$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb2e526c-f662-3291-962b-03a35db64e17.roa File: fb2e526c-f662-3291-962b-03a35db64e17.roa (raw, json) Hash identifier: ksvQfoFgSgfhBeih7pNcMoASCAtrKS15vK/Uc6UcJeE= Subject key identifier: 94:EC:39:79:57:33:A7:E3:87:D8:A0:C6:91:F7:0D:92:90:EF:FB:B4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F7D346B6518C771E507753400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb2e526c-f662-3291-962b-03a35db64e17.roa Signing time: Tue 13 Oct 2026 13:57:07 +0000 ROA not before: Tue 13 Oct 2026 13:57:07 +0000 ROA not after: Wed 06 Jan 2027 18:30:16 +0000 asID: 5089 IP address blocks: 198.84.16.0/20 maxlen: 24 198.87.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:34:6b:65:18:c7:71:e5:07:75:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 13 13:57:07 2026 GMT Not After : Jan 6 18:30:16 2027 GMT Subject: CN=4cbe59d2-4b4e-4524-a57e-789ffcb3ab2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:45:70:87:43:ce:66:40:59:5c:61:f6:fb: 7b:c2:9c:8c:59:99:5a:cd:2e:3b:32:d9:3c:a6:59: b4:0d:bd:3c:aa:88:d5:bc:22:9a:3d:ff:91:ba:1a: 79:07:59:59:91:1f:90:9e:a7:5f:f3:37:ee:1f:2e: 21:3d:46:7d:b6:49:36:28:f7:c8:f3:b0:c5:29:ff: e4:a5:c8:3b:ce:b5:b9:e2:81:82:3b:04:1e:97:41: 12:57:42:70:ea:11:68:e0:67:d9:1a:4c:21:a2:d5: b2:0c:e0:fe:57:f9:9a:be:a8:d3:ab:f8:ad:77:81: 01:a8:ef:03:63:da:9a:48:16:90:02:a6:5f:f1:12: d3:aa:a5:02:a9:75:a9:a3:ac:17:fd:54:a2:fd:8d: 84:df:fe:cc:d2:8e:7f:df:cf:ca:68:38:69:f9:11: 12:8d:5c:8a:ac:79:4e:17:c6:aa:5c:b3:9c:15:8b: b4:3b:53:ec:38:3e:83:2b:66:61:8b:c9:d7:76:28: 91:73:70:d6:69:0d:32:b5:23:64:86:f3:55:59:1b: 47:f9:6d:3e:7d:fb:63:a6:ec:07:cc:07:28:27:9c: 72:d2:cf:6e:df:a2:48:e3:33:f5:17:e1:f8:aa:4d: 32:b1:95:95:2f:37:b3:fc:18:74:7d:ab:ee:24:c4: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:39:79:57:33:A7:E3:87:D8:A0:C6:91:F7:0D:92:90:EF:FB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb2e526c-f662-3291-962b-03a35db64e17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.84.16.0/20 198.87.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0d:e4:4a:b9:40:51:ed:75:76:d5:af:7d:75:8e:f4:9e:aa: e2:c1:e1:12:2e:bd:80:cf:5b:54:da:c1:8d:3d:d9:ac:0d:09: 13:ba:a5:34:c5:b0:d1:83:c8:25:df:40:b1:f7:54:6e:fd:f1: 05:22:5d:b4:b1:4e:c4:b6:84:cb:79:f9:61:16:53:43:77:80: d5:39:57:c0:58:8c:98:ba:1c:9e:9e:c3:82:1c:c8:4a:3a:1f: f3:ce:44:4a:bd:6a:a9:58:09:51:df:1d:0b:77:f9:32:d6:c0: 68:82:50:58:db:b9:04:80:7b:ea:ff:15:85:ca:b4:7f:31:f8: b6:9c:7f:af:b6:34:4f:c2:8c:9f:15:3f:53:92:76:41:09:7b: 50:ae:0f:5f:46:09:ee:55:1f:21:09:12:00:50:38:5e:52:8c: 34:03:c4:30:43:86:e2:e8:e5:bd:ba:95:32:45:ff:8d:cc:a7: 1a:a5:cd:c6:db:b5:d4:81:db:5a:88:9f:72:b4:23:1a:b1:90: 0f:e9:fd:07:70:f9:6d:56:28:80:57:2b:dd:21:25:72:1b:5c: 4c:50:49:ab:61:97:3a:05:66:50:af:02:d5:67:9a:5d:74:fa: aa:b9:13:e8:9e:4f:fe:a9:08:5d:c4:0d:f9:4d:79:6f:15:a8: 14:8d:75:71 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE99NGtlGMdx5Qd1NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAxMzEzNTcwN1oXDTI3MDEwNjE4MzAxNlowLzEtMCsGA1UEAxMk NGNiZTU5ZDItNGI0ZS00NTI0LWE1N2UtNzg5ZmZjYjNhYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltBFcIdDzmZAWVxh9vt7wpyMWZlazS47Mtk8 plm0Db08qojVvCKaPf+Ruhp5B1lZkR+Qnqdf8zfuHy4hPUZ9tkk2KPfI87DFKf/k pcg7zrW54oGCOwQel0ESV0Jw6hFo4GfZGkwhotWyDOD+V/mavqjTq/itd4EBqO8D Y9qaSBaQAqZf8RLTqqUCqXWpo6wX/VSi/Y2E3/7M0o5/38/KaDhp+RESjVyKrHlO F8aqXLOcFYu0O1PsOD6DK2Zhi8nXdiiRc3DWaQ0ytSNkhvNVWRtH+W0+fftjpuwH zAcoJ5xy0s9u36JI4zP1F+H4qk0ysZWVLzez/Bh0favuJMRxlQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJTsOXlXM6fjh9igxpH3DZKQ7/u0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmIyZTUyNmMtZjY2Mi0z MjkxLTk2MmItMDNhMzVkYjY0ZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQExlQQAwQE xldwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABQN5Eq5QFHtdXbVr311jvSequLB4RIuvYDPW1TawY092awN CRO6pTTFsNGDyCXfQLH3VG798QUiXbSxTsS2hMt5+WEWU0N3gNU5V8BYjJi6HJ6e w4IcyEo6H/POREq9aqlYCVHfHQt3+TLWwGiCUFjbuQSAe+r/FYXKtH8x+Lacf6+2 NE/CjJ8VP1OSdkEJe1CuD19GCe5VHyEJEgBQOF5SjDQDxDBDhuLo5b26lTJF/43M pxqlzcbbtdSB21qIn3K0IxqxkA/p/Qdw+W1WKIBXK90hJXIbXExQSathlzoFZlCv AtVnml10+qq5E+ieT/6pCF3EDflNeW8VqBSNdXE= -----END CERTIFICATE-----Generated at Mon Oct 19 07:31:28 2026 by rpki-client