$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa File: 843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json) Hash identifier: PPKxD1XxP5R+QpC1Py7lmYJpKooUG6Hmp9mcKE8eOjE= Subject key identifier: BC:48:BE:D4:8D:4D:89:0B:BC:58:8E:41:E7:18:BF:29:B8:66:32:C0 Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F4328584FAB28A751E3F9E1E2319C5000 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 2572 IP address blocks: 198.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:a7:51:e3:f9:e1:e2:31:9c:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=b342349c-0ec1-4f67-9b18-21a120647e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:2c:9c:1f:a0:4f:14:3c:e8:95:e8:28:9b: 07:43:07:3c:c7:3a:bd:ae:0a:d8:15:79:d4:e6:6c: 39:6a:bd:a1:32:7e:5e:79:d3:10:73:99:e4:d2:d5: 7e:07:2e:04:e8:36:d4:e3:77:a5:08:0a:70:63:9d: 2e:be:22:bc:2d:85:96:c1:7e:d8:88:ea:25:2e:1e: 38:8e:8f:97:46:b2:b9:2d:6e:2f:bf:6a:3b:36:98: 17:f5:82:bc:17:c3:59:3d:28:68:22:3d:3d:54:da: 0b:bc:8d:c4:63:07:57:d0:61:ca:8c:49:2a:56:de: 8f:e4:8e:f0:de:bb:21:95:33:8f:fe:23:7f:f9:ae: 69:5e:d7:7d:17:30:90:d1:1d:ea:41:91:f4:75:dd: f1:c9:1e:e9:e6:86:2f:05:6f:70:63:a4:fd:81:ca: 9e:f1:ad:9a:f2:5b:34:f1:9b:6e:65:06:71:77:01: c3:b2:fc:d4:3b:a3:5f:34:c9:78:83:6d:a7:e7:29: 75:df:74:5e:3c:1d:dc:1c:70:7e:c1:8b:36:e8:bd: f2:74:35:45:bf:a9:f4:96:5b:62:d2:08:ef:28:0b: a2:93:87:af:65:12:f1:71:fa:c1:29:48:7d:3f:f5: 29:b1:fa:fe:55:c5:b0:98:c5:95:d1:51:41:ad:52: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:BE:D4:8D:4D:89:0B:BC:58:8E:41:E7:18:BF:29:B8:66:32:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 198.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:14:27:d0:d7:fb:95:65:0c:87:b6:ce:3c:90:f6:4c:2f:b5: 25:a7:f5:c6:39:fd:a6:78:2e:25:fe:88:67:b9:f3:39:d0:47: 23:73:60:4d:fc:8a:96:7c:18:fb:1b:cb:67:52:67:6a:cb:4a: 44:b1:64:29:7d:7b:a0:63:ca:24:dc:e8:4e:6d:33:3b:b1:e2: 1e:66:04:bc:cd:ae:14:73:fd:15:1f:b9:81:ee:b0:2e:d6:58: 5f:86:cc:8c:48:18:89:fa:7e:ae:22:64:ed:7d:32:63:74:6b: 2c:cb:af:a2:7c:99:b1:ac:dc:fb:17:2a:fd:ee:8f:81:98:4c: 59:92:c8:8d:3b:15:48:4c:25:ec:ef:bf:f7:d4:f8:18:27:f1: e2:3f:fb:c2:a2:6a:68:0e:d5:94:98:a1:95:ec:44:c6:cb:f1: ab:5b:84:0f:e5:9b:fd:80:62:49:28:99:36:65:52:17:e8:6e: 38:93:00:94:cf:9f:31:da:0a:e0:e5:15:e3:3e:65:a1:66:3d: 68:ae:4f:f0:5a:37:fa:62:eb:3e:73:89:23:bb:c1:26:6e:72: e5:e9:c8:ed:06:38:d8:dd:dc:32:5b:4f:0e:c2:18:16:50:91: 81:12:93:b5:e1:3f:02:ce:51:65:d4:b1:e1:31:51:b6:ce:87: 55:5e:53:0a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+rKKdR4/nh4jGcUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YjM0MjM0OWMtMGVjMS00ZjY3LTliMTgtMjFhMTIwNjQ3ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosksnB+gTxQ86JXoKJsHQwc8xzq9rgrYFXnU 5mw5ar2hMn5eedMQc5nk0tV+By4E6DbU43elCApwY50uviK8LYWWwX7YiOolLh44 jo+XRrK5LW4vv2o7NpgX9YK8F8NZPShoIj09VNoLvI3EYwdX0GHKjEkqVt6P5I7w 3rshlTOP/iN/+a5pXtd9FzCQ0R3qQZH0dd3xyR7p5oYvBW9wY6T9gcqe8a2a8ls0 8ZtuZQZxdwHDsvzUO6NfNMl4g22n5yl133RePB3cHHB+wYs26L3ydDVFv6n0llti 0gjvKAuik4evZRLxcfrBKUh9P/Upsfr+VcWwmMWV0VFBrVLxFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLxIvtSNTYkLvFiOQecYvym4ZjLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvODQzYjZhMWMtOWYwOS0z MmU2LWFhMDMtZDVkZDA1ODNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWxQn0Nf7lWUMh7bOPJD2TC+1Jaf1xjn9pnguJf6IZ7nzOdBHI3NgTfyK lnwY+xvLZ1JnastKRLFkKX17oGPKJNzoTm0zO7HiHmYEvM2uFHP9FR+5ge6wLtZY X4bMjEgYifp+riJk7X0yY3RrLMuvonyZsazc+xcq/e6PgZhMWZLIjTsVSEwl7O+/ 99T4GCfx4j/7wqJqaA7VlJihlexExsvxq1uED+Wb/YBiSSiZNmVSF+huOJMAlM+f MdoK4OUV4z5loWY9aK5P8Fo3+mLrPnOJI7vBJm5y5enI7QY42N3cMltPDsIYFlCR gRKTteE/As5RZdSx4TFRts6HVV5TCg== -----END CERTIFICATE-----Generated at Sat Oct 31 23:55:58 2026 by rpki-client