$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/601c9bb5-1ad0-3b0b-a66a-274b5c622da9.roa File: 601c9bb5-1ad0-3b0b-a66a-274b5c622da9.roa (raw, json) Hash identifier: ygYI7m4d0Z0uLSGylCsmioNGon1e6ACnvO0whyo94yo= Subject key identifier: A2:DA:B5:9A:B0:32:89:B0:07:D2:20:48:E4:10:B5:BC:2C:06:6A:D4 Certificate issuer: /CN=ace38bc8-18be-4d46-9e19-5f82b50dc818 Certificate serial: 010D0C9F4328584F0ED22E7031662575164D3D80 Authority key identifier: 95:42:92:F6:8A:A7:EF:54:CC:7C:AD:E2:42:E2:08:A3:C2:D7:C0:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/601c9bb5-1ad0-3b0b-a66a-274b5c622da9.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 54847 IP address blocks: 198.144.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2e:70:31:66:25:75:16:4d:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace38bc8-18be-4d46-9e19-5f82b50dc818 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=a71a173f-57aa-4da1-887f-5d5a6d104ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a7:11:1f:79:cf:ea:c8:29:b8:47:ac:d1:d9: 02:c5:2b:87:1d:96:a2:e2:f7:f3:fe:60:64:3b:2a: b9:be:89:c3:23:2b:9f:21:23:eb:31:28:b5:49:dc: 98:1e:ef:a9:fd:09:7a:93:f9:42:ac:ff:fc:6b:92: 79:a3:1b:86:68:16:fa:8b:43:77:19:08:e3:2e:c9: e9:96:93:37:9e:88:b4:5d:ad:d0:a0:3e:8a:72:21: c4:6c:63:94:e4:20:5a:5b:28:d7:ba:9b:a1:44:62: 58:b4:d8:fc:9a:e2:e7:86:c9:83:73:24:1b:30:f3: fd:59:38:e7:e3:34:4b:cf:61:76:ff:d3:bb:c3:eb: 45:a7:2f:d8:1c:bd:be:3b:a0:b6:f0:d7:fc:a1:a1: 10:48:0e:c4:04:32:0a:d4:9a:1d:71:76:10:b3:ae: 9d:c9:1d:03:dd:35:c0:0b:e7:9c:f9:5a:5d:fc:f8: 9e:4c:92:6a:41:6e:48:ae:79:66:1b:1e:59:2b:18: 95:45:13:72:d5:1c:59:51:be:9b:10:00:79:6e:05: 25:8e:3f:11:26:81:d6:9b:94:49:d4:1a:f1:d1:4c: 1c:29:35:83:50:cf:86:d4:62:af:fe:1c:2e:e5:49: d1:38:cf:aa:24:4b:22:98:56:1b:ec:bc:c8:82:88: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:B5:9A:B0:32:89:B0:07:D2:20:48:E4:10:B5:BC:2C:06:6A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/601c9bb5-1ad0-3b0b-a66a-274b5c622da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.crl X509v3 Authority Key Identifier: keyid:95:42:92:F6:8A:A7:EF:54:CC:7C:AD:E2:42:E2:08:A3:C2:D7:C0:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer sbgp-ipAddrBlock: critical IPv4: 198.144.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:47:62:f0:b7:5d:8d:03:fa:11:7f:eb:dd:72:0a:37:43:05: 75:1a:73:91:8b:40:0e:b5:14:9d:89:4a:a3:40:50:51:68:af: 5e:01:b3:9b:15:58:3c:22:6c:e4:7a:f2:88:e4:48:cd:9e:80: f0:7b:dc:9d:7f:b1:f0:b7:b4:4e:57:97:33:37:30:67:8e:5a: a1:db:99:6a:d3:4f:c7:8a:0d:90:88:d1:f1:eb:af:f2:d1:42: a0:d8:62:95:9a:77:53:dd:3b:71:6c:1b:f6:13:f6:de:12:d7: c6:6b:2f:9e:36:20:d7:3b:38:d0:0c:14:63:90:23:cd:ab:16: 42:d6:e2:b8:a4:11:cd:4f:f2:3b:8a:21:f8:6f:9f:87:bd:cb: 29:0d:88:0a:a2:e8:92:a7:1f:7c:20:75:28:d0:29:2f:db:e0: 0b:2f:5f:d2:66:e3:45:4d:98:ee:19:0b:e8:a8:8d:56:65:5d: fb:18:95:7a:05:4d:29:3d:3a:e3:77:44:ff:83:70:c7:07:a5: 49:ed:2a:8f:03:ab:b5:d6:6f:1d:2b:6e:3d:4f:45:4c:5b:c6: 44:a0:e0:55:f2:9d:95:55:b7:94:b2:18:62:b0:ee:ba:d5:4a: 6f:98:75:7e:a3:69:ec:eb:17:f6:e2:5f:22:5a:bd:62:aa:c2: b9:98:a8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0i5wMWYldRZNPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNlMzhiYzgtMThiZS00ZDQ2LTllMTktNWY4MmI1MGRj ODE4MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTcxYTE3M2YtNTdhYS00ZGExLTg4N2YtNWQ1YTZkMTA0YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6cRH3nP6sgpuEes0dkCxSuHHZai4vfz/mBk Oyq5vonDIyufISPrMSi1SdyYHu+p/Ql6k/lCrP/8a5J5oxuGaBb6i0N3GQjjLsnp lpM3noi0Xa3QoD6KciHEbGOU5CBaWyjXupuhRGJYtNj8muLnhsmDcyQbMPP9WTjn 4zRLz2F2/9O7w+tFpy/YHL2+O6C28Nf8oaEQSA7EBDIK1JodcXYQs66dyR0D3TXA C+ec+Vpd/PieTJJqQW5IrnlmGx5ZKxiVRRNy1RxZUb6bEAB5bgUljj8RJoHWm5RJ 1Brx0UwcKTWDUM+G1GKv/hwu5UnROM+qJEsimFYb7LzIgohdSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLatZqwMomwB9IgSOQQtbwsBmrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hY2Uz OGJjOC0xOGJlLTRkNDYtOWUxOS01ZjgyYjUwZGM4MTgvNjAxYzliYjUtMWFkMC0z YjBiLWE2NmEtMjc0YjVjNjIyZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWNlMzhiYzgtMThiZS00ZDQ2LTll MTktNWY4MmI1MGRjODE4L2FjZTM4YmM4LTE4YmUtNGQ0Ni05ZTE5LTVmODJiNTBk YzgxOC5jcmwwHwYDVR0jBBgwFoAUlUKS9oqn71TMfK3iQuIIo8LXwFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hY2UzOGJjOC0xOGJlLTRkNDYtOWUxOS01Zjgy YjUwZGM4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJHYvC3XY0D+hF/691yCjdDBXUac5GLQA61FJ2JSqNAUFFor14Bs5sV WDwibOR68ojkSM2egPB73J1/sfC3tE5XlzM3MGeOWqHbmWrTT8eKDZCI0fHrr/LR QqDYYpWad1PdO3FsG/YT9t4S18ZrL542INc7ONAMFGOQI82rFkLW4rikEc1P8juK Ifhvn4e9yykNiAqi6JKnH3wgdSjQKS/b4AsvX9Jm40VNmO4ZC+iojVZlXfsYlXoF TSk9OuN3RP+DcMcHpUntKo8Dq7XWbx0rbj1PRUxbxkSg4FXynZVVt5SyGGKw7rrV Sm+YdX6jaezrF/biXyJavWKqwrmYqJ8= -----END CERTIFICATE-----Generated at Fri Sep 4 23:53:26 2026 by rpki-client