$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec98616e-5338-37d0-9f50-607286ac1f35.roa File: ec98616e-5338-37d0-9f50-607286ac1f35.roa (raw, json) Hash identifier: /wdTnOSmovQlmu5ncXyxUZfS9alFX3Rqv2aAbjjEpJU= Subject key identifier: 35:EF:A4:7C:74:B0:CA:46:BF:FD:FF:F0:7B:DF:46:69:F2:53:A5:FB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233D004B875016F92B0680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec98616e-5338-37d0-9f50-607286ac1f35.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 198.65.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:00:4b:87:50:16:f9:2b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=af8c4fb8-efeb-447d-8e34-2eb800924f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:16:df:c7:8c:7d:e8:67:b4:2d:19:2a:cb: 7d:31:c8:14:29:fb:df:54:84:90:f0:c4:5b:d1:13: 7c:29:aa:f1:2f:9a:83:16:01:69:72:b4:88:c0:78: 2d:f1:e0:10:c7:7e:fd:e1:cf:d5:30:77:04:4b:3d: ef:9f:2b:45:29:e7:aa:1c:76:61:4d:a9:a0:77:d4: 13:07:e1:04:8d:c2:ff:b2:88:b9:82:01:a5:1e:d9: e2:27:b0:11:df:59:5b:3f:b0:a7:b0:a9:b8:cc:5a: ee:53:46:c6:7d:e0:33:ec:55:5c:88:cf:18:9b:ce: a3:c5:b6:f5:db:e0:e4:9b:d3:60:04:7f:9a:18:90: 2d:bc:64:c4:3b:4a:9a:0a:c0:43:67:84:32:17:8a: 71:01:0f:7c:cc:fb:85:24:5e:c2:1e:ef:c8:8b:cb: 08:38:f8:46:6a:ee:f7:6d:e4:ed:84:50:dc:4b:43: 31:fe:c6:78:f9:61:c7:8f:29:dd:f2:53:5b:78:a5: fa:9f:7c:49:12:1d:48:1d:cf:d7:d7:cf:27:91:af: d9:a8:40:57:dd:ed:8b:46:cf:d3:0f:6d:c8:3e:f0: de:59:03:4b:87:3a:f7:75:62:da:4e:30:72:a4:05: d4:60:18:8f:f0:d6:73:5c:71:6b:c5:9a:b8:9d:7f: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:A4:7C:74:B0:CA:46:BF:FD:FF:F0:7B:DF:46:69:F2:53:A5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec98616e-5338-37d0-9f50-607286ac1f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.65.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:90:23:a7:35:23:ce:09:d7:5d:60:a5:b2:1a:de:f4:b3:24: 52:8e:f6:98:e4:3c:be:8d:fb:ec:b6:26:59:bc:24:a4:56:9b: 1c:49:70:45:8c:21:2e:50:9a:51:84:14:62:66:bd:c9:df:ea: 86:af:19:56:a2:04:fe:b1:1a:a1:c9:1a:a4:76:dd:9a:ca:57: f3:59:fd:e0:5b:66:db:0e:14:c1:0d:98:50:23:b3:50:88:5a: dd:27:3d:dc:33:19:34:38:74:48:f3:80:bc:2c:58:0d:8b:b3: 50:e0:16:a2:b8:73:05:0d:cf:8f:db:76:b5:7f:c6:71:b8:86: 2f:cf:56:7f:03:05:88:b2:89:a8:81:a3:71:e4:84:6e:96:bb: 93:73:6a:05:8a:89:6b:6e:ff:c1:36:d0:e0:e6:2b:04:16:ea: 07:ab:79:ee:a5:95:e0:48:5d:72:67:62:bc:84:b6:eb:f1:03: a2:c4:fa:59:d2:a4:0e:5f:0d:0b:9a:c7:54:b2:52:b8:2f:e6: 48:61:ec:a9:90:15:4b:61:29:38:09:35:00:a3:47:6a:9f:6c: 1e:ec:2f:4a:6a:2a:73:ca:3d:71:73:0e:23:7e:52:01:bc:aa: e7:8f:20:df:96:d1:94:88:e5:f1:f4:be:44:d8:e4:bb:d9:d2: 3e:40:1b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz0AS4dQFvkrBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YWY4YzRmYjgtZWZlYi00NDdkLThlMzQtMmViODAwOTI0ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5wW38eMfehntC0ZKst9McgUKfvfVISQ8MRb 0RN8KarxL5qDFgFpcrSIwHgt8eAQx3794c/VMHcESz3vnytFKeeqHHZhTamgd9QT B+EEjcL/soi5ggGlHtniJ7AR31lbP7CnsKm4zFruU0bGfeAz7FVciM8Ym86jxbb1 2+Dkm9NgBH+aGJAtvGTEO0qaCsBDZ4QyF4pxAQ98zPuFJF7CHu/Ii8sIOPhGau73 beTthFDcS0Mx/sZ4+WHHjynd8lNbeKX6n3xJEh1IHc/X188nka/ZqEBX3e2LRs/T D23IPvDeWQNLhzr3dWLaTjBypAXUYBiP8NZzXHFrxZq4nX9i1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXvpHx0sMpGv/3/8HvfRmnyU6X7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWM5ODYxNmUtNTMzOC0z N2QwLTlmNTAtNjA3Mjg2YWMxZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeQI6c1I84J111gpbIa3vSzJFKO9pjkPL6N++y2Jlm8JKRWmxxJcEWM IS5QmlGEFGJmvcnf6oavGVaiBP6xGqHJGqR23ZrKV/NZ/eBbZtsOFMENmFAjs1CI Wt0nPdwzGTQ4dEjzgLwsWA2Ls1DgFqK4cwUNz4/bdrV/xnG4hi/PVn8DBYiyiaiB o3HkhG6Wu5NzagWKiWtu/8E20ODmKwQW6geree6lleBIXXJnYryEtuvxA6LE+lnS pA5fDQuax1SyUrgv5khh7KmQFUthKTgJNQCjR2qfbB7sL0pqKnPKPXFzDiN+UgG8 quePIN+W0ZSI5fH0vkTY5LvZ0j5AG2E= -----END CERTIFICATE-----Generated at Sat Sep 12 04:20:33 2026 by rpki-client