$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/d9352bda-e18d-390f-ac76-6c159ca5539b.roa File: d9352bda-e18d-390f-ac76-6c159ca5539b.roa (raw, json) Hash identifier: jnQUvOYgSHBCfGer2eH6TcZnpcmVUCVgfqrAGOBuGB0= Subject key identifier: 16:0C:C8:C8:62:E0:69:E9:C7:73:D2:A9:66:71:C5:B7:78:08:ED:09 Certificate issuer: /CN=e0052649-4e2f-4a6c-8cfa-f0d0d8386887 Certificate serial: 010D0C9F4328584F5B89F01ED55C373B025544B8 Authority key identifier: BD:BC:B0:CE:8B:36:1D:8B:91:A2:A0:15:95:A8:B2:B3:E5:C0:D7:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/d9352bda-e18d-390f-ac76-6c159ca5539b.roa Signing time: Thu 01 Oct 2026 12:31:56 +0000 ROA not before: Thu 01 Oct 2026 12:31:56 +0000 ROA not after: Wed 30 Dec 2026 13:31:56 +0000 asID: 4983 IP address blocks: 192.198.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:89:f0:1e:d5:5c:37:3b:02:55:44:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0052649-4e2f-4a6c-8cfa-f0d0d8386887 Validity Not Before: Oct 1 12:31:56 2026 GMT Not After : Dec 30 13:31:56 2026 GMT Subject: CN=b6bb32de-43bb-4113-b071-33e0d7a9b71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:d1:5d:77:77:19:bd:83:d7:db:58:64:1a: 87:cb:08:2e:f1:9e:21:2e:50:94:4e:46:68:19:23: 38:af:66:cf:a6:fe:6e:21:62:ac:24:16:26:a4:56: e4:3a:e9:0e:88:fa:60:0e:74:d5:08:4a:af:23:42: b1:50:ac:05:cb:ad:b0:90:37:5b:7b:67:c9:ea:af: 31:89:a5:fc:5d:f5:39:69:ba:c5:de:23:1d:3f:ac: a0:9b:ba:e6:c6:1e:5e:05:c4:ee:0c:4d:49:97:24: 01:f8:b7:fb:a2:b5:c4:23:ae:c2:e0:45:49:bd:2f: 73:29:93:23:95:ce:df:53:ea:5b:f3:39:b4:19:32: 7a:7a:a3:9b:a0:ec:64:6a:6b:62:f7:de:cc:56:47: d6:f5:c5:76:32:76:dd:14:57:85:aa:c0:81:c8:38: 36:d2:c0:ba:a8:6f:09:3a:18:68:ac:87:c8:5a:7f: a2:88:58:73:38:5a:8f:f2:cf:22:f7:1f:6a:6e:c4: 7f:09:55:cc:0b:1a:1a:5a:ad:dc:db:3c:76:2d:eb: aa:51:29:fa:e1:cb:9f:a1:83:67:23:ec:51:bb:70: 9b:8b:43:51:36:c8:b1:ba:25:6c:f9:37:ff:f6:9b: 2f:ef:45:38:04:c2:42:dd:1f:b6:09:22:f0:0d:0d: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:C8:C8:62:E0:69:E9:C7:73:D2:A9:66:71:C5:B7:78:08:ED:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/d9352bda-e18d-390f-ac76-6c159ca5539b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.crl X509v3 Authority Key Identifier: keyid:BD:BC:B0:CE:8B:36:1D:8B:91:A2:A0:15:95:A8:B2:B3:E5:C0:D7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer sbgp-ipAddrBlock: critical IPv4: 192.198.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4a:9c:c1:8e:eb:cd:a4:94:8d:9b:bb:a2:fd:22:fd:51:43: 08:11:e6:54:bc:36:ab:21:3d:98:95:94:d8:28:f2:0b:ef:6d: 2c:90:49:c9:11:83:df:d5:42:08:38:ee:4a:47:23:85:d9:fd: c6:55:b6:10:07:c1:39:c9:d9:09:2a:1e:80:2f:0f:6c:b5:3e: 9d:9c:0f:37:df:2a:e4:de:a4:72:08:8a:d3:43:62:ce:3d:56: cc:e2:35:0f:54:ca:d6:ef:d6:39:19:05:07:73:95:ef:4f:c2: 40:a2:4c:77:85:21:d5:02:52:31:9f:8e:03:f6:b1:2c:6f:98: 0c:fc:cc:22:9b:09:96:c3:08:ed:4b:5d:39:23:c5:87:9b:87: 45:00:8e:28:d4:26:e7:38:1d:59:b3:fc:9a:21:25:fb:71:c1: 36:b0:3f:ae:07:fa:13:8c:93:22:2c:bc:95:68:64:e2:8c:1f: 88:b6:a1:29:97:a9:05:ec:a3:a2:3c:0d:cb:f9:c0:9f:85:ae: cd:96:f6:9f:03:68:eb:7b:ff:d2:14:c8:cf:bf:cd:bf:38:e2: 9c:c6:01:fe:22:94:cd:8b:c4:87:b1:1b:36:c4:0b:8a:ed:9d: 57:ca:78:cb:8e:64:fc:c6:96:82:24:2d:ea:9e:30:e3:b5:06: 2d:2b:65:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bifAe1Vw3OwJVRLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAwNTI2NDktNGUyZi00YTZjLThjZmEtZjBkMGQ4Mzg2 ODg3MB4XDTI2MTAwMTEyMzE1NloXDTI2MTIzMDEzMzE1NlowLzEtMCsGA1UEAxMk YjZiYjMyZGUtNDNiYi00MTEzLWIwNzEtMzNlMGQ3YTliNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz7RXXd3Gb2D19tYZBqHywgu8Z4hLlCUTkZo GSM4r2bPpv5uIWKsJBYmpFbkOukOiPpgDnTVCEqvI0KxUKwFy62wkDdbe2fJ6q8x iaX8XfU5abrF3iMdP6ygm7rmxh5eBcTuDE1JlyQB+Lf7orXEI67C4EVJvS9zKZMj lc7fU+pb8zm0GTJ6eqOboOxkamti997MVkfW9cV2MnbdFFeFqsCByDg20sC6qG8J OhhorIfIWn+iiFhzOFqP8s8i9x9qbsR/CVXMCxoaWq3c2zx2LeuqUSn64cufoYNn I+xRu3Cbi0NRNsixuiVs+Tf/9psv70U4BMJC3R+2CSLwDQ02lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYMyMhi4Gnpx3PSqWZxxbd4CO0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDA1 MjY0OS00ZTJmLTRhNmMtOGNmYS1mMGQwZDgzODY4ODcvZDkzNTJiZGEtZTE4ZC0z OTBmLWFjNzYtNmMxNTljYTU1MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTAwNTI2NDktNGUyZi00YTZjLThj ZmEtZjBkMGQ4Mzg2ODg3L2UwMDUyNjQ5LTRlMmYtNGE2Yy04Y2ZhLWYwZDBkODM4 Njg4Ny5jcmwwHwYDVR0jBBgwFoAUvbywzos2HYuRoqAVlaiys+XA14YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDA1MjY0OS00ZTJmLTRhNmMtOGNmYS1mMGQw ZDgzODY4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9KnMGO682klI2bu6L9Iv1RQwgR5lS8NqshPZiVlNgo8gvvbSyQSckR g9/VQgg47kpHI4XZ/cZVthAHwTnJ2QkqHoAvD2y1Pp2cDzffKuTepHIIitNDYs49 VsziNQ9Uytbv1jkZBQdzle9PwkCiTHeFIdUCUjGfjgP2sSxvmAz8zCKbCZbDCO1L XTkjxYebh0UAjijUJuc4HVmz/JohJftxwTawP64H+hOMkyIsvJVoZOKMH4i2oSmX qQXso6I8Dcv5wJ+Frs2W9p8DaOt7/9IUyM+/zb844pzGAf4ilM2LxIexGzbEC4rt nVfKeMuOZPzGloIkLeqeMOO1Bi0rZS0= -----END CERTIFICATE-----Generated at Sat Oct 31 15:37:41 2026 by rpki-client