$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43d623dc-7aba-31e6-8df9-5cea3346649e.roa File: 43d623dc-7aba-31e6-8df9-5cea3346649e.roa (raw, json) Hash identifier: vrDvQOCoEJZJCa8oOLcJItqS0+VvpaIXmVFUNdjtino= Subject key identifier: 47:F3:4C:77:38:99:C1:A3:0C:3A:4C:B0:A1:27:EA:FB:C2:FF:50:CF Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D29E571567809935FDC8A0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43d623dc-7aba-31e6-8df9-5cea3346649e.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 6559 IP address blocks: 198.85.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:9e:57:15:67:80:99:35:fd:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=d5810e00-2e47-43fe-a948-abe241d31f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:7e:0e:71:73:00:f6:67:12:7b:f8:b9:82: ce:8e:8b:38:b6:d1:29:12:e6:c3:eb:79:4b:01:86: c7:83:b3:8c:e3:75:7e:cf:13:64:a4:d3:ba:c3:89: 19:be:33:81:c5:37:1f:a1:e6:ab:68:f8:56:45:7b: 22:2a:bd:e9:58:35:79:ae:3c:fb:22:86:75:3a:d0: c3:02:e0:6b:e6:ec:cb:5f:fb:03:25:59:c1:92:e2: cf:2c:19:53:d0:e7:e8:6b:fd:8b:a9:e2:c2:98:fd: 2f:a5:f1:32:3d:50:cf:e5:7f:8b:e3:a7:72:67:2b: d1:8d:dc:df:a9:fa:fc:0f:7f:3b:b8:8b:0d:f8:e6: 2d:da:64:73:bc:ae:97:09:5b:65:da:94:64:73:b2: 2f:d6:c9:d7:a2:b8:b9:32:01:a4:63:09:ac:27:f8: cb:e1:66:5f:7f:ce:7e:20:3c:d5:3a:89:fd:b0:26: f1:7e:d3:58:fa:5a:f0:95:2b:31:25:2c:74:2e:52: 64:24:7b:31:a0:fd:5c:a3:a8:4c:70:60:5b:32:1d: a5:cc:ab:c6:e2:9b:51:1e:de:1d:6e:39:9c:49:c0: 3d:8f:e9:38:4f:21:93:fa:29:ce:72:3c:5c:53:53: f7:0c:05:59:5b:64:46:62:d9:37:64:94:df:90:f5: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:4C:77:38:99:C1:A3:0C:3A:4C:B0:A1:27:EA:FB:C2:FF:50:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43d623dc-7aba-31e6-8df9-5cea3346649e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:61:58:03:2e:2f:7b:76:40:ae:57:64:99:73:c3:a3:99:cc: 87:a3:88:70:f1:c6:fe:03:eb:e7:4b:73:40:c0:5b:72:08:95: bc:f7:da:f7:fc:c6:99:ed:7a:2e:a7:c2:8e:b9:f5:4b:24:86: 88:4e:88:b2:35:0d:d0:ca:8d:8a:1b:52:a6:28:aa:28:bf:c7: d7:54:84:b8:ee:c7:f8:5a:53:da:ba:c3:c6:87:4a:92:54:06: 14:c3:3d:73:cd:5b:c3:37:c4:63:aa:5b:0f:26:ba:fe:62:2b: 6c:ae:64:1a:90:5d:08:fa:1e:36:96:e6:0c:50:7c:80:8b:dc: 26:be:02:4f:e1:ec:b6:a6:b7:48:dc:89:16:33:24:20:56:f3: fd:60:46:98:1e:24:43:83:c9:58:27:6c:86:9d:13:30:4c:87: 25:ab:24:73:89:97:d7:fc:96:34:28:ac:ff:bd:33:87:96:6c: af:6c:27:61:ed:35:fa:5d:80:af:53:0e:a1:2f:a0:e4:56:ed: 7b:c3:0a:75:5f:b5:b0:65:0e:34:fa:4d:18:4e:6a:e0:f6:23: 5e:26:39:85:73:33:c7:40:e6:02:8e:1c:b6:40:9a:fa:dc:07: b7:b8:6b:43:21:52:e9:91:45:61:ed:47:2a:85:8a:f7:1c:4d: ec:da:ed:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0p5XFWeAmTX9yKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDU4MTBlMDAtMmU0Ny00M2ZlLWE5NDgtYWJlMjQxZDMxZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyot+DnFzAPZnEnv4uYLOjos4ttEpEubD63lL AYbHg7OM43V+zxNkpNO6w4kZvjOBxTcfoearaPhWRXsiKr3pWDV5rjz7IoZ1OtDD AuBr5uzLX/sDJVnBkuLPLBlT0Ofoa/2LqeLCmP0vpfEyPVDP5X+L46dyZyvRjdzf qfr8D387uIsN+OYt2mRzvK6XCVtl2pRkc7Iv1snXori5MgGkYwmsJ/jL4WZff85+ IDzVOon9sCbxftNY+lrwlSsxJSx0LlJkJHsxoP1co6hMcGBbMh2lzKvG4ptRHt4d bjmcScA9j+k4TyGT+inOcjxcU1P3DAVZW2RGYtk3ZJTfkPUuKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfzTHc4mcGjDDpMsKEn6vvC/1DPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDNkNjIzZGMtN2FiYS0z MWU2LThkZjktNWNlYTMzNDY2NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZhWAMuL3t2QK5XZJlzw6OZzIejiHDxxv4D6+dLc0DAW3IIlbz32vf8 xpntei6nwo659UskhohOiLI1DdDKjYobUqYoqii/x9dUhLjux/haU9q6w8aHSpJU BhTDPXPNW8M3xGOqWw8muv5iK2yuZBqQXQj6HjaW5gxQfICL3Ca+Ak/h7Lamt0jc iRYzJCBW8/1gRpgeJEODyVgnbIadEzBMhyWrJHOJl9f8ljQorP+9M4eWbK9sJ2Ht NfpdgK9TDqEvoORW7XvDCnVftbBlDjT6TRhOauD2I14mOYVzM8dA5gKOHLZAmvrc B7e4a0MhUumRRWHtRyqFivccTeza7VQ= -----END CERTIFICATE-----Generated at Sun Oct 11 17:13:51 2026 by rpki-client