$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a571f54-a72b-30e7-ad50-5f33af214f15.roa File: 9a571f54-a72b-30e7-ad50-5f33af214f15.roa (raw, json) Hash identifier: T2EoHG8r2s5j4Y/rTGmriXjNG8Dg1s8GN3RcGPpN7NI= Subject key identifier: E2:C9:76:5A:73:9B:E0:68:A7:0B:CA:26:F0:29:E8:A3:5B:FA:BE:CF Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D29EEFF74F20E1710208C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a571f54-a72b-30e7-ad50-5f33af214f15.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 81 IP address blocks: 198.86.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:9e:ef:f7:4f:20:e1:71:02:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=37d574d2-8afa-425b-aaa0-1f3abb596701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:65:dd:ed:8f:8a:27:0b:8b:71:7b:21:8d: 85:b5:5f:97:c2:90:93:ff:24:3b:6f:41:27:ac:c2: 7c:dd:d7:87:3b:40:7b:74:5f:30:aa:4f:60:ff:e4: 27:44:2a:c6:bd:79:3e:a4:b6:76:86:95:c0:b4:f6: d7:e0:42:c5:09:e0:aa:6c:90:20:e9:12:41:f9:93: 9a:d9:30:f6:19:28:ef:92:66:3f:c6:57:f9:15:df: 34:f7:05:79:1c:63:43:71:04:b0:12:aa:a8:cb:38: 48:01:14:11:0f:42:40:0f:24:95:af:6f:c2:33:2c: d7:02:14:99:b0:b1:89:b8:d6:3b:e1:c3:49:5a:9f: f5:1a:28:0c:77:b3:76:90:7d:bd:1f:22:2a:ff:e3: e0:94:86:50:0a:78:9d:27:2f:7b:3d:4e:39:af:54: cf:8b:42:92:39:8f:07:92:62:cf:e3:f6:36:d6:86: 13:0f:79:a4:52:83:f5:1f:d8:e6:56:48:1a:34:17: e9:ff:32:3a:76:a8:64:95:64:34:d0:54:dd:7e:04: ce:85:93:b3:c6:b1:5c:75:ec:8f:ff:33:db:75:e1: 8a:cb:4c:fd:84:84:c8:af:e4:3f:1f:ff:2d:21:0c: 98:c9:91:1a:bf:3a:52:82:81:0d:13:4e:c4:67:e6: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:76:5A:73:9B:E0:68:A7:0B:CA:26:F0:29:E8:A3:5B:FA:BE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a571f54-a72b-30e7-ad50-5f33af214f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2f:83:a2:b1:a9:8d:19:ef:84:e0:3b:68:8e:4e:1d:04:c2: 81:16:72:02:b5:9d:30:b5:e8:8a:09:f9:fc:fc:ab:da:af:1b: b7:f0:a2:a2:71:b3:4c:75:7a:85:b0:73:ec:2a:35:d9:fc:5f: 0d:54:a9:6c:64:58:a9:dd:26:16:ab:86:a0:c6:1d:c2:0f:1d: 7c:41:b1:5f:e5:aa:6c:26:23:52:09:c7:bb:3c:02:99:02:00: 3f:09:d3:1f:0c:b8:38:af:25:33:1e:a0:cb:c3:d8:ef:28:d3: 54:bd:9a:83:8d:4d:b8:8a:f7:07:7d:d6:bc:1c:8f:5d:8c:92: d2:32:6a:c0:6b:f8:74:94:d0:9f:3c:ae:90:ae:76:15:1e:28: 0e:82:3d:42:12:49:2b:43:46:3c:c8:3a:99:13:0f:14:c7:92: bb:95:12:9b:47:97:bc:4c:33:11:9a:18:1f:93:fe:15:42:c0: 34:bf:98:42:d8:a7:2b:da:85:77:85:61:5e:c5:7d:9e:a7:53: da:46:19:64:24:15:bc:1f:38:8a:82:a7:5a:08:79:0d:24:ff: 30:2c:38:cf:88:89:ea:97:e1:0d:0e:3c:47:1a:82:36:27:92: 77:46:50:0d:fc:03:d4:34:9f:ef:a1:ef:f7:0d:cc:eb:03:fd: cb:47:2c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0p7v908g4XECCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MzdkNTc0ZDItOGFmYS00MjViLWFhYTAtMWYzYWJiNTk2NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw5l3e2PiicLi3F7IY2FtV+XwpCT/yQ7b0En rMJ83deHO0B7dF8wqk9g/+QnRCrGvXk+pLZ2hpXAtPbX4ELFCeCqbJAg6RJB+ZOa 2TD2GSjvkmY/xlf5Fd809wV5HGNDcQSwEqqoyzhIARQRD0JADySVr2/CMyzXAhSZ sLGJuNY74cNJWp/1GigMd7N2kH29HyIq/+PglIZQCnidJy97PU45r1TPi0KSOY8H kmLP4/Y21oYTD3mkUoP1H9jmVkgaNBfp/zI6dqhklWQ00FTdfgTOhZOzxrFcdeyP /zPbdeGKy0z9hITIr+Q/H/8tIQyYyZEavzpSgoENE07EZ+ZFBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLJdlpzm+BopwvKJvAp6KNb+r7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWE1NzFmNTQtYTcyYi0z MGU3LWFkNTAtNWYzM2FmMjE0ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcvg6KxqY0Z74TgO2iOTh0EwoEWcgK1nTC16IoJ+fz8q9qvG7fwoqJx s0x1eoWwc+wqNdn8Xw1UqWxkWKndJharhqDGHcIPHXxBsV/lqmwmI1IJx7s8ApkC AD8J0x8MuDivJTMeoMvD2O8o01S9moONTbiK9wd91rwcj12MktIyasBr+HSU0J88 rpCudhUeKA6CPUISSStDRjzIOpkTDxTHkruVEptHl7xMMxGaGB+T/hVCwDS/mELY pyvahXeFYV7FfZ6nU9pGGWQkFbwfOIqCp1oIeQ0k/zAsOM+IieqX4Q0OPEcagjYn kndGUA38A9Q0n++h7/cNzOsD/ctHLMI= -----END CERTIFICATE-----Generated at Fri Oct 9 20:21:22 2026 by rpki-client