$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fa677728-44d3-38ce-806e-ce0ea99f01f8.roa File: fa677728-44d3-38ce-806e-ce0ea99f01f8.roa (raw, json) Hash identifier: XcajQcleEgO3rzrf4lm5IqIXpugaDWKhwy0+9jjSsrA= Subject key identifier: 5A:C7:ED:BD:A8:51:DB:8C:E3:0A:58:28:84:24:A0:6B:A5:F2:D8:C5 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F4974CEFAEBF4F5A705AC1A00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fa677728-44d3-38ce-806e-ce0ea99f01f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22616 IP address blocks: 198.14.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ce:fa:eb:f4:f5:a7:05:ac:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a48a5cab-301a-4480-921a-f88605d009ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:e3:3e:a5:14:0d:29:d1:5e:47:17:67:30: 7b:e4:ba:cb:10:49:f1:28:67:41:0e:a5:e8:84:1f: 1e:4d:e4:85:66:65:62:1a:e9:c3:f4:19:f7:e6:95: 20:d0:ff:c0:e2:27:f0:01:b8:42:ee:97:92:f7:88: 23:f8:60:2e:e6:12:f9:16:2d:8d:d4:2b:44:f3:c5: db:d3:ff:12:14:f2:f4:25:e3:48:47:88:ff:c6:17: eb:f6:bd:42:17:67:0a:dc:0d:4b:69:97:d2:40:4c: 8c:2e:c3:29:c9:ea:c3:ea:19:f5:ed:3c:d7:18:0d: 80:a4:93:23:4e:11:83:ec:bd:77:89:3e:33:6d:33: 77:7d:04:70:cc:4d:53:a9:7f:5d:f4:28:db:1c:9a: 6c:54:7b:34:53:06:f7:57:e5:e3:7b:97:48:e7:a2: 87:a2:98:e9:50:bb:6a:59:d3:17:7d:c7:09:f0:7d: 43:a4:0d:df:ca:ec:ce:68:a9:45:e9:2c:9b:14:ad: 9d:b2:fd:e3:6c:2a:51:df:b3:42:f3:a6:9a:3e:94: 69:c4:ca:a2:e5:a6:cd:22:93:92:94:62:57:f4:f9: 44:39:e7:6c:ab:26:d3:6c:d9:78:9a:3a:bb:07:33: 99:75:89:40:99:f8:cb:c2:e3:01:df:57:b8:da:10: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C7:ED:BD:A8:51:DB:8C:E3:0A:58:28:84:24:A0:6B:A5:F2:D8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fa677728-44d3-38ce-806e-ce0ea99f01f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d4:48:47:86:b3:c8:65:c8:92:6d:82:69:92:ab:95:4f:23: 5d:92:1b:f5:fb:a3:ea:d4:05:5f:17:ce:db:dc:c8:0a:a3:b3: 12:2d:94:1b:e4:d4:7f:ba:45:02:21:c2:48:ee:8f:7b:1a:af: 83:da:6e:97:9b:1b:de:00:81:8c:dd:7d:31:8f:e6:cd:04:2f: 50:90:62:dd:fd:18:27:b9:08:3c:f3:d6:f0:3b:24:09:be:38: d2:4d:25:db:08:56:5d:10:69:0c:a2:96:c9:47:c3:e3:55:4c: fa:85:7e:1f:bc:71:f9:6c:4a:e7:a8:f9:37:33:c7:49:67:6f: 9a:23:a6:d6:4f:5b:e1:ce:47:f5:74:09:96:3a:67:ff:52:ce: 9d:33:95:9e:ac:08:57:dd:b2:cd:f5:bf:35:ad:bc:69:70:5e: 53:15:8d:1c:00:07:88:80:e3:b2:15:0c:75:5f:89:d1:00:d4: f1:df:44:ef:ad:88:5a:8c:72:06:7e:ce:56:51:5a:48:03:0a: 18:48:60:2e:4d:ab:6b:f4:f6:aa:8c:2b:72:6e:15:fe:31:f5: a6:6a:f7:1c:8b:00:21:15:b0:b8:78:d3:d8:26:dd:30:83:81: 5f:97:42:b9:8b:22:19:e8:62:8e:fe:d3:e9:a3:25:7e:90:89: e9:9e:5f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdM766/T1pwWsGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQ4YTVjYWItMzAxYS00NDgwLTkyMWEtZjg4NjA1ZDAwOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc/jPqUUDSnRXkcXZzB75LrLEEnxKGdBDqXo hB8eTeSFZmViGunD9Bn35pUg0P/A4ifwAbhC7peS94gj+GAu5hL5Fi2N1CtE88Xb 0/8SFPL0JeNIR4j/xhfr9r1CF2cK3A1LaZfSQEyMLsMpyerD6hn17TzXGA2ApJMj ThGD7L13iT4zbTN3fQRwzE1TqX9d9CjbHJpsVHs0Uwb3V+Xje5dI56KHopjpULtq WdMXfccJ8H1DpA3fyuzOaKlF6SybFK2dsv3jbCpR37NC86aaPpRpxMqi5abNIpOS lGJX9PlEOedsqybTbNl4mjq7BzOZdYlAmfjLwuMB31e42hCk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrH7b2oUduM4wpYKIQkoGul8tjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmE2Nzc3MjgtNDRkMy0z OGNlLTgwNmUtY2UwZWE5OWYwMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxg5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLUSEeGs8hlyJJtgmmSq5VPI12SG/X7o+rUBV8XztvcyAqjsxItlBvk 1H+6RQIhwkjuj3sar4PabpebG94AgYzdfTGP5s0EL1CQYt39GCe5CDzz1vA7JAm+ ONJNJdsIVl0QaQyilslHw+NVTPqFfh+8cflsSueo+Tczx0lnb5ojptZPW+HOR/V0 CZY6Z/9Szp0zlZ6sCFfdss31vzWtvGlwXlMVjRwAB4iA47IVDHVfidEA1PHfRO+t iFqMcgZ+zlZRWkgDChhIYC5Nq2v09qqMK3JuFf4x9aZq9xyLACEVsLh409gm3TCD gV+XQrmLIhnoYo7+0+mjJX6QiemeX/E= -----END CERTIFICATE-----Generated at Sat Oct 31 03:32:24 2026 by rpki-client