$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/c8e9b9b8-f5ac-3a99-87b6-791b01760ac6.roa File: c8e9b9b8-f5ac-3a99-87b6-791b01760ac6.roa (raw, json) Hash identifier: SzJGQ7VuVfeLrC5Gyx8iCgSL1ftUKmLrhSvJh4+dQps= Subject key identifier: C2:D1:FF:D6:43:AB:B0:25:1B:C6:99:35:84:95:23:59:12:9A:43:03 Certificate issuer: /CN=8d1e98c1-8c5d-4b39-a869-8752e6d77e6b Certificate serial: 010D0C9F4328584F6FF57B304AAAE828C3B5A200 Authority key identifier: 3B:0F:EC:F5:5E:7B:56:78:89:03:1E:C2:76:12:33:6A:B6:43:D4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/c8e9b9b8-f5ac-3a99-87b6-791b01760ac6.roa Signing time: Thu 08 Oct 2026 20:04:47 +0000 ROA not before: Thu 08 Oct 2026 20:04:47 +0000 ROA not after: Wed 06 Jan 2027 20:40:30 +0000 asID: 32576 IP address blocks: 199.188.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:f5:7b:30:4a:aa:e8:28:c3:b5:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1e98c1-8c5d-4b39-a869-8752e6d77e6b Validity Not Before: Oct 8 20:04:47 2026 GMT Not After : Jan 6 20:40:30 2027 GMT Subject: CN=0dc224f4-a5ec-4301-9500-a421ee8a7f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:63:67:dc:0c:86:a3:52:e4:62:74:d5:38: 52:6e:27:34:cc:8c:0e:6b:da:77:df:12:ca:b3:20: 7f:31:92:ca:d0:0a:2e:ed:9e:f1:f3:32:74:43:27: 86:9f:3b:1f:12:a1:ce:96:90:ab:5a:33:c1:09:d7: d4:ae:01:77:04:6c:76:b0:92:5d:79:4f:20:36:d3: 13:15:d9:c1:80:9c:84:92:56:0b:7f:a6:2f:90:ac: b7:57:63:86:6d:93:1c:7e:45:5d:8d:38:91:84:39: be:4c:16:8d:dd:21:c5:5d:de:55:18:64:01:95:c7: d3:7e:81:48:90:83:3d:db:ca:1a:fb:00:5a:87:7f: 5e:0d:92:f5:2d:2e:c8:37:da:62:6e:88:11:52:df: 26:9a:c2:1a:52:67:53:6d:80:b4:27:e2:d0:ba:c0: 49:08:d3:01:65:79:73:28:db:70:b1:5d:65:97:40: 15:9c:fb:89:f6:ae:d0:e4:87:ec:78:61:7d:76:87: c9:1c:49:19:c8:a1:94:5a:49:a8:97:5d:5d:36:e3: f8:3d:b5:b3:2d:06:82:b5:a5:0d:4d:f3:50:3a:d0: e0:d9:17:10:be:8b:2c:d9:b1:6d:54:d4:28:e1:56: bb:3d:ed:01:0f:d6:37:ba:37:dd:24:1a:b2:64:d7: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D1:FF:D6:43:AB:B0:25:1B:C6:99:35:84:95:23:59:12:9A:43:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/c8e9b9b8-f5ac-3a99-87b6-791b01760ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.crl X509v3 Authority Key Identifier: keyid:3B:0F:EC:F5:5E:7B:56:78:89:03:1E:C2:76:12:33:6A:B6:43:D4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer sbgp-ipAddrBlock: critical IPv4: 199.188.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7e:6f:a8:82:c4:fc:4d:d3:b5:f3:78:50:f1:36:a1:25:2a: ab:d1:d8:a9:1d:f4:7c:77:81:d8:81:14:b1:ab:81:d2:eb:7b: f5:41:d0:83:b3:03:b1:aa:45:70:96:e6:b8:ba:4b:cd:03:01: aa:28:15:f4:08:90:03:9c:b9:e9:e8:7e:09:b3:99:84:9c:d4: 6e:97:ad:7c:0d:dd:30:76:a5:42:ce:1d:e3:eb:2e:99:96:42: 06:4f:03:3b:79:92:29:a9:3c:c7:4f:12:51:49:02:aa:27:c0: 8c:dc:62:d3:9a:ff:be:6b:44:94:e9:24:ac:fb:32:ad:79:46: f8:7f:ca:c6:ff:2d:c0:88:96:f2:1e:6b:4f:fc:cb:b9:72:54: 4c:e0:60:13:36:ba:22:e1:f9:d4:37:2f:28:b1:9e:d7:ee:68: 8d:19:ad:07:18:9d:48:1f:46:37:fd:36:87:f8:34:a1:95:b7: 18:b9:c1:0f:dd:a5:fa:4c:9d:84:8a:af:f9:8b:af:46:b1:75: bf:38:9a:37:c9:09:54:0c:d1:d1:6d:84:da:13:14:bb:fc:c2: ae:57:31:67:03:5a:30:9e:fe:cf:a9:79:1d:eb:59:b6:35:1a: 55:2e:6a:69:6e:b9:a7:1a:a1:b7:74:12:0b:a9:42:05:81:cb: ba:8b:50:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9v9XswSqroKMO1ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQxZTk4YzEtOGM1ZC00YjM5LWE4NjktODc1MmU2ZDc3 ZTZiMB4XDTI2MTAwODIwMDQ0N1oXDTI3MDEwNjIwNDAzMFowLzEtMCsGA1UEAxMk MGRjMjI0ZjQtYTVlYy00MzAxLTk1MDAtYTQyMWVlOGE3ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2xjZ9wMhqNS5GJ01ThSbic0zIwOa9p33xLK syB/MZLK0Aou7Z7x8zJ0QyeGnzsfEqHOlpCrWjPBCdfUrgF3BGx2sJJdeU8gNtMT FdnBgJyEklYLf6YvkKy3V2OGbZMcfkVdjTiRhDm+TBaN3SHFXd5VGGQBlcfTfoFI kIM928oa+wBah39eDZL1LS7IN9pibogRUt8mmsIaUmdTbYC0J+LQusBJCNMBZXlz KNtwsV1ll0AVnPuJ9q7Q5IfseGF9dofJHEkZyKGUWkmol11dNuP4PbWzLQaCtaUN TfNQOtDg2RcQvoss2bFtVNQo4Va7Pe0BD9Y3ujfdJBqyZNcNVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLR/9ZDq7AlG8aZNYSVI1kSmkMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84ZDFl OThjMS04YzVkLTRiMzktYTg2OS04NzUyZTZkNzdlNmIvYzhlOWI5YjgtZjVhYy0z YTk5LTg3YjYtNzkxYjAxNzYwYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOGQxZTk4YzEtOGM1ZC00YjM5LWE4 NjktODc1MmU2ZDc3ZTZiLzhkMWU5OGMxLThjNWQtNGIzOS1hODY5LTg3NTJlNmQ3 N2U2Yi5jcmwwHwYDVR0jBBgwFoAUOw/s9V57VniJAx7CdhIzarZD1C0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84ZDFlOThjMS04YzVkLTRiMzktYTg2OS04NzUy ZTZkNzdlNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV+b6iCxPxN07XzeFDxNqElKqvR2Kkd9Hx3gdiBFLGrgdLre/VB0IOz A7GqRXCW5ri6S80DAaooFfQIkAOcuenofgmzmYSc1G6XrXwN3TB2pULOHePrLpmW QgZPAzt5kimpPMdPElFJAqonwIzcYtOa/75rRJTpJKz7Mq15Rvh/ysb/LcCIlvIe a0/8y7lyVEzgYBM2uiLh+dQ3LyixntfuaI0ZrQcYnUgfRjf9Nof4NKGVtxi5wQ/d pfpMnYSKr/mLr0axdb84mjfJCVQM0dFthNoTFLv8wq5XMWcDWjCe/s+peR3rWbY1 GlUuamluuacaobd0EgupQgWBy7qLUKk= -----END CERTIFICATE-----Generated at Wed Nov 4 04:15:35 2026 by rpki-client