$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa File: f829599e-00f8-3c5a-95c8-1624e200ebd0.roa (raw, json) Hash identifier: WAVmV9R7js6SNW1Y9LbmOfHxh263ZdMTZaFVFUdmAiM= Subject key identifier: 02:79:D6:2F:82:8B:FF:FA:BE:B3:86:62:72:5B:D9:E1:CA:30:53:28 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F4328584FAB2897FAE8F0AA0B1A856280 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 194 IP address blocks: 128.117.0.0/16 maxlen: 16 192.43.244.0/24 maxlen: 24 192.52.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:97:fa:e8:f0:aa:0b:1a:85:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=c5f546d7-3e9b-4b3b-b7b5-9afee933cd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:67:75:ec:8a:87:5a:7f:77:bd:53:77:9c: b7:59:ce:a5:42:99:55:dd:4f:db:42:7a:dc:18:49: 14:e6:37:65:c2:db:fe:f1:6f:e6:bc:73:22:20:fb: 46:19:db:42:13:bb:6d:c2:b4:32:5d:da:a2:7e:8a: ad:18:4c:7e:c7:16:69:0e:9f:89:79:7a:ca:a7:c9: 87:12:80:d0:27:e9:49:9a:90:5b:2d:da:de:e6:7c: ba:63:33:b1:d9:42:af:a2:e2:ef:75:81:25:9e:54: c8:62:1c:6d:20:9d:bf:75:c9:c0:8e:57:a5:8c:c8: 10:98:ae:c2:dc:65:49:ce:8f:22:5c:ef:1e:d8:e4: 9e:ce:14:a1:3a:17:53:f3:5f:a7:7b:f8:a4:79:d4: 8c:5e:83:3d:14:d9:53:28:c5:4d:b3:57:7e:53:1a: fb:c4:0f:59:3d:88:b8:0b:fc:01:d7:71:b2:33:dd: 4e:d6:7e:39:70:00:b7:63:8b:f3:f1:0b:d9:1d:3c: 7a:dd:60:fd:8d:34:7e:0a:d6:a7:ae:37:25:b0:0f: d5:9a:65:76:6a:9f:c6:9d:7f:ac:0f:5e:2f:da:d7: c1:05:95:d8:85:7f:1b:9d:f1:dd:29:d7:ad:d6:69: 91:0a:a6:13:30:9f:d3:61:33:fe:98:9d:86:a8:8d: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:D6:2F:82:8B:FF:FA:BE:B3:86:62:72:5B:D9:E1:CA:30:53:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 128.117.0.0/16 192.43.244.0/24 192.52.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:46:d3:79:26:a7:eb:71:2f:34:4d:d4:74:a3:15:79:24:28: 07:da:51:89:24:ff:a2:e3:83:1c:92:3b:42:1f:63:1c:72:86: 96:ab:78:d1:eb:39:bb:4a:20:ca:d1:e0:5b:c8:28:eb:5e:e5: db:29:16:c9:c3:31:cd:48:9e:1e:29:8a:0d:1f:54:39:ee:52: 13:74:16:9e:50:f8:6b:2e:e7:f9:f9:f6:00:3e:c4:1a:04:2f: 43:df:75:f9:0e:fe:90:19:d1:f8:65:e9:b9:64:ef:0e:4d:ac: 73:ec:1e:91:c4:be:12:43:d9:41:27:77:70:d8:a7:8d:e9:03: e9:b5:8e:9f:c9:e0:1c:3c:ff:59:d5:b7:5a:7c:e0:0c:77:dd: 4e:00:07:c3:9b:fe:ca:05:8e:f7:cf:cb:c1:bd:70:64:f3:06: 5d:90:a0:16:0c:c8:12:b9:32:68:8f:86:57:b4:9a:c7:44:64: d3:f8:8b:ac:57:6b:0f:b6:b4:97:18:35:5a:e3:d9:c4:e9:2d: 8a:5b:38:85:0b:5d:f6:9a:b4:f4:90:ef:43:6f:ac:63:fb:7a: 50:2d:10:cc:db:e9:41:08:12:47:03:cb:04:29:71:44:d7:da: e4:b2:03:74:f1:b9:26:38:df:f2:c3:64:d9:28:ab:60:83:34: ee:85:f6:25 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE+rKJf66PCqCxqFYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YzVmNTQ2ZDctM2U5Yi00YjNiLWI3YjUtOWFmZWU5MzNjZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaZndeyKh1p/d71Td5y3Wc6lQplV3U/bQnrc GEkU5jdlwtv+8W/mvHMiIPtGGdtCE7ttwrQyXdqifoqtGEx+xxZpDp+JeXrKp8mH EoDQJ+lJmpBbLdre5ny6YzOx2UKvouLvdYElnlTIYhxtIJ2/dcnAjleljMgQmK7C 3GVJzo8iXO8e2OSezhShOhdT81+ne/ikedSMXoM9FNlTKMVNs1d+Uxr7xA9ZPYi4 C/wB13GyM91O1n45cAC3Y4vz8QvZHTx63WD9jTR+CtanrjclsA/VmmV2ap/GnX+s D14v2tfBBZXYhX8bnfHdKdet1mmRCqYTMJ/TYTP+mJ2GqI06LQIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFAJ51i+Ci//6vrOGYnJb2eHKMFMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZjgyOTU5OWUtMDBmOC0z YzVhLTk1YzgtMTYyNGUyMDBlYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAgHUDBADA K/QDBADANGowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAHkbTeSan63EvNE3UdKMVeSQoB9pRiST/ouODHJI7 Qh9jHHKGlqt40es5u0ogytHgW8go617l2ykWycMxzUieHimKDR9UOe5SE3QWnlD4 ay7n+fn2AD7EGgQvQ991+Q7+kBnR+GXpuWTvDk2sc+wekcS+EkPZQSd3cNinjekD 6bWOn8ngHDz/WdW3WnzgDHfdTgAHw5v+ygWO98/Lwb1wZPMGXZCgFgzIErkyaI+G V7Sax0Rk0/iLrFdrD7a0lxg1WuPZxOktils4hQtd9pq09JDvQ2+sY/t6UC0QzNvp QQgSRwPLBClxRNfa5LIDdPG5Jjjf8sNk2SirYIM07oX2JQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:12:32 2026 by rpki-client