$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa File: 40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa (raw, json) Hash identifier: /qVgN++5W37ZIqLr0zNnNGnyAWxTfYncJ4n8Mvqx1Jw= Subject key identifier: A0:0B:3D:52:5B:54:21:EA:2C:7C:46:51:C7:1B:FD:66:5E:C5:BA:4B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D29EFC74781F996DD82200 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 6559 IP address blocks: 198.86.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:9e:fc:74:78:1f:99:6d:d8:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=b1edc5f8-fcd9-4cc9-843e-2211ac407ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:d3:93:a2:86:82:65:e9:a4:a1:a2:99:e2: d2:0a:71:80:2a:91:bb:c4:7e:74:45:57:03:91:34: 0c:16:52:f7:11:a1:f7:33:5e:fb:6d:37:99:1e:d9: da:7e:11:20:4a:67:ce:3a:11:ec:85:67:66:cf:70: c6:7c:df:c8:04:e1:4e:57:0b:77:22:b0:81:6c:1d: c7:81:df:5a:66:6f:d6:4a:cc:c8:cb:17:52:47:d7: dd:49:82:e2:67:61:c1:cc:c3:97:32:36:bf:19:74: 1e:07:11:03:f5:7c:1a:16:bb:1d:e2:62:f1:76:f6: 12:cb:30:b8:6b:d6:d4:76:49:e0:d3:c5:c6:6e:86: ac:65:e3:61:66:4d:ae:53:23:bc:71:bc:b9:a9:2c: d8:b7:75:ea:c4:2f:8f:bd:b9:98:ab:cd:2b:34:4e: d0:aa:95:3c:85:cc:24:5a:8c:61:9b:f2:94:bc:06: eb:3d:e2:f3:f0:9a:ba:34:df:b3:4d:ac:39:fa:19: 19:16:b4:c6:e2:87:9d:a7:6d:23:8e:1a:b1:97:ce: f3:4a:85:70:dd:bf:a7:0e:a0:b9:81:da:81:de:6a: dd:32:15:74:f9:5c:c0:56:47:ae:e1:da:4d:9a:90: ca:f6:9a:1c:cf:52:51:c8:da:f9:1b:d9:67:ae:f3: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:3D:52:5B:54:21:EA:2C:7C:46:51:C7:1B:FD:66:5E:C5:BA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e9:4a:1c:d2:9b:d6:05:03:11:be:d5:34:ef:fa:2a:6e:4b: 50:01:c6:1d:fc:fc:8b:35:e3:c6:b6:2a:01:41:c3:b1:f8:55: 99:0f:8e:2d:c9:65:30:51:e3:42:4c:4e:0b:eb:5e:12:62:28: 02:1c:0e:28:19:27:3d:f0:6f:f7:01:48:fc:f5:4c:e9:16:0f: 4a:c9:3a:a5:8e:b7:60:57:9b:df:b6:c7:ea:bb:3b:66:5e:98: 4a:d4:69:9d:ec:c1:e7:d0:41:36:30:c6:66:8b:5d:d8:27:39: a0:9e:d6:19:3e:a6:b1:64:86:f1:d2:c7:f6:25:9d:0f:9e:c7: 5c:7f:26:8a:9c:24:0c:cb:da:1d:27:3c:6c:43:ab:2a:47:91: 1b:9e:f9:c0:73:3f:54:b2:0f:21:7d:ab:11:af:55:a2:9b:24: a7:a7:41:91:d8:2f:19:04:c9:93:57:84:09:89:20:f7:27:0c: ff:a0:a4:eb:17:7c:31:b9:10:95:ab:a1:57:88:9c:5c:31:04: 9d:1f:91:57:f9:eb:d5:59:a5:cd:0e:cb:bc:3d:7a:18:5c:1e: b7:b2:e9:a4:c0:c3:45:cc:4f:4f:81:b1:65:8b:40:98:7b:2f: 59:ab:ef:39:41:15:18:83:26:5a:d3:78:bb:f1:d3:79:11:3b: 90:79:d2:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0p78dHgfmW3YIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjFlZGM1ZjgtZmNkOS00Y2M5LTg0M2UtMjIxMWFjNDA3YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMPTk6KGgmXppKGimeLSCnGAKpG7xH50RVcD kTQMFlL3EaH3M177bTeZHtnafhEgSmfOOhHshWdmz3DGfN/IBOFOVwt3IrCBbB3H gd9aZm/WSszIyxdSR9fdSYLiZ2HBzMOXMja/GXQeBxED9XwaFrsd4mLxdvYSyzC4 a9bUdkng08XGboasZeNhZk2uUyO8cby5qSzYt3XqxC+PvbmYq80rNE7QqpU8hcwk Woxhm/KUvAbrPeLz8Jq6NN+zTaw5+hkZFrTG4oedp20jjhqxl87zSoVw3b+nDqC5 gdqB3mrdMhV0+VzAVkeu4dpNmpDK9pocz1JRyNr5G9lnrvPIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKALPVJbVCHqLHxGUccb/WZexbpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDBmMzRhYzAtZDE3MS0z ZTIxLWJjMWQtN2Q0Yzk3ZThhMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfpShzSm9YFAxG+1TTv+ipuS1ABxh38/Is148a2KgFBw7H4VZkPji3J ZTBR40JMTgvrXhJiKAIcDigZJz3wb/cBSPz1TOkWD0rJOqWOt2BXm9+2x+q7O2Ze mErUaZ3swefQQTYwxmaLXdgnOaCe1hk+prFkhvHSx/YlnQ+ex1x/JoqcJAzL2h0n PGxDqypHkRue+cBzP1SyDyF9qxGvVaKbJKenQZHYLxkEyZNXhAmJIPcnDP+gpOsX fDG5EJWroVeInFwxBJ0fkVf569VZpc0Oy7w9ehhcHrey6aTAw0XMT0+BsWWLQJh7 L1mr7zlBFRiDJlrTeLvx03kRO5B50vY= -----END CERTIFICATE-----Generated at Sun Oct 11 06:15:00 2026 by rpki-client