a:42:17:25:3c:c8:0f:4c: 41:fd:93:81:d3:9c:b3:03:75:c3:1e:13:65:f8:9f: a1:af:a5:06:cc:60:b4:5c:ee:4e:a2:17:88:bc:46: c0:53:ce:47:92:2d:aa:cc:f4:2c:f1:1d:e9:a5:31: b5:c7:d8:e2:d8:d0:cb:65:7c:f3:da:fc:37:ef:09: de:56:e8:e5:f3:d7:c0:77:a8:33:bd:4e:e7:6a:fd: 55:6b:9e:bb:f4:41:38:50:1d:e1:50:91:0e:fb:1f: 75:0e:a9:53:dd:d6:86:c8:63:e8:41:3b:ae:bf:ce: 2d:de:1b:7f:30:a5:aa:fb:57:eb:c6:8d:4c:c7:6a: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:77:A5:A5:37:55:3B:9A:E4:A0:4D:95:6B:67:A8:00:FA:B3:1F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/3ca47921-b749-3fb4-b68d-b032102b6b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/5e91ef34-870d-4a8e-ae98-0c8f58366d21.crl X509v3 Authority Key Identifier: keyid:8A:48:95:E2:9E:BD:C3:A0:F5:5F:A6:2D:4B:32:88:82:60:03:AA:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21.cer sbgp-ipAddrBlock: critical IPv4: 198.179.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f4:b1:bc:43:93:ff:78:61:a3:e3:d8:24:78:cf:18:fc:5e: e5:e8:80:f3:59:35:22:0c:d9:3f:45:10:c8:d1:af:fb:01:ee: 3c:a7:25:6e:c2:40:19:c6:9d:92:b7:c6:61:a8:45:08:5f:9a: 9d:5f:7a:03:9c:6d:03:83:14:b6:16:55:03:56:f2:b5:19:4e: de:3c:55:aa:e0:0e:1a:38:60:57:d0:e2:cc:67:70:68:f4:48: 9d:14:76:92:5c:01:4d:18:79:f2:57:44:c5:5e:fc:cc:d9:4b: ba:1b:09:b6:df:6e:7d:7e:03:5a:cc:4a:23:cf:9e:00:d9:b3: 51:40:29:47:a7:b1:ac:d1:e9:35:7e:41:a4:73:47:eb:44:d4: 02:d9:22:7e:ed:9c:26:aa:ff:9d:45:14:de:83:4b:13:cb:50: 6c:21:02:ff:54:2f:58:f2:58:bb:b8:8b:9c:bf:d2:d9:f3:2d: 87:81:66:82:f0:72:ab:d3:41:7d:f0:df:1c:80:d9:18:2f:52: 7d:a7:5d:29:9f:54:0e:45:91:a1:a8:7d:70:c1:fe:6a:10:26: b4:4b:78:43:04:05:22:e6:c1:bd:7b:ad:bc:dc:33:5d:0c:3d: f8:c9:9b:a7:fe:43:e8:04:35:55:1b:69:03:34:4d:18:ff:e5: b4:dd:07:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Akj5HyXiJPhgv9XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MWVmMzQtODcwZC00YThlLWFlOTgtMGM4ZjU4MzY2 ZDIxMB4XDTI2MTAxNDE4NTMzNVoXDTI3MDExMjE5NTMzNVowLzEtMCsGA1UEAxMk ZTk4Y2I0MWEtNGQ1OC00ZjFmLTk5NjktOTc4YWNkOTJhMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvi95LMxIXNCejyCV7OC3pmdY7scPdh3swGS R8Js0oH90bfQ3FWjq+vxdDRooiSKQ7UDHVl/LJa4bv5v5ZspxWK9fsDWNC1/MynE 6kGyMQ2En3l5tKe16h7M2d5XiNg76gOwiIgqhFDWF9ts+gRsvF1sNLkQTaeHI7iZ GYfvWkIXJTzID0xB/ZOB05yzA3XDHhNl+J+hr6UGzGC0XO5OoheIvEbAU85Hki2q zPQs8R3ppTG1x9ji2NDLZXzz2vw37wneVujl89fAd6gzvU7nav1Va5679EE4UB3h UJEO+x91DqlT3daGyGPoQTuuv84t3ht/MKWq+1frxo1Mx2q1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh3paU3VTua5KBNlWtnqAD6sx8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS81ZTkx ZWYzNC04NzBkLTRhOGUtYWU5OC0wYzhmNTgzNjZkMjEvM2NhNDc5MjEtYjc0OS0z ZmI0LWI2OGQtYjAzMjEwMmI2YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNWU5MWVmMzQtODcwZC00YThlLWFl OTgtMGM4ZjU4MzY2ZDIxLzVlOTFlZjM0LTg3MGQtNGE4ZS1hZTk4LTBjOGY1ODM2 NmQyMS5jcmwwHwYDVR0jBBgwFoAUikiV4p69w6D1X6YtSzKIgmADqk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS81ZTkxZWYzNC04NzBkLTRhOGUtYWU5OC0wYzhm NTgzNjZkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrOiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr0sbxDk/94YaPj2CR4zxj8XuXogPNZNSIM2T9FEMjRr/sB7jynJW7C QBnGnZK3xmGoRQhfmp1fegOcbQODFLYWVQNW8rUZTt48VargDho4YFfQ4sxncGj0 SJ0UdpJcAU0YefJXRMVe/MzZS7obCbbfbn1+A1rMSiPPngDZs1FAKUensazR6TV+ QaRzR+tE1ALZIn7tnCaq/51FFN6DSxPLUGwhAv9UL1jyWLu4i5y/0tnzLYeBZoLw cqvTQX3w3xyA2RgvUn2nXSmfVA5FkaGofXDB/moQJrRLeEMEBSLmwb17rbzcM10M PfjJm6f+Q+gENVUbaQM0TRj/5bTdBzs= -----END CERTIFICATE-----Generated at Tue Nov 3 22:32:57 2026 by rpki-client