$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e887907-436f-3d03-83e7-402b8cdf233a.roa File: 3e887907-436f-3d03-83e7-402b8cdf233a.roa (raw, json) Hash identifier: 9mvvneS8N5sOMsvOQ5AQCBFkEcF6XYCAEq9WPomjdtQ= Subject key identifier: DB:DC:CA:BA:F7:C8:9B:1E:08:F0:49:BE:32:3E:DB:86:52:68:EF:00 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F225D04CA5F91F0ADF55B201C Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e887907-436f-3d03-83e7-402b8cdf233a.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 22616 IP address blocks: 198.14.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:04:ca:5f:91:f0:ad:f5:5b:20:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=6d437b2d-dda1-42b2-bc78-be49f2bab2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:33:26:52:6a:55:d4:4a:71:66:6c:2f:dd: 99:b1:90:fb:2b:b6:cd:3d:96:b8:46:36:fd:2a:23: 52:a5:f4:2d:55:75:36:da:45:48:99:28:42:2d:81: 3e:3c:26:52:ee:75:48:25:51:e7:da:b3:a8:27:33: 31:db:e9:9a:c1:a3:ae:05:92:79:a3:45:49:92:70: 35:b9:49:ef:d9:3c:86:dc:27:33:53:cf:50:05:9d: 20:39:a4:2a:8a:15:a1:ce:e0:ab:44:e9:6b:9a:be: 3d:df:f3:f1:5d:76:5a:45:0a:a2:a2:bd:3a:22:cd: d0:c3:c9:25:6c:16:aa:00:40:f9:7a:8a:b4:63:8d: 0f:7f:40:c0:9b:25:1d:7d:af:76:bd:e4:b9:c6:11: 09:df:f9:6a:2a:d5:ab:a5:76:11:da:dc:b3:1e:61: 4d:ea:3f:32:c8:b2:1e:c5:8f:91:13:3e:35:13:2b: 41:41:f5:00:06:a0:10:89:c4:bc:05:3d:e6:02:34: 42:49:c3:48:0f:79:ab:bf:69:8b:37:e8:b4:b7:26: e2:7f:be:3f:b2:f0:23:94:bf:67:b6:87:b6:3b:25: 8d:29:64:3b:33:06:26:f3:3e:e2:3a:79:9f:e0:15: e8:26:05:2e:1d:f8:1e:e2:57:d1:ab:a5:b8:ac:b5: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DC:CA:BA:F7:C8:9B:1E:08:F0:49:BE:32:3E:DB:86:52:68:EF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e887907-436f-3d03-83e7-402b8cdf233a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:59:6a:81:24:7f:73:be:39:c4:60:57:0b:8f:b3:56:2f:8e: 88:19:1e:17:ac:b6:cc:f1:51:2c:9e:08:6f:a2:2a:d2:45:0f: 19:7b:7a:84:3b:90:bd:a5:11:f6:86:b4:1b:8c:db:c3:32:e4: 40:ac:3f:6f:59:d9:ce:4c:c7:cf:38:e1:dc:09:0d:61:00:40: bd:b6:7a:7c:35:c9:97:4e:d3:a8:b6:f5:32:a0:bb:d4:2e:a9: 01:f0:e2:58:d2:51:3c:c0:30:7e:5b:bd:41:0b:d7:cf:d0:62: 54:12:2b:7b:b6:28:fd:1a:ee:46:d8:1d:04:93:0d:70:98:8e: 68:a4:92:df:d1:91:7c:90:a0:b3:52:89:40:30:31:0a:e2:b9: 9f:8d:a6:2d:0d:8c:4f:e4:ad:51:32:d6:16:95:a3:22:84:d6: 10:51:6e:12:0d:e5:fb:cf:6d:0c:83:de:f6:55:b1:ef:96:b1: cc:29:dc:68:08:41:58:05:ec:8c:04:4f:04:53:6e:27:a5:f9: 95:09:a3:1e:dd:fe:a6:92:25:89:39:5b:57:10:b2:b2:aa:90: 5e:a7:b3:ab:a2:8d:6e:bf:9e:ac:a5:02:ce:c7:bd:c2:47:7f: d2:e1:64:15:09:9e:c5:e0:9a:00:33:c7:b1:4e:cd:5a:55:6f: d6:b1:8c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQTKX5HwrfVbIBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NmQ0MzdiMmQtZGRhMS00MmIyLWJjNzgtYmU0OWYyYmFiMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMQzJlJqVdRKcWZsL92ZsZD7K7bNPZa4Rjb9 KiNSpfQtVXU22kVImShCLYE+PCZS7nVIJVHn2rOoJzMx2+mawaOuBZJ5o0VJknA1 uUnv2TyG3CczU89QBZ0gOaQqihWhzuCrROlrmr493/PxXXZaRQqior06Is3Qw8kl bBaqAED5eoq0Y40Pf0DAmyUdfa92veS5xhEJ3/lqKtWrpXYR2tyzHmFN6j8yyLIe xY+REz41EytBQfUABqAQicS8BT3mAjRCScNID3mrv2mLN+i0tybif74/svAjlL9n toe2OyWNKWQ7MwYm8z7iOnmf4BXoJgUuHfge4lfRq6W4rLXqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvcyrr3yJseCPBJvjI+24ZSaO8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2U4ODc5MDctNDM2Zi0z ZDAzLTgzZTctNDAyYjhjZGYyMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg5DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElZaoEkf3O+OcRgVwuPs1YvjogZHhestszxUSyeCG+iKtJFDxl7eoQ7 kL2lEfaGtBuM28My5ECsP29Z2c5Mx8844dwJDWEAQL22enw1yZdO06i29TKgu9Qu qQHw4ljSUTzAMH5bvUEL18/QYlQSK3u2KP0a7kbYHQSTDXCYjmikkt/RkXyQoLNS iUAwMQriuZ+Npi0NjE/krVEy1haVoyKE1hBRbhIN5fvPbQyD3vZVse+Wscwp3GgI QVgF7IwETwRTbiel+ZUJox7d/qaSJYk5W1cQsrKqkF6ns6uijW6/nqylAs7HvcJH f9LhZBUJnsXgmgAzx7FOzVpVb9axjNs= -----END CERTIFICATE-----Generated at Sun Sep 13 15:49:54 2026 by rpki-client