$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa File: d69391f3-6e1a-3ee4-8354-30ffcd168588.roa (raw, json) Hash identifier: xWNg6q9nzSm5C2SoKoDOPUbZcx3pEalMUf653EnDR2c= Subject key identifier: D6:67:DE:72:53:9F:9D:EF:8D:58:74:28:C5:FB:34:10:07:8F:4B:E1 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584F4974094D39EE162914700620 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11758 IP address blocks: 198.231.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:09:4d:39:ee:16:29:14:70:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b806021-33ef-4d8a-99e4-ad5740e01b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:83:e5:ca:8d:f7:6f:ab:75:cc:c4:99:6d:d3: c9:22:b1:ab:7c:77:10:e7:86:e4:b6:36:55:b8:b5: ae:c5:cb:74:ae:82:6f:13:fa:6d:8e:5f:a7:d8:cc: f8:c4:1f:a6:b9:ca:02:d8:51:0d:8f:52:58:55:5c: 7f:93:41:d6:80:e7:6d:ae:cf:5e:83:69:24:06:65: 38:ce:41:62:0b:3b:57:9c:d0:98:3d:ff:84:0b:93: 7c:8e:48:a4:74:34:58:3c:11:a8:54:6e:0a:a8:44: 52:56:1c:dd:24:f8:29:84:5c:0b:af:88:28:c9:6b: 9f:e7:1c:0f:44:ea:89:85:76:1e:43:33:38:ef:d6: 7b:8b:37:db:83:0e:f1:e7:3b:1e:04:90:16:15:5a: 90:75:a3:89:54:28:93:6a:e0:50:24:68:db:52:9a: 53:b1:32:54:51:cb:6d:09:5f:cd:08:c3:eb:59:69: 8d:31:c2:5f:a6:7a:97:1f:a3:b2:8c:8c:92:32:0d: d1:9c:57:57:5f:36:ed:87:c1:a6:f2:8e:40:64:24: 25:8c:e7:aa:e5:71:0e:d6:f4:ba:47:39:a4:92:e4: 95:3d:93:35:4d:f1:b2:b8:5e:4e:8f:7e:aa:51:39: e2:9a:80:7e:1a:d0:15:7d:8f:80:b6:b0:eb:43:01: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:67:DE:72:53:9F:9D:EF:8D:58:74:28:C5:FB:34:10:07:8F:4B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 198.231.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a5:69:c8:aa:25:b1:c4:08:f8:06:f4:a1:bf:55:07:f5:c7: bd:63:58:99:3f:86:ea:c6:15:e8:57:b0:58:e0:bc:e9:94:94: 87:b3:48:3d:eb:3d:5e:54:6c:55:b4:79:56:56:75:8c:97:f9: 76:b7:50:fd:25:a0:38:81:a7:12:a2:eb:f5:b4:9c:0d:2e:34: 8d:40:7c:30:b0:b1:33:26:5f:78:a8:fd:0e:fa:71:f1:be:af: 9e:11:dc:f2:9f:c9:1a:15:58:67:24:e1:eb:c0:40:1e:39:9a: 30:e8:07:0d:0a:69:27:71:4f:0b:80:20:bd:3f:07:90:ca:0b: 0d:6f:16:2c:64:0c:72:4e:e2:0f:c9:45:83:50:80:2f:1c:ac: dd:ce:bf:e9:fb:3c:fd:35:e6:25:c4:c7:81:94:1e:f9:c0:72: 94:6d:f8:83:ca:62:ed:f0:0a:2b:a0:af:8a:5a:65:28:2e:ec: 98:7c:2e:1a:75:b3:86:c2:ce:15:cb:21:ed:73:31:2f:14:93: 68:42:f8:a7:9e:6d:a4:8d:2f:35:af:d5:af:9e:1b:35:33:fe: 6d:1a:8f:f0:4e:5c:2a:90:0b:02:47:13:7d:bc:e0:53:3b:ee: 3d:fd:39:f4:c3:0e:9d:69:32:37:3d:d0:5e:d9:5a:1b:72:71: 59:b8:1a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAlNOe4WKRRwBiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWI4MDYwMjEtMzNlZi00ZDhhLTk5ZTQtYWQ1NzQwZTAxYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IPlyo33b6t1zMSZbdPJIrGrfHcQ54bktjZV uLWuxct0roJvE/ptjl+n2Mz4xB+mucoC2FENj1JYVVx/k0HWgOdtrs9eg2kkBmU4 zkFiCztXnNCYPf+EC5N8jkikdDRYPBGoVG4KqERSVhzdJPgphFwLr4goyWuf5xwP ROqJhXYeQzM479Z7izfbgw7x5zseBJAWFVqQdaOJVCiTauBQJGjbUppTsTJUUctt CV/NCMPrWWmNMcJfpnqXH6OyjIySMg3RnFdXXzbth8Gm8o5AZCQljOeq5XEO1vS6 RzmkkuSVPZM1TfGyuF5Oj36qUTnimoB+GtAVfY+AtrDrQwF9tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZn3nJTn53vjVh0KMX7NBAHj0vhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvZDY5MzkxZjMtNmUxYS0z ZWU0LTgzNTQtMzBmZmNkMTY4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxuccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABelaciqJbHECPgG9KG/VQf1x71jWJk/hurGFehXsFjgvOmUlIezSD3r PV5UbFW0eVZWdYyX+Xa3UP0loDiBpxKi6/W0nA0uNI1AfDCwsTMmX3io/Q76cfG+ r54R3PKfyRoVWGck4evAQB45mjDoBw0KaSdxTwuAIL0/B5DKCw1vFixkDHJO4g/J RYNQgC8crN3Ov+n7PP015iXEx4GUHvnAcpRt+IPKYu3wCiugr4paZSgu7Jh8Lhp1 s4bCzhXLIe1zMS8Uk2hC+KeebaSNLzWv1a+eGzUz/m0aj/BOXCqQCwJHE3284FM7 7j39OfTDDp1pMjc90F7ZWhtycVm4Gks= -----END CERTIFICATE-----Generated at Sun Oct 11 14:50:35 2026 by rpki-client