$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa File: df5adfc5-c427-36a1-9353-c23d1976c935.roa (raw, json) Hash identifier: oSGt8EpVXquEzga9ewAabeCsbFwamZD2023MFSOFvb4= Subject key identifier: 42:C1:2F:1A:09:FD:79:59:2E:A6:C9:2F:57:93:22:3A:E7:A3:FA:87 Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Certificate serial: 010D0C9F4328584F82ADC47DC962A7F251C1A76C Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 10310 IP address blocks: 198.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:c4:7d:c9:62:a7:f2:51:c1:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=e1e0aac2-21f6-41c0-8e45-81e33f335598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:af:2a:d2:1b:c1:78:4b:ad:e7:22:c5:7f: aa:7c:ff:b6:80:0d:47:b3:e8:df:92:32:7b:10:02: a0:f8:6b:0d:8f:bc:9b:46:6c:0d:c4:be:02:ae:de: 8b:51:0e:97:3f:89:48:61:ae:f5:8b:50:e5:9a:7d: 2f:41:25:b0:8e:49:51:ad:f1:f6:88:2a:dc:4a:53: db:28:ce:92:6c:e3:09:91:bb:9f:27:6b:0a:80:67: a1:78:5b:2e:6d:49:f1:bc:ee:66:4a:4b:45:bd:08: e1:51:1b:fd:e3:00:c9:51:3f:7c:74:30:e1:b7:44: f8:b5:4d:7c:ba:62:e6:30:d9:1a:b6:e0:da:ba:46: 9a:e5:a8:82:12:27:6a:a2:f5:9a:5d:89:de:84:6e: 8c:b1:15:e0:a2:dd:41:34:78:5b:2a:81:e1:bc:cc: 53:97:ed:41:5b:ce:ef:8a:da:73:0d:88:c1:9a:12: d1:d0:dd:f2:19:7d:1c:3a:3e:45:ea:db:34:f9:19: 3c:7a:83:52:fb:d7:04:1c:af:3f:8d:2b:32:fc:0a: aa:7f:68:ab:26:8d:83:a4:26:95:8a:65:24:e2:04: fb:bd:75:69:0d:09:7a:75:ed:a4:e2:b1:5c:40:1d: 94:2d:63:d6:75:9c:d6:0c:7a:c4:cd:ad:8c:11:22: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:2F:1A:09:FD:79:59:2E:A6:C9:2F:57:93:22:3A:E7:A3:FA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl X509v3 Authority Key Identifier: keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer sbgp-ipAddrBlock: critical IPv4: 198.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:de:5c:80:3a:f2:eb:fe:e6:82:b6:33:2b:04:49:96:5f:86: 89:13:66:68:67:82:a1:f5:da:b2:8e:1b:67:7e:33:3d:e2:83: 9f:99:ce:82:cf:e4:fb:4d:50:71:d2:09:57:e3:fd:05:65:f9: 3e:09:c1:5f:e2:d5:9a:cb:06:c0:1f:6b:7f:23:04:06:62:88: 4a:18:78:9a:6c:7a:a9:c5:d8:a7:9a:ca:e6:27:49:e4:aa:dd: 19:ee:94:ea:15:92:bd:2d:c2:1a:40:05:6a:01:57:d4:b6:a2: 21:e4:40:47:a8:63:cf:9c:dc:54:01:7d:21:ec:81:60:e9:99: 05:4b:da:b2:26:0e:d5:18:1f:c3:28:fd:a3:37:e1:18:4c:ae: 4f:e6:e8:28:7b:3b:20:c7:94:0c:2d:53:4b:14:80:54:a4:10: 8d:de:34:16:3a:40:81:b0:b6:75:13:72:ff:56:a4:09:57:c9: 09:70:a5:db:a3:89:50:1e:4e:cd:6a:1b:87:d1:f3:8d:82:a6: f1:cf:1b:f8:ee:54:04:5f:43:27:55:66:cc:1d:c2:d3:47:fe: 83:2e:26:9a:30:fd:b8:4d:f3:bc:77:5c:54:60:fd:02:d4:3a: 9b:f3:ce:a6:42:28:4a:3e:59:21:25:1f:8a:15:aa:cf:cd:cf: c4:a5:66:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrcR9yWKn8lHBp2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5 NDgxMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk ZTFlMGFhYzItMjFmNi00MWMwLThlNDUtODFlMzNmMzM1NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRevKtIbwXhLrecixX+qfP+2gA1Hs+jfkjJ7 EAKg+GsNj7ybRmwNxL4Crt6LUQ6XP4lIYa71i1Dlmn0vQSWwjklRrfH2iCrcSlPb KM6SbOMJkbufJ2sKgGeheFsubUnxvO5mSktFvQjhURv94wDJUT98dDDht0T4tU18 umLmMNkatuDaukaa5aiCEidqovWaXYnehG6MsRXgot1BNHhbKoHhvMxTl+1BW87v itpzDYjBmhLR0N3yGX0cOj5F6ts0+Rk8eoNS+9cEHK8/jSsy/Aqqf2irJo2DpCaV imUk4gT7vXVpDQl6de2k4rFcQB2ULWPWdZzWDHrEza2MESLpyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELBLxoJ/XlZLqbJL1eTIjrno/qHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1 ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvZGY1YWRmYzUtYzQyNy0z NmExLTkzNTMtYzIzZDE5NzZjOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5 ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/eXIA68uv+5oK2MysESZZfhokTZmhngqH12rKOG2d+Mz3ig5+ZzoLP 5PtNUHHSCVfj/QVl+T4JwV/i1ZrLBsAfa38jBAZiiEoYeJpseqnF2KeayuYnSeSq 3RnulOoVkr0twhpABWoBV9S2oiHkQEeoY8+c3FQBfSHsgWDpmQVL2rImDtUYH8Mo /aM34RhMrk/m6Ch7OyDHlAwtU0sUgFSkEI3eNBY6QIGwtnUTcv9WpAlXyQlwpduj iVAeTs1qG4fR842CpvHPG/juVARfQydVZswdwtNH/oMuJpow/bhN87x3XFRg/QLU OpvzzqZCKEo+WSElH4oVqs/Nz8SlZv0= -----END CERTIFICATE-----Generated at Sun Nov 1 23:23:18 2026 by rpki-client