$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa File: a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json) Hash identifier: 4JJdK8hSkivUBPSfrNrvGeBLKmSErZWSxSAI/yibESk= Subject key identifier: 7B:DE:2D:4F:2E:75:2F:8F:C0:CC:47:19:9E:18:F5:D7:C6:9D:B9:AC Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584FA593406A46C559C5E8A13E80 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 11052 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:40:6a:46:c5:59:c5:e8:a1:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=755019e3-4283-490c-a1f1-2f0e12b44649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:0a:2f:2d:b2:d5:5f:0a:e6:62:7b:6f:e8: 0f:59:a8:17:c4:df:9c:11:49:94:23:28:b9:83:70: ae:07:9c:2a:2e:c6:66:70:ab:37:ad:58:7f:06:7a: c8:97:57:d8:e4:0d:a6:84:ff:d2:2a:5a:ac:4a:fa: a4:f3:8f:6d:49:8e:5c:d2:df:7d:76:66:0e:a7:15: 97:05:f8:ac:d7:bd:61:a1:f9:d9:21:27:c8:96:a2: cb:d9:d8:1c:61:e0:4f:d8:be:14:be:0f:00:e6:a4: 06:fd:fb:c7:9e:49:39:50:dd:d5:77:66:52:69:f2: 99:a9:c7:3b:1a:25:7f:c0:1f:a3:4e:32:26:01:7d: ce:09:ad:d5:39:22:f2:08:65:e2:38:2c:b1:33:bb: c1:80:56:6c:72:76:a8:a1:d2:51:b1:4e:35:e7:68: c2:c0:07:1b:31:bf:5a:9f:ad:2c:3f:91:dc:2b:a2: 2f:72:c1:13:5c:f0:86:db:b0:e1:3e:4b:75:5b:bc: 2e:4b:82:9a:b2:d4:56:0b:b6:88:ee:9f:66:e4:a9: 81:c8:be:81:8d:8f:5b:31:5d:2b:90:dd:be:ee:01: ce:d5:47:2d:93:18:79:56:ff:ac:1f:56:61:ed:d9: 24:3f:cd:4b:67:02:fa:21:2b:ef:f0:c0:b3:f8:1b: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DE:2D:4F:2E:75:2F:8F:C0:CC:47:19:9E:18:F5:D7:C6:9D:B9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bd:69:f5:9d:b2:30:eb:fd:99:67:f7:83:4e:15:26:ab:5c: cc:c5:3a:41:da:aa:4b:11:ac:5c:7d:4c:27:bb:cb:63:c7:c7: 72:96:62:0b:0f:2f:f4:6e:3e:48:f1:71:6d:97:c7:70:fa:65: b2:27:95:bd:16:bc:9c:ae:fa:ff:b7:a4:52:04:dd:6a:05:8e: df:15:23:b3:06:08:d4:ca:8a:f9:ab:f2:5a:e5:77:a1:7a:ac: fe:d5:0e:15:97:8a:10:b3:9f:17:cd:9c:6c:5b:38:3d:bc:fc: 05:2a:e5:3e:d3:6e:ac:a4:da:ec:3d:94:72:d6:5a:39:3d:9f: 92:f9:94:09:09:2e:a4:9c:53:c1:f0:ef:61:67:e5:6e:ae:10: 0b:0a:ac:18:f3:78:35:56:72:34:19:19:52:05:40:60:44:55: 32:7c:2c:66:22:f5:8a:fe:a1:12:c1:e9:9f:97:ac:96:59:97: c9:39:45:00:d9:48:be:c0:d3:05:e7:2e:7b:35:87:10:93:83: 9f:99:83:35:0f:39:36:a8:6e:3f:4d:49:72:2a:ab:64:19:1b: e5:12:52:6c:09:74:16:81:7c:1a:48:7f:db:ab:0e:05:78:0f: 7e:e1:35:58:2c:2c:14:8c:b2:64:68:5e:39:2f:da:72:63:b5: aa:cd:35:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lk0BqRsVZxeihPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk NzU1MDE5ZTMtNDI4My00OTBjLWExZjEtMmYwZTEyYjQ0NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWQKLy2y1V8K5mJ7b+gPWagXxN+cEUmUIyi5 g3CuB5wqLsZmcKs3rVh/BnrIl1fY5A2mhP/SKlqsSvqk849tSY5c0t99dmYOpxWX Bfis171hofnZISfIlqLL2dgcYeBP2L4Uvg8A5qQG/fvHnkk5UN3Vd2ZSafKZqcc7 GiV/wB+jTjImAX3OCa3VOSLyCGXiOCyxM7vBgFZscnaoodJRsU4152jCwAcbMb9a n60sP5HcK6IvcsETXPCG27DhPkt1W7wuS4KastRWC7aI7p9m5KmByL6BjY9bMV0r kN2+7gHO1Uctkxh5Vv+sH1Zh7dkkP81LZwL6ISvv8MCz+Bt/owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHveLU8udS+PwMxHGZ4Y9dfGnbmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTI0ZGM3OTYtYTM1NC0z NTM0LTg4MDctYzdmNGIzNDc1MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE29afWdsjDr/Zln94NOFSarXMzFOkHaqksRrFx9TCe7y2PHx3KWYgsP L/RuPkjxcW2Xx3D6ZbInlb0WvJyu+v+3pFIE3WoFjt8VI7MGCNTKivmr8lrld6F6 rP7VDhWXihCznxfNnGxbOD28/AUq5T7Tbqyk2uw9lHLWWjk9n5L5lAkJLqScU8Hw 72Fn5W6uEAsKrBjzeDVWcjQZGVIFQGBEVTJ8LGYi9Yr+oRLB6Z+XrJZZl8k5RQDZ SL7A0wXnLns1hxCTg5+ZgzUPOTaobj9NSXIqq2QZG+USUmwJdBaBfBpIf9urDgV4 D37hNVgsLBSMsmRoXjkv2nJjtarNNfk= -----END CERTIFICATE-----Generated at Wed Oct 28 11:42:17 2026 by rpki-client