$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa File: c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa (raw, json) Hash identifier: b9H8HE6NUjNNm2SFNYp5Ib00udKdY93/vKvcmwvBA6c= Subject key identifier: ED:29:A8:77:C7:94:9D:9F:C7:04:5D:8C:FB:C2:33:B6:33:08:01:2A Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584F02422E370C0036FA8EC8F340 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 11650 IP address blocks: 198.58.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2e:37:0c:00:36:fa:8e:c8:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=35d245ad-f84c-4e20-9ae0-723225b0b9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:c0:99:0d:49:9a:6d:8f:96:01:f5:c7:40: 1b:51:e9:3e:3d:bb:04:da:8b:e8:d9:46:01:d3:41: ee:40:6b:a9:5c:06:17:06:17:dd:cf:99:29:d0:2c: 53:df:83:20:7b:fa:d3:61:d1:9d:37:d4:51:80:1c: 0e:a6:21:a6:fa:92:77:86:ba:7f:c8:57:9d:96:c7: 3f:d1:a9:36:9d:60:09:7a:c7:ca:bc:6c:d2:af:fa: a6:2f:32:c5:03:16:da:d6:81:8f:47:75:eb:dd:a4: de:83:63:2f:34:08:18:b6:6a:73:46:ec:37:a9:6d: 57:51:1c:1b:bf:ae:9d:94:0c:74:71:7b:00:d4:af: 17:0e:fd:55:a6:70:76:b2:dd:26:48:3b:10:d2:6a: 1e:fe:c7:d4:53:18:3a:76:5b:b4:a5:2d:a4:f5:d9: 3a:c2:ea:3c:a3:82:6d:e2:c2:90:c1:94:16:64:e1: f7:97:bc:81:96:d7:69:99:07:05:3d:e8:2f:52:82: 79:68:2a:e3:66:10:f9:98:ba:29:81:fe:1a:5d:50: fa:35:f1:dc:35:15:28:95:50:f3:e1:a7:f6:13:84: 0b:f3:e7:eb:8e:69:8b:24:4e:5d:a5:51:57:4e:b8: 07:ba:ee:88:25:4a:47:70:be:15:60:11:45:79:21: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:29:A8:77:C7:94:9D:9F:C7:04:5D:8C:FB:C2:33:B6:33:08:01:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 198.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d4:c9:31:6b:f6:75:f0:b5:69:ad:e7:b8:7b:45:1e:e8:e3: d5:ce:f5:d3:1f:b4:24:f5:a0:79:7a:88:63:c7:17:20:07:9d: 30:0b:f9:b2:50:2a:0d:71:26:cc:cf:f3:2e:9e:44:04:98:a9: 1b:be:0f:7f:15:2c:f2:c4:74:15:8c:23:7d:18:84:34:1e:59: 2b:e3:79:a4:45:c6:b2:55:6d:31:0f:5e:0d:13:15:02:a8:33: 69:43:c7:81:ed:0f:9b:6f:3e:08:b7:78:0d:f7:bb:a5:fa:d7: ad:a8:e1:1e:fc:ce:86:2a:85:1e:f6:42:0f:87:9f:a9:b8:e7: 9a:1e:ba:21:e6:ca:54:56:cd:b9:74:a3:24:2b:9d:af:26:43: b2:11:91:35:25:ea:2e:d1:ba:5c:3a:2c:a2:25:2a:cf:09:84: 82:02:fd:a3:24:77:00:09:80:a3:85:26:10:20:b7:de:00:cc: 7d:bb:2a:37:7d:14:77:72:dc:75:49:51:a9:c6:f2:ef:88:6c: b1:3e:e4:01:47:c0:b4:5f:44:bd:35:32:21:b6:23:1c:1a:b1: ed:9e:c7:2b:95:b2:1c:2a:4d:60:df:e9:8a:d3:46:6a:a2:b3: 51:66:80:ae:41:5f:a2:6c:17:92:8d:12:ff:ea:52:94:f0:6c: ec:9c:2a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQi43DAA2+o7I80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MzVkMjQ1YWQtZjg0Yy00ZTIwLTlhZTAtNzIzMjI1YjBiOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgXAmQ1Jmm2PlgH1x0AbUek+PbsE2ovo2UYB 00HuQGupXAYXBhfdz5kp0CxT34Mge/rTYdGdN9RRgBwOpiGm+pJ3hrp/yFedlsc/ 0ak2nWAJesfKvGzSr/qmLzLFAxba1oGPR3Xr3aTeg2MvNAgYtmpzRuw3qW1XURwb v66dlAx0cXsA1K8XDv1VpnB2st0mSDsQ0moe/sfUUxg6dlu0pS2k9dk6wuo8o4Jt 4sKQwZQWZOH3l7yBltdpmQcFPegvUoJ5aCrjZhD5mLopgf4aXVD6NfHcNRUolVDz 4af2E4QL8+frjmmLJE5dpVFXTrgHuu6IJUpHcL4VYBFFeSH3gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0pqHfHlJ2fxwRdjPvCM7YzCAEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYzAzZjEyNTctODM2Yy0z YmE1LTliNWMtYTNhY2QyZGUyZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjUyTFr9nXwtWmt57h7RR7o49XO9dMftCT1oHl6iGPHFyAHnTAL+bJQ Kg1xJszP8y6eRASYqRu+D38VLPLEdBWMI30YhDQeWSvjeaRFxrJVbTEPXg0TFQKo M2lDx4HtD5tvPgi3eA33u6X6162o4R78zoYqhR72Qg+Hn6m455oeuiHmylRWzbl0 oyQrna8mQ7IRkTUl6i7Rulw6LKIlKs8JhIIC/aMkdwAJgKOFJhAgt94AzH27Kjd9 FHdy3HVJUanG8u+IbLE+5AFHwLRfRL01MiG2Ixwase2exyuVshwqTWDf6YrTRmqi s1FmgK5BX6JsF5KNEv/qUpTwbOycKpo= -----END CERTIFICATE-----Generated at Fri Sep 11 03:51:55 2026 by rpki-client