$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa File: 88190764-9983-3779-9082-f64dccc70d7a.roa (raw, json) Hash identifier: msEqXOmLNPXJEpgHVAfS4y848UP/DkJsgnzJxhu6ijg= Subject key identifier: AA:52:0E:DC:EF:D2:F6:96:08:E3:4E:8E:09:DC:A8:5F:2F:AE:A6:E7 Certificate issuer: /CN=6201e8e9-68e9-43e6-bed0-be51611bbda8 Certificate serial: 010D0C9F4328584F9BCDC5582B3DA81BBB3D4060 Authority key identifier: 02:26:3E:29:63:4F:E3:A5:E8:6C:C3:C4:0F:89:3E:ED:9E:AA:49:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 399541 IP address blocks: 198.45.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c5:58:2b:3d:a8:1b:bb:3d:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6201e8e9-68e9-43e6-bed0-be51611bbda8 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=2f2291f8-1780-4490-baa0-1f676de62dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:96:b1:da:f8:55:68:3d:1a:27:35:ac:2a:1f: 2b:6d:66:47:a2:2b:29:66:48:14:53:61:ed:5e:88: 2b:e7:24:79:86:a2:81:c4:f4:2a:cc:1c:1f:08:2f: 8c:4b:cd:f7:ba:c7:72:e0:29:15:df:a4:5a:32:2d: 5b:05:d5:20:51:67:73:f5:f4:4f:4b:9a:21:7b:78: 03:37:0b:13:fc:23:bb:99:4d:33:fc:61:90:7d:26: 3a:64:9a:c6:59:1c:da:53:54:8a:ca:68:29:95:f0: 99:f4:e2:f7:e2:f8:b6:d0:3f:5c:2e:e4:9e:0d:73: 4a:ba:e4:cb:bd:53:75:68:94:1e:28:7b:69:94:ed: 9e:b1:7f:b0:ae:b2:5a:39:10:21:7a:c7:75:6c:eb: fe:b4:df:20:75:28:ec:7e:95:16:d1:ab:e8:2a:9a: e1:51:ad:c5:ba:e9:5b:ba:cd:ef:b0:b3:f5:bd:d0: 27:91:b8:5c:ab:09:d9:5b:23:e3:66:41:ba:ff:41: b7:f7:06:30:2f:9a:e8:54:62:de:7c:d0:5f:d7:76: 5e:d5:ed:e7:30:ee:04:8e:94:ee:f2:ef:3d:8a:91: 40:2b:40:85:77:53:66:cc:47:07:08:38:3b:d6:0c: 29:f5:47:6f:9c:b8:81:fa:82:60:c1:8d:d9:15:46: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:52:0E:DC:EF:D2:F6:96:08:E3:4E:8E:09:DC:A8:5F:2F:AE:A6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.crl X509v3 Authority Key Identifier: keyid:02:26:3E:29:63:4F:E3:A5:E8:6C:C3:C4:0F:89:3E:ED:9E:AA:49:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer sbgp-ipAddrBlock: critical IPv4: 198.45.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:93:de:c1:f2:c5:ba:14:cc:fc:c5:35:00:26:d9:64:9b:fb: a9:c8:84:39:6a:66:0c:88:56:fc:c2:ee:48:46:25:de:4a:2b: 6c:1c:ce:48:6d:90:e2:1a:d3:a7:82:e0:03:08:a9:ee:37:18: 5b:53:db:96:dd:fe:2b:b3:aa:c8:b7:ba:1f:3f:1b:00:03:75: c6:cf:90:3b:d4:70:e9:fc:1a:91:e5:83:0d:5d:67:e6:36:be: 3b:31:94:81:8f:c4:c0:1f:35:87:c6:3a:d4:0b:92:98:75:11: 5e:12:bf:f1:d8:d0:f6:79:06:f0:f3:d3:90:2c:80:36:43:f6: 7a:a9:ac:85:e6:81:d1:98:e2:4c:25:c3:52:b1:0b:56:67:c5: c0:eb:68:0a:3c:92:b9:65:ab:f8:01:ed:2d:62:c1:e0:60:d0: 4e:51:9e:1e:fd:36:fb:db:a7:93:ef:63:6a:32:8d:cf:9d:f3: a1:a3:4b:c2:01:66:92:de:d1:19:8b:75:e8:8f:88:da:d0:c5: 67:90:d6:07:84:a3:15:96:05:73:55:8f:6f:e7:52:85:72:58: 18:9c:7d:e5:15:59:49:ce:e1:cd:a7:a4:e3:40:13:f6:69:84: 90:7e:6c:86:20:f3:82:65:f0:30:ac:ac:a4:4c:11:25:37:07: ae:e4:ba:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcVYKz2oG7s9QGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIwMWU4ZTktNjhlOS00M2U2LWJlZDAtYmU1MTYxMWJi ZGE4MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MmYyMjkxZjgtMTc4MC00NDkwLWJhYTAtMWY2NzZkZTYyZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ax2vhVaD0aJzWsKh8rbWZHoispZkgUU2Ht Xogr5yR5hqKBxPQqzBwfCC+MS833usdy4CkV36RaMi1bBdUgUWdz9fRPS5ohe3gD NwsT/CO7mU0z/GGQfSY6ZJrGWRzaU1SKymgplfCZ9OL34vi20D9cLuSeDXNKuuTL vVN1aJQeKHtplO2esX+wrrJaORAhesd1bOv+tN8gdSjsfpUW0avoKprhUa3Fuulb us3vsLP1vdAnkbhcqwnZWyPjZkG6/0G39wYwL5roVGLefNBf13Ze1e3nMO4EjpTu 8u89ipFAK0CFd1NmzEcHCDg71gwp9UdvnLiB+oJgwY3ZFUbPaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpSDtzv0vaWCONOjgncqF8vrqbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82MjAx ZThlOS02OGU5LTQzZTYtYmVkMC1iZTUxNjExYmJkYTgvODgxOTA3NjQtOTk4My0z Nzc5LTkwODItZjY0ZGNjYzcwZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjIwMWU4ZTktNjhlOS00M2U2LWJl ZDAtYmU1MTYxMWJiZGE4LzYyMDFlOGU5LTY4ZTktNDNlNi1iZWQwLWJlNTE2MTFi YmRhOC5jcmwwHwYDVR0jBBgwFoAUAiY+KWNP46XobMPED4k+7Z6qSb8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82MjAxZThlOS02OGU5LTQzZTYtYmVkMC1iZTUx NjExYmJkYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxi14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWT3sHyxboUzPzFNQAm2WSb+6nIhDlqZgyIVvzC7khGJd5KK2wczkht kOIa06eC4AMIqe43GFtT25bd/iuzqsi3uh8/GwADdcbPkDvUcOn8GpHlgw1dZ+Y2 vjsxlIGPxMAfNYfGOtQLkph1EV4Sv/HY0PZ5BvDz05AsgDZD9nqprIXmgdGY4kwl w1KxC1ZnxcDraAo8krllq/gB7S1iweBg0E5Rnh79Nvvbp5PvY2oyjc+d86GjS8IB ZpLe0RmLdeiPiNrQxWeQ1geEoxWWBXNVj2/nUoVyWBicfeUVWUnO4c2npONAE/Zp hJB+bIYg84Jl8DCsrKRMESU3B67kukY= -----END CERTIFICATE-----Generated at Tue Oct 27 17:33:24 2026 by rpki-client