$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a0a8438d-2df9-3385-91cf-fb6ee59f3ce3.roa File: a0a8438d-2df9-3385-91cf-fb6ee59f3ce3.roa (raw, json) Hash identifier: uJljpA5lZx7oQ49oBZ3LHTcVeQ7nhOPGu1gOVT6hxCc= Subject key identifier: 00:25:3B:78:19:09:1D:80:10:66:45:E4:2D:55:A8:3D:A0:54:21:DB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584FACC2B8AE45AF5CC8F6D70380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a0a8438d-2df9-3385-91cf-fb6ee59f3ce3.roa Signing time: Fri 30 Oct 2026 14:46:50 +0000 ROA not before: Fri 30 Oct 2026 14:46:50 +0000 ROA not after: Thu 28 Jan 2027 15:46:50 +0000 asID: 37645 IP address blocks: 198.138.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:c2:b8:ae:45:af:5c:c8:f6:d7:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 30 14:46:50 2026 GMT Not After : Jan 28 15:46:50 2027 GMT Subject: CN=18cae40f-29ee-424d-bdeb-3d3dcbb598aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:70:11:c9:98:6e:16:08:63:3a:b6:a9:bc: c2:18:8d:c5:04:b5:9a:c7:d4:f4:19:4a:55:4c:5a: 17:08:ca:60:75:93:2b:0d:b8:9c:dc:3b:f4:83:0a: 4b:30:7e:18:9d:f3:9e:a2:b5:5c:85:fc:78:8f:99: 10:0a:1b:60:a6:5b:86:c0:22:72:49:94:90:a8:f9: 65:f1:a0:5f:70:17:76:39:e2:33:ea:17:2a:ac:a7: 45:85:ad:a9:f5:65:0c:b7:43:9f:ba:ec:cd:d0:af: 8f:28:66:ba:6d:b9:44:04:69:4f:f1:ca:4e:94:51: 2f:29:5f:6c:66:d6:44:b5:c6:14:86:ab:04:6e:28: 3c:9a:17:9f:57:f1:79:51:de:fe:31:dd:cf:e1:28: 05:ef:d9:e8:2c:13:98:57:44:51:b5:0e:da:d9:f5: c9:85:39:fa:dc:29:62:d6:2a:5d:f2:fc:49:02:42: 64:37:e3:e8:e0:de:fc:40:7d:c6:57:f8:40:6a:fb: 41:95:c9:e8:49:e0:e5:a5:b3:aa:18:2c:75:55:ff: 68:1e:d6:87:f1:c1:01:b4:be:e5:12:4a:03:eb:18: e0:d0:ef:c4:a2:18:d3:0c:22:e2:a4:9d:db:56:49: 9f:cf:40:33:32:f1:01:cd:ab:5d:54:24:08:aa:f2: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:25:3B:78:19:09:1D:80:10:66:45:E4:2D:55:A8:3D:A0:54:21:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a0a8438d-2df9-3385-91cf-fb6ee59f3ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.138.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:33:2c:8d:9f:ab:8a:b5:95:c9:22:61:83:e4:59:f3:4f:c8: 03:d7:78:bb:5a:75:93:c9:49:dd:a1:20:a5:42:43:87:1f:9c: cf:fb:ee:ae:5b:4d:37:07:7d:8a:a9:5b:b8:44:9d:eb:87:5e: cd:47:b3:13:9f:65:c0:08:1d:14:6d:e4:90:e8:01:3b:dd:94: c5:18:5b:f1:0e:94:b8:57:92:5a:55:ad:fa:6e:da:29:60:c4: 33:c7:13:19:05:4b:36:4f:64:91:34:81:ba:b5:b6:19:e7:da: b4:59:3b:8e:71:ec:64:f0:3a:7b:4a:ec:e0:d6:b8:bb:cf:05: 46:23:a2:14:86:c2:94:15:34:4f:d2:e4:16:44:9a:54:9e:14: 9f:14:a7:b5:9c:b0:b8:2e:d6:df:3c:45:a3:93:11:25:f4:0d: 57:d3:06:80:b9:96:b8:dd:6d:5f:2a:fc:75:fe:c6:cc:bf:91: 8c:81:35:12:71:d8:ce:7f:3c:58:e0:d7:a1:bc:06:c3:f8:24: ba:12:b2:e1:74:fd:29:dc:8e:a7:2b:d9:ca:c3:78:f6:5e:0e: fb:32:88:a5:71:47:74:c4:fa:a2:5e:2b:f1:bb:2a:9a:41:1e: c8:a1:0a:5b:f3:6b:83:fc:ca:bd:57:ab:68:4e:a0:46:d3:7d: 41:46:af:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+swriuRa9cyPbXA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAzMDE0NDY1MFoXDTI3MDEyODE1NDY1MFowLzEtMCsGA1UEAxMk MThjYWU0MGYtMjllZS00MjRkLWJkZWItM2QzZGNiYjU5OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsypwEcmYbhYIYzq2qbzCGI3FBLWax9T0GUpV TFoXCMpgdZMrDbic3Dv0gwpLMH4YnfOeorVchfx4j5kQChtgpluGwCJySZSQqPll 8aBfcBd2OeIz6hcqrKdFha2p9WUMt0OfuuzN0K+PKGa6bblEBGlP8cpOlFEvKV9s ZtZEtcYUhqsEbig8mhefV/F5Ud7+Md3P4SgF79noLBOYV0RRtQ7a2fXJhTn63Cli 1ipd8vxJAkJkN+Po4N78QH3GV/hAavtBlcnoSeDlpbOqGCx1Vf9oHtaH8cEBtL7l EkoD6xjg0O/EohjTDCLipJ3bVkmfz0AzMvEBzatdVCQIqvKPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAlO3gZCR2AEGZF5C1VqD2gVCHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTBhODQzOGQtMmRmOS0z Mzg1LTkxY2YtZmI2ZWU1OWYzY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxoqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwzLI2fq4q1lckiYYPkWfNPyAPXeLtadZPJSd2hIKVCQ4cfnM/77q5b TTcHfYqpW7hEneuHXs1HsxOfZcAIHRRt5JDoATvdlMUYW/EOlLhXklpVrfpu2ilg xDPHExkFSzZPZJE0gbq1thnn2rRZO45x7GTwOntK7ODWuLvPBUYjohSGwpQVNE/S 5BZEmlSeFJ8Up7WcsLgu1t88RaOTESX0DVfTBoC5lrjdbV8q/HX+xsy/kYyBNRJx 2M5/PFjg16G8BsP4JLoSsuF0/Sncjqcr2crDePZeDvsyiKVxR3TE+qJeK/G7KppB HsihClvza4P8yr1Xq2hOoEbTfUFGr10= -----END CERTIFICATE-----Generated at Sat Oct 31 21:14:09 2026 by rpki-client