$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/4878931d-006f-3a18-90e2-6866a003ef29.roa File: 4878931d-006f-3a18-90e2-6866a003ef29.roa (raw, json) Hash identifier: /0bOHLJ7gbfeV3Hw1h/EhroW/28Wsny+bAHuy9FwKms= Subject key identifier: 19:31:76:BC:43:B6:84:9B:A1:11:A6:36:04:A8:8B:3D:CB:90:84:D8 Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584FD7F1387BAD0FAC290EE3CA40 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/4878931d-006f-3a18-90e2-6866a003ef29.roa Signing time: Sun 15 Nov 2026 02:00:12 +0000 ROA not before: Sun 15 Nov 2026 02:00:12 +0000 ROA not after: Sat 13 Feb 2027 02:00:12 +0000 asID: 3356 IP address blocks: 198.89.160.0/20 maxlen: 24 198.89.176.0/21 maxlen: 24 198.89.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:f1:38:7b:ad:0f:ac:29:0e:e3:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Nov 15 02:00:12 2026 GMT Not After : Feb 13 02:00:12 2027 GMT Subject: CN=035f2ec2-7d3e-4c0b-9f61-e625140fbf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:d5:73:d7:61:27:9a:a2:be:54:92:0e:ae: 31:66:e1:95:a4:25:ac:19:7c:15:d9:15:b0:67:94: 9b:7c:16:17:7a:0e:ae:e6:7a:ac:77:11:cb:5e:00: 3e:99:ca:c1:4c:48:f9:d7:95:3b:95:03:3d:27:b2: 80:62:58:96:a6:40:8f:8e:d2:b9:6c:11:6a:5e:9c: 4c:43:ac:b8:92:31:05:6c:4c:33:04:9f:2d:fa:b1: 3d:d1:e3:73:6b:b4:ce:de:03:01:de:1a:70:38:fa: 81:73:18:98:4e:de:c0:e3:be:a8:3f:5b:76:cc:73: 76:1e:3c:f5:9c:e8:64:34:4c:fd:2e:a8:79:bd:c9: cf:86:32:e8:ca:6e:4f:d2:fb:c7:87:99:b3:e2:86: 1b:ad:b8:12:31:92:d3:39:08:86:b7:4d:95:c1:00: 9a:b6:40:62:4d:c0:73:58:21:c8:2c:f0:30:49:1f: 96:f5:bb:6a:0a:99:f5:0d:8f:a9:bf:a6:4b:b4:33: 3b:d0:8a:ec:0e:ee:b3:a9:6f:5a:4a:8d:b8:c2:51: 41:37:5d:6e:cf:27:49:90:11:b9:3c:75:92:5d:d9: af:63:59:60:56:9c:af:9a:5f:80:94:09:9c:96:77: f9:00:25:8c:55:c0:88:2e:83:f8:97:2c:81:bc:2d: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:31:76:BC:43:B6:84:9B:A1:11:A6:36:04:A8:8B:3D:CB:90:84:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/4878931d-006f-3a18-90e2-6866a003ef29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 198.89.160.0-198.89.185.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:42:89:7e:fa:0a:7f:9d:a8:3b:d7:87:a0:07:fb:25:66:c5: 33:79:70:fb:72:dd:ec:cf:0f:6a:61:f5:62:b7:24:01:d5:b9: 5d:fe:b0:fb:5e:04:80:5c:28:74:93:cc:78:70:f9:d1:3d:7c: 4f:6b:68:f1:fd:dd:8a:77:f4:e1:11:6d:31:57:4a:20:20:f9: 69:af:dd:25:96:b1:04:ff:c2:99:30:08:c4:c9:3c:ff:96:9b: fd:be:c0:b9:44:04:8c:4e:d1:be:c2:8e:d0:7f:a2:d0:7d:f4: 66:0e:ea:86:10:f1:cd:cd:82:89:b4:9d:d5:89:e1:0c:da:50: 4d:f1:19:c2:eb:22:46:dc:7a:b8:51:5b:0c:aa:c8:df:df:65: 4d:a8:20:1b:e8:f6:65:bb:af:21:cd:36:d7:df:96:66:98:eb: 1a:52:71:1d:03:fa:25:2d:87:9b:6c:b7:b2:55:54:e8:64:39: 8c:a7:73:ed:8f:a7:1a:66:2d:e1:77:ef:3d:81:85:4c:81:8d: f0:5a:0d:97:92:de:60:a3:b9:bc:56:03:c8:5f:36:45:7c:f4: a6:37:0e:8c:5d:18:ab:a1:35:9b:94:89:67:5a:26:b3:bf:b9: 8d:00:c8:cb:d0:31:ba:26:49:ec:a5:bb:44:cb:cc:63:dc:be: 3a:fa:81:99 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE/X8Th7rQ+sKQ7jykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI2MTExNTAyMDAxMloXDTI3MDIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MDM1ZjJlYzItN2QzZS00YzBiLTlmNjEtZTYyNTE0MGZiZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4vVc9dhJ5qivlSSDq4xZuGVpCWsGXwV2RWw Z5SbfBYXeg6u5nqsdxHLXgA+mcrBTEj515U7lQM9J7KAYliWpkCPjtK5bBFqXpxM Q6y4kjEFbEwzBJ8t+rE90eNza7TO3gMB3hpwOPqBcxiYTt7A476oP1t2zHN2Hjz1 nOhkNEz9Lqh5vcnPhjLoym5P0vvHh5mz4oYbrbgSMZLTOQiGt02VwQCatkBiTcBz WCHILPAwSR+W9btqCpn1DY+pv6ZLtDM70IrsDu6zqW9aSo24wlFBN11uzydJkBG5 PHWSXdmvY1lgVpyvml+AlAmclnf5ACWMVcCILoP4lyyBvC1cgwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBkxdrxDtoSboRGmNgSoiz3LkITYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvNDg3ODkzMWQtMDA2Zi0z YTE4LTkwZTItNjg2NmEwMDNlZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXGWaAD BAHGWbgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAIkKJfvoKf52oO9eHoAf7JWbFM3lw+3Ld7M8PamH1Yrck AdW5Xf6w+14EgFwodJPMeHD50T18T2to8f3dinf04RFtMVdKICD5aa/dJZaxBP/C mTAIxMk8/5ab/b7AuUQEjE7RvsKO0H+i0H30Zg7qhhDxzc2CibSd1YnhDNpQTfEZ wusiRtx6uFFbDKrI399lTaggG+j2ZbuvIc0219+WZpjrGlJxHQP6JS2Hm2y3slVU 6GQ5jKdz7Y+nGmYt4XfvPYGFTIGN8FoNl5LeYKO5vFYDyF82RXz0pjcOjF0Yq6E1 m5SJZ1oms7+5jQDIy9AxuiZJ7KW7RMvMY9y+OvqBmQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:52:48 2026 by rpki-client