$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd/404b104e-bd5a-3217-aa6f-7f5954b817d7.roa File: 404b104e-bd5a-3217-aa6f-7f5954b817d7.roa (raw, json) Hash identifier: Sz6vyyNMOBT7VHMoxnqXOon5yP6fWGVlImXxXOk7FZc= Subject key identifier: 9C:0F:89:1C:DE:C8:9B:14:30:DB:26:BD:6E:70:B2:1F:1B:3B:4E:66 Certificate issuer: /CN=7eaff950-d026-4abf-814f-a12bc8409cdd Certificate serial: 010D0C9F4328584F67B846293010972882E22780 Authority key identifier: 41:8F:C8:D4:19:EC:CC:DE:7B:A0:27:D8:4F:79:03:91:0C:9A:56:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd/404b104e-bd5a-3217-aa6f-7f5954b817d7.roa Signing time: Mon 05 Oct 2026 21:15:00 +0000 ROA not before: Mon 05 Oct 2026 21:15:00 +0000 ROA not after: Sun 03 Jan 2027 22:15:00 +0000 asID: 402834 IP address blocks: 198.134.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd/7eaff950-d026-4abf-814f-a12bc8409cdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd/7eaff950-d026-4abf-814f-a12bc8409cdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:b8:46:29:30:10:97:28:82:e2:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eaff950-d026-4abf-814f-a12bc8409cdd Validity Not Before: Oct 5 21:15:00 2026 GMT Not After : Jan 3 22:15:00 2027 GMT Subject: CN=89c88bfc-5c0f-456c-8f0e-d8177265157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:13:7d:49:b1:24:d9:71:74:0f:43:c2:b2: 10:e4:e0:ee:2f:59:b3:57:7a:68:b1:c8:8d:17:da: 63:d7:9d:f0:18:f0:88:e4:c2:66:1c:c7:4b:f0:1c: 34:80:3a:fa:98:1e:5a:4b:77:0d:40:28:12:44:f7: 31:1e:a4:ca:c9:7b:7b:06:5f:9e:33:36:03:df:2f: 83:54:c2:b9:ae:da:b2:a5:4e:da:b7:e7:b4:c8:71: 60:90:79:e9:0a:34:30:15:9f:e1:ca:29:f6:5a:a4: 2c:49:85:bb:2a:8e:52:98:48:07:5c:91:bf:5f:2d: fe:b2:dc:af:5c:84:47:d2:a1:e3:57:84:fb:22:f3: 8b:bb:67:41:2d:dc:8d:a1:be:52:6f:53:1d:1c:32: 62:70:3c:f5:c5:e9:b9:0c:2d:78:c5:ac:67:7a:f2: 34:01:2a:30:66:54:5c:2e:41:a1:77:b0:fa:b3:bd: 4f:7e:7c:a5:20:fb:a7:b7:86:f4:3d:54:cc:0d:5c: f6:dd:84:f6:11:0e:f9:0d:d1:b5:e7:83:81:24:02: 97:48:4a:94:c6:02:12:82:95:1f:23:cc:67:87:79: 1f:49:8d:41:a8:01:32:ee:6c:3e:0f:3c:6b:82:28: 20:bd:1c:28:88:e1:5d:17:5a:00:5d:63:1e:2b:a2: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:89:1C:DE:C8:9B:14:30:DB:26:BD:6E:70:B2:1F:1B:3B:4E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd/404b104e-bd5a-3217-aa6f-7f5954b817d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd/7eaff950-d026-4abf-814f-a12bc8409cdd.crl X509v3 Authority Key Identifier: keyid:41:8F:C8:D4:19:EC:CC:DE:7B:A0:27:D8:4F:79:03:91:0C:9A:56:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7eaff950-d026-4abf-814f-a12bc8409cdd.cer sbgp-ipAddrBlock: critical IPv4: 198.134.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7e:50:6b:51:84:06:c7:c7:21:3f:2e:bb:09:c2:e1:25:5d: f2:99:7c:fb:6c:1e:87:6d:03:6c:0b:21:ea:ad:53:c2:75:69: 86:80:10:96:6b:63:5a:26:d7:82:8c:e2:06:79:49:d4:8f:31: fe:c9:4b:d2:4e:8c:79:97:be:01:e4:00:43:90:69:e4:a1:d8: 76:67:0f:49:0b:35:3d:c3:99:f0:cf:e0:a7:dc:31:52:a9:10: 3e:7e:90:81:1f:80:f9:4c:b8:92:30:1d:48:ba:26:47:8d:d3: ce:1a:fc:68:a1:27:bd:3e:87:db:a0:52:7d:5b:7e:d1:10:7f: 63:60:d3:ad:d6:48:56:c5:8c:0a:8c:a0:ce:2c:d4:cf:b4:79: ce:cd:f7:a8:54:d1:e3:6a:20:22:d4:00:bf:cc:68:fd:66:a9: df:dc:64:ec:d6:13:09:b9:fa:76:6e:1e:b9:21:18:6c:b5:82: af:ed:c8:17:33:82:c2:93:01:c1:25:5b:36:72:da:6b:9a:20: bf:7e:bb:c9:59:79:65:cb:36:5a:df:b1:4d:13:cd:27:66:2a: 2c:6f:7d:60:63:a8:86:25:18:5a:bb:1e:49:2f:7e:4f:f3:8d: bd:3a:88:f1:40:15:d1:9a:c9:f4:57:3c:aa:86:a5:88:ad:5c: 15:3b:4a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9nuEYpMBCXKILiJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhZmY5NTAtZDAyNi00YWJmLTgxNGYtYTEyYmM4NDA5 Y2RkMB4XDTI2MTAwNTIxMTUwMFoXDTI3MDEwMzIyMTUwMFowLzEtMCsGA1UEAxMk ODljODhiZmMtNWMwZi00NTZjLThmMGUtZDgxNzcyNjUxNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYcTfUmxJNlxdA9DwrIQ5ODuL1mzV3posciN F9pj153wGPCI5MJmHMdL8Bw0gDr6mB5aS3cNQCgSRPcxHqTKyXt7Bl+eMzYD3y+D VMK5rtqypU7at+e0yHFgkHnpCjQwFZ/hyin2WqQsSYW7Ko5SmEgHXJG/Xy3+styv XIRH0qHjV4T7IvOLu2dBLdyNob5Sb1MdHDJicDz1xem5DC14xaxnevI0ASowZlRc LkGhd7D6s71PfnylIPunt4b0PVTMDVz23YT2EQ75DdG154OBJAKXSEqUxgISgpUf I8xnh3kfSY1BqAEy7mw+DzxrgiggvRwoiOFdF1oAXWMeK6LYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwPiRzeyJsUMNsmvW5wsh8bO05mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83ZWFm Zjk1MC1kMDI2LTRhYmYtODE0Zi1hMTJiYzg0MDljZGQvNDA0YjEwNGUtYmQ1YS0z MjE3LWFhNmYtN2Y1OTU0YjgxN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvN2VhZmY5NTAtZDAyNi00YWJmLTgx NGYtYTEyYmM4NDA5Y2RkLzdlYWZmOTUwLWQwMjYtNGFiZi04MTRmLWExMmJjODQw OWNkZC5jcmwwHwYDVR0jBBgwFoAUQY/I1BnszN57oCfYT3kDkQyaVigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS83ZWFmZjk1MC1kMDI2LTRhYmYtODE0Zi1hMTJi Yzg0MDljZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxobdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5+UGtRhAbHxyE/LrsJwuElXfKZfPtsHodtA2wLIeqtU8J1aYaAEJZr Y1om14KM4gZ5SdSPMf7JS9JOjHmXvgHkAEOQaeSh2HZnD0kLNT3DmfDP4KfcMVKp ED5+kIEfgPlMuJIwHUi6JkeN084a/GihJ70+h9ugUn1bftEQf2Ng063WSFbFjAqM oM4s1M+0ec7N96hU0eNqICLUAL/MaP1mqd/cZOzWEwm5+nZuHrkhGGy1gq/tyBcz gsKTAcElWzZy2muaIL9+u8lZeWXLNlrfsU0TzSdmKixvfWBjqIYlGFq7Hkkvfk/z jb06iPFAFdGayfRXPKqGpYitXBU7SiE= -----END CERTIFICATE-----Generated at Sun Nov 1 14:36:48 2026 by rpki-client