$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/3c951a5f-284f-3e6b-984a-d745042bdf57.roa File: 3c951a5f-284f-3e6b-984a-d745042bdf57.roa (raw, json) Hash identifier: hayJlY0v7/m07tw86fMs4J6hAE2TtdCbLxSzJGAyW2Y= Subject key identifier: CA:E6:AA:FA:47:AF:9F:DA:9A:E4:22:39:4E:13:D1:AD:29:A7:FD:B4 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584F5A33379FC4BDB8DD0D277C40 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/3c951a5f-284f-3e6b-984a-d745042bdf57.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22079 IP address blocks: 64.186.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:37:9f:c4:bd:b8:dd:0d:27:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=a739aa86-e8a8-4e24-a1fd-2532154f9ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:17:45:da:c1:a6:7b:ac:6b:be:b7:55:90: 4c:ac:9f:99:19:72:ae:d6:87:dc:58:51:ea:33:00: 70:fc:e2:45:87:30:c6:0f:ae:9b:5e:ac:f5:33:ac: 7f:74:4a:97:95:4c:4c:89:8c:e1:d5:26:bf:ad:8d: ca:bb:a0:f8:ec:b6:91:f1:14:12:5e:70:3e:a4:9e: 2d:5e:3a:0a:81:14:07:3b:dc:56:8e:a4:e9:c0:68: 31:dd:c2:f5:71:3a:73:df:6c:ac:4c:e1:fe:2d:37: 87:cf:69:0d:a0:17:f2:76:93:56:cd:d2:dc:25:94: 98:79:4b:9a:c7:3d:86:47:71:39:fb:72:e5:79:8a: 2e:bb:ae:1b:b1:0d:77:71:87:ee:0f:f8:d3:c7:98: 00:b4:eb:20:2c:ed:51:d8:59:93:36:14:5c:70:22: cc:d7:21:c2:a1:67:32:b6:27:91:ef:3a:a9:53:4d: f2:1e:6b:45:15:91:d3:0e:cb:83:52:aa:59:fc:3b: 50:f9:5f:92:e7:58:2d:bb:6f:d2:0a:d1:c4:76:98: 9b:b9:ec:96:19:3a:f4:3a:ec:23:0f:03:c5:84:ad: 51:97:95:c8:bf:cb:54:df:bf:3a:78:4a:e6:5e:44: 77:64:81:a6:a2:75:0d:9a:06:b0:c3:2c:0a:b6:4c: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E6:AA:FA:47:AF:9F:DA:9A:E4:22:39:4E:13:D1:AD:29:A7:FD:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/3c951a5f-284f-3e6b-984a-d745042bdf57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.186.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4e:0b:aa:5f:83:d3:c6:4a:ba:97:5f:72:09:60:92:7c:54: d0:78:37:23:01:4d:b5:ff:5d:8f:16:d0:78:21:5e:5f:fd:e7: 10:c3:06:2c:27:54:35:d5:15:7e:52:55:91:26:9e:d2:84:73: fb:d0:e5:d6:ab:d9:4a:8b:70:da:58:92:11:cb:a8:79:d6:9e: e9:cf:ee:80:6e:cd:a1:b3:67:bd:b8:3e:74:aa:02:35:60:12: 0b:6a:47:2a:89:00:bc:f7:18:6f:b1:32:18:26:12:e3:a5:72: 18:96:ba:dc:07:36:9f:59:da:58:e8:73:1d:d4:79:06:fd:00: 5f:92:6f:d5:1c:1c:94:1f:f5:af:8b:6b:af:ea:37:71:f6:a7: 72:c7:f6:27:6a:97:33:7b:37:d7:9a:df:0b:5f:f6:cd:be:70: b1:65:ff:7b:92:cf:64:c8:07:b0:c8:f6:c3:64:4d:d8:08:81: 1e:de:0f:ce:5e:56:55:33:34:de:44:dc:9a:76:b4:a3:3b:c6: 2a:f5:dd:58:17:7f:44:13:83:27:e1:f6:30:b9:0f:3a:db:43: e2:ad:ba:4d:84:da:0f:08:b6:d6:c4:4d:be:3f:36:87:f8:f1: 21:f9:39:25:8e:eb:3a:3d:c5:c1:40:8d:27:2e:28:db:29:dc: b5:29:b0:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzefxL243Q0nfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YTczOWFhODYtZThhOC00ZTI0LWExZmQtMjUzMjE1NGY5Y2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSAXRdrBpnusa763VZBMrJ+ZGXKu1ofcWFHq MwBw/OJFhzDGD66bXqz1M6x/dEqXlUxMiYzh1Sa/rY3Ku6D47LaR8RQSXnA+pJ4t XjoKgRQHO9xWjqTpwGgx3cL1cTpz32ysTOH+LTeHz2kNoBfydpNWzdLcJZSYeUua xz2GR3E5+3LleYouu64bsQ13cYfuD/jTx5gAtOsgLO1R2FmTNhRccCLM1yHCoWcy tieR7zqpU03yHmtFFZHTDsuDUqpZ/DtQ+V+S51gtu2/SCtHEdpibueyWGTr0Ouwj DwPFhK1Rl5XIv8tU3786eErmXkR3ZIGmonUNmgawwywKtkyGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrmqvpHr5/amuQiOU4T0a0pp/20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvM2M5NTFhNWYtMjg0Zi0z ZTZiLTk4NGEtZDc0NTA0MmJkZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxOC6pfg9PGSrqXX3IJYJJ8VNB4NyMBTbX/XY8W0HghXl/95xDDBiwn VDXVFX5SVZEmntKEc/vQ5dar2UqLcNpYkhHLqHnWnunP7oBuzaGzZ724PnSqAjVg EgtqRyqJALz3GG+xMhgmEuOlchiWutwHNp9Z2ljocx3UeQb9AF+Sb9UcHJQf9a+L a6/qN3H2p3LH9idqlzN7N9ea3wtf9s2+cLFl/3uSz2TIB7DI9sNkTdgIgR7eD85e VlUzNN5E3Jp2tKM7xir13VgXf0QTgyfh9jC5DzrbQ+Ktuk2E2g8IttbETb4/Nof4 8SH5OSWO6zo9xcFAjScuKNsp3LUpsKI= -----END CERTIFICATE-----Generated at Mon Oct 12 04:26:10 2026 by rpki-client