$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa File: 431e93dd-5d2f-3db1-9c2a-936ab1931179.roa (raw, json) Hash identifier: w9fwIUqBR6tNMIBvDSx5jEztnzaHY9elCWMm+5NT/24= Subject key identifier: F5:08:C1:2E:B9:C3:B1:1E:DA:23:18:6E:B6:8E:91:F9:14:AC:51:9D Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584F0ED237654B711FD9796FA900 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 394316 IP address blocks: 198.150.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:37:65:4b:71:1f:d9:79:6f:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=0410611f-d67c-422a-90da-0673bcef2869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:d8:ee:08:58:ae:c7:43:8c:b6:ec:ac:5a: 96:3e:7d:44:c2:11:5e:68:94:2e:ca:be:a8:66:8d: 06:de:6d:3d:5b:7a:b5:ec:bb:07:b5:a6:b2:bd:9f: 3f:9c:0e:92:8e:61:4c:e8:b8:9e:07:7d:7a:ab:a7: a1:f7:9b:17:ff:f3:a7:6d:48:25:a8:e4:bd:ab:16: 6e:88:b1:68:ad:86:03:0b:be:09:0f:5c:df:3c:0f: aa:11:bc:1e:61:5b:18:5f:c8:17:32:25:8c:e9:7f: f6:13:40:bd:d8:ad:bc:5c:a3:64:97:c2:10:4d:6b: 6f:66:a8:b1:b3:c0:06:bc:44:05:75:79:7d:75:37: 9c:25:9b:80:66:5e:6b:40:16:1f:01:b7:77:bd:d6: ed:14:ae:38:cb:4f:4d:85:b7:ed:0c:87:79:dc:6c: a0:8d:61:a7:34:9f:55:16:d4:e7:68:b5:33:96:4b: 9d:85:51:05:47:54:23:40:a9:32:db:18:43:36:3a: 89:12:2b:c1:67:f8:fa:be:01:95:41:57:c6:24:88: f9:c4:ad:86:94:b0:9d:95:b5:be:61:f0:c8:20:e9: e9:91:1a:24:64:89:c4:c5:88:6f:63:99:c5:cb:91: db:8b:d3:a4:ff:63:10:7b:02:df:85:6b:cd:f1:94: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:08:C1:2E:B9:C3:B1:1E:DA:23:18:6E:B6:8E:91:F9:14:AC:51:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a7:7b:12:06:9d:1c:c9:df:40:84:07:ee:41:b0:55:05:ce: c9:7f:d8:1a:c9:58:e9:41:fb:7b:7b:dc:af:ad:3f:a8:5f:aa: ce:2f:d8:64:7e:99:d0:64:7c:f1:3c:bd:49:97:84:2c:34:25: 6c:47:a1:fe:08:20:c4:43:42:69:41:d5:2b:f0:5d:49:0b:38: f5:8c:5e:ba:26:cd:bb:44:fa:2c:4b:3e:5a:5e:df:0b:3b:97: e9:de:e3:7b:94:f8:d2:2c:2f:29:b9:76:c4:e5:02:29:62:94: 7c:63:28:8c:1e:3d:be:3f:e5:dd:87:fc:20:ee:6f:5e:2c:92: 94:f9:d1:09:81:56:f1:cc:55:3f:fd:c1:eb:34:3f:1c:fa:5f: c3:4f:c7:d6:53:b8:a1:68:76:7f:71:e8:ac:de:13:1f:ea:b6: 4f:71:4b:75:d9:de:bf:7e:b4:58:b4:3c:dd:fb:77:d5:59:e1: 52:e0:6f:48:3e:58:d2:fd:8b:a1:20:ef:ad:45:ee:d0:41:87: 02:3d:07:4e:8c:ca:ee:1d:a7:65:fb:fe:94:d9:d6:f5:d6:8f: d7:f9:97:4e:69:28:7c:3c:9c:e0:a7:ed:e0:e1:d5:15:64:b0: 2f:d7:ac:04:2d:1b:d1:1f:75:44:ea:46:3b:45:30:82:52:52: b2:a8:d6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jdlS3Ef2XlvqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDQxMDYxMWYtZDY3Yy00MjJhLTkwZGEtMDY3M2JjZWYyODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KnY7ghYrsdDjLbsrFqWPn1EwhFeaJQuyr6o Zo0G3m09W3q17LsHtaayvZ8/nA6SjmFM6LieB316q6eh95sX//OnbUglqOS9qxZu iLForYYDC74JD1zfPA+qEbweYVsYX8gXMiWM6X/2E0C92K28XKNkl8IQTWtvZqix s8AGvEQFdXl9dTecJZuAZl5rQBYfAbd3vdbtFK44y09NhbftDId53GygjWGnNJ9V FtTnaLUzlkudhVEFR1QjQKky2xhDNjqJEivBZ/j6vgGVQVfGJIj5xK2GlLCdlbW+ YfDIIOnpkRokZInExYhvY5nFy5Hbi9Ok/2MQewLfhWvN8ZQKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUIwS65w7Ee2iMYbraOkfkUrFGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvNDMxZTkzZGQtNWQyZi0z ZGIxLTljMmEtOTM2YWIxOTMxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKnexIGnRzJ30CEB+5BsFUFzsl/2BrJWOlB+3t73K+tP6hfqs4v2GR+ mdBkfPE8vUmXhCw0JWxHof4IIMRDQmlB1SvwXUkLOPWMXromzbtE+ixLPlpe3ws7 l+ne43uU+NIsLym5dsTlAililHxjKIwePb4/5d2H/CDub14skpT50QmBVvHMVT/9 wes0Pxz6X8NPx9ZTuKFodn9x6KzeEx/qtk9xS3XZ3r9+tFi0PN37d9VZ4VLgb0g+ WNL9i6Eg761F7tBBhwI9B06Myu4dp2X7/pTZ1vXWj9f5l05pKHw8nOCn7eDh1RVk sC/XrAQtG9EfdUTqRjtFMIJSUrKo1vM= -----END CERTIFICATE-----Generated at Mon Sep 28 13:26:31 2026 by rpki-client