$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/c8ef99f3-92d4-3a92-8d24-b2b00f1f62ee.roa File: c8ef99f3-92d4-3a92-8d24-b2b00f1f62ee.roa (raw, json) Hash identifier: fyu3We2oVr/2XQMNNg2gTaFKW8TXoHUDvjur2nZqXuU= Subject key identifier: D5:BE:E4:8D:80:8E:09:4D:A6:2A:D2:A2:CD:C3:0E:42:28:A6:7A:11 Certificate issuer: /CN=903d8031-038f-4173-84c3-7662f2a30c5e Certificate serial: 010D0C9F4328584F783E591A78C37E049D6FA100 Authority key identifier: A7:33:51:BD:DE:D5:1D:97:AD:F1:E9:0D:D4:52:47:7B:36:7B:44:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/c8ef99f3-92d4-3a92-8d24-b2b00f1f62ee.roa Signing time: Sun 11 Oct 2026 19:18:05 +0000 ROA not before: Sun 11 Oct 2026 19:18:05 +0000 ROA not after: Sat 09 Jan 2027 20:18:05 +0000 asID: 20473 IP address blocks: 198.148.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/903d8031-038f-4173-84c3-7662f2a30c5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/903d8031-038f-4173-84c3-7662f2a30c5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:3e:59:1a:78:c3:7e:04:9d:6f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903d8031-038f-4173-84c3-7662f2a30c5e Validity Not Before: Oct 11 19:18:05 2026 GMT Not After : Jan 9 20:18:05 2027 GMT Subject: CN=babb4ff9-65ce-4fb2-9780-30eb9ad4cd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:86:58:d9:ef:26:37:f2:93:30:48:11:b2: d8:d0:47:cf:ce:77:19:23:a6:89:ed:40:ce:89:ba: d0:f8:7d:26:3c:52:16:86:e4:ad:af:5c:db:8e:40: d2:96:eb:4b:74:cf:b7:2e:f4:4c:50:73:1f:c9:c7: 58:13:23:1b:d6:03:9e:e1:15:e0:2f:f6:d2:4e:76: 6a:94:50:af:52:76:1c:48:b6:c4:13:03:69:ca:ec: 9a:2c:c2:96:e7:54:19:b5:2f:49:fd:04:59:60:ad: 5b:8d:65:a7:32:93:64:85:49:4d:d6:bc:dd:04:bd: be:28:e6:85:a3:69:cc:5c:64:22:22:04:c4:16:dc: 24:5e:da:20:bc:10:9e:86:4c:10:92:f0:b6:4c:42: bf:b9:3f:af:e6:8d:27:9b:98:93:45:79:57:7b:a0: dc:46:95:7b:0b:08:c5:54:c1:7a:0b:6b:60:3a:58: 73:dc:6b:db:c6:38:04:5b:9c:69:48:fe:4f:44:9d: 4b:60:8a:b4:60:cf:c1:2c:06:cb:b7:31:b8:cc:61: 15:f2:01:13:d0:3b:49:3e:2b:a8:8b:09:7d:7e:3e: b7:09:08:26:8d:a4:2c:1d:6e:92:83:63:10:70:a2: a8:63:3c:c4:d0:6a:64:e3:71:8b:de:f2:fd:c6:ec: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:E4:8D:80:8E:09:4D:A6:2A:D2:A2:CD:C3:0E:42:28:A6:7A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/c8ef99f3-92d4-3a92-8d24-b2b00f1f62ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/903d8031-038f-4173-84c3-7662f2a30c5e.crl X509v3 Authority Key Identifier: keyid:A7:33:51:BD:DE:D5:1D:97:AD:F1:E9:0D:D4:52:47:7B:36:7B:44:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e.cer sbgp-ipAddrBlock: critical IPv4: 198.148.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f6:e5:15:15:b2:23:43:88:fe:14:8a:ee:d5:9e:c4:37:00: e9:9f:ab:11:93:cc:e0:84:1e:da:ae:6f:26:b9:11:1a:8e:74: 1f:32:7a:9c:ac:96:7e:69:b2:29:37:92:64:96:f5:a2:56:c1: 3b:ff:2a:72:db:93:88:b2:d0:82:0d:5d:a9:d6:7c:41:94:82: 30:1b:c2:59:2e:fb:ad:39:9b:a7:55:a0:ed:c5:c1:b6:0e:aa: aa:c5:15:27:c3:df:3b:6c:58:27:06:56:43:52:c9:d4:a6:31: 81:6b:0c:4d:a4:ca:a2:1e:57:f9:8e:75:87:42:02:d7:07:9d: b1:38:0f:45:9f:f4:f6:76:e5:ba:61:f9:7c:bd:8c:b4:a1:c3: 09:3b:a6:29:51:4e:7b:69:56:56:fe:14:c8:7c:d0:43:df:d3: 88:b9:63:40:36:e4:b5:44:17:6e:fc:ff:f2:50:fc:9a:65:27: 8e:53:fb:50:9c:8d:5d:d5:88:ce:6d:85:30:a0:ee:28:32:c7: 71:44:e5:b4:69:de:aa:fd:54:2b:ab:2e:81:52:62:40:b7:e4: 53:2e:22:20:62:64:11:3c:71:c0:98:7d:13:b9:ad:af:2e:cc: 71:ef:8c:97:78:40:6e:76:47:dc:96:9a:4c:79:6b:e7:e3:08: ee:18:3f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE94PlkaeMN+BJ1voQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZDgwMzEtMDM4Zi00MTczLTg0YzMtNzY2MmYyYTMw YzVlMB4XDTI2MTAxMTE5MTgwNVoXDTI3MDEwOTIwMTgwNVowLzEtMCsGA1UEAxMk YmFiYjRmZjktNjVjZS00ZmIyLTk3ODAtMzBlYjlhZDRjZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnyGWNnvJjfykzBIEbLY0EfPzncZI6aJ7UDO ibrQ+H0mPFIWhuStr1zbjkDSlutLdM+3LvRMUHMfycdYEyMb1gOe4RXgL/bSTnZq lFCvUnYcSLbEEwNpyuyaLMKW51QZtS9J/QRZYK1bjWWnMpNkhUlN1rzdBL2+KOaF o2nMXGQiIgTEFtwkXtogvBCehkwQkvC2TEK/uT+v5o0nm5iTRXlXe6DcRpV7CwjF VMF6C2tgOlhz3GvbxjgEW5xpSP5PRJ1LYIq0YM/BLAbLtzG4zGEV8gET0DtJPiuo iwl9fj63CQgmjaQsHW6Sg2MQcKKoYzzE0Gpk43GL3vL9xuzO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW+5I2AjglNpirSos3DDkIopnoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85MDNk ODAzMS0wMzhmLTQxNzMtODRjMy03NjYyZjJhMzBjNWUvYzhlZjk5ZjMtOTJkNC0z YTkyLThkMjQtYjJiMDBmMWY2MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTAzZDgwMzEtMDM4Zi00MTczLTg0 YzMtNzY2MmYyYTMwYzVlLzkwM2Q4MDMxLTAzOGYtNDE3My04NGMzLTc2NjJmMmEz MGM1ZS5jcmwwHwYDVR0jBBgwFoAUpzNRvd7VHZet8ekN1FJHezZ7RDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85MDNkODAzMS0wMzhmLTQxNzMtODRjMy03NjYy ZjJhMzBjNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET25RUVsiNDiP4Uiu7VnsQ3AOmfqxGTzOCEHtqubya5ERqOdB8yepys ln5psik3kmSW9aJWwTv/KnLbk4iy0IINXanWfEGUgjAbwlku+605m6dVoO3FwbYO qqrFFSfD3ztsWCcGVkNSydSmMYFrDE2kyqIeV/mOdYdCAtcHnbE4D0Wf9PZ25bph +Xy9jLShwwk7pilRTntpVlb+FMh80EPf04i5Y0A25LVEF278//JQ/JplJ45T+1Cc jV3ViM5thTCg7igyx3FE5bRp3qr9VCurLoFSYkC35FMuIiBiZBE8ccCYfRO5ra8u zHHvjJd4QG52R9yWmkx5a+fjCO4YP+s= -----END CERTIFICATE-----Generated at Sun Oct 25 14:32:28 2026 by rpki-client