$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa File: e9618a84-cd25-3185-ba38-a4cc840a603b.roa (raw, json) Hash identifier: 1XolCABmek4zMp2UXNEOE3peA0F7FNs6ZtxY1ne/isQ= Subject key identifier: 74:D9:19:73:41:30:A1:78:CF:4C:C4:34:8E:CB:5B:CA:89:2D:A4:8B Certificate issuer: /CN=3416eb84-d1fa-4d16-850d-b6024c13b511 Certificate serial: 010D0C9F4328584FA1632C21F79557463F85D400 Authority key identifier: C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 21930 IP address blocks: 198.202.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2c:21:f7:95:57:46:3f:85:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3416eb84-d1fa-4d16-850d-b6024c13b511 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=bab7dbd5-a312-4170-af2c-5b46146fcc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:0b:76:39:75:3b:f8:e4:2e:d5:34:8c:32: a8:a3:07:57:a7:c5:07:2f:2e:90:09:75:50:9b:e0: ee:2d:31:83:90:ec:b4:36:a7:ed:ee:74:d7:b6:6c: 76:d5:52:90:21:d0:04:5a:56:b6:ed:68:ae:5e:ae: 6f:00:1e:d9:df:33:f5:a6:86:d7:f8:0a:4d:8a:c9: 61:34:e2:c1:1b:cf:ae:20:1e:73:d7:d0:7d:3d:8f: e9:5d:0b:f5:e6:6c:19:bf:29:b3:97:76:1d:7d:0d: 6a:69:a4:d9:a1:f6:67:69:37:50:c7:7e:93:e1:c4: bc:43:3a:eb:94:97:6f:66:f8:97:72:15:d4:63:7a: 5c:d1:f5:29:fd:fb:45:cf:61:cd:8d:67:a6:ab:76: 06:5c:a7:31:d1:33:e3:4b:9d:6a:28:cd:6c:58:fd: af:17:dc:52:30:6d:a1:a3:ab:08:c7:98:48:1a:34: 7e:19:43:b8:8c:de:f3:26:eb:b3:81:dd:73:fa:8e: d1:8a:3a:fd:a5:95:b2:38:30:b4:b9:80:85:f0:b0: 3c:0e:18:9f:b9:7b:1d:49:ca:1a:71:52:9b:0b:8f: 1f:bd:22:9a:9e:28:44:65:48:d4:08:02:d9:b9:a2: 41:5c:74:cb:93:2c:72:fe:61:44:60:89:19:99:a4: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:19:73:41:30:A1:78:CF:4C:C4:34:8E:CB:5B:CA:89:2D:A4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl X509v3 Authority Key Identifier: keyid:C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer sbgp-ipAddrBlock: critical IPv4: 198.202.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9b:e4:1a:4f:13:27:75:45:2d:4f:9a:36:96:b0:f6:f2:78: 67:d4:72:4e:74:fb:bf:14:48:f9:29:0d:3a:50:c1:51:26:32: 11:8c:17:8f:30:38:2a:db:6d:d2:95:2c:3b:37:f0:0e:cb:8b: 7f:27:d6:fb:a5:10:61:af:e3:0c:1e:36:26:a8:d5:7d:f8:8c: ae:68:c1:41:b7:1c:3e:12:2a:e7:48:df:de:e4:3b:2b:4f:3f: d4:84:54:08:2d:70:85:68:d1:56:b7:24:9f:9f:77:44:7b:15: 62:e0:7b:3a:5b:fd:a2:50:3a:e2:e2:4a:c8:95:fe:9e:47:f3: 83:ab:6f:1c:e7:ef:cb:c3:2e:7c:10:32:d0:ce:48:78:bc:13: 8e:41:29:9d:93:c9:c0:eb:28:99:3a:ad:33:e3:51:95:5d:60: 67:98:d2:ec:cd:f9:37:e2:6f:63:60:9b:4b:bb:14:e1:d2:62: 7e:1e:1c:56:e8:c6:8c:e8:33:48:2f:01:b2:96:a1:77:3c:27: ed:a9:cb:c8:79:6e:42:0e:73:e9:af:19:51:0f:b7:59:89:16: 3e:15:47:f2:d4:f4:dd:e9:b2:64:ec:ae:b2:01:69:b7:f6:6e: bc:de:c1:ec:be:f4:54:64:29:4a:8f:ca:1c:b2:4c:0d:2c:1a: ac:4e:d9:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYywh95VXRj+F1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxNmViODQtZDFmYS00ZDE2LTg1MGQtYjYwMjRjMTNi NTExMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk YmFiN2RiZDUtYTMxMi00MTcwLWFmMmMtNWI0NjE0NmZjYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7QLdjl1O/jkLtU0jDKoowdXp8UHLy6QCXVQ m+DuLTGDkOy0Nqft7nTXtmx21VKQIdAEWla27WiuXq5vAB7Z3zP1pobX+ApNislh NOLBG8+uIB5z19B9PY/pXQv15mwZvymzl3YdfQ1qaaTZofZnaTdQx36T4cS8Qzrr lJdvZviXchXUY3pc0fUp/ftFz2HNjWemq3YGXKcx0TPjS51qKM1sWP2vF9xSMG2h o6sIx5hIGjR+GUO4jN7zJuuzgd1z+o7Rijr9pZWyODC0uYCF8LA8DhifuXsdScoa cVKbC48fvSKanihEZUjUCALZuaJBXHTLkyxy/mFEYIkZmaT2iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTZGXNBMKF4z0zENI7LW8qJLaSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNDE2 ZWI4NC1kMWZhLTRkMTYtODUwZC1iNjAyNGMxM2I1MTEvZTk2MThhODQtY2QyNS0z MTg1LWJhMzgtYTRjYzg0MGE2MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzQxNmViODQtZDFmYS00ZDE2LTg1 MGQtYjYwMjRjMTNiNTExLzM0MTZlYjg0LWQxZmEtNGQxNi04NTBkLWI2MDI0YzEz YjUxMS5jcmwwHwYDVR0jBBgwFoAUx8XVuAOj4rQ0sv5EJrU6ylPSTBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNDE2ZWI4NC1kMWZhLTRkMTYtODUwZC1iNjAy NGMxM2I1MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACab5BpPEyd1RS1PmjaWsPbyeGfUck50+78USPkpDTpQwVEmMhGMF48w OCrbbdKVLDs38A7Li38n1vulEGGv4wweNiao1X34jK5owUG3HD4SKudI397kOytP P9SEVAgtcIVo0Va3JJ+fd0R7FWLgezpb/aJQOuLiSsiV/p5H84Orbxzn78vDLnwQ MtDOSHi8E45BKZ2TycDrKJk6rTPjUZVdYGeY0uzN+Tfib2Ngm0u7FOHSYn4eHFbo xozoM0gvAbKWoXc8J+2py8h5bkIOc+mvGVEPt1mJFj4VR/LU9N3psmTsrrIBabf2 brzewey+9FRkKUqPyhyyTA0sGqxO2Yc= -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:19 2026 by rpki-client