$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa File: 4280c96f-e83c-3483-a3d8-84f727a16bb3.roa (raw, json) Hash identifier: 7H9oz5j9AMWW3B/jiBvxoZEXcTpJgS3N1niRsf2Otjk= Subject key identifier: 7B:DC:B7:53:D6:D1:D6:03:93:B1:30:4C:98:D8:A9:BC:E2:6E:35:67 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584F612D64427F0AD815FF6CD7C0 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 2559 IP address blocks: 198.241.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:64:42:7f:0a:d8:15:ff:6c:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=d5e5d763-22ef-488e-9db5-bc0d4e5e0018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:c0:ce:c5:de:d9:b5:47:63:be:b6:95:5c: 56:0d:f1:5b:b3:98:34:34:32:40:2b:07:d8:30:f4: 69:ed:01:3b:02:26:db:84:26:36:29:61:c1:68:83: f7:e9:ea:a1:75:c6:38:d4:11:d4:53:1b:58:66:3e: 8a:27:fc:2c:28:87:bd:71:af:4c:a7:d1:03:83:ff: 50:40:18:f9:06:f1:40:64:ec:01:0c:75:c9:1e:75: 5f:17:60:62:8e:72:92:6c:a0:17:02:9c:d5:6d:5c: 07:e8:95:3e:c1:ca:e1:71:f3:88:29:79:71:b4:5e: 0e:5f:24:3f:36:dc:82:6a:82:56:97:3d:7e:f0:23: 22:b3:3b:5c:ae:f8:f9:18:f8:71:3b:f1:06:b5:cb: 76:59:3b:f3:7f:c0:fa:b1:b3:5d:25:ef:b0:d8:fb: d7:62:f9:84:6d:64:38:17:6d:ad:87:02:41:8a:6c: 3c:ef:17:98:59:70:2d:0c:fb:af:c0:9b:d2:e0:77: a1:ce:39:38:eb:35:82:7c:0e:84:81:ff:17:da:6e: 12:09:76:2f:9a:ca:c9:ac:c4:72:f3:0a:25:0f:62: b7:11:73:ee:6e:cb:22:ad:19:49:98:4f:cc:ea:05: 85:2f:3e:31:61:a3:9b:7b:84:1c:13:08:58:91:41: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DC:B7:53:D6:D1:D6:03:93:B1:30:4C:98:D8:A9:BC:E2:6E:35:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dc:7b:c4:68:5e:b9:6e:47:ba:d8:b1:9b:72:29:7e:bc:6f: 5a:78:b2:83:28:d4:eb:e7:6d:55:db:74:36:f6:d8:fe:8b:80: 1f:c4:37:92:05:e4:42:2f:eb:44:58:e7:2e:aa:6f:71:95:e8: 92:d4:b4:ff:8d:e7:36:12:12:85:22:47:0c:78:f0:4a:66:f3: 66:a1:8d:17:73:cd:3a:f9:04:22:cb:a2:7d:1b:cb:f1:fb:90: 0f:9c:af:e4:c5:c4:ab:f3:3b:c6:f9:c6:eb:09:eb:2e:ce:82: 4e:27:46:4a:13:cb:c2:98:bc:3b:8a:f8:55:4e:78:14:d2:a8: cc:1a:63:db:df:00:74:cd:6c:f4:7b:55:86:8c:d6:36:6e:63: 75:0c:1d:5e:5f:24:6b:cf:d8:c4:62:65:e5:ec:f2:bd:cc:10: 8c:a9:4c:e3:c3:98:da:6c:44:38:58:59:ee:07:61:f7:5c:59: c5:96:0f:3d:89:d7:5b:c9:44:fc:1e:f4:54:8e:4d:39:90:dd: 09:5f:ba:81:ae:ac:5e:ee:ff:4e:8a:be:d9:cb:96:7c:a0:f3: 47:7e:7d:0b:86:08:72:c3:af:79:7a:23:45:80:0e:84:7f:73: d3:25:d3:37:ca:4d:f2:0e:4d:92:00:e0:12:64:bc:bc:8d:1f: 5b:94:cc:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWRCfwrYFf9s18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDVlNWQ3NjMtMjJlZi00ODhlLTlkYjUtYmMwZDRlNWUwMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp/AzsXe2bVHY762lVxWDfFbs5g0NDJAKwfY MPRp7QE7AibbhCY2KWHBaIP36eqhdcY41BHUUxtYZj6KJ/wsKIe9ca9Mp9EDg/9Q QBj5BvFAZOwBDHXJHnVfF2BijnKSbKAXApzVbVwH6JU+wcrhcfOIKXlxtF4OXyQ/ NtyCaoJWlz1+8CMisztcrvj5GPhxO/EGtct2WTvzf8D6sbNdJe+w2PvXYvmEbWQ4 F22thwJBimw87xeYWXAtDPuvwJvS4Hehzjk46zWCfA6Egf8X2m4SCXYvmsrJrMRy 8wolD2K3EXPubssirRlJmE/M6gWFLz4xYaObe4QcEwhYkUH1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvct1PW0dYDk7EwTJjYqbzibjVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvNDI4MGM5NmYtZTgzYy0z NDgzLWEzZDgtODRmNzI3YTE2YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELce8RoXrluR7rYsZtyKX68b1p4soMo1OvnbVXbdDb22P6LgB/EN5IF 5EIv60RY5y6qb3GV6JLUtP+N5zYSEoUiRwx48Epm82ahjRdzzTr5BCLLon0by/H7 kA+cr+TFxKvzO8b5xusJ6y7Ogk4nRkoTy8KYvDuK+FVOeBTSqMwaY9vfAHTNbPR7 VYaM1jZuY3UMHV5fJGvP2MRiZeXs8r3MEIypTOPDmNpsRDhYWe4HYfdcWcWWDz2J 11vJRPwe9FSOTTmQ3QlfuoGurF7u/06KvtnLlnyg80d+fQuGCHLDr3l6I0WADoR/ c9Ml0zfKTfIOTZIA4BJkvLyNH1uUzIg= -----END CERTIFICATE-----Generated at Sun Oct 11 09:25:17 2026 by rpki-client