$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: KVJvpDPVPj0DDkJTlSX5FPw+hgMPB8lIWblcgdwshjM= Subject key identifier: 26:9C:B0:AD:BD:3D:EC:76:DF:73:13:11:05:2B:84:96:0B:4B:17:93 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584F7BB3004E8207EE071AE47BE0 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:00:4e:82:07:ee:07:1a:e4:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=31db3d29-a718-4df0-9f19-f9988c07c95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:a6:16:ca:0c:97:52:0f:30:38:1b:16:30: 4a:b5:c9:86:9a:48:15:9c:21:ff:0b:56:66:9d:2b: 76:2c:50:97:77:28:aa:d6:20:a9:6a:e3:ef:4b:e0: 9a:ab:33:57:c9:72:6f:8b:4b:1a:c2:5d:b9:79:12: 49:ca:95:08:3f:5e:ce:2a:4c:c1:d2:6c:cc:0e:14: e1:18:b2:27:a9:a3:cd:02:4d:72:23:43:7f:25:13: 53:27:6f:ac:cc:12:90:09:a2:e9:89:90:fe:b7:05: f9:a7:d7:ae:3d:23:40:12:b2:d2:1f:e6:18:e9:b0: 03:1f:e9:d3:ee:e4:1a:51:d3:2d:8c:56:d8:38:96: 66:06:b2:58:7c:c3:43:c6:9f:23:a4:26:9e:9f:bf: 74:75:5c:cb:79:c0:55:43:14:82:5b:74:39:a8:ae: fc:93:d1:68:d6:33:5d:dc:e0:b8:b0:8e:42:1b:c4: 4e:aa:a0:df:af:e5:3e:f0:96:20:b5:4c:13:26:ce: 6b:a5:f0:55:39:1d:49:f8:b6:a1:ba:d5:a4:98:69: 79:9f:ec:46:9f:0c:7c:46:16:65:4a:19:e5:05:74: 81:fb:02:a0:e2:bd:fc:5c:b7:01:4e:56:9b:a4:75: f5:3e:19:56:7c:ef:62:f8:56:9c:5c:be:49:27:68: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:B0:AD:BD:3D:EC:76:DF:73:13:11:05:2B:84:96:0B:4B:17:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f3:d5:09:43:da:95:cb:78:fa:2c:1f:04:67:26:8a:ba:a2: d8:a1:29:9a:f5:0d:5a:51:b9:d1:0d:0f:94:1d:8d:be:0d:e2: 49:58:93:ad:09:b8:71:7e:f8:f0:11:c9:3e:25:55:4b:67:fd: 4b:65:30:60:08:2e:21:91:7c:f8:d8:78:c3:01:86:cd:17:d6: 51:0d:fe:39:38:c3:6e:df:66:90:fd:98:55:36:72:b8:f6:ba: 06:80:31:07:80:3c:e1:18:4e:3d:65:2c:da:f8:6e:a6:df:56: ec:0f:f3:72:49:db:9f:ee:c2:c4:c8:93:d7:3a:d9:9e:b6:b4: 3f:eb:57:4a:29:c4:9f:5e:47:9f:2a:e1:0d:41:9e:2a:de:70: 3e:d2:d1:04:aa:9b:1f:38:e0:d0:eb:51:2f:2e:bc:6a:91:49: e9:64:af:c8:97:2c:cf:04:9e:8f:d0:67:e2:8a:17:4c:55:dd: de:f8:cc:c2:b7:2e:28:22:c2:0f:9a:92:67:55:5e:fb:9e:26: 18:b7:e0:fa:49:ae:c0:b0:9d:7f:aa:72:77:7f:41:48:05:99: 1a:eb:2e:f0:1d:28:f2:6a:01:01:b5:69:8c:94:c3:29:a2:ce: e3:e1:76:01:ed:ae:88:83:ce:1a:fd:fc:e8:6c:29:75:ed:67: 41:54:5f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swBOggfuBxrke+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MzFkYjNkMjktYTcxOC00ZGYwLTlmMTktZjk5ODhjMDdjOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ+mFsoMl1IPMDgbFjBKtcmGmkgVnCH/C1Zm nSt2LFCXdyiq1iCpauPvS+CaqzNXyXJvi0sawl25eRJJypUIP17OKkzB0mzMDhTh GLInqaPNAk1yI0N/JRNTJ2+szBKQCaLpiZD+twX5p9euPSNAErLSH+YY6bADH+nT 7uQaUdMtjFbYOJZmBrJYfMNDxp8jpCaen790dVzLecBVQxSCW3Q5qK78k9Fo1jNd 3OC4sI5CG8ROqqDfr+U+8JYgtUwTJs5rpfBVOR1J+LahutWkmGl5n+xGnwx8RhZl ShnlBXSB+wKg4r38XLcBTlabpHX1PhlWfO9i+FacXL5JJ2gqhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCacsK29Pex233MTEQUrhJYLSxeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTz1QlD2pXLePosHwRnJoq6otihKZr1DVpRudEND5Qdjb4N4klYk60J uHF++PARyT4lVUtn/UtlMGAILiGRfPjYeMMBhs0X1lEN/jk4w27fZpD9mFU2crj2 ugaAMQeAPOEYTj1lLNr4bqbfVuwP83JJ25/uwsTIk9c62Z62tD/rV0opxJ9eR58q 4Q1BnirecD7S0QSqmx844NDrUS8uvGqRSelkr8iXLM8Eno/QZ+KKF0xV3d74zMK3 Ligiwg+akmdVXvueJhi34PpJrsCwnX+qcnd/QUgFmRrrLvAdKPJqAQG1aYyUwymi zuPhdgHtroiDzhr9/OhsKXXtZ0FUX/w= -----END CERTIFICATE-----Generated at Sat Oct 24 17:42:32 2026 by rpki-client