$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/899d0843-7ac9-34a4-b819-46087cadd2db.roa File: 899d0843-7ac9-34a4-b819-46087cadd2db.roa (raw, json) Hash identifier: bgjkoFIWd7+HmFtSssp4/LN6N3zCfHv2z4+UOnTqhis= Subject key identifier: 08:9A:ED:FE:E7:71:89:4C:86:D7:60:80:50:AA:C6:12:1A:CF:82:A2 Certificate issuer: /CN=8c81591e-5a57-4cd1-a89c-84e52719ceb8 Certificate serial: 010D0C9F4328584F497491FDE2D5BA0CEC892580 Authority key identifier: D8:88:61:A5:FC:53:60:7D:F6:E9:9E:24:18:7C:84:83:E7:E6:A7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/899d0843-7ac9-34a4-b819-46087cadd2db.roa Signing time: Fri 25 Sep 2026 01:04:20 +0000 ROA not before: Fri 25 Sep 2026 01:04:20 +0000 ROA not after: Thu 24 Dec 2026 02:04:20 +0000 asID: 30512 IP address blocks: 198.207.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/8c81591e-5a57-4cd1-a89c-84e52719ceb8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/8c81591e-5a57-4cd1-a89c-84e52719ceb8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:91:fd:e2:d5:ba:0c:ec:89:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c81591e-5a57-4cd1-a89c-84e52719ceb8 Validity Not Before: Sep 25 01:04:20 2026 GMT Not After : Dec 24 02:04:20 2026 GMT Subject: CN=e6a36c5d-05ac-491c-a1e9-ad5ccc14e82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:fc:0c:33:b0:a2:e6:bc:a4:63:93:27:a4: 17:84:80:22:73:6d:88:cb:45:da:d4:57:f2:d9:28: 1e:e5:71:8e:3f:3e:6f:17:3e:f3:4a:d2:7f:9b:df: 5e:b8:6c:20:dc:24:1a:2d:9d:f3:bb:84:5a:ac:65: cb:9a:75:3d:01:26:06:c7:ab:bc:35:06:b8:8d:fc: 4b:99:08:e8:d3:0b:be:17:dd:e3:a8:9a:21:17:64: b8:2f:e9:cd:2a:56:a8:1d:87:21:5a:cb:a7:9a:8d: cb:30:60:d4:f0:81:e8:3d:43:4c:1d:da:b2:0b:2c: 31:9c:57:8e:6e:a6:2e:75:a9:a3:7b:72:3e:1d:4c: 7f:7b:bb:86:fe:5f:fc:94:99:1e:a9:d2:fb:8b:c7: 92:d1:a6:58:7c:5d:8c:08:42:9f:77:7f:70:5f:d0: cf:9d:9c:36:9b:16:a2:7f:33:5c:9f:f5:d6:5c:20: df:75:27:25:f9:d0:e5:a1:b6:5f:42:5b:69:eb:f0: 49:19:98:b3:81:3a:14:89:fb:d7:68:c2:f6:80:05: 48:aa:d7:c1:cc:64:a9:d4:62:59:40:71:b6:13:94: 41:8c:94:58:d6:08:d9:9c:07:94:79:b5:50:9c:73: 85:bd:1c:71:5b:db:78:e1:29:a5:f0:96:95:12:f9: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9A:ED:FE:E7:71:89:4C:86:D7:60:80:50:AA:C6:12:1A:CF:82:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/899d0843-7ac9-34a4-b819-46087cadd2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/8c81591e-5a57-4cd1-a89c-84e52719ceb8.crl X509v3 Authority Key Identifier: keyid:D8:88:61:A5:FC:53:60:7D:F6:E9:9E:24:18:7C:84:83:E7:E6:A7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8.cer sbgp-ipAddrBlock: critical IPv4: 198.207.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7b:09:30:15:ae:5b:09:7c:69:ec:25:62:16:1f:0f:38:21: cb:e7:b6:9d:11:59:62:4c:a2:3f:db:5c:0d:43:3d:01:da:33: 32:b2:4a:db:91:0f:bc:d6:85:34:50:39:f7:cd:80:70:16:8b: 15:89:d6:d4:d9:5b:d7:c6:06:58:52:d4:38:f5:51:01:6c:d4: 67:ca:3e:0a:89:29:e1:ce:fa:70:50:dd:85:b1:8e:46:a5:4a: 8a:74:46:30:88:4d:a2:81:ed:f6:37:a8:23:b0:6f:ed:fd:c7: 6f:86:b1:f1:11:fe:99:2e:3a:3f:e9:7b:74:6c:05:6f:ab:48: e8:d0:b5:fb:b0:fe:08:00:9d:e2:92:c9:5b:da:47:01:57:c4: 9d:7f:f1:47:6b:40:15:07:d4:ae:5b:7b:0b:40:72:07:41:65: 8d:06:1f:aa:5c:68:e4:4e:46:3f:c3:b0:80:d9:8a:36:0c:29: eb:b4:ac:49:98:dc:e1:8f:d7:3f:ce:c3:69:97:c1:f2:02:f6: 7d:1c:9f:10:65:a3:9f:25:12:cd:6e:ff:76:cb:ed:74:c2:42: 29:d0:e2:4b:e3:6f:3e:a4:37:b4:7f:73:37:63:30:97:f6:63: 06:2c:7d:11:22:6d:f7:12:de:2a:eb:19:cd:3b:ce:64:c2:cf: 44:d2:61:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJH94tW6DOyJJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM4MTU5MWUtNWE1Ny00Y2QxLWE4OWMtODRlNTI3MTlj ZWI4MB4XDTI2MDkyNTAxMDQyMFoXDTI2MTIyNDAyMDQyMFowLzEtMCsGA1UEAxMk ZTZhMzZjNWQtMDVhYy00OTFjLWExZTktYWQ1Y2NjMTRlODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWT8DDOwoua8pGOTJ6QXhIAic22Iy0Xa1Ffy 2Sge5XGOPz5vFz7zStJ/m99euGwg3CQaLZ3zu4RarGXLmnU9ASYGx6u8NQa4jfxL mQjo0wu+F93jqJohF2S4L+nNKlaoHYchWsunmo3LMGDU8IHoPUNMHdqyCywxnFeO bqYudamje3I+HUx/e7uG/l/8lJkeqdL7i8eS0aZYfF2MCEKfd39wX9DPnZw2mxai fzNcn/XWXCDfdScl+dDlobZfQltp6/BJGZizgToUifvXaML2gAVIqtfBzGSp1GJZ QHG2E5RBjJRY1gjZnAeUebVQnHOFvRxxW9t44Sml8JaVEvlHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAia7f7ncYlMhtdggFCqxhIaz4KiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84Yzgx NTkxZS01YTU3LTRjZDEtYTg5Yy04NGU1MjcxOWNlYjgvODk5ZDA4NDMtN2FjOS0z NGE0LWI4MTktNDYwODdjYWRkMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOGM4MTU5MWUtNWE1Ny00Y2QxLWE4 OWMtODRlNTI3MTljZWI4LzhjODE1OTFlLTVhNTctNGNkMS1hODljLTg0ZTUyNzE5 Y2ViOC5jcmwwHwYDVR0jBBgwFoAU2IhhpfxTYH326Z4kGHyEg+fmp9swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84YzgxNTkxZS01YTU3LTRjZDEtYTg5Yy04NGU1 MjcxOWNlYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN7CTAVrlsJfGnsJWIWHw84Icvntp0RWWJMoj/bXA1DPQHaMzKyStuR D7zWhTRQOffNgHAWixWJ1tTZW9fGBlhS1Dj1UQFs1GfKPgqJKeHO+nBQ3YWxjkal Sop0RjCITaKB7fY3qCOwb+39x2+GsfER/pkuOj/pe3RsBW+rSOjQtfuw/ggAneKS yVvaRwFXxJ1/8UdrQBUH1K5bewtAcgdBZY0GH6pcaORORj/DsIDZijYMKeu0rEmY 3OGP1z/Ow2mXwfIC9n0cnxBlo58lEs1u/3bL7XTCQinQ4kvjbz6kN7R/czdjMJf2 YwYsfREibfcS3irrGc07zmTCz0TSYTw= -----END CERTIFICATE-----Generated at Wed Nov 4 19:38:36 2026 by rpki-client