$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c60df21-7955-33f6-9955-b793787e5bf7.roa File: 3c60df21-7955-33f6-9955-b793787e5bf7.roa (raw, json) Hash identifier: QK4pY0edVKSnbAzEJvgHKL8v2RSPnjr8GeytGSljQ3I= Subject key identifier: 4A:B7:86:67:0A:58:D8:C7:9E:B2:80:4B:C6:EA:34:7A:3F:7A:74:A6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F506D575AAE0651773AB67180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c60df21-7955-33f6-9955-b793787e5bf7.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 3320 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:57:5a:ae:06:51:77:3a:b6:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=9ae95c31-1884-494f-a753-707b91bd8cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:e1:d8:4f:55:3c:8b:aa:83:6c:42:82:8e: 8c:31:0d:33:aa:bc:09:35:a1:17:94:49:95:86:a3: f9:e9:47:4a:46:38:9b:e5:0b:3d:24:4b:43:c5:57: e5:d6:90:92:0b:36:ed:b5:41:ea:b2:56:3b:ec:e8: 3c:5a:52:a7:14:4a:8e:6e:a7:1e:81:58:8d:7d:71: 01:3b:79:48:da:29:c5:28:ad:51:59:bd:fa:e7:48: 49:fe:8c:e6:2e:b4:7c:9a:bc:27:6f:73:d6:1b:ed: 44:56:d4:ea:76:22:a9:b2:9a:69:5b:a0:89:9d:be: 17:1c:8c:b6:24:03:2d:92:b8:a0:e0:f5:70:6c:67: 4c:02:90:a8:c7:ae:14:5d:91:7e:56:2b:0e:17:48: 22:d6:56:5e:4b:c6:10:d5:36:8d:8b:39:ee:5a:2b: b3:08:b7:44:90:65:94:0d:5e:be:94:3d:19:4a:5d: 04:fc:fe:ea:7a:63:5c:e2:94:10:60:27:27:16:a6: 27:66:d0:49:30:75:18:5b:e8:fd:db:18:23:31:c3: eb:06:b0:56:fe:3d:c8:a0:38:39:dd:56:fd:3b:47: c9:ea:ad:72:4f:58:05:f5:a9:44:cf:10:23:89:36: 95:42:14:c3:83:60:8a:c4:14:9f:b3:89:ed:5b:ba: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:86:67:0A:58:D8:C7:9E:B2:80:4B:C6:EA:34:7A:3F:7A:74:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c60df21-7955-33f6-9955-b793787e5bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9b:b9:83:60:48:bc:bf:f3:26:63:c9:e3:45:c0:a8:9e:32: ee:83:b0:c1:da:97:64:72:34:e8:ea:9a:b4:e9:58:95:f3:c7: 30:a3:60:ca:1a:63:f4:92:72:ac:a0:98:d0:35:14:e9:ae:0a: 2d:70:5f:ae:9a:0e:f4:8e:0a:8e:78:b1:45:bd:27:12:b1:21: b5:11:27:d6:20:ff:9e:81:69:f2:4d:ea:5b:02:a4:f0:8b:74: b9:f7:17:81:5d:3f:46:1a:3f:7d:58:00:87:fe:6e:df:fb:d0: a6:5a:e7:fe:0b:f8:bf:60:dd:1f:b3:62:29:62:1b:29:b3:9c: 76:fa:64:88:59:5a:51:a9:e4:66:d5:62:44:d7:f4:0d:a7:9b: db:d9:bf:c9:e9:fd:26:23:92:1f:bb:fa:e2:68:ef:51:df:59: 51:d3:d9:75:59:cb:42:f6:8b:2e:c2:8f:cc:b3:69:66:b5:5d: 58:f8:f6:db:81:dc:b8:00:24:92:07:dd:a2:6d:1f:c6:c3:e6: 3b:fa:ab:c4:25:80:91:95:50:97:5c:25:6a:e0:fd:f3:4d:06: 1e:5c:e3:11:a0:f1:97:76:50:12:1c:05:58:1d:b4:dc:8d:6f: c5:1e:06:0c:e3:49:70:e4:25:f9:4a:69:21:6b:7a:db:21:22: e1:ab:96:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9QbVdargZRdzq2cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OWFlOTVjMzEtMTg4NC00OTRmLWE3NTMtNzA3YjkxYmQ4Y2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8/h2E9VPIuqg2xCgo6MMQ0zqrwJNaEXlEmV hqP56UdKRjib5Qs9JEtDxVfl1pCSCzbttUHqslY77Og8WlKnFEqObqcegViNfXEB O3lI2inFKK1RWb3650hJ/ozmLrR8mrwnb3PWG+1EVtTqdiKpspppW6CJnb4XHIy2 JAMtkrig4PVwbGdMApCox64UXZF+VisOF0gi1lZeS8YQ1TaNiznuWiuzCLdEkGWU DV6+lD0ZSl0E/P7qemNc4pQQYCcnFqYnZtBJMHUYW+j92xgjMcPrBrBW/j3IoDg5 3Vb9O0fJ6q1yT1gF9alEzxAjiTaVQhTDg2CKxBSfs4ntW7rtOwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEq3hmcKWNjHnrKAS8bqNHo/enSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2M2MGRmMjEtNzk1NS0z M2Y2LTk5NTUtYjc5Mzc4N2U1YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjpu5g2BIvL/zJmPJ40XAqJ4y7oOwwdqXZHI06OqatOlYlfPHMKNgyhpj 9JJyrKCY0DUU6a4KLXBfrpoO9I4KjnixRb0nErEhtREn1iD/noFp8k3qWwKk8It0 ufcXgV0/Rho/fVgAh/5u3/vQplrn/gv4v2DdH7NiKWIbKbOcdvpkiFlaUankZtVi RNf0Daeb29m/yen9JiOSH7v64mjvUd9ZUdPZdVnLQvaLLsKPzLNpZrVdWPj224Hc uAAkkgfdom0fxsPmO/qrxCWAkZVQl1wlauD9800GHlzjEaDxl3ZQEhwFWB203I1v xR4GDONJcOQl+UppIWt62yEi4auWbA== -----END CERTIFICATE-----Generated at Mon Oct 19 13:51:52 2026 by rpki-client