$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa File: 7b990af5-7866-397a-9d61-3f08feb8f6c3.roa (raw, json) Hash identifier: ccONixAjCeVf0+G3hK+cVL7AQenhEvxfd6Y18izkjHM= Subject key identifier: 60:52:33:ED:12:D5:7A:FC:08:FB:31:92:70:6B:C2:6B:17:F1:0F:18 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584F612D646CD282479DE72B3500 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 2559 IP address blocks: 198.241.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:64:6c:d2:82:47:9d:e7:2b:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=58aa2ee8-f6eb-40ce-9b48-1c981bbe4deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:99:59:90:d9:31:29:50:7c:b6:5e:e2:a6: 18:eb:ea:0b:0a:07:d5:e0:b7:6e:14:c5:28:d6:9a: bd:d6:40:35:d7:ae:63:b4:27:a0:d3:27:7e:47:5a: 74:e4:1d:4a:d6:d5:de:9b:33:1c:cc:f0:9b:87:10: 64:f8:67:9a:64:0d:5b:b6:1f:88:5a:b0:a2:9f:d8: d8:1c:95:99:20:85:c7:79:43:ef:e0:42:26:77:f3: 54:b6:d2:4b:e3:5b:1c:32:23:6e:ad:1e:cb:03:99: 05:5a:86:d2:13:f7:0f:02:60:88:f5:dd:af:f3:7f: 60:b3:ff:7f:cb:93:69:13:81:83:28:19:ed:a0:1a: d5:0d:74:8b:33:e2:09:e2:f6:65:59:fb:d1:f4:8d: 09:fb:0d:e0:a5:16:13:62:25:fb:de:5b:83:fd:9e: 00:ca:31:1d:6b:ed:06:b2:7c:ed:41:ef:3b:c2:37: b7:21:1e:4b:20:24:c9:43:e6:27:51:4a:1d:c4:e3: 76:02:ba:22:fd:1f:b2:60:ee:01:d0:3f:73:95:04: 2a:63:2b:58:5d:ad:1a:78:9c:87:f9:42:58:5b:4c: a6:ab:03:df:41:a0:99:6b:d9:49:49:96:29:a9:4a: 35:61:9c:f1:54:26:7c:01:0f:6f:4a:c2:c0:28:ac: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:33:ED:12:D5:7A:FC:08:FB:31:92:70:6B:C2:6B:17:F1:0F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:43:8b:71:0d:fc:27:6c:23:96:cf:e8:be:54:35:9d:56:d9: 41:4a:ad:f0:c1:98:a2:db:d8:b0:fb:fa:6c:2d:09:5f:99:66: d4:d8:1f:a3:5e:62:1f:28:d9:81:3d:3e:51:61:f8:03:31:19: 44:b8:76:22:20:2f:f8:15:11:cd:8a:c4:a8:7d:31:47:3b:e7: 60:cd:a9:cf:45:d1:bb:97:2d:28:ba:a6:74:40:bc:7b:3a:2a: 95:96:16:4f:46:bd:e6:47:83:53:13:a6:8c:c6:13:5b:4a:93: f6:88:b8:d9:a5:c3:57:22:ba:49:6c:3f:fc:c0:d1:b5:05:e6: 61:e7:36:78:6a:e7:2f:f2:77:70:20:49:ff:be:41:35:55:03: 5c:47:50:65:91:7e:11:2f:b8:db:d6:45:28:e3:84:e3:d6:bb: 51:c6:84:13:7c:48:ef:e2:52:ed:a5:dc:e6:05:bb:f4:13:e4: c3:fc:a3:6d:1b:1f:01:57:57:4c:5a:d6:34:e4:b7:28:c6:23: 6a:2c:21:ea:12:2c:ea:27:14:4f:fd:d3:3d:18:10:fc:90:6b: 15:09:62:64:ee:43:6a:d6:f3:c3:5f:d7:90:72:2b:e1:0b:12: 74:ed:74:43:99:80:85:c8:55:d5:5a:b5:77:50:c9:e1:09:97: 38:26:22:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWRs0oJHnecrNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NThhYTJlZTgtZjZlYi00MGNlLTliNDgtMWM5ODFiYmU0ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2SZWZDZMSlQfLZe4qYY6+oLCgfV4LduFMUo 1pq91kA1165jtCeg0yd+R1p05B1K1tXemzMczPCbhxBk+GeaZA1bth+IWrCin9jY HJWZIIXHeUPv4EImd/NUttJL41scMiNurR7LA5kFWobSE/cPAmCI9d2v839gs/9/ y5NpE4GDKBntoBrVDXSLM+IJ4vZlWfvR9I0J+w3gpRYTYiX73luD/Z4AyjEda+0G snztQe87wje3IR5LICTJQ+YnUUodxON2Aroi/R+yYO4B0D9zlQQqYytYXa0aeJyH +UJYW0ymqwPfQaCZa9lJSZYpqUo1YZzxVCZ8AQ9vSsLAKKylGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBSM+0S1Xr8CPsxknBrwmsX8Q8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvN2I5OTBhZjUtNzg2Ni0z OTdhLTlkNjEtM2YwOGZlYjhmNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Di3EN/CdsI5bP6L5UNZ1W2UFKrfDBmKLb2LD7+mwtCV+ZZtTYH6Ne Yh8o2YE9PlFh+AMxGUS4diIgL/gVEc2KxKh9MUc752DNqc9F0buXLSi6pnRAvHs6 KpWWFk9GveZHg1MTpozGE1tKk/aIuNmlw1ciuklsP/zA0bUF5mHnNnhq5y/yd3Ag Sf++QTVVA1xHUGWRfhEvuNvWRSjjhOPWu1HGhBN8SO/iUu2l3OYFu/QT5MP8o20b HwFXV0xa1jTktyjGI2osIeoSLOonFE/90z0YEPyQaxUJYmTuQ2rW88Nf15ByK+EL EnTtdEOZgIXIVdVatXdQyeEJlzgmIrU= -----END CERTIFICATE-----Generated at Sun Oct 11 17:14:12 2026 by rpki-client