$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/c3e429d2-6599-32a8-afb5-e850406cce34.roa File: c3e429d2-6599-32a8-afb5-e850406cce34.roa (raw, json) Hash identifier: 4b322TaxRzMtVVj79ZGXDQ/jzOv360GMFHiHibzyKH8= Subject key identifier: F7:B7:53:1C:DD:FF:62:BA:B5:01:18:38:1B:88:3B:1A:CC:9A:0E:B4 Certificate issuer: /CN=3ba39ba7-a768-4a44-aad9-880db8565967 Certificate serial: 010D0C9F4328584F498BF5AAECA9A53849EEF700 Authority key identifier: 85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/c3e429d2-6599-32a8-afb5-e850406cce34.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23376 IP address blocks: 198.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:f5:aa:ec:a9:a5:38:49:ee:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba39ba7-a768-4a44-aad9-880db8565967 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a820167-92b3-4cc9-9265-52601b08c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:3b:5d:50:bf:a7:53:24:37:d1:a5:bc:2e: f4:91:ef:13:74:5e:93:72:2a:4c:86:b3:bd:e3:18: df:40:a7:fd:60:54:85:a7:80:42:a8:ab:01:dc:1a: 7d:88:e9:f8:75:90:64:b1:4e:cf:19:00:c0:f4:6d: 6a:77:53:5f:d4:47:56:eb:1b:b4:06:6d:9b:6f:af: f9:fa:ec:5b:d2:60:a0:6a:bf:3c:72:a6:e2:cb:42: a5:cd:c9:a2:5c:ae:9b:2b:e7:22:d6:56:78:8c:0b: 24:62:07:7f:99:e3:8b:90:f6:05:28:3d:4d:73:a8: b9:a0:5e:ab:f3:38:11:d4:38:da:0f:42:80:d5:30: 53:38:f1:1a:06:46:62:02:40:03:2f:fa:5e:f3:73: d9:de:53:9a:70:02:33:19:44:5e:13:14:a1:ce:f4: e0:02:ee:3d:d1:b3:e0:91:87:49:55:58:ed:6f:83: 03:f8:69:1a:c9:9c:18:c0:b7:e7:98:82:ad:83:83: 82:2c:14:11:2f:5e:fa:9c:e5:3a:13:69:ec:87:e3: 99:bb:5a:9b:10:93:4e:f2:86:48:80:13:4b:c5:a2: 14:0b:2a:75:de:2b:1a:2b:77:b2:57:a1:06:c5:01: eb:3d:89:b3:85:87:06:d0:9d:a3:b0:36:89:96:07: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:53:1C:DD:FF:62:BA:B5:01:18:38:1B:88:3B:1A:CC:9A:0E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/c3e429d2-6599-32a8-afb5-e850406cce34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl X509v3 Authority Key Identifier: keyid:85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer sbgp-ipAddrBlock: critical IPv4: 198.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2f:10:37:57:54:61:da:cc:3d:dc:ba:35:2e:3e:6a:4a:3e: 2a:d8:02:c1:fb:c1:d6:87:ce:da:dc:c0:c9:16:30:66:1a:52: 68:75:37:63:94:fb:5b:95:bb:29:5e:72:8e:fc:99:b5:3b:d5: a2:d2:18:e9:05:23:c4:2f:98:b7:0b:5b:a6:0d:49:87:72:ab: f6:47:f4:f8:fc:6c:ca:9a:e2:09:22:d7:98:40:42:f2:f5:61: 79:59:fc:f7:f1:c6:44:cb:ce:1c:3f:d2:9a:eb:82:36:61:b9: dc:92:59:9d:3c:12:b2:71:b8:dd:ba:0b:9e:60:80:91:5b:ea: ed:16:35:1a:37:f8:95:ee:a3:99:57:17:c4:d2:aa:88:e4:09: 6d:3e:25:1a:de:be:04:40:20:84:cf:9e:90:4a:bd:b5:4e:e8: c8:85:97:4a:56:65:5a:c0:a9:0b:e6:0b:9c:c8:08:78:11:87: a1:11:8e:61:a6:e7:dd:e9:37:70:f2:45:00:46:f4:f8:4c:07: 50:eb:b5:f7:63:99:e4:e5:25:3c:fa:79:39:b9:4a:d2:da:eb: bf:13:8e:40:f8:48:2e:af:de:17:f5:83:0c:18:b7:c1:f8:3a: 9c:75:0c:d6:e0:62:95:69:0b:7a:35:85:81:87:af:15:d0:80: 51:34:57:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji/Wq7KmlOEnu9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JhMzliYTctYTc2OC00YTQ0LWFhZDktODgwZGI4NTY1 OTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE4MjAxNjctOTJiMy00Y2M5LTkyNjUtNTI2MDFiMDhjODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCQ7XVC/p1MkN9GlvC70ke8TdF6TcipMhrO9 4xjfQKf9YFSFp4BCqKsB3Bp9iOn4dZBksU7PGQDA9G1qd1Nf1EdW6xu0Bm2bb6/5 +uxb0mCgar88cqbiy0KlzcmiXK6bK+ci1lZ4jAskYgd/meOLkPYFKD1Nc6i5oF6r 8zgR1DjaD0KA1TBTOPEaBkZiAkADL/pe83PZ3lOacAIzGUReExShzvTgAu490bPg kYdJVVjtb4MD+GkayZwYwLfnmIKtg4OCLBQRL176nOU6E2nsh+OZu1qbEJNO8oZI gBNLxaIUCyp13isaK3eyV6EGxQHrPYmzhYcG0J2jsDaJlgfBtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe3Uxzd/2K6tQEYOBuIOxrMmg60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEz OWJhNy1hNzY4LTRhNDQtYWFkOS04ODBkYjg1NjU5NjcvYzNlNDI5ZDItNjU5OS0z MmE4LWFmYjUtZTg1MDQwNmNjZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2JhMzliYTctYTc2OC00YTQ0LWFh ZDktODgwZGI4NTY1OTY3LzNiYTM5YmE3LWE3NjgtNGE0NC1hYWQ5LTg4MGRiODU2 NTk2Ny5jcmwwHwYDVR0jBBgwFoAUhS54UXsRnZQUbvOhxGNU55moMmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEzOWJhNy1hNzY4LTRhNDQtYWFkOS04ODBk Yjg1NjU5NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsvEDdXVGHazD3cujUuPmpKPirYAsH7wdaHztrcwMkWMGYaUmh1N2OU +1uVuyleco78mbU71aLSGOkFI8QvmLcLW6YNSYdyq/ZH9Pj8bMqa4gki15hAQvL1 YXlZ/PfxxkTLzhw/0prrgjZhudySWZ08ErJxuN26C55ggJFb6u0WNRo3+JXuo5lX F8TSqojkCW0+JRrevgRAIITPnpBKvbVO6MiFl0pWZVrAqQvmC5zICHgRh6ERjmGm 593pN3DyRQBG9PhMB1DrtfdjmeTlJTz6eTm5StLa678TjkD4SC6v3hf1gwwYt8H4 Opx1DNbgYpVpC3o1hYGHrxXQgFE0V3o= -----END CERTIFICATE-----Generated at Mon Oct 12 19:07:16 2026 by rpki-client