$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa File: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json) Hash identifier: 5PY/GYfbqTgR5dBg1e4iGkgrQETtdnMJxSSqDjE/ibo= Subject key identifier: 19:A5:45:AC:21:3F:DA:7B:0D:79:04:62:76:07:73:7A:73:D0:CB:6D Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584F49750BD6E575C42A82BCCFC0 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2902 IP address blocks: 198.59.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:0b:d6:e5:75:c4:2a:82:bc:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f61969a-5353-4dde-862f-9cfa2d81eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:67:73:86:86:74:c8:a5:32:32:be:61:36: 01:08:26:8a:03:18:a1:47:6f:f9:02:c9:ea:9b:06: 24:38:78:63:87:c3:aa:17:98:3d:d8:8d:b3:a1:1e: 90:b9:88:af:04:59:27:7d:45:3f:79:cc:04:33:88: 58:c7:30:53:b4:b2:56:e8:a3:e9:de:86:20:75:ce: 60:19:1d:ea:5c:c8:09:d1:49:64:9e:33:9a:d9:a5: 8e:ef:d9:90:fc:8f:eb:39:0c:ce:7e:de:e5:dc:f3: 0d:bb:3c:e4:75:80:f0:bb:56:8d:02:79:27:2c:14: 48:29:a4:d8:9e:aa:2d:1f:00:a7:ad:48:13:6e:90: 0e:be:9a:d9:3c:35:25:b4:f1:76:e1:37:7b:49:ec: 0f:93:ea:71:f2:a2:1b:b9:e9:6e:36:68:f5:e6:f7: f6:79:1b:44:05:34:15:d6:30:56:54:7f:97:f8:7e: 01:12:c5:14:39:a2:b8:94:f1:67:a9:c3:ed:2b:e6: ae:4f:6c:27:7a:54:16:20:28:83:22:66:70:b9:ae: df:6c:c0:1e:80:95:a2:68:1f:ac:31:d5:1c:dd:03: 77:8a:c7:6c:c6:51:1b:af:5e:f0:ee:d4:ad:1b:de: 47:36:4f:83:ff:87:dc:09:26:90:fc:26:10:b2:05: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A5:45:AC:21:3F:DA:7B:0D:79:04:62:76:07:73:7A:73:D0:CB:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: 198.59.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ca:b8:49:4d:6c:6b:1a:13:33:c8:46:00:e8:a7:21:79:70: 4a:86:38:be:08:09:ce:1c:aa:01:02:49:91:25:e1:a1:9c:58: 07:9d:1d:b2:1b:f1:5c:c9:31:a1:fb:2f:ba:0a:0b:92:f4:bc: b1:f7:41:dd:40:a8:c2:b9:53:1d:d9:e4:c7:98:23:00:60:58: bb:14:a8:98:79:60:69:e7:b2:f4:bf:40:3c:a8:42:a9:e8:c2: 09:70:dd:f3:d5:0c:a9:c4:7c:e4:d1:34:45:af:35:c3:9f:52: 93:ea:1f:42:81:16:2b:b5:ec:0b:48:61:03:57:c1:a8:4a:e6: 38:05:1c:e8:e2:47:06:6f:31:c0:70:78:4e:de:6e:cc:a1:96: e9:2b:33:b2:1d:16:91:b8:5c:42:17:fb:9e:3b:67:8e:03:22: b3:e1:64:7d:85:15:90:b1:81:66:c5:0d:b4:e8:1f:aa:3d:a8: ef:3d:48:41:da:9f:65:5d:af:0f:5e:91:8e:80:ce:3a:8d:6d: 85:c1:be:91:ac:dd:d7:4b:7d:ea:cc:44:22:47:cf:f5:82:28: 58:3f:02:68:e4:ef:34:79:bb:f7:52:6c:52:6f:1c:17:6e:41: 61:6c:ca:99:44:e6:11:00:b5:b6:6a:c2:80:d8:18:4e:72:78: c6:99:09:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQvW5XXEKoK8z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y2MTk2OWEtNTM1My00ZGRlLTg2MmYtOWNmYTJkODFlYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQZnc4aGdMilMjK+YTYBCCaKAxihR2/5Asnq mwYkOHhjh8OqF5g92I2zoR6QuYivBFknfUU/ecwEM4hYxzBTtLJW6KPp3oYgdc5g GR3qXMgJ0UlknjOa2aWO79mQ/I/rOQzOft7l3PMNuzzkdYDwu1aNAnknLBRIKaTY nqotHwCnrUgTbpAOvprZPDUltPF24Td7SewPk+px8qIbueluNmj15vf2eRtEBTQV 1jBWVH+X+H4BEsUUOaK4lPFnqcPtK+auT2wnelQWICiDImZwua7fbMAegJWiaB+s MdUc3QN3isdsxlEbr17w7tStG95HNk+D/4fcCSaQ/CYQsgUiPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmlRawhP9p7DXkEYnYHc3pz0MttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvOWZmMzA4MjQtMTA4NC0z MmU5LWFhMTktNTNjNDliNWRiNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxjvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbKuElNbGsaEzPIRgDopyF5cEqGOL4ICc4cqgECSZEl4aGcWAedHbIb 8VzJMaH7L7oKC5L0vLH3Qd1AqMK5Ux3Z5MeYIwBgWLsUqJh5YGnnsvS/QDyoQqno wglw3fPVDKnEfOTRNEWvNcOfUpPqH0KBFiu17AtIYQNXwahK5jgFHOjiRwZvMcBw eE7ebsyhlukrM7IdFpG4XEIX+547Z44DIrPhZH2FFZCxgWbFDbToH6o9qO89SEHa n2Vdrw9ekY6AzjqNbYXBvpGs3ddLferMRCJHz/WCKFg/Amjk7zR5u/dSbFJvHBdu QWFsyplE5hEAtbZqwoDYGE5yeMaZCWk= -----END CERTIFICATE-----Generated at Sat Sep 26 03:24:54 2026 by rpki-client