$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/af018157-0307-3a5d-8b4d-9a90bdc26f28.roa File: af018157-0307-3a5d-8b4d-9a90bdc26f28.roa (raw, json) Hash identifier: lCG50IH4+XajjVTeJLd8KoZ/depzn7rmQ+gLW+3H1Yg= Subject key identifier: 49:EA:D1:AA:30:06:22:28:99:E4:A9:AD:23:9A:02:59:35:0C:7C:60 Certificate issuer: /CN=eb3e61fb-eee2-4438-a37d-23139bbc427a Certificate serial: 010D0C9F4328584F5E7B0D10314C1A13D8ED6900 Authority key identifier: 45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/af018157-0307-3a5d-8b4d-9a90bdc26f28.roa Signing time: Fri 02 Oct 2026 13:49:22 +0000 ROA not before: Fri 02 Oct 2026 13:49:22 +0000 ROA not after: Thu 31 Dec 2026 14:49:22 +0000 asID: 400992 IP address blocks: 199.246.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:7b:0d:10:31:4c:1a:13:d8:ed:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3e61fb-eee2-4438-a37d-23139bbc427a Validity Not Before: Oct 2 13:49:22 2026 GMT Not After : Dec 31 14:49:22 2026 GMT Subject: CN=1abb5c07-3b46-4814-93d2-250d3055e5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:65:fc:17:75:dc:f6:7a:04:4a:33:10:eb:20: 51:5d:55:f8:94:3b:ca:da:cc:aa:6e:05:32:83:56: 8b:4e:b4:5f:3f:7f:22:90:99:7d:23:37:e9:71:31: b5:7a:dd:4a:5e:43:25:bb:0b:92:a3:26:0a:cb:70: 82:1c:72:74:1c:cc:2e:ce:c7:15:20:b5:f2:d9:77: 58:f7:4e:f7:96:00:b2:ae:f5:1e:05:28:2f:01:31: f1:b7:d5:d3:d1:5d:ae:39:5f:68:23:ee:64:fb:8b: a2:e7:54:b2:fb:0e:8b:d8:9d:73:96:bd:d0:c6:0f: a8:4b:ab:80:7b:49:f7:5c:d1:58:1a:f5:a7:c0:0c: 5d:cd:17:66:4d:b9:73:a4:f5:7b:02:7a:f8:f3:cb: 92:77:e0:cd:99:81:2b:ae:61:4a:85:40:93:40:83: cd:fd:3f:af:ce:1b:68:9e:8d:16:7b:59:60:e5:d8: 87:51:fa:2d:73:8f:39:10:f6:bb:76:19:d3:85:ca: 6f:9b:dd:08:11:c6:a1:f3:e7:fa:11:74:0e:7c:9f: 98:21:bd:73:ac:a1:c8:85:b9:e9:a6:19:7e:64:aa: b7:f9:2e:25:29:c2:4a:05:e3:f9:5b:56:21:bc:c7: 32:f5:e8:a9:2b:27:fa:44:ff:d0:8a:00:83:c3:35: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:D1:AA:30:06:22:28:99:E4:A9:AD:23:9A:02:59:35:0C:7C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/af018157-0307-3a5d-8b4d-9a90bdc26f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl X509v3 Authority Key Identifier: keyid:45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer sbgp-ipAddrBlock: critical IPv4: 199.246.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2e:12:10:d4:06:28:0b:46:01:cc:7e:00:64:c8:2f:9c:ed: 54:07:c4:d7:a6:54:28:43:91:6a:f4:e1:9b:e5:19:ec:22:c4: c7:0d:0f:22:04:9c:ad:f6:30:fb:0b:1a:c0:41:3f:54:bd:81: d8:10:bb:0a:ad:ed:eb:b4:e7:0b:60:7c:5e:7e:80:e7:42:57: c7:fd:93:c2:1b:30:71:40:91:e9:ed:2f:29:3d:3e:5a:3a:b9: 1e:e2:7d:21:34:b8:ca:a7:57:50:0d:8b:96:0f:a2:4b:09:31: 15:dd:27:86:db:8b:98:5c:83:af:22:a1:43:6c:ea:65:41:a5: 4c:79:9d:6f:9f:7f:f3:ad:ff:85:a6:a5:b4:26:56:04:23:28: 60:60:4d:d1:d6:fb:a9:d7:07:07:92:98:13:3c:04:35:48:80: 62:87:3c:b3:3e:b1:0c:69:68:2a:08:9f:d2:f5:24:a8:85:2a: c0:27:44:52:68:16:b6:e6:f6:8d:86:7f:c0:87:00:31:ed:3e: 59:97:1c:72:d1:bc:50:e8:18:16:48:9c:07:8b:bf:f0:91:0c: 77:3a:d9:8c:05:d7:54:78:3b:a6:8e:dc:f3:44:0d:2a:e0:b3: 45:d6:18:5b:39:d7:e2:c1:12:a9:11:b7:0d:7e:fb:9f:e8:94: 59:38:16:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eew0QMUwaE9jtaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzZTYxZmItZWVlMi00NDM4LWEzN2QtMjMxMzliYmM0 MjdhMB4XDTI2MTAwMjEzNDkyMloXDTI2MTIzMTE0NDkyMlowLzEtMCsGA1UEAxMk MWFiYjVjMDctM2I0Ni00ODE0LTkzZDItMjUwZDMwNTVlNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2X8F3Xc9noESjMQ6yBRXVX4lDvK2syqbgUy g1aLTrRfP38ikJl9IzfpcTG1et1KXkMluwuSoyYKy3CCHHJ0HMwuzscVILXy2XdY 9073lgCyrvUeBSgvATHxt9XT0V2uOV9oI+5k+4ui51Sy+w6L2J1zlr3Qxg+oS6uA e0n3XNFYGvWnwAxdzRdmTblzpPV7Anr488uSd+DNmYErrmFKhUCTQIPN/T+vzhto no0We1lg5diHUfotc485EPa7dhnThcpvm90IEcah8+f6EXQOfJ+YIb1zrKHIhbnp phl+ZKq3+S4lKcJKBeP5W1YhvMcy9eipKyf6RP/QigCDwzUODQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnq0aowBiIomeSprSOaAlk1DHxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNl NjFmYi1lZWUyLTQ0MzgtYTM3ZC0yMzEzOWJiYzQyN2EvYWYwMTgxNTctMDMwNy0z YTVkLThiNGQtOWE5MGJkYzI2ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWIzZTYxZmItZWVlMi00NDM4LWEz N2QtMjMxMzliYmM0MjdhL2ViM2U2MWZiLWVlZTItNDQzOC1hMzdkLTIzMTM5YmJj NDI3YS5jcmwwHwYDVR0jBBgwFoAURQM05T/uqDINKSbqTGBXAZJ9RjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNlNjFmYi1lZWUyLTQ0MzgtYTM3ZC0yMzEz OWJiYzQyN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/Z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4uEhDUBigLRgHMfgBkyC+c7VQHxNemVChDkWr04ZvlGewixMcNDyIE nK32MPsLGsBBP1S9gdgQuwqt7eu05wtgfF5+gOdCV8f9k8IbMHFAkentLyk9Plo6 uR7ifSE0uMqnV1ANi5YPoksJMRXdJ4bbi5hcg68ioUNs6mVBpUx5nW+ff/Ot/4Wm pbQmVgQjKGBgTdHW+6nXBweSmBM8BDVIgGKHPLM+sQxpaCoIn9L1JKiFKsAnRFJo Frbm9o2Gf8CHADHtPlmXHHLRvFDoGBZInAeLv/CRDHc62YwF11R4O6aO3PNEDSrg s0XWGFs51+LBEqkRtw1++5/olFk4Frk= -----END CERTIFICATE-----Generated at Mon Oct 26 21:08:48 2026 by rpki-client