$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d/fa5575ed-6d05-33a7-bf07-0c49efd2c7e2.roa File: fa5575ed-6d05-33a7-bf07-0c49efd2c7e2.roa (raw, json) Hash identifier: ExmbUXDGKWnjoB7Csn3z7ApZYs5dyZWTRpm10cXrI6c= Subject key identifier: DE:35:7E:8B:5B:E4:75:67:46:2E:0D:38:BF:34:1B:9E:76:15:05:F1 Certificate issuer: /CN=afd03598-0145-4c61-9ced-74221ec5ff2d Certificate serial: 010D0C9F4328584F596DF8576B6AB8F3D0D13520 Authority key identifier: E1:4E:F1:68:4B:F2:25:5C:17:AF:6D:DC:50:C9:F3:20:AE:AA:B8:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d/fa5575ed-6d05-33a7-bf07-0c49efd2c7e2.roa Signing time: Wed 30 Sep 2026 18:23:58 +0000 ROA not before: Wed 30 Sep 2026 18:23:58 +0000 ROA not after: Tue 29 Dec 2026 19:23:58 +0000 asID: 11181 IP address blocks: 192.161.96.0/19 maxlen: 19 209.159.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d/afd03598-0145-4c61-9ced-74221ec5ff2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d/afd03598-0145-4c61-9ced-74221ec5ff2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:6d:f8:57:6b:6a:b8:f3:d0:d1:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd03598-0145-4c61-9ced-74221ec5ff2d Validity Not Before: Sep 30 18:23:58 2026 GMT Not After : Dec 29 19:23:58 2026 GMT Subject: CN=83e62006-d97d-453d-a3dc-81b3c729a089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:e8:2e:4c:f7:bc:9d:dc:44:55:fc:3b:6b: ae:6f:51:a0:68:98:26:e7:c3:ab:6c:21:e9:ef:17: 46:5e:78:76:09:54:6c:1f:59:ec:17:e4:0d:3b:ed: 5b:35:dd:e6:c1:ca:42:8b:1f:d3:f3:f3:25:0d:08: 7d:31:ca:1e:b8:ed:65:04:1b:c3:28:17:f1:11:ad: 26:7b:a2:07:ec:41:7f:77:40:5b:1b:97:d9:18:1a: ee:9b:39:f3:51:72:af:20:a7:de:82:ca:2e:a4:b4: 5a:69:2f:71:c7:58:f7:1a:11:6e:7c:15:0e:e2:15: e3:a5:73:83:fb:5a:9a:d0:3c:14:65:39:6c:15:84: c3:04:3a:41:52:3d:ce:3f:99:db:06:33:50:0e:05: ec:65:6f:4c:51:db:ac:31:cf:ad:e7:a0:ca:97:d9: ab:94:18:0e:ca:04:53:1b:fd:04:f3:f3:4e:1c:d4: e0:4e:5f:e7:87:67:b8:81:5b:13:08:ff:63:1e:11: bf:f8:5b:fc:31:6c:3a:7f:48:21:96:5f:45:ff:4c: ab:29:5a:d1:b9:59:5f:00:a1:44:1a:83:77:75:1f: f0:66:8e:da:87:25:53:cf:5d:24:36:92:4c:6f:1d: 3a:8f:90:d1:5a:74:a8:cd:bf:e1:7a:b9:bb:65:db: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:35:7E:8B:5B:E4:75:67:46:2E:0D:38:BF:34:1B:9E:76:15:05:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d/fa5575ed-6d05-33a7-bf07-0c49efd2c7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d/afd03598-0145-4c61-9ced-74221ec5ff2d.crl X509v3 Authority Key Identifier: keyid:E1:4E:F1:68:4B:F2:25:5C:17:AF:6D:DC:50:C9:F3:20:AE:AA:B8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afd03598-0145-4c61-9ced-74221ec5ff2d.cer sbgp-ipAddrBlock: critical IPv4: 192.161.96.0/19 209.159.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b4:f2:6d:93:96:ae:17:b9:77:30:a9:2c:b4:44:a5:0a:3f: be:31:d2:17:83:95:65:b7:af:0e:f7:1c:68:fe:c2:56:53:ab: 5e:09:88:96:f6:fe:08:98:2a:3c:b5:4c:61:39:3b:15:d4:cd: 82:93:09:c6:73:4c:60:12:88:dc:42:c6:90:25:1a:4b:e6:a5: c1:2e:94:87:48:01:a3:48:de:93:5d:a5:12:da:f7:1f:57:c1: 6b:39:64:b5:27:13:12:ac:08:8f:9b:f9:ad:54:e9:65:50:85: f3:47:f1:c7:8d:bc:cc:2c:8f:33:36:5e:89:73:33:9c:b2:6c: d6:cb:1d:d3:85:81:69:a2:fa:dc:f6:ef:31:e2:13:34:28:ff: ca:56:a0:1b:9b:e0:e9:59:dd:92:1d:50:cb:b1:96:7e:23:7c: 47:0e:07:4a:14:55:1b:ad:fa:65:06:5f:ec:0b:78:f1:73:75: 98:f6:f5:8f:e5:53:ff:ee:b5:a9:2a:cc:6f:5a:30:65:91:bf: e9:f2:20:8a:8a:06:a9:ae:09:ae:de:50:34:fc:1c:9b:df:f2: 17:1c:03:d3:46:d7:22:e9:88:d1:78:c4:5b:f9:a4:51:ef:3e: a3:1e:aa:64:fc:7d:8e:e3:9c:cc:ea:d8:70:18:05:da:b3:9b: b4:0f:2f:92 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9ZbfhXa2q489DRNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkMDM1OTgtMDE0NS00YzYxLTljZWQtNzQyMjFlYzVm ZjJkMB4XDTI2MDkzMDE4MjM1OFoXDTI2MTIyOTE5MjM1OFowLzEtMCsGA1UEAxMk ODNlNjIwMDYtZDk3ZC00NTNkLWEzZGMtODFiM2M3MjlhMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK7oLkz3vJ3cRFX8O2uub1GgaJgm58OrbCHp 7xdGXnh2CVRsH1nsF+QNO+1bNd3mwcpCix/T8/MlDQh9McoeuO1lBBvDKBfxEa0m e6IH7EF/d0BbG5fZGBrumznzUXKvIKfegsoupLRaaS9xx1j3GhFufBUO4hXjpXOD +1qa0DwUZTlsFYTDBDpBUj3OP5nbBjNQDgXsZW9MUdusMc+t56DKl9mrlBgOygRT G/0E8/NOHNTgTl/nh2e4gVsTCP9jHhG/+Fv8MWw6f0ghll9F/0yrKVrRuVlfAKFE GoN3dR/wZo7ahyVTz10kNpJMbx06j5DRWnSozb/herm7ZdsViwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN41fotb5HVnRi4NOL80G552FQXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hZmQw MzU5OC0wMTQ1LTRjNjEtOWNlZC03NDIyMWVjNWZmMmQvZmE1NTc1ZWQtNmQwNS0z M2E3LWJmMDctMGM0OWVmZDJjN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYWZkMDM1OTgtMDE0NS00YzYxLTlj ZWQtNzQyMjFlYzVmZjJkL2FmZDAzNTk4LTAxNDUtNGM2MS05Y2VkLTc0MjIxZWM1 ZmYyZC5jcmwwHwYDVR0jBBgwFoAU4U7xaEvyJVwXr23cUMnzIK6quH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hZmQwMzU5OC0wMTQ1LTRjNjEtOWNlZC03NDIy MWVjNWZmMmQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFwKFgAwQE 0Z+wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG+08m2Tlq4XuXcwqSy0RKUKP74x0heDlWW3rw73HGj+wlZT q14JiJb2/giYKjy1TGE5OxXUzYKTCcZzTGASiNxCxpAlGkvmpcEulIdIAaNI3pNd pRLa9x9XwWs5ZLUnExKsCI+b+a1U6WVQhfNH8ceNvMwsjzM2XolzM5yybNbLHdOF gWmi+tz27zHiEzQo/8pWoBub4OlZ3ZIdUMuxln4jfEcOB0oUVRut+mUGX+wLePFz dZj29Y/lU//utakqzG9aMGWRv+nyIIqKBqmuCa7eUDT8HJvf8hccA9NG1yLpiNF4 xFv5pFHvPqMeqmT8fY7jnMzq2HAYBdqzm7QPL5I= -----END CERTIFICATE-----Generated at Mon Nov 2 14:28:09 2026 by rpki-client