$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/238f6fe3-f2ce-3356-ba10-ff0d0b51f2d7.roa File: 238f6fe3-f2ce-3356-ba10-ff0d0b51f2d7.roa (raw, json) Hash identifier: +zOKDnv4GwkEKfZYGJ/N3xW1V+UgppPuKvf1rECoczw= Subject key identifier: AE:57:E3:07:5C:21:37:6C:29:6F:CB:17:54:EA:33:BC:E0:B8:76:4F Certificate issuer: /CN=863946c7-0487-4718-8fbe-aa36bf63ba90 Certificate serial: 010D0C9F4328584FA2C8753B6EADCDC83A27BF00 Authority key identifier: 48:7D:E3:BB:D5:A5:13:0F:C5:76:C6:92:D6:6B:D7:6F:86:EE:0A:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/238f6fe3-f2ce-3356-ba10-ff0d0b51f2d7.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 402114 IP address blocks: 199.202.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/863946c7-0487-4718-8fbe-aa36bf63ba90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/863946c7-0487-4718-8fbe-aa36bf63ba90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:75:3b:6e:ad:cd:c8:3a:27:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=863946c7-0487-4718-8fbe-aa36bf63ba90 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=eaee2d30-c8a4-4a5c-a44d-d027c3fa21cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:00:35:1a:ae:66:ba:b6:97:cb:c1:86:8e: a3:ad:5f:59:33:56:5f:7d:b4:ff:48:aa:45:0e:a2: a5:3c:c8:e5:24:87:71:00:03:f4:b9:7a:2a:99:9b: 79:ec:e1:0c:89:ad:40:d2:d7:7f:11:09:83:9d:da: e0:b6:44:19:12:10:d3:d9:6d:ca:81:0b:2b:e3:a0: af:b4:3f:af:8f:13:5b:bd:00:d6:14:41:f8:8f:d6: 06:c9:39:d1:fe:cc:97:21:68:43:d3:39:33:5e:dd: 5b:33:64:22:45:b5:ed:35:a4:a2:6d:d7:5a:72:2a: 2a:4c:53:08:2a:db:e4:db:f8:a6:0d:f2:fb:de:d1: 9b:68:df:16:13:d6:52:a6:b5:0b:d0:20:13:a1:46: c1:f4:34:1a:bd:69:2c:a3:01:26:e2:c4:4b:65:b6: f4:02:cb:95:a9:26:15:50:d3:2f:e4:ce:02:34:1c: 27:e5:a4:66:71:17:4d:92:8a:dd:75:d3:07:1a:5e: 6f:76:3c:d0:f5:8d:cb:0d:bc:e8:f7:b5:51:09:3d: 3a:d7:f6:c3:0c:fa:d7:a7:6e:70:2a:98:bc:34:53: e1:d4:70:42:c9:f0:a3:ed:87:81:fb:70:d1:0e:2b: 44:15:fa:91:81:b5:73:7a:98:60:de:26:46:41:9c: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:57:E3:07:5C:21:37:6C:29:6F:CB:17:54:EA:33:BC:E0:B8:76:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/238f6fe3-f2ce-3356-ba10-ff0d0b51f2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/863946c7-0487-4718-8fbe-aa36bf63ba90.crl X509v3 Authority Key Identifier: keyid:48:7D:E3:BB:D5:A5:13:0F:C5:76:C6:92:D6:6B:D7:6F:86:EE:0A:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90.cer sbgp-ipAddrBlock: critical IPv4: 199.202.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4f:67:f3:21:c4:75:b9:13:29:92:1e:8e:22:43:b0:10:dc: 7f:58:a6:9e:08:eb:9f:1a:0c:1e:6e:04:3a:28:34:95:9c:40: 4f:2e:34:d5:6d:f8:4f:ce:c9:4c:7e:f1:63:f2:dd:ad:6b:b7: 89:ad:63:8f:a8:a1:dc:c3:2c:a5:be:98:2a:ba:e6:82:67:d3: 18:4f:56:0b:09:94:ee:61:45:e8:b6:59:94:cc:ec:a2:35:8c: 3a:79:75:24:81:56:ca:90:41:4a:88:fd:69:4a:49:63:71:ad: be:fc:fb:70:a8:8e:f4:78:52:a5:74:93:ce:91:60:a6:9a:f6: 43:d5:72:0e:5b:44:89:dd:b8:d5:92:78:77:f1:ba:64:db:1e: df:df:70:ec:09:b9:a3:56:b9:eb:5e:d9:a8:2a:19:c0:14:5a: 1a:b9:ce:ea:92:6e:94:90:1c:a2:0a:9c:a8:54:da:ee:9a:1b: fb:b8:56:b2:23:56:11:26:75:79:6b:72:93:39:25:e0:06:e8: a1:e5:86:ea:ea:00:88:53:0d:77:0c:93:ed:d1:8d:21:f5:02: 9f:c2:7b:f0:f0:07:40:79:0e:8e:9b:41:9a:ed:64:21:18:78: 94:5a:3d:e5:47:c8:8b:41:3a:48:0e:8c:96:f5:51:11:bd:f0: af:08:9b:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHU7bq3NyDonvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYzOTQ2YzctMDQ4Ny00NzE4LThmYmUtYWEzNmJmNjNi YTkwMB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk ZWFlZTJkMzAtYzhhNC00YTVjLWE0NGQtZDAyN2MzZmEyMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl4ANRquZrq2l8vBho6jrV9ZM1ZffbT/SKpF DqKlPMjlJIdxAAP0uXoqmZt57OEMia1A0td/EQmDndrgtkQZEhDT2W3KgQsr46Cv tD+vjxNbvQDWFEH4j9YGyTnR/syXIWhD0zkzXt1bM2QiRbXtNaSibddacioqTFMI Ktvk2/imDfL73tGbaN8WE9ZSprUL0CAToUbB9DQavWksowEm4sRLZbb0AsuVqSYV UNMv5M4CNBwn5aRmcRdNkordddMHGl5vdjzQ9Y3LDbzo97VRCT061/bDDPrXp25w Kpi8NFPh1HBCyfCj7YeB+3DRDitEFfqRgbVzephg3iZGQZy1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5X4wdcITdsKW/LF1TqM7zguHZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84NjM5 NDZjNy0wNDg3LTQ3MTgtOGZiZS1hYTM2YmY2M2JhOTAvMjM4ZjZmZTMtZjJjZS0z MzU2LWJhMTAtZmYwZDBiNTFmMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODYzOTQ2YzctMDQ4Ny00NzE4LThm YmUtYWEzNmJmNjNiYTkwLzg2Mzk0NmM3LTA0ODctNDcxOC04ZmJlLWFhMzZiZjYz YmE5MC5jcmwwHwYDVR0jBBgwFoAUSH3ju9WlEw/FdsaS1mvXb4buCtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84NjM5NDZjNy0wNDg3LTQ3MTgtOGZiZS1hYTM2 YmY2M2JhOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8qZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANPZ/MhxHW5EymSHo4iQ7AQ3H9Ypp4I658aDB5uBDooNJWcQE8uNNVt +E/OyUx+8WPy3a1rt4mtY4+oodzDLKW+mCq65oJn0xhPVgsJlO5hRei2WZTM7KI1 jDp5dSSBVsqQQUqI/WlKSWNxrb78+3CojvR4UqV0k86RYKaa9kPVcg5bRInduNWS eHfxumTbHt/fcOwJuaNWuete2agqGcAUWhq5zuqSbpSQHKIKnKhU2u6aG/u4VrIj VhEmdXlrcpM5JeAG6KHlhurqAIhTDXcMk+3RjSH1Ap/Ce/DwB0B5Do6bQZrtZCEY eJRaPeVHyItBOkgOjJb1URG98K8Im8M= -----END CERTIFICATE-----Generated at Tue Oct 27 15:09:34 2026 by rpki-client