$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa File: 625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa (raw, json) Hash identifier: gH8yJa9wTItsDZukWrQF5JhHR/w0p9znsiN9rUUOhgI= Subject key identifier: CF:95:B0:A6:6C:7F:18:07:99:CE:DE:62:0D:D6:29:D5:ED:11:C5:0C Certificate issuer: /CN=b8e4e496-994f-4877-8328-aec6386bbc01 Certificate serial: 010D0C9F4328584F86DDB0478852B804A77D6C00 Authority key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 10662 IP address blocks: 198.62.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:b0:47:88:52:b8:04:a7:7d:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4e496-994f-4877-8328-aec6386bbc01 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=8938b883-7a1d-4e81-874e-931e69f7dca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:b4:9c:e2:28:51:01:1e:0c:4f:96:f9:88: df:85:b9:26:bc:99:59:4e:40:92:92:38:1c:b8:9d: 61:fd:71:b6:45:f3:ed:22:c5:44:aa:a1:34:e9:05: db:1e:cd:1f:22:50:d6:c3:5e:94:6b:ee:f9:78:a4: c4:a9:1c:6b:dd:56:de:03:3a:29:b4:00:ae:97:27: 4b:64:ee:08:f3:0d:04:8f:6d:02:91:c4:37:58:fa: 55:1c:9a:45:87:1b:15:f0:61:3e:16:fa:43:ef:34: 46:69:0c:0a:3b:61:74:f5:58:96:7d:fd:01:3c:93: 45:39:41:06:f0:b9:99:46:d8:45:30:84:fe:74:7d: 29:33:46:c9:11:34:c2:6b:75:94:8f:5d:bd:39:a5: 94:fc:e7:63:de:8d:65:d7:de:15:88:3b:44:3d:9e: cc:a7:ca:99:71:a1:b0:db:7d:26:4e:f0:ab:53:4a: 82:0b:38:2e:41:a4:3a:8d:30:50:06:e6:9c:e5:e5: 96:6e:9c:c4:25:94:e0:09:9b:54:6b:60:62:5f:42: 95:10:ea:ec:76:14:d3:48:22:fd:f8:17:1c:c1:81: 92:eb:ea:f3:a8:00:4a:9f:0d:de:05:49:fb:bf:94: 6a:d1:94:25:9d:58:91:28:be:3d:ba:bb:c5:b3:2b: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:95:B0:A6:6C:7F:18:07:99:CE:DE:62:0D:D6:29:D5:ED:11:C5:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/625f129d-c0d1-3533-bbd1-eeda0cf1ce4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl X509v3 Authority Key Identifier: keyid:4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer sbgp-ipAddrBlock: critical IPv4: 198.62.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:19:1b:67:84:ca:46:6e:bd:23:d3:bd:41:6d:af:d2:82:4e: 3a:21:82:42:23:f7:23:5a:51:b2:fa:07:3c:f3:49:35:4f:1e: 98:0f:91:cc:65:0f:f9:be:b0:72:d0:55:40:fa:f2:19:68:43: 87:72:b8:43:b2:69:a2:30:02:ff:2e:df:22:75:0f:b0:b5:6b: 9a:85:85:20:17:c3:07:ff:68:7e:31:59:45:f0:a1:0d:a6:d3: 31:01:60:8e:7b:11:62:76:b3:7b:87:e4:d1:85:90:59:6a:91: bb:88:50:00:ca:d6:99:76:1c:3d:9f:82:b4:50:60:7b:b3:25: b1:b5:fd:65:cb:08:cc:74:77:19:a4:44:eb:bb:a1:64:1e:b7: 89:42:7f:2b:2a:a2:b4:fb:d1:da:a2:e2:eb:97:34:9b:cc:26: fa:eb:32:d4:e6:00:d1:17:a5:e5:cb:e9:20:cb:50:4c:df:15: c1:3f:ae:a3:6e:7d:9a:1c:b1:c6:2f:83:02:54:c1:12:01:69: dd:c7:03:a1:f3:3f:9a:67:7c:1c:2e:32:bb:a2:6c:92:30:e6: 3b:c4:ee:40:28:7a:59:f9:65:9e:44:5b:52:57:20:c5:8f:a7: 85:c0:78:3c:62:59:49:63:07:da:16:2d:a3:f5:42:7d:72:94: 7e:95:5f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3bBHiFK4BKd9bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJi YzAxMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk ODkzOGI4ODMtN2ExZC00ZTgxLTg3NGUtOTMxZTY5ZjdkY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd60nOIoUQEeDE+W+YjfhbkmvJlZTkCSkjgc uJ1h/XG2RfPtIsVEqqE06QXbHs0fIlDWw16Ua+75eKTEqRxr3VbeAzoptACulydL ZO4I8w0Ej20CkcQ3WPpVHJpFhxsV8GE+FvpD7zRGaQwKO2F09ViWff0BPJNFOUEG 8LmZRthFMIT+dH0pM0bJETTCa3WUj129OaWU/Odj3o1l194ViDtEPZ7Mp8qZcaGw 230mTvCrU0qCCzguQaQ6jTBQBuac5eWWbpzEJZTgCZtUa2BiX0KVEOrsdhTTSCL9 +BccwYGS6+rzqABKnw3eBUn7v5Rq0ZQlnViRKL49urvFsyuacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+VsKZsfxgHmc7eYg3WKdXtEcUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOGU0 ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvNjI1ZjEyOWQtYzBkMS0z NTMzLWJiZDEtZWVkYTBjZjFjZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjhlNGU0OTYtOTk0Zi00ODc3LTgz MjgtYWVjNjM4NmJiYzAxL2I4ZTRlNDk2LTk5NGYtNDg3Ny04MzI4LWFlYzYzODZi YmMwMS5jcmwwHwYDVR0jBBgwFoAUT5WbHKn9XvdgJocLvrogfHrzWm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2 Mzg2YmJjMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxj4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8ZG2eEykZuvSPTvUFtr9KCTjohgkIj9yNaUbL6BzzzSTVPHpgPkcxl D/m+sHLQVUD68hloQ4dyuEOyaaIwAv8u3yJ1D7C1a5qFhSAXwwf/aH4xWUXwoQ2m 0zEBYI57EWJ2s3uH5NGFkFlqkbuIUADK1pl2HD2fgrRQYHuzJbG1/WXLCMx0dxmk ROu7oWQet4lCfysqorT70dqi4uuXNJvMJvrrMtTmANEXpeXL6SDLUEzfFcE/rqNu fZocscYvgwJUwRIBad3HA6HzP5pnfBwuMruibJIw5jvE7kAoeln5ZZ5EW1JXIMWP p4XAeDxiWUljB9oWLaP1Qn1ylH6VX2w= -----END CERTIFICATE-----Generated at Sat Oct 24 18:46:55 2026 by rpki-client