$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa File: 25c41bce-b5c1-3b2a-b684-645e9a83a595.roa (raw, json) Hash identifier: h9qQ9HNEjt2VpvGm2gpWHyEbtoRSprva7/IrjGgW8F4= Subject key identifier: 96:AF:A1:D6:14:47:17:17:B7:CE:C0:C8:5C:F2:DE:68:CE:D9:C7:26 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584F119D18985D15D06439CEA740 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 4181 IP address blocks: 198.150.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:18:98:5d:15:d0:64:39:ce:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d7ca8441-f3db-425c-84ab-514e11ed77c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:ef:9b:10:01:a0:30:52:5a:78:c9:c6:43: 55:c5:0f:56:5b:d5:2e:f7:92:0e:f1:74:12:90:99: a7:6d:4a:96:52:26:3e:e3:64:58:45:cc:d3:ff:d5: f4:28:12:31:e6:7a:30:d3:9b:36:ac:d7:f3:96:22: 14:f9:82:09:84:19:ab:85:4d:1e:2e:f5:10:29:25: 4e:db:b0:54:6f:7e:47:97:93:03:dc:18:39:13:ac: 2c:b9:2a:f4:06:3e:20:93:89:f4:1d:b4:e1:21:21: bc:89:f4:c2:fd:8d:e0:ae:7b:4c:f0:ed:68:04:30: 1f:c8:d9:7a:2a:e9:02:dc:32:f1:aa:ff:79:1a:50: 37:ab:db:1b:90:e9:75:f1:f0:a1:e3:53:8a:f5:19: ab:79:5f:3b:4d:d0:80:dd:41:e7:e4:1a:67:0d:b7: 30:8e:98:cc:57:0f:87:a2:f4:e1:2d:a7:b4:47:8d: 20:57:8c:eb:9f:7c:9d:83:7e:51:b3:b6:3c:08:b8: 4e:7c:13:21:77:b8:c4:45:16:3f:d3:cc:3a:db:b9: a0:2f:c0:73:0e:af:a5:1c:96:ae:d4:06:5a:b6:06: d8:17:14:18:eb:75:ee:1a:f5:06:30:65:9d:66:b3: cb:1a:43:d0:03:1b:f1:6c:c6:e6:96:5f:22:f5:15: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AF:A1:D6:14:47:17:17:B7:CE:C0:C8:5C:F2:DE:68:CE:D9:C7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:39:05:fb:71:ce:d4:29:d3:e6:81:a8:2a:40:b7:b3:bd:57: 9b:b2:b5:0c:83:af:52:49:99:2e:3a:bb:90:24:a8:83:01:40: f1:d0:ad:da:97:69:50:df:aa:08:d7:57:1c:8c:e1:9f:56:47: 3b:e7:eb:4c:5b:62:d9:a1:6b:13:01:31:0d:1b:02:67:a3:3d: 2f:dd:21:de:31:67:24:7e:9b:80:bd:68:05:76:b0:93:67:9a: c6:f2:0f:f9:e4:a7:b0:57:46:03:18:5d:d1:43:b1:f6:98:6d: b4:63:d4:26:09:57:eb:ce:b0:d4:c7:39:87:85:25:83:fe:9d: ce:62:c8:c0:8a:7d:18:37:65:34:ff:5d:63:2b:fa:b7:1a:57: 09:b1:bb:4a:43:1d:ab:c4:b5:65:e0:7d:7b:a8:36:16:ee:60: dd:ec:31:a0:40:45:1b:df:25:5e:67:c2:ce:58:e4:14:ba:92: f3:b9:b3:23:33:ea:65:c3:42:2b:73:ed:c1:fd:c0:fc:52:8a: 5d:46:28:8c:a3:eb:d8:34:56:83:2e:aa:6c:20:45:17:b6:25: 6f:f2:b1:0f:0a:19:2f:36:a7:8f:9e:bc:22:3d:82:06:c6:22: 1c:43:b0:41:13:bd:78:29:ca:b0:ce:ff:03:1d:aa:b2:cb:81: 8e:95:1d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRiYXRXQZDnOp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdjYTg0NDEtZjNkYi00MjVjLTg0YWItNTE0ZTExZWQ3N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdnvmxABoDBSWnjJxkNVxQ9WW9Uu95IO8XQS kJmnbUqWUiY+42RYRczT/9X0KBIx5now05s2rNfzliIU+YIJhBmrhU0eLvUQKSVO 27BUb35Hl5MD3Bg5E6wsuSr0Bj4gk4n0HbThISG8ifTC/Y3grntM8O1oBDAfyNl6 KukC3DLxqv95GlA3q9sbkOl18fCh41OK9RmreV87TdCA3UHn5BpnDbcwjpjMVw+H ovThLae0R40gV4zrn3ydg35Rs7Y8CLhOfBMhd7jERRY/08w627mgL8BzDq+lHJau 1AZatgbYFxQY63XuGvUGMGWdZrPLGkPQAxvxbMbmll8i9RXpuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJavodYURxcXt87AyFzy3mjO2ccmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMjVjNDFiY2UtYjVjMS0z YjJhLWI2ODQtNjQ1ZTlhODNhNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo5BftxztQp0+aBqCpAt7O9V5uytQyDr1JJmS46u5AkqIMBQPHQrdqX aVDfqgjXVxyM4Z9WRzvn60xbYtmhaxMBMQ0bAmejPS/dId4xZyR+m4C9aAV2sJNn msbyD/nkp7BXRgMYXdFDsfaYbbRj1CYJV+vOsNTHOYeFJYP+nc5iyMCKfRg3ZTT/ XWMr+rcaVwmxu0pDHavEtWXgfXuoNhbuYN3sMaBARRvfJV5nws5Y5BS6kvO5syMz 6mXDQitz7cH9wPxSil1GKIyj69g0VoMuqmwgRRe2JW/ysQ8KGS82p4+evCI9ggbG IhxDsEETvXgpyrDO/wMdqrLLgY6VHeI= -----END CERTIFICATE-----Generated at Sat Oct 3 09:10:36 2026 by rpki-client