$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/931d23e6-7d72-32ab-b793-692be48324e1.roa File: 931d23e6-7d72-32ab-b793-692be48324e1.roa (raw, json) Hash identifier: Bb9RYy4sNsw1tYR4X2jtbtlizBpyPBoEM+m0P+ZHYuU= Subject key identifier: 73:90:1D:CB:11:21:4E:F6:44:0B:10:5F:3E:2E:FB:67:7D:88:0B:71 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F537F816D6A704AB39E01C240 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/931d23e6-7d72-32ab-b793-692be48324e1.roa Signing time: Mon 28 Sep 2026 15:24:27 +0000 ROA not before: Mon 28 Sep 2026 15:24:27 +0000 ROA not after: Sun 27 Dec 2026 16:24:27 +0000 asID: 834 IP address blocks: 198.89.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:7f:81:6d:6a:70:4a:b3:9e:01:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 28 15:24:27 2026 GMT Not After : Dec 27 16:24:27 2026 GMT Subject: CN=2f2bf8d5-942e-4ce2-bce5-d02601cffc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:30:f8:de:df:eb:bb:50:5e:76:c4:e4:c1: 8c:66:fb:81:4b:99:c5:99:7c:3a:d9:88:b4:79:1b: 3d:a5:10:0f:94:e6:6e:49:5f:86:f4:c7:8b:a4:d8: ad:4a:3c:98:23:67:e6:ea:95:75:8a:a2:2a:e1:0d: 69:35:20:7e:7d:cc:5b:f7:f5:ab:73:fa:53:98:d6: 19:db:87:b6:96:ad:35:0c:b7:e3:da:de:e6:2d:8a: 00:e2:3a:ae:98:ba:d2:59:d9:3f:13:13:09:7e:f4: 98:d4:bf:27:ff:27:71:7e:0c:80:56:40:06:51:34: 82:b9:c5:25:a4:09:8c:72:37:88:fc:72:e7:e5:53: da:d7:5e:3a:00:f7:6c:fc:dc:db:90:58:0d:22:dc: 94:8a:10:f6:a1:bf:34:35:7e:d8:8a:c5:05:a9:9d: cb:03:c6:de:24:f9:63:b3:1a:1b:ef:fe:f9:e6:ab: d9:a5:36:cb:c6:05:8b:99:be:1e:86:40:60:1c:16: ff:77:7e:e8:8a:d7:b4:f9:76:b1:59:e4:1a:7d:3d: 87:b6:30:2d:5e:0b:e8:5a:4e:24:a1:67:90:7c:d7: df:9c:12:7a:85:fb:a3:f6:5c:bf:e3:5d:e9:6c:aa: 79:ad:6d:91:fc:87:bd:76:8a:b8:5b:94:6d:bf:66: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:90:1D:CB:11:21:4E:F6:44:0B:10:5F:3E:2E:FB:67:7D:88:0B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/931d23e6-7d72-32ab-b793-692be48324e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:98:89:e0:d9:0c:16:4d:8d:1d:cb:98:17:4e:7c:ae:af:ce: 1d:1a:29:1f:7d:1c:6b:f5:cf:81:07:0a:f5:77:07:e6:64:45: 82:bc:c6:1a:04:3d:f0:eb:b9:1e:d3:ae:cb:04:0e:36:78:e4: dc:ec:45:d0:79:16:66:4c:ed:59:04:f5:90:7b:27:62:bb:2e: 81:74:76:cd:52:34:4c:1d:e5:06:9d:97:c3:19:49:55:c0:ff: b8:d9:5f:ab:0a:84:cc:e6:24:c4:a1:2c:3d:72:3c:21:e3:af: 43:34:2c:e6:3f:61:b3:86:c7:a0:80:69:e4:66:63:07:96:5f: 2a:e7:b1:20:b7:c6:53:41:b2:93:75:5f:b9:58:9f:06:a6:0c: 7c:ff:79:08:fb:6f:ba:c7:70:76:7f:57:47:d7:a9:19:21:8e: cf:43:4f:55:f8:f8:93:3a:8e:64:b8:b9:d9:3b:b7:b7:5f:79: 8c:d6:17:5f:9a:3c:37:5a:88:b6:84:2f:06:7c:95:4f:6f:39: ed:a0:85:99:86:ff:b5:97:06:8c:92:27:54:ef:c7:53:22:68: 85:4f:6a:5e:21:69:62:c8:f5:b6:80:8c:d9:e7:68:b3:7e:a7: 8d:0b:25:dd:1a:79:50:24:fa:79:dc:f4:70:de:08:5f:63:34: b9:da:21:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tf4FtanBKs54BwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDkyODE1MjQyN1oXDTI2MTIyNzE2MjQyN1owLzEtMCsGA1UEAxMk MmYyYmY4ZDUtOTQyZS00Y2UyLWJjZTUtZDAyNjAxY2ZmYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFMw+N7f67tQXnbE5MGMZvuBS5nFmXw62Yi0 eRs9pRAPlOZuSV+G9MeLpNitSjyYI2fm6pV1iqIq4Q1pNSB+fcxb9/Wrc/pTmNYZ 24e2lq01DLfj2t7mLYoA4jqumLrSWdk/ExMJfvSY1L8n/ydxfgyAVkAGUTSCucUl pAmMcjeI/HLn5VPa1146APds/NzbkFgNItyUihD2ob80NX7YisUFqZ3LA8beJPlj sxob7/755qvZpTbLxgWLmb4ehkBgHBb/d37oite0+XaxWeQafT2HtjAtXgvoWk4k oWeQfNffnBJ6hfuj9ly/413pbKp5rW2R/Ie9doq4W5Rtv2b/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOQHcsRIU72RAsQXz4u+2d9iAtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTMxZDIzZTYtN2Q3Mi0z MmFiLWI3OTMtNjkyYmU0ODMyNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxll8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCYieDZDBZNjR3LmBdOfK6vzh0aKR99HGv1z4EHCvV3B+ZkRYK8xhoE PfDruR7TrssEDjZ45NzsRdB5FmZM7VkE9ZB7J2K7LoF0ds1SNEwd5Qadl8MZSVXA /7jZX6sKhMzmJMShLD1yPCHjr0M0LOY/YbOGx6CAaeRmYweWXyrnsSC3xlNBspN1 X7lYnwamDHz/eQj7b7rHcHZ/V0fXqRkhjs9DT1X4+JM6jmS4udk7t7dfeYzWF1+a PDdaiLaELwZ8lU9vOe2ghZmG/7WXBoySJ1Tvx1MiaIVPal4haWLI9baAjNnnaLN+ p40LJd0aeVAk+nnc9HDeCF9jNLnaITs= -----END CERTIFICATE-----Generated at Thu Oct 1 13:35:26 2026 by rpki-client