$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/9b72ee95-2df6-313d-af51-8fad1ff11b74.roa File: 9b72ee95-2df6-313d-af51-8fad1ff11b74.roa (raw, json) Hash identifier: im+zDcgtUMs5Q92ZdtV/FN8NJCgCX/Rj+5N0xkShMpU= Subject key identifier: 6A:54:2A:14:7C:93:0E:CD:7D:88:6F:41:2B:CF:9D:FC:6C:50:30:56 Certificate issuer: /CN=5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15 Certificate serial: 010D0C9F4328584F7BB2DB71A569637DA67CF380 Authority key identifier: 21:E1:1F:4B:AB:85:29:4C:5E:24:C9:0A:A7:25:7D:3F:AB:13:4F:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/9b72ee95-2df6-313d-af51-8fad1ff11b74.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 402107 IP address blocks: 198.99.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:db:71:a5:69:63:7d:a6:7c:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=a6fdd0d3-6fc5-41f3-9b9c-c115f10c4f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:33:1a:5e:0e:00:ef:28:8f:7c:63:73:c5: 95:a1:ad:74:5c:89:5e:93:ba:f0:4b:ee:e7:b6:ea: ba:ae:7f:0f:71:72:99:17:b4:ca:f6:52:7c:83:f3: f8:91:b6:4e:7b:30:78:28:7e:a1:1f:c1:5e:6a:83: 09:d7:da:81:fc:dc:96:2c:fb:ce:08:02:cb:5d:57: 25:cc:99:4d:2c:b4:8f:cb:dd:6e:e6:75:a2:84:c2: 28:ca:e5:bf:f4:93:a4:ec:3b:80:c6:0d:18:c4:47: 49:09:da:0e:e6:12:8a:0c:c3:3c:73:33:b7:21:5d: af:95:b8:ee:93:8d:8d:6f:a8:b2:b0:32:80:e2:5a: 5a:d9:82:73:8d:52:2f:16:b2:22:b7:99:f4:c0:4f: fb:84:df:25:47:53:6c:a9:9e:30:02:9a:b7:d4:c0: 14:db:1b:d0:b8:4e:48:94:9d:c8:6f:33:95:db:05: 09:10:26:cd:8d:b4:7c:d6:7b:29:ab:61:3a:28:ca: 0f:f3:14:3b:ca:0e:a1:3a:c3:93:86:35:8f:04:36: 50:78:69:03:76:fc:e9:0c:49:68:19:f6:63:ab:d4: 77:7d:4c:63:0b:fe:d4:c9:ff:70:bf:8c:90:1a:b3: 8a:47:cb:6a:3b:0c:ea:9b:65:8c:38:c1:29:f2:7e: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:2A:14:7C:93:0E:CD:7D:88:6F:41:2B:CF:9D:FC:6C:50:30:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/9b72ee95-2df6-313d-af51-8fad1ff11b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.crl X509v3 Authority Key Identifier: keyid:21:E1:1F:4B:AB:85:29:4C:5E:24:C9:0A:A7:25:7D:3F:AB:13:4F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.cer sbgp-ipAddrBlock: critical IPv4: 198.99.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5d:65:f0:5d:20:00:fb:7d:26:41:36:2a:e5:25:f1:2b:06: b5:6e:2b:83:80:d0:fd:af:b8:88:72:b5:94:f0:6a:18:57:3c: de:74:c7:4b:1f:c0:12:dc:e6:89:3f:50:21:51:79:0c:c8:14: bb:6e:da:56:d9:d0:65:a5:b9:8b:bc:e9:57:68:b4:77:58:a5: a5:2f:ac:90:46:46:2d:ec:24:78:ca:98:31:c7:2b:f3:54:b4: b1:fa:f5:4a:80:7e:54:f2:eb:5a:cb:1d:ef:e0:78:de:3e:a2: 72:b5:e2:07:54:b7:8e:26:b3:1d:51:13:80:cd:94:cf:ac:ce: 62:45:b1:db:54:dc:91:ee:d3:65:b8:fb:3e:8c:57:3b:ca:9c: 7c:e2:25:b5:48:cd:a3:ec:fb:1a:76:db:96:7e:8f:de:e3:9a: c4:e3:61:16:8c:f3:d5:4f:27:61:95:7e:7b:f8:d5:f2:8f:2d: 17:e4:9f:02:b9:31:8b:9e:53:a2:13:d1:7b:c3:14:c6:30:3a: 50:68:e4:de:aa:0b:20:8b:db:f2:0d:45:97:17:46:07:4b:bf: 21:97:a1:c1:e0:48:a4:09:0b:5d:cb:74:db:dd:5a:f4:16:9e: 32:b1:27:d3:b9:d7:7d:da:e3:f7:de:f2:98:22:7e:84:12:77: 0c:ed:33:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sttxpWljfaZ884AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE2ZTdhZGEtMmY0Yy00MDhjLWEwZGQtYjJiNzM3YWMx ZDE1MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YTZmZGQwZDMtNmZjNS00MWYzLTliOWMtYzExNWYxMGM0ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBIzGl4OAO8oj3xjc8WVoa10XIlek7rwS+7n tuq6rn8PcXKZF7TK9lJ8g/P4kbZOezB4KH6hH8FeaoMJ19qB/NyWLPvOCALLXVcl zJlNLLSPy91u5nWihMIoyuW/9JOk7DuAxg0YxEdJCdoO5hKKDMM8czO3IV2vlbju k42Nb6iysDKA4lpa2YJzjVIvFrIit5n0wE/7hN8lR1NsqZ4wApq31MAU2xvQuE5I lJ3IbzOV2wUJECbNjbR81nspq2E6KMoP8xQ7yg6hOsOThjWPBDZQeGkDdvzpDElo GfZjq9R3fUxjC/7Uyf9wv4yQGrOKR8tqOwzqm2WMOMEp8n795wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpUKhR8kw7NfYhvQSvPnfxsUDBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTZl N2FkYS0yZjRjLTQwOGMtYTBkZC1iMmI3MzdhYzFkMTUvOWI3MmVlOTUtMmRmNi0z MTNkLWFmNTEtOGZhZDFmZjExYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWE2ZTdhZGEtMmY0Yy00MDhjLWEw ZGQtYjJiNzM3YWMxZDE1LzVhNmU3YWRhLTJmNGMtNDA4Yy1hMGRkLWIyYjczN2Fj MWQxNS5jcmwwHwYDVR0jBBgwFoAUIeEfS6uFKUxeJMkKpyV9P6sTTwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTZlN2FkYS0yZjRjLTQwOGMtYTBkZC1iMmI3 MzdhYzFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVdZfBdIAD7fSZBNirlJfErBrVuK4OA0P2vuIhytZTwahhXPN50x0sf wBLc5ok/UCFReQzIFLtu2lbZ0GWluYu86VdotHdYpaUvrJBGRi3sJHjKmDHHK/NU tLH69UqAflTy61rLHe/geN4+onK14gdUt44msx1RE4DNlM+szmJFsdtU3JHu02W4 +z6MVzvKnHziJbVIzaPs+xp225Z+j97jmsTjYRaM89VPJ2GVfnv41fKPLRfknwK5 MYueU6IT0XvDFMYwOlBo5N6qCyCL2/INRZcXRgdLvyGXocHgSKQJC13LdNvdWvQW njKxJ9O5133a4/fe8pgifoQSdwztM5Q= -----END CERTIFICATE-----Generated at Tue Oct 13 17:34:40 2026 by rpki-client