$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa File: 18187cff-159b-3f88-aa27-6e6e06aa0b90.roa (raw, json) Hash identifier: qsxr8Jzvpr1wOdDAFQQHmO7JjCUYsNmIvDeTdeheAnA= Subject key identifier: 91:CE:91:96:25:EE:EA:D7:97:C1:6C:79:E7:24:AB:BE:76:70:23:C6 Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F4328584F5E62C7624E540537FD6EA580 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 15191 IP address blocks: 198.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c7:62:4e:54:05:37:fd:6e:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=7f80c63d-98d1-4619-a3e2-1153482c6f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:de:4a:d3:94:ca:70:a5:32:34:69:69:8b: ca:ec:8e:a9:58:11:f8:10:af:11:ab:bd:48:dd:e3: 64:22:29:2d:1f:7c:15:89:ee:32:3a:e9:6d:aa:47: 45:54:95:38:f2:8f:ee:07:51:4e:29:0f:04:01:5f: 6e:49:9e:27:84:c6:89:f5:50:bc:29:ff:9f:06:4f: e5:b6:87:03:de:de:9b:0a:18:1b:f5:d8:18:6c:91: 3e:cc:2e:54:38:04:3d:84:aa:81:11:f4:47:8a:7f: 6a:b5:9a:df:59:8f:0b:f3:3f:1d:27:8d:ba:cc:b9: 4c:ce:8f:77:3b:19:18:b9:f4:db:bf:d7:ba:35:80: c4:3a:03:74:61:ce:ab:59:a7:99:a3:47:3e:ad:70: 08:2d:0d:5d:51:28:ca:f0:98:f4:b9:e9:7e:45:fb: a7:2f:35:df:90:0d:96:46:ca:79:91:73:7f:2e:77: e8:18:1e:33:af:33:8b:25:6a:39:b8:4d:18:7c:ec: f7:50:da:3a:11:4f:94:35:bb:c5:25:5b:87:5a:21: 41:62:1c:28:d2:88:f5:c4:40:ee:64:c5:09:21:66: 33:d9:f8:3d:31:ad:c3:7d:c5:11:9b:c5:09:de:4d: b2:02:ec:c7:d1:00:36:98:51:d5:70:dc:02:53:13: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:91:96:25:EE:EA:D7:97:C1:6C:79:E7:24:AB:BE:76:70:23:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:20:4b:98:3f:86:a2:72:f7:02:9d:2e:b0:cb:93:78:88:37: 65:d4:9d:12:b0:5d:9c:d3:97:ee:a9:38:4c:50:f5:77:91:b4: 97:85:9b:fc:62:08:f3:cd:99:e8:4e:09:7f:18:91:4f:87:ce: 00:19:19:d9:95:2e:7b:6a:2b:7d:d7:8a:38:33:6e:d9:8f:5e: 8d:4b:53:38:00:e1:5b:fc:b3:ba:01:3b:b0:4a:d1:63:44:5f: df:82:03:73:f0:bc:49:a8:a1:3b:c5:75:2d:2e:8b:b9:8e:8b: d9:99:fa:ad:72:ce:74:7d:98:cf:93:9c:3a:23:bb:a5:df:3c: 5e:0b:62:02:28:00:15:42:9f:4b:ef:f4:0b:b5:67:56:7c:7e: 62:f2:91:e6:96:87:a2:08:bf:ba:fa:8e:a2:b3:da:d1:4c:4a: a5:17:07:8e:be:c8:03:4f:11:24:f3:39:d6:86:57:e1:7b:ea: 21:66:08:63:9c:8c:81:67:d7:7d:1a:eb:ed:da:b6:5c:c1:ad: 53:46:0d:04:88:35:3f:66:ce:8a:63:ea:0f:f3:c9:30:e9:4d: 35:52:5e:93:07:d1:b9:51:9e:9f:18:b3:9c:bb:86:33:14:81: 8b:bb:71:a7:62:ee:dc:1a:99:d2:10:a7:7b:b6:fa:64:11:24: 63:24:b7:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsdiTlQFN/1upYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk N2Y4MGM2M2QtOThkMS00NjE5LWEzZTItMTE1MzQ4MmM2ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/neStOUynClMjRpaYvK7I6pWBH4EK8Rq71I 3eNkIiktH3wVie4yOultqkdFVJU48o/uB1FOKQ8EAV9uSZ4nhMaJ9VC8Kf+fBk/l tocD3t6bChgb9dgYbJE+zC5UOAQ9hKqBEfRHin9qtZrfWY8L8z8dJ426zLlMzo93 OxkYufTbv9e6NYDEOgN0Yc6rWaeZo0c+rXAILQ1dUSjK8Jj0uel+RfunLzXfkA2W Rsp5kXN/LnfoGB4zrzOLJWo5uE0YfOz3UNo6EU+UNbvFJVuHWiFBYhwo0oj1xEDu ZMUJIWYz2fg9Ma3DfcURm8UJ3k2yAuzH0QA2mFHVcNwCUxPg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHOkZYl7urXl8Fseeckq752cCPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMTgxODdjZmYtMTU5Yi0z Zjg4LWFhMjctNmU2ZTA2YWEwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExh0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEgS5g/hqJy9wKdLrDLk3iIN2XUnRKwXZzTl+6pOExQ9XeRtJeFm/xi CPPNmehOCX8YkU+HzgAZGdmVLntqK33XijgzbtmPXo1LUzgA4Vv8s7oBO7BK0WNE X9+CA3PwvEmooTvFdS0ui7mOi9mZ+q1yznR9mM+TnDoju6XfPF4LYgIoABVCn0vv 9Au1Z1Z8fmLykeaWh6IIv7r6jqKz2tFMSqUXB46+yANPESTzOdaGV+F76iFmCGOc jIFn130a6+3atlzBrVNGDQSINT9mzopj6g/zyTDpTTVSXpMH0blRnp8Ys5y7hjMU gYu7cadi7twamdIQp3u2+mQRJGMkt+4= -----END CERTIFICATE-----Generated at Sun Oct 4 22:18:20 2026 by rpki-client