$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa File: 96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa (raw, json) Hash identifier: N0B3fO3gNE+Fuo85qPh7SbE5ZqBjAqLOVuUksR7zrV8= Subject key identifier: B5:30:6F:E8:6D:B9:EF:34:84:D8:0C:21:5D:51:7D:92:C4:69:14:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E7A9BCD2D85B8D9FC1200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 198.45.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:7a:9b:cd:2d:85:b8:d9:fc:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=45012101-d31f-4642-9e7c-9fd1d24a5dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:21:c5:81:29:a8:bd:13:b6:65:42:7f:d1:58: fa:1c:d2:d2:71:a2:18:61:8f:6f:8e:4f:da:d1:b4: f9:85:35:47:0d:16:a4:3a:49:9f:fa:ae:71:8c:cb: cd:29:3c:10:56:25:6d:d8:84:92:40:0e:ce:16:7d: 8a:bc:59:2c:ff:25:fe:e2:39:16:29:17:c1:55:fb: e5:5d:a8:ea:6a:05:14:12:6d:98:f9:2b:1d:0b:93: 08:09:2c:7e:62:2c:e3:c6:a5:f3:81:0f:e6:fd:9a: 3f:3d:d5:ea:c2:09:0c:90:56:87:1d:fa:ec:8e:ff: 86:c8:cd:ed:8c:dd:67:86:9c:20:62:c2:c3:57:c2: 5c:0e:7a:72:53:78:26:59:b3:74:08:89:64:e7:c4: b4:7d:0c:26:cc:8b:3b:89:64:61:a3:7d:9e:ed:ca: 58:31:71:e0:f7:40:6b:1d:03:60:aa:2b:b7:1d:d6: 83:18:62:f1:be:ba:bb:2e:05:e2:b0:6c:00:d0:14: 74:2c:1b:93:32:9a:69:41:ec:52:0b:2d:27:1a:35: 00:b7:de:f1:f0:02:e8:c9:25:73:94:6b:18:c3:66: e2:01:56:44:0e:41:8e:15:80:c1:b7:98:e9:2c:3a: db:49:31:1a:f7:11:c5:77:b4:f9:f8:f5:28:2d:eb: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:6F:E8:6D:B9:EF:34:84:D8:0C:21:5D:51:7D:92:C4:69:14:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96a51804-e48c-3fe4-b9f0-490fdea5fc5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:0d:ec:5c:cc:51:6d:a8:34:b5:c3:0f:26:32:50:75:41:c8: e4:16:2f:6f:6e:e9:ab:ea:04:2c:e2:41:94:97:2c:db:f8:b0: d3:f1:66:46:1c:f3:5c:56:d2:39:02:e3:38:89:c7:d2:a7:1a: ae:ad:a4:5a:d3:84:76:6c:c0:5b:73:fa:6b:bf:ce:81:9b:89: 49:81:6d:e4:1a:27:81:a6:d0:ce:c2:51:b8:54:58:e1:48:92: a8:cf:12:af:d8:bc:cb:ed:67:fc:33:ff:2d:a7:18:58:fc:80: 9e:9d:33:ad:ef:b7:44:2a:88:e5:86:9a:69:5f:6c:60:c5:a3: b6:10:75:93:cd:fc:50:18:57:a9:16:fd:b5:f2:5e:4d:cc:44: 00:6d:b9:a6:ba:a7:32:4c:21:74:07:f0:78:ec:5b:c3:6c:4d: 08:d4:a6:a9:ac:37:99:70:27:fa:09:ba:ac:e8:fd:40:37:43: 41:d9:4f:6a:c8:69:58:cc:a4:8a:0b:b6:25:e9:6f:d2:d8:43: ec:d2:b8:f7:48:b7:50:f1:49:80:5c:c7:27:02:3c:ba:10:96: 20:d8:5a:bc:e7:70:e1:21:58:ce:43:0d:fc:e1:59:a9:5f:eb: 24:c3:da:e9:a1:06:01:cf:cd:74:3f:e5:33:e6:8b:4c:f4:08: 19:ca:7e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnnqbzS2FuNn8EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDUwMTIxMDEtZDMxZi00NjQyLTllN2MtOWZkMWQyNGE1ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyHFgSmovRO2ZUJ/0Vj6HNLScaIYYY9vjk/a 0bT5hTVHDRakOkmf+q5xjMvNKTwQViVt2ISSQA7OFn2KvFks/yX+4jkWKRfBVfvl XajqagUUEm2Y+SsdC5MICSx+YizjxqXzgQ/m/Zo/PdXqwgkMkFaHHfrsjv+GyM3t jN1nhpwgYsLDV8JcDnpyU3gmWbN0CIlk58S0fQwmzIs7iWRho32e7cpYMXHg90Br HQNgqiu3HdaDGGLxvrq7LgXisGwA0BR0LBuTMpppQexSCy0nGjUAt97x8ALoySVz lGsYw2biAVZEDkGOFYDBt5jpLDrbSTEa9xHFd7T5+PUoLeulzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUwb+htue80hNgMIV1RfZLEaRSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTZhNTE4MDQtZTQ4Yy0z ZmU0LWI5ZjAtNDkwZmRlYTVmYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUN7FzMUW2oNLXDDyYyUHVByOQWL29u6avqBCziQZSXLNv4sNPxZkYc 81xW0jkC4ziJx9KnGq6tpFrThHZswFtz+mu/zoGbiUmBbeQaJ4Gm0M7CUbhUWOFI kqjPEq/YvMvtZ/wz/y2nGFj8gJ6dM63vt0QqiOWGmmlfbGDFo7YQdZPN/FAYV6kW /bXyXk3MRABtuaa6pzJMIXQH8HjsW8NsTQjUpqmsN5lwJ/oJuqzo/UA3Q0HZT2rI aVjMpIoLtiXpb9LYQ+zSuPdIt1DxSYBcxycCPLoQliDYWrzncOEhWM5DDfzhWalf 6yTD2umhBgHPzXQ/5TPmi0z0CBnKfmk= -----END CERTIFICATE-----Generated at Thu Sep 10 10:55:18 2026 by rpki-client