$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/33119594-9ffa-3850-8b8e-5576b73d9dc9.roa File: 33119594-9ffa-3850-8b8e-5576b73d9dc9.roa (raw, json) Hash identifier: CwtyVzH3mZUpjcw/D0+LX1hK8c83ClVpSdB0DnM3VA0= Subject key identifier: 63:FB:90:25:D7:B5:D4:F0:75:A6:00:51:0B:EA:DE:1F:D1:69:E1:F3 Certificate issuer: /CN=5ef6a41f-901e-44c6-b31a-bc960d9dfb5e Certificate serial: 010D0C9F4328584F9A6860E00EA7F492D0609680 Authority key identifier: D9:75:E8:4F:AB:94:2B:E8:D0:7B:51:B2:D0:F1:94:76:AA:07:5E:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/33119594-9ffa-3850-8b8e-5576b73d9dc9.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 402413 IP address blocks: 198.34.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:60:e0:0e:a7:f4:92:d0:60:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ef6a41f-901e-44c6-b31a-bc960d9dfb5e Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=d4d41757-643d-4865-937d-90a536e04992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:38:87:f4:1f:b1:c9:9f:cd:b6:bf:91:17: e8:87:fa:b7:c1:76:15:0d:1b:3e:9f:49:3e:ba:8f: 39:57:45:8d:a7:2f:45:2d:50:9e:91:d3:7e:65:0b: 5f:27:5e:a3:e7:45:3e:74:e3:85:16:71:d2:34:64: 92:47:e9:f7:ce:c8:cb:43:f6:62:62:0b:12:d7:03: a5:21:96:df:98:30:40:13:c3:39:d2:7b:79:eb:2a: 8b:44:a0:a4:c2:75:d8:e3:55:7d:78:f9:56:55:08: dd:b7:63:0e:2a:99:eb:c4:69:98:94:8b:0e:1a:57: 4d:de:83:7e:89:6f:67:94:2a:28:53:1b:09:34:b5: 28:72:09:d2:25:49:3a:bf:b4:84:bb:97:c6:ec:95: 05:ab:b5:42:92:83:0f:6b:69:7e:74:c6:e5:56:7f: 24:9d:64:33:c5:77:ba:93:02:1f:7e:1a:75:6b:e4: 15:73:b9:53:58:a9:cd:77:8c:0b:b7:4c:23:0f:7e: 95:c4:e1:9d:3c:d2:86:19:45:6e:0b:45:80:07:57: 07:78:48:42:27:66:c1:62:db:77:0c:c0:c0:45:93: fa:a1:35:5a:53:be:77:af:73:2e:b5:1d:d2:d1:fb: 62:70:f1:8c:71:01:e2:de:a2:5d:3f:a2:ab:52:be: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FB:90:25:D7:B5:D4:F0:75:A6:00:51:0B:EA:DE:1F:D1:69:E1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/33119594-9ffa-3850-8b8e-5576b73d9dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.crl X509v3 Authority Key Identifier: keyid:D9:75:E8:4F:AB:94:2B:E8:D0:7B:51:B2:D0:F1:94:76:AA:07:5E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer sbgp-ipAddrBlock: critical IPv4: 198.34.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:03:3a:9e:1c:16:34:ee:e5:dd:15:cf:67:89:0e:23:e0:83: ab:15:d2:6c:94:f5:bc:a4:ba:37:76:0c:ae:95:7b:9a:a8:ec: 83:73:8d:96:36:03:d9:0f:37:80:39:f2:04:12:f8:57:53:1f: 3a:1a:54:9e:c8:d5:26:43:5e:5b:cb:62:21:cc:42:5f:cb:30: 44:58:df:18:64:c3:0e:7c:45:0a:e0:00:bd:05:4d:eb:61:57: 70:84:28:3c:8a:fa:ab:9c:9b:49:c7:49:12:34:01:68:f6:4e: 80:06:2d:93:0f:91:65:4a:b3:20:45:7e:e0:a7:55:e6:d3:3f: 1b:b7:75:aa:ba:66:8d:f9:0d:14:17:0b:70:79:94:9f:34:af: c4:20:9e:5e:d9:8f:94:31:4f:24:e3:c4:b7:13:d8:04:0d:3b: 41:24:f8:51:b9:2a:78:2b:47:59:c3:0d:4b:8a:16:2c:e3:43: a4:57:3a:ab:c9:2c:af:df:d4:85:92:6b:24:44:ac:16:54:4a: ea:d3:bd:6d:f4:a5:67:c1:10:07:b6:27:4f:69:95:60:46:42: 77:74:bf:f4:34:32:f8:b4:31:ce:6f:ac:1c:95:17:54:6e:4c: 99:81:6b:91:2e:e5:48:2a:90:d8:6e:f4:6b:8e:c1:2c:6a:e5: 65:49:38:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGDgDqf0ktBgloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVmNmE0MWYtOTAxZS00NGM2LWIzMWEtYmM5NjBkOWRm YjVlMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDRkNDE3NTctNjQzZC00ODY1LTkzN2QtOTBhNTM2ZTA0OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG04h/Qfscmfzba/kRfoh/q3wXYVDRs+n0k+ uo85V0WNpy9FLVCekdN+ZQtfJ16j50U+dOOFFnHSNGSSR+n3zsjLQ/ZiYgsS1wOl IZbfmDBAE8M50nt56yqLRKCkwnXY41V9ePlWVQjdt2MOKpnrxGmYlIsOGldN3oN+ iW9nlCooUxsJNLUocgnSJUk6v7SEu5fG7JUFq7VCkoMPa2l+dMblVn8knWQzxXe6 kwIffhp1a+QVc7lTWKnNd4wLt0wjD36VxOGdPNKGGUVuC0WAB1cHeEhCJ2bBYtt3 DMDARZP6oTVaU753r3MutR3S0fticPGMcQHi3qJdP6KrUr4RdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP7kCXXtdTwdaYAUQvq3h/RaeHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZWY2 YTQxZi05MDFlLTQ0YzYtYjMxYS1iYzk2MGQ5ZGZiNWUvMzMxMTk1OTQtOWZmYS0z ODUwLThiOGUtNTU3NmI3M2Q5ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWVmNmE0MWYtOTAxZS00NGM2LWIz MWEtYmM5NjBkOWRmYjVlLzVlZjZhNDFmLTkwMWUtNDRjNi1iMzFhLWJjOTYwZDlk ZmI1ZS5jcmwwHwYDVR0jBBgwFoAU2XXoT6uUK+jQe1Gy0PGUdqoHXsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZWY2YTQxZi05MDFlLTQ0YzYtYjMxYS1iYzk2 MGQ5ZGZiNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMDOp4cFjTu5d0Vz2eJDiPgg6sV0myU9bykujd2DK6Ve5qo7INzjZY2 A9kPN4A58gQS+FdTHzoaVJ7I1SZDXlvLYiHMQl/LMERY3xhkww58RQrgAL0FTeth V3CEKDyK+qucm0nHSRI0AWj2ToAGLZMPkWVKsyBFfuCnVebTPxu3daq6Zo35DRQX C3B5lJ80r8Qgnl7Zj5QxTyTjxLcT2AQNO0Ek+FG5KngrR1nDDUuKFizjQ6RXOqvJ LK/f1IWSayRErBZUSurTvW30pWfBEAe2J09plWBGQnd0v/Q0Mvi0Mc5vrByVF1Ru TJmBa5Eu5UgqkNhu9GuOwSxq5WVJOCk= -----END CERTIFICATE-----Generated at Sat Oct 24 10:42:43 2026 by rpki-client