$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa File: 42e8aaf6-e160-3994-b12c-56f0221750e9.roa (raw, json) Hash identifier: 4oS42cvjADcFIZPSIGEByJRlYiiq7mTqZUUudQIQCO4= Subject key identifier: F0:A7:13:EA:8A:66:55:A2:BA:DB:FF:3E:8F:12:99:98:9E:D9:01:EF Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F49767B89DEECF6C8588FEB00 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16532 IP address blocks: 198.52.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7b:89:de:ec:f6:c8:58:8f:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=73bb3ce8-7643-46ac-9c2a-4a98d90e7c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:b3:f1:49:9d:a8:13:e0:4d:9f:6e:88:c7: 5f:0a:eb:e6:5f:64:e2:1a:ce:db:e0:58:10:d1:62: 4b:9d:e3:5e:1f:3c:bd:52:6f:8e:d3:db:b0:83:99: f2:0f:3f:2c:24:ab:79:2d:74:2b:e1:3b:12:f3:9e: 17:36:b8:89:bc:db:6b:f6:5d:25:8d:98:d5:dd:e1: 37:e6:ce:a0:d4:10:e7:ec:31:2a:96:2d:32:5a:74: a1:2d:4e:4d:d9:2a:df:24:80:b0:11:fc:52:1b:e9: 79:2e:47:70:79:a7:d7:76:d2:51:00:1a:a6:d6:96: a1:41:36:c5:01:78:5c:55:48:55:3b:59:d0:40:8a: 97:cf:c3:21:6d:a4:18:41:0c:82:7b:b7:4c:b9:2f: 81:93:a9:d6:f9:d0:23:6d:a3:cb:ed:ae:a1:b9:1e: 08:54:a4:c1:72:cc:95:f1:a0:76:73:cf:d5:8d:8a: 9c:83:fe:a5:9e:7d:28:33:58:e7:cc:2d:07:5b:e9: ea:ac:f3:11:12:c5:92:83:3c:50:0e:4e:34:87:3b: 84:92:8e:b5:4b:64:75:ba:5e:f6:25:fd:6c:21:51: 6b:89:85:f3:af:59:5a:a5:e5:52:30:85:62:26:bc: 00:20:bb:d2:a0:69:98:ea:03:66:09:85:59:89:c5: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A7:13:EA:8A:66:55:A2:BA:DB:FF:3E:8F:12:99:98:9E:D9:01:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 198.52.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:46:91:e6:07:c1:f6:3b:4e:1a:4c:c5:4c:01:0c:2d:06:91: d4:5f:c9:b9:15:ee:2e:2e:99:02:a3:41:9c:52:88:0f:1d:d8: 4e:42:5d:5d:7e:2d:d1:f6:e0:4f:17:87:74:8e:e5:f9:53:2d: db:62:08:e9:75:d2:3e:e8:b3:ed:d1:cb:23:1a:32:ba:70:35: 73:94:17:15:41:d9:08:f6:40:96:5e:3b:5b:73:67:ec:c3:b2: 7c:d8:3e:cf:bf:4f:65:1a:95:42:7d:6e:ce:b8:e2:3b:6b:cf: d6:ac:a6:f1:75:6c:c6:a2:d8:31:0a:a0:47:2c:60:9f:41:e1: d3:fa:48:d9:e3:dd:e1:e1:21:87:aa:2c:db:d5:52:29:1d:2e: 3d:cb:a5:78:92:47:8b:67:d5:79:b5:58:aa:c4:eb:88:a2:36: 9d:94:b9:df:5b:f3:6d:6d:04:1f:d4:78:23:09:cb:c3:ab:88: 82:68:e7:42:60:c8:99:19:33:4f:b2:17:b5:75:f8:57:43:62: e7:63:16:b8:55:16:23:f9:2a:be:b9:80:61:0e:4c:51:8a:cb: fc:39:6f:a8:39:f3:aa:9f:aa:94:65:83:59:1f:27:67:d3:b8: 26:5c:70:c6:11:d5:c3:42:20:97:97:d6:0c:0e:9b:55:53:66: 12:b9:8a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnuJ3uz2yFiP6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzNiYjNjZTgtNzY0My00NmFjLTljMmEtNGE5OGQ5MGU3YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCiz8UmdqBPgTZ9uiMdfCuvmX2TiGs7b4FgQ 0WJLneNeHzy9Um+O09uwg5nyDz8sJKt5LXQr4TsS854XNriJvNtr9l0ljZjV3eE3 5s6g1BDn7DEqli0yWnShLU5N2SrfJICwEfxSG+l5LkdweafXdtJRABqm1pahQTbF AXhcVUhVO1nQQIqXz8MhbaQYQQyCe7dMuS+Bk6nW+dAjbaPL7a6huR4IVKTBcsyV 8aB2c8/VjYqcg/6lnn0oM1jnzC0HW+nqrPMREsWSgzxQDk40hzuEko61S2R1ul72 Jf1sIVFriYXzr1lapeVSMIViJrwAILvSoGmY6gNmCYVZicULawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCnE+qKZlWiutv/Po8SmZie2QHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNDJlOGFhZjYtZTE2MC0z OTk0LWIxMmMtNTZmMDIyMTc1MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFGkeYHwfY7ThpMxUwBDC0GkdRfybkV7i4umQKjQZxSiA8d2E5CXV1+ LdH24E8Xh3SO5flTLdtiCOl10j7os+3RyyMaMrpwNXOUFxVB2Qj2QJZeO1tzZ+zD snzYPs+/T2UalUJ9bs644jtrz9aspvF1bMai2DEKoEcsYJ9B4dP6SNnj3eHhIYeq LNvVUikdLj3LpXiSR4tn1Xm1WKrE64iiNp2Uud9b821tBB/UeCMJy8OriIJo50Jg yJkZM0+yF7V1+FdDYudjFrhVFiP5Kr65gGEOTFGKy/w5b6g586qfqpRlg1kfJ2fT uCZccMYR1cNCIJeX1gwOm1VTZhK5ijA= -----END CERTIFICATE-----Generated at Sat Oct 24 19:06:37 2026 by rpki-client