$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/2b1065d7-34f8-3d78-9bd8-e16d9a7bb47a.roa File: 2b1065d7-34f8-3d78-9bd8-e16d9a7bb47a.roa (raw, json) Hash identifier: +oZrT4SUb9RTSxcWGfwRUe2fow9I+NZNv/TYXQUwx84= Subject key identifier: 99:70:27:45:46:7A:52:77:00:7E:A9:B9:53:FB:1E:AC:8B:13:BD:A1 Certificate issuer: /CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Certificate serial: 010D0C9F4328584F77FC56E9190FDA14B7445E80 Authority key identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/2b1065d7-34f8-3d78-9bd8-e16d9a7bb47a.roa Signing time: Sun 11 Oct 2026 17:05:05 +0000 ROA not before: Sun 11 Oct 2026 17:05:05 +0000 ROA not after: Sat 09 Jan 2027 18:05:05 +0000 asID: 16125 IP address blocks: 198.153.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:fc:56:e9:19:0f:da:14:b7:44:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Validity Not Before: Oct 11 17:05:05 2026 GMT Not After : Jan 9 18:05:05 2027 GMT Subject: CN=f50c7466-b130-4828-bcdf-733ba7e08894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:2b:1d:d0:5d:c4:11:94:96:06:ab:85:c1: 3b:64:37:0b:6c:91:8c:b7:2e:ac:c8:4d:72:b6:e1: ca:35:82:7e:be:17:8a:3f:4b:45:2b:35:ee:63:a6: e4:e9:26:92:c9:56:70:f5:e3:2d:9f:fc:15:ef:f8: 5b:83:83:32:2e:36:60:67:93:93:2f:80:3b:f4:f0: 3e:b0:c2:0f:a6:1b:ba:ac:58:2e:fd:66:56:97:cf: 95:53:2e:52:50:26:ad:5f:cb:9f:fb:3c:b5:35:89: 7c:d1:dd:28:2b:68:c7:ba:5c:33:8c:db:5c:45:d1: 40:5c:b3:71:5d:56:22:f9:df:97:ba:f6:7c:a4:04: c3:a6:5f:ef:c3:27:5e:1d:80:94:9f:a0:38:43:56: 19:4c:a0:2e:fb:be:fb:39:42:ca:19:ae:80:1b:36: 37:fc:92:3f:33:dd:32:46:0e:61:3f:c0:c4:cc:da: f5:d6:fe:ac:cd:bb:ec:c3:3c:9c:34:cf:64:89:d1: a5:c8:7f:81:f4:b4:e4:60:c5:4f:29:a9:19:3e:a7: 06:8e:88:67:bb:9c:a2:c2:ec:7a:62:10:3a:53:4e: 41:d1:5c:49:b9:77:5c:e9:8e:52:56:2b:5b:d0:66: 63:b3:c7:69:b2:ad:8e:cd:56:3e:c3:55:9d:86:b6: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:70:27:45:46:7A:52:77:00:7E:A9:B9:53:FB:1E:AC:8B:13:BD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/2b1065d7-34f8-3d78-9bd8-e16d9a7bb47a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl X509v3 Authority Key Identifier: keyid:4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer sbgp-ipAddrBlock: critical IPv4: 198.153.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:01:05:fc:81:4e:97:26:e1:92:10:cb:cf:4b:51:a3:8b:93: 22:e9:1e:77:9a:a4:2e:47:a1:d2:a6:d6:88:d3:04:88:9b:6b: d8:e2:63:55:93:81:26:f6:cf:e0:72:c5:a2:a5:e1:66:43:a2: c0:1c:e6:23:69:09:1e:30:07:c3:74:30:51:dd:b1:9c:95:2b: db:fd:5a:b6:c8:01:b1:09:c2:e3:3f:2b:43:0f:e7:84:ac:a8: a6:09:41:1b:5d:ab:9d:44:42:e8:bc:76:f5:ab:97:09:36:cc: 2d:9f:15:fd:25:b0:0e:bc:6a:b3:1b:80:d0:08:fd:6f:d7:a7: ee:31:68:ff:7b:b0:23:c1:22:a7:d6:8a:ea:f6:a1:bb:f6:a4: cc:cf:30:f7:8b:cf:cb:e4:f7:07:95:4e:68:9f:85:a8:5b:9c: db:91:5f:ba:39:6b:fa:f8:b2:6c:70:7f:97:77:3c:26:32:97: 3c:37:8f:50:db:cc:db:24:3b:9a:80:69:cb:59:a3:30:46:5f: 5b:e1:2f:93:a9:d9:fe:38:15:f8:f2:fa:ab:0e:23:b9:a2:1b: 86:e4:e7:09:e1:1a:6c:b6:4c:52:83:f6:9b:5d:50:7a:11:33: 59:73:a4:63:e1:e2:2f:d8:9c:20:d9:12:ff:56:3f:ec:2c:6d: 97:e9:7b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93/FbpGQ/aFLdEXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmN2U4ZjEtODliZS00ZjU3LWEyY2ItOTEyYjQ1YjMw OGZjMB4XDTI2MTAxMTE3MDUwNVoXDTI3MDEwOTE4MDUwNVowLzEtMCsGA1UEAxMk ZjUwYzc0NjYtYjEzMC00ODI4LWJjZGYtNzMzYmE3ZTA4ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO0rHdBdxBGUlgarhcE7ZDcLbJGMty6syE1y tuHKNYJ+vheKP0tFKzXuY6bk6SaSyVZw9eMtn/wV7/hbg4MyLjZgZ5OTL4A79PA+ sMIPphu6rFgu/WZWl8+VUy5SUCatX8uf+zy1NYl80d0oK2jHulwzjNtcRdFAXLNx XVYi+d+XuvZ8pATDpl/vwydeHYCUn6A4Q1YZTKAu+777OULKGa6AGzY3/JI/M90y Rg5hP8DEzNr11v6szbvswzycNM9kidGlyH+B9LTkYMVPKakZPqcGjohnu5yiwux6 YhA6U05B0VxJuXdc6Y5SVitb0GZjs8dpsq2OzVY+w1WdhrYTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlwJ0VGelJ3AH6puVP7HqyLE72hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YmY3 ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDViMzA4ZmMvMmIxMDY1ZDctMzRmOC0z ZDc4LTliZDgtZTE2ZDlhN2JiNDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWJmN2U4ZjEtODliZS00ZjU3LWEy Y2ItOTEyYjQ1YjMwOGZjLzliZjdlOGYxLTg5YmUtNGY1Ny1hMmNiLTkxMmI0NWIz MDhmYy5jcmwwHwYDVR0jBBgwFoAUTALaSCK+jvSz6BfyR2Rziu2G2HYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJi NDViMzA4ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpk7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0BBfyBTpcm4ZIQy89LUaOLkyLpHneapC5HodKm1ojTBIiba9jiY1WT gSb2z+ByxaKl4WZDosAc5iNpCR4wB8N0MFHdsZyVK9v9WrbIAbEJwuM/K0MP54Ss qKYJQRtdq51EQui8dvWrlwk2zC2fFf0lsA68arMbgNAI/W/Xp+4xaP97sCPBIqfW iur2obv2pMzPMPeLz8vk9weVTmifhahbnNuRX7o5a/r4smxwf5d3PCYylzw3j1Db zNskO5qAactZozBGX1vhL5Op2f44Ffjy+qsOI7miG4bk5wnhGmy2TFKD9ptdUHoR M1lzpGPh4i/YnCDZEv9WP+wsbZfpe8k= -----END CERTIFICATE-----Generated at Tue Oct 13 06:13:43 2026 by rpki-client