$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa File: a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa (raw, json) Hash identifier: qtFatKii+v4PIobsD+5v4CguYr6sO0HNaQ9ON1APwKI= Subject key identifier: C5:A7:2A:29:F4:A1:89:8B:2A:97:2D:A3:DE:3E:F1:F6:4C:06:C5:47 Certificate issuer: /CN=5398a1dc-9144-466a-9218-fa7b21ae09de Certificate serial: 010D0C9F4328584F9BCDE340D298D45A10272080 Authority key identifier: 0B:49:AB:F1:0B:38:9E:1E:04:D0:74:70:79:D8:B6:94:88:7D:0C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 16939 IP address blocks: 199.101.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e3:40:d2:98:d4:5a:10:27:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398a1dc-9144-466a-9218-fa7b21ae09de Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=02573af5-c675-4e99-9301-8eacea776d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:06:b8:b9:e5:53:52:ae:eb:f6:b0:a6:d2: 0c:a6:66:8f:29:d6:f1:6d:0f:c9:60:1d:f5:37:77: 4d:21:10:eb:09:5e:e5:97:26:69:9e:04:fc:f1:12: d5:5d:ae:cd:77:17:cf:04:e8:54:79:ef:6e:2b:86: 80:aa:d8:6c:8e:eb:27:80:8a:f0:bd:a9:ad:30:c2: b4:86:58:17:e8:59:94:32:4c:21:7b:8f:87:c5:43: 0a:94:77:70:de:99:95:ed:0f:17:5b:5d:17:c7:2f: 1a:bd:5b:fe:08:22:89:b4:4b:27:14:4e:a6:df:98: f6:78:9d:f5:29:75:af:94:6d:97:ed:d8:9c:99:b3: 00:20:f2:5e:e3:2b:34:7f:91:3a:db:06:c6:50:95: b5:6f:42:dc:d7:15:41:10:73:10:c5:f1:75:c7:9c: 83:2e:de:90:5a:f1:07:78:c4:98:7f:7e:a0:1a:14: 7f:78:f7:ca:ef:66:29:1c:5c:6b:eb:9c:96:25:a8: 9a:7f:fc:70:3f:2c:a7:5e:e0:bf:e2:87:fa:ff:d8: 67:39:d4:bd:78:41:5d:ef:ad:de:7a:47:c7:a3:79: b8:68:2f:26:97:40:c7:71:67:d1:4b:62:4d:89:15: 1c:54:23:87:b2:98:21:26:50:11:82:c8:cd:fd:f5: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:2A:29:F4:A1:89:8B:2A:97:2D:A3:DE:3E:F1:F6:4C:06:C5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.crl X509v3 Authority Key Identifier: keyid:0B:49:AB:F1:0B:38:9E:1E:04:D0:74:70:79:D8:B6:94:88:7D:0C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer sbgp-ipAddrBlock: critical IPv4: 199.101.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:dd:ee:8f:0e:f9:a2:c1:9f:16:32:80:24:b6:b1:33:d3:e9: 2b:f5:6d:ee:49:57:2b:f3:e2:da:a1:bf:9b:e9:ff:11:a6:53: ce:96:3d:cc:08:3b:53:ce:d0:91:09:ef:21:2d:94:7c:39:59: 25:40:be:8f:07:d9:a9:eb:f4:6e:60:de:8f:b3:33:0c:a7:37: 61:78:cd:19:79:4a:96:9d:9a:9d:31:b2:ea:79:23:fb:10:23: be:d6:be:e0:75:97:ec:da:21:79:fe:88:20:c9:c4:bd:3b:0a: 7b:2e:91:56:b3:98:22:0c:8c:75:4c:43:a6:1f:5e:90:44:f8: 09:8b:82:bb:85:5e:ec:57:a9:54:cd:b1:4e:97:c8:fa:b9:cf: 4c:78:24:06:36:52:e1:73:f6:1e:ab:ac:0d:79:29:96:9f:81: c1:86:3b:40:ed:5b:ff:c4:e3:f3:3d:7c:75:b2:ff:28:60:7d: 8c:3e:59:09:49:0b:9b:8b:cb:1f:51:aa:96:6e:8e:e5:3f:cf: 00:49:45:c3:a2:dd:25:d6:ee:79:c7:15:68:ab:8e:ca:fe:be: f2:7e:76:3d:92:fe:ff:ca:73:3d:b7:0d:78:c5:14:bf:d6:70: 0b:f3:8b:59:18:b4:68:15:7f:68:c4:cb:c4:46:15:4d:e8:07: 13:96:ff:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeNA0pjUWhAnIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTM5OGExZGMtOTE0NC00NjZhLTkyMTgtZmE3YjIxYWUw OWRlMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MDI1NzNhZjUtYzY3NS00ZTk5LTkzMDEtOGVhY2VhNzc2ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8kGuLnlU1Ku6/awptIMpmaPKdbxbQ/JYB31 N3dNIRDrCV7llyZpngT88RLVXa7NdxfPBOhUee9uK4aAqthsjusngIrwvamtMMK0 hlgX6FmUMkwhe4+HxUMKlHdw3pmV7Q8XW10Xxy8avVv+CCKJtEsnFE6m35j2eJ31 KXWvlG2X7dicmbMAIPJe4ys0f5E62wbGUJW1b0Lc1xVBEHMQxfF1x5yDLt6QWvEH eMSYf36gGhR/ePfK72YpHFxr65yWJaiaf/xwPyynXuC/4of6/9hnOdS9eEFd763e ekfHo3m4aC8ml0DHcWfRS2JNiRUcVCOHspghJlARgsjN/fWTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWnKin0oYmLKpcto94+8fZMBsVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81Mzk4 YTFkYy05MTQ0LTQ2NmEtOTIxOC1mYTdiMjFhZTA5ZGUvYTM3NWExMTItNzBlYS0z ZDk0LWFkMDAtZDdiN2I4YjZlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTM5OGExZGMtOTE0NC00NjZhLTky MTgtZmE3YjIxYWUwOWRlLzUzOThhMWRjLTkxNDQtNDY2YS05MjE4LWZhN2IyMWFl MDlkZS5jcmwwHwYDVR0jBBgwFoAUC0mr8Qs4nh4E0HRwedi2lIh9DOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81Mzk4YTFkYy05MTQ0LTQ2NmEtOTIxOC1mYTdi MjFhZTA5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfd7o8O+aLBnxYygCS2sTPT6Sv1be5JVyvz4tqhv5vp/xGmU86WPcwI O1PO0JEJ7yEtlHw5WSVAvo8H2anr9G5g3o+zMwynN2F4zRl5Spadmp0xsup5I/sQ I77WvuB1l+zaIXn+iCDJxL07CnsukVazmCIMjHVMQ6YfXpBE+AmLgruFXuxXqVTN sU6XyPq5z0x4JAY2UuFz9h6rrA15KZafgcGGO0DtW//E4/M9fHWy/yhgfYw+WQlJ C5uLyx9RqpZujuU/zwBJRcOi3SXW7nnHFWirjsr+vvJ+dj2S/v/Kcz23DXjFFL/W cAvzi1kYtGgVf2jEy8RGFU3oBxOW/84= -----END CERTIFICATE-----Generated at Wed Oct 28 14:18:47 2026 by rpki-client