$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/f23b3b18-e686-35ae-8bbb-a29250c4d616.roa File: f23b3b18-e686-35ae-8bbb-a29250c4d616.roa (raw, json) Hash identifier: XNvaHZsO6L/VwOrykoENI33c3N+L4dkRTy+YieFke2E= Subject key identifier: 4E:D3:F3:17:5C:52:27:DC:61:87:FF:B5:EF:A7:5E:74:46:6C:99:4D Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584F067248510D3CB5BC4B35F9A0 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/f23b3b18-e686-35ae-8bbb-a29250c4d616.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 210 IP address blocks: 198.60.4.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:48:51:0d:3c:b5:bc:4b:35:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=143dc27c-983a-4dfe-8b2a-b28217724c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:c3:7a:28:21:c8:4a:7c:38:f0:b6:4e:c6: b8:10:2f:af:de:a0:2c:4d:d1:b2:f7:e0:43:8c:c9: ab:8b:ad:88:84:31:f9:6d:f1:be:15:8d:8f:ed:81: 3f:bf:df:95:2e:35:1e:1d:a9:21:52:03:75:63:f2: 34:47:52:9b:03:d9:4e:a0:e4:f0:1c:21:29:3e:43: 76:0d:28:93:8f:0b:9f:9d:fb:91:6d:0c:d8:51:b7: c4:f9:2c:72:71:f5:1c:ee:36:da:52:52:b8:bd:55: 8d:ab:44:2e:16:7c:17:45:92:dc:e1:af:07:0f:1d: 96:3f:ff:aa:97:a8:a9:0b:6e:6c:ce:3a:e9:1f:97: 7f:6b:d6:12:16:05:f3:97:30:1d:c1:39:b2:8a:21: 64:70:4c:72:ad:87:22:06:c9:fa:74:ed:1c:0c:29: d1:10:07:f8:36:a0:4b:69:3a:8e:a3:08:17:72:a9: bc:d8:f2:49:10:17:c4:61:80:81:25:29:36:a0:11: ba:12:21:fa:b5:2c:a5:2d:79:24:a1:e2:65:c3:de: 15:c4:01:23:91:d8:e1:f5:e9:bf:1f:4d:cf:5f:5c: 28:29:02:19:a5:fb:4f:9a:c8:61:ec:bb:28:58:49: 6b:f1:4c:8a:ac:1b:dd:65:c2:be:11:ae:36:e1:91: 15:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D3:F3:17:5C:52:27:DC:61:87:FF:B5:EF:A7:5E:74:46:6C:99:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/f23b3b18-e686-35ae-8bbb-a29250c4d616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 198.60.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4d:08:42:81:06:17:d5:01:a8:98:fa:09:15:f5:ce:fc:c3: 7c:46:97:27:90:26:7c:8d:ea:6e:e0:e3:9f:97:bb:38:d4:e4: 00:5e:02:3f:ca:d5:8c:2a:7e:3e:ac:35:21:aa:d6:c2:0c:2c: 3f:00:d6:13:e5:3b:d4:fb:36:2f:ae:bb:37:01:7a:6b:b4:64: fe:3c:92:cd:05:0d:d6:dd:6e:b8:4c:f2:10:50:c6:d6:0d:5c: e2:fa:68:36:67:65:75:97:f5:51:b6:e9:07:97:d4:b4:1c:42: 06:f6:99:7a:6c:a5:aa:ba:1e:f9:43:1c:bc:67:e0:b5:f5:bf: a1:eb:2a:f5:14:49:42:c2:e1:12:b1:39:76:b5:fb:48:14:cf: fb:d7:a6:f3:fb:e8:c0:9c:85:eb:d2:e5:99:05:4a:1c:30:5a: ea:ee:4e:80:b3:2d:81:30:4a:26:fe:de:ee:a1:7a:de:80:f5: 6b:bd:cf:0e:9f:4a:bc:36:19:11:a5:71:69:04:d7:67:10:d9: e5:87:93:13:6a:9d:6e:ae:f0:84:8e:f4:89:d9:3d:d4:f5:a9: 95:3b:5d:3f:10:17:5d:11:7d:4e:34:50:15:dd:cd:47:dc:5b: e3:38:ae:cc:b2:44:8e:8b:e4:bd:37:e2:31:a4:3c:8f:8b:51: c6:cb:04:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckhRDTy1vEs1+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MTQzZGMyN2MtOTgzYS00ZGZlLThiMmEtYjI4MjE3NzI0YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW7DeighyEp8OPC2Tsa4EC+v3qAsTdGy9+BD jMmri62IhDH5bfG+FY2P7YE/v9+VLjUeHakhUgN1Y/I0R1KbA9lOoOTwHCEpPkN2 DSiTjwufnfuRbQzYUbfE+SxycfUc7jbaUlK4vVWNq0QuFnwXRZLc4a8HDx2WP/+q l6ipC25szjrpH5d/a9YSFgXzlzAdwTmyiiFkcExyrYciBsn6dO0cDCnREAf4NqBL aTqOowgXcqm82PJJEBfEYYCBJSk2oBG6EiH6tSylLXkkoeJlw94VxAEjkdjh9em/ H03PX1woKQIZpftPmshh7LsoWElr8UyKrBvdZcK+Ea424ZEVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7T8xdcUifcYYf/te+nXnRGbJlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvZjIzYjNiMTgtZTY4Ni0z NWFlLThiYmItYTI5MjUwYzRkNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxNCEKBBhfVAaiY+gkV9c78w3xGlyeQJnyN6m7g45+XuzjU5ABeAj/K 1Ywqfj6sNSGq1sIMLD8A1hPlO9T7Ni+uuzcBemu0ZP48ks0FDdbdbrhM8hBQxtYN XOL6aDZnZXWX9VG26QeX1LQcQgb2mXpspaq6HvlDHLxn4LX1v6HrKvUUSULC4RKx OXa1+0gUz/vXpvP76MCchevS5ZkFShwwWuruToCzLYEwSib+3u6het6A9Wu9zw6f Srw2GRGlcWkE12cQ2eWHkxNqnW6u8ISO9InZPdT1qZU7XT8QF10RfU40UBXdzUfc W+M4rsyyRI6L5L034jGkPI+LUcbLBCE= -----END CERTIFICATE-----Generated at Sun Sep 13 09:42:37 2026 by rpki-client