$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20/e74c14d4-07bb-36d8-a4d4-30434a72f05a.roa File: e74c14d4-07bb-36d8-a4d4-30434a72f05a.roa (raw, json) Hash identifier: ibSeM7l2Wtqvelm7NF6GPCvBlRjLO1cMRtH4vqn8r84= Subject key identifier: 6A:9C:0F:D0:8F:A0:97:55:9F:B1:E4:C0:67:57:77:5D:0B:54:79:5B Certificate issuer: /CN=949d8f32-b2a3-4bfc-be1a-0876fe4e6f20 Certificate serial: 010D0C9F4328584F8EC16E126E04B1237A4DDAC0 Authority key identifier: B8:B0:4D:76:D9:C1:C7:F5:5B:61:52:C1:8C:C5:C4:87:22:6B:49:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20/e74c14d4-07bb-36d8-a4d4-30434a72f05a.roa Signing time: Mon 19 Oct 2026 20:49:58 +0000 ROA not before: Mon 19 Oct 2026 20:49:58 +0000 ROA not after: Sun 17 Jan 2027 21:49:58 +0000 asID: 402103 IP address blocks: 198.60.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:c1:6e:12:6e:04:b1:23:7a:4d:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949d8f32-b2a3-4bfc-be1a-0876fe4e6f20 Validity Not Before: Oct 19 20:49:58 2026 GMT Not After : Jan 17 21:49:58 2027 GMT Subject: CN=e4775b4e-d0f3-45be-a425-5fdc81d7fe25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:47:80:18:fe:2d:a0:f7:80:23:6b:8c:18: c4:36:88:0f:e0:ca:a2:4a:71:c2:e8:3d:a5:85:7a: 46:f3:1d:3a:c8:77:2c:0b:f8:97:ae:d2:12:42:73: 06:bd:40:d4:2c:ac:f4:9b:b2:28:2d:13:78:82:17: 57:08:6e:f9:8d:5a:ff:30:c7:e2:57:bd:cb:2c:ca: 65:91:5e:f1:b2:de:71:1d:a0:83:f6:8e:b0:8c:b6: 8b:57:97:f7:90:fc:16:05:fc:4f:4a:83:2c:80:c9: 20:ed:67:3e:d1:b7:6b:20:ab:a6:f2:b6:0c:e0:49: 25:c9:3d:ed:41:f9:07:3a:ad:63:1e:dd:c7:ce:a0: a6:d8:d9:de:b5:ef:29:ca:0c:f5:42:b4:31:4e:de: 0b:b7:fe:20:2a:96:a5:8b:b4:22:1f:53:06:7f:04: a3:a8:3d:9f:b9:25:02:67:73:d7:b3:32:47:2e:8d: 3d:41:a0:9d:bd:98:72:1f:5c:3f:37:ac:4f:ac:25: 0a:ad:5e:5e:9c:fc:cf:aa:bc:94:72:ce:2e:fb:cd: 84:51:09:42:dd:c6:6c:8f:8e:00:95:2a:71:70:d0: 7c:f2:ae:ae:ee:24:6b:16:3f:02:5e:d9:8c:69:e1: 8c:59:8c:e0:6d:16:1e:9d:16:21:2d:e4:ac:e5:07: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9C:0F:D0:8F:A0:97:55:9F:B1:E4:C0:67:57:77:5D:0B:54:79:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20/e74c14d4-07bb-36d8-a4d4-30434a72f05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20.crl X509v3 Authority Key Identifier: keyid:B8:B0:4D:76:D9:C1:C7:F5:5B:61:52:C1:8C:C5:C4:87:22:6B:49:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/949d8f32-b2a3-4bfc-be1a-0876fe4e6f20.cer sbgp-ipAddrBlock: critical IPv4: 198.60.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cf:66:a0:44:f5:07:74:69:9e:83:81:75:55:8e:89:ed:de: e5:dc:56:3c:96:bd:67:14:df:c2:91:e9:34:56:5c:36:d8:8a: 5b:ae:3c:c2:2f:d5:cf:61:69:d2:e1:dd:84:de:51:49:b8:79: ef:dc:e0:5c:24:52:f2:69:32:7d:16:26:1b:22:86:03:f9:1c: 36:e6:d0:b0:51:64:f3:1a:fa:c8:d3:5c:50:99:02:55:80:31: 23:74:4e:51:56:0d:8d:41:15:e9:44:54:f2:ae:44:1a:7f:c6: bd:ee:95:4d:c0:fb:54:75:44:9f:11:80:a7:98:c8:c1:4f:c5: 74:f0:eb:cd:cb:ca:25:18:b2:0a:6d:74:ed:bf:f2:82:ae:fc: 1b:d4:03:74:82:2e:8e:ea:32:49:82:0d:65:f2:25:b9:2a:64: e0:3b:d9:2e:31:20:08:39:40:d2:02:a4:b0:fb:50:16:78:40: 1d:0e:e3:34:17:90:0c:4a:1c:78:b4:45:6e:c9:df:c2:83:97: 41:ac:d3:6d:90:5f:88:6d:4b:51:e7:02:99:fd:0f:1d:a4:31: e1:d1:39:15:cc:7c:60:d0:28:13:a1:55:a5:b1:d2:3c:b7:1e: 96:a3:28:66:96:f7:94:51:52:0f:49:97:e1:3c:7d:7b:86:92: a0:86:ac:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+OwW4SbgSxI3pN2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ5ZDhmMzItYjJhMy00YmZjLWJlMWEtMDg3NmZlNGU2 ZjIwMB4XDTI2MTAxOTIwNDk1OFoXDTI3MDExNzIxNDk1OFowLzEtMCsGA1UEAxMk ZTQ3NzViNGUtZDBmMy00NWJlLWE0MjUtNWZkYzgxZDdmZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhplHgBj+LaD3gCNrjBjENogP4MqiSnHC6D2l hXpG8x06yHcsC/iXrtISQnMGvUDULKz0m7IoLRN4ghdXCG75jVr/MMfiV73LLMpl kV7xst5xHaCD9o6wjLaLV5f3kPwWBfxPSoMsgMkg7Wc+0bdrIKum8rYM4EklyT3t QfkHOq1jHt3HzqCm2Nnete8pygz1QrQxTt4Lt/4gKpali7QiH1MGfwSjqD2fuSUC Z3PXszJHLo09QaCdvZhyH1w/N6xPrCUKrV5enPzPqryUcs4u+82EUQlC3cZsj44A lSpxcNB88q6u7iRrFj8CXtmMaeGMWYzgbRYenRYhLeSs5QfTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqcD9CPoJdVn7HkwGdXd10LVHlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85NDlk OGYzMi1iMmEzLTRiZmMtYmUxYS0wODc2ZmU0ZTZmMjAvZTc0YzE0ZDQtMDdiYi0z NmQ4LWE0ZDQtMzA0MzRhNzJmMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTQ5ZDhmMzItYjJhMy00YmZjLWJl MWEtMDg3NmZlNGU2ZjIwLzk0OWQ4ZjMyLWIyYTMtNGJmYy1iZTFhLTA4NzZmZTRl NmYyMC5jcmwwHwYDVR0jBBgwFoAUuLBNdtnBx/VbYVLBjMXEhyJrSa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85NDlkOGYzMi1iMmEzLTRiZmMtYmUxYS0wODc2 ZmU0ZTZmMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjzDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7PZqBE9Qd0aZ6DgXVVjont3uXcVjyWvWcU38KR6TRWXDbYiluuPMIv 1c9hadLh3YTeUUm4ee/c4FwkUvJpMn0WJhsihgP5HDbm0LBRZPMa+sjTXFCZAlWA MSN0TlFWDY1BFelEVPKuRBp/xr3ulU3A+1R1RJ8RgKeYyMFPxXTw683LyiUYsgpt dO2/8oKu/BvUA3SCLo7qMkmCDWXyJbkqZOA72S4xIAg5QNICpLD7UBZ4QB0O4zQX kAxKHHi0RW7J38KDl0Gs022QX4htS1HnApn9Dx2kMeHRORXMfGDQKBOhVaWx0jy3 HpajKGaW95RRUg9Jl+E8fXuGkqCGrN8= -----END CERTIFICATE-----Generated at Wed Nov 4 16:42:41 2026 by rpki-client