$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa File: 4d834632-e4cf-33b7-affe-af1f8fa72096.roa (raw, json) Hash identifier: sZIKeec7wrVXU59R5xz41S+jBeY0zRlEyrRb68cyUGY= Subject key identifier: B2:ED:1B:8D:E9:C1:47:3A:1A:B9:CC:9F:29:BE:B2:66:CA:FA:83:7F Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584F4976FC2CE4F291173E968980 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2559 IP address blocks: 198.241.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:fc:2c:e4:f2:91:17:3e:96:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ff65cf5-ec1f-4b14-a6d5-9d1e03c936f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:2b:f7:ff:b7:3c:c4:9a:75:88:17:6c:32: 41:fe:47:95:2a:d9:85:65:18:5a:08:4b:d6:99:1c: cf:32:65:4a:15:b9:57:97:41:22:0c:17:12:1c:f6: 06:31:d7:60:e1:ba:66:ec:1a:86:ed:ba:e0:36:0f: 32:30:a8:e8:53:3b:35:5b:48:3c:28:f1:06:80:bc: b4:f6:20:f8:4d:2a:f2:6f:6f:5e:6b:08:2e:21:df: 74:f3:04:db:88:c4:61:44:44:c9:cc:7e:eb:2b:cf: 97:1c:f2:a3:56:61:12:56:8a:0b:f0:7d:a2:6a:8b: e6:ce:6f:b5:10:84:ca:45:cb:cb:d4:0a:14:1b:20: 22:a3:bf:69:5c:67:92:e8:af:2c:db:ba:df:8d:3d: 04:61:67:b3:42:43:c0:12:fa:15:11:4d:9f:65:8d: fe:da:3f:79:33:3b:8d:12:62:6a:bc:21:c0:66:4a: 16:01:fe:7a:63:e0:78:56:2b:39:df:97:57:7a:20: 6f:91:c4:b0:91:7b:f9:8b:23:6e:e0:56:95:65:ce: c7:2b:ae:21:10:c7:cf:1d:8e:bf:4e:e5:64:31:b5: c9:d1:8b:4b:b5:79:c5:de:53:3d:d0:63:a2:de:43: 71:7c:a0:4e:f0:9e:c2:84:42:c7:31:70:2e:20:7d: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:ED:1B:8D:E9:C1:47:3A:1A:B9:CC:9F:29:BE:B2:66:CA:FA:83:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:20:12:83:1a:df:c4:45:35:55:77:ef:ed:c4:c6:2c:54:66: ad:ac:7e:e9:5a:a0:ae:f5:58:24:7b:05:10:3c:24:d3:ef:e3: 23:f1:90:5d:75:c5:33:34:0e:28:2c:89:14:46:6c:7a:3b:08: 2e:9b:90:4a:7e:51:e4:06:90:a2:6f:8c:fa:e3:62:e5:7f:db: f8:26:5f:de:4e:44:66:2d:db:24:33:fe:02:a4:56:10:f0:f9: 5f:84:a8:fe:46:9f:79:3b:e1:fb:f6:fb:48:f0:a8:41:05:43: 24:00:d8:46:83:8b:a0:94:3d:75:ef:aa:c6:37:47:cf:f1:94: 75:3e:18:64:65:28:79:37:fc:23:2e:ac:e4:6f:f3:6d:f4:53: 2a:b4:69:7a:12:eb:0c:6a:34:6a:f7:48:8d:65:cc:8b:32:f6: 05:8e:ad:f8:c8:fd:eb:ca:18:b8:7d:66:91:a3:cf:dd:53:1a: 50:6c:6b:5d:13:f7:7c:ba:c7:6d:2b:73:e3:1c:9d:e3:57:0c: f1:67:d2:9e:a2:66:14:71:7b:e6:75:6c:4d:e1:18:69:bb:06: 46:07:ac:47:25:7b:31:cb:5c:e0:5f:a9:d4:a9:e7:0a:59:8a: 76:65:42:8b:34:c3:af:4a:4f:54:3e:5c:00:1a:95:df:a1:ba: ae:76:09:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdvws5PKRFz6WiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZmNjVjZjUtZWMxZi00YjE0LWE2ZDUtOWQxZTAzYzkzNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhMr9/+3PMSadYgXbDJB/keVKtmFZRhaCEvW mRzPMmVKFblXl0EiDBcSHPYGMddg4bpm7BqG7brgNg8yMKjoUzs1W0g8KPEGgLy0 9iD4TSryb29eawguId908wTbiMRhRETJzH7rK8+XHPKjVmESVooL8H2iaovmzm+1 EITKRcvL1AoUGyAio79pXGeS6K8s27rfjT0EYWezQkPAEvoVEU2fZY3+2j95MzuN EmJqvCHAZkoWAf56Y+B4Vis535dXeiBvkcSwkXv5iyNu4FaVZc7HK64hEMfPHY6/ TuVkMbXJ0YtLtXnF3lM90GOi3kNxfKBO8J7ChELHMXAuIH0cWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLtG43pwUc6GrnMnym+smbK+oN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvNGQ4MzQ2MzItZTRjZi0z M2I3LWFmZmUtYWYxZjhmYTcyMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkgEoMa38RFNVV37+3ExixUZq2sfulaoK71WCR7BRA8JNPv4yPxkF11 xTM0DigsiRRGbHo7CC6bkEp+UeQGkKJvjPrjYuV/2/gmX95ORGYt2yQz/gKkVhDw +V+EqP5Gn3k74fv2+0jwqEEFQyQA2EaDi6CUPXXvqsY3R8/xlHU+GGRlKHk3/CMu rORv8230Uyq0aXoS6wxqNGr3SI1lzIsy9gWOrfjI/evKGLh9ZpGjz91TGlBsa10T 93y6x20rc+McneNXDPFn0p6iZhRxe+Z1bE3hGGm7BkYHrEclezHLXOBfqdSp5wpZ inZlQos0w69KT1Q+XAAald+huq52CS0= -----END CERTIFICATE-----Generated at Sun Oct 11 14:32:35 2026 by rpki-client