$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa File: 409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa (raw, json) Hash identifier: UPPpM1HunC7k77V/GB4PH61UbsdXjETi5MXJ477wFmM= Subject key identifier: 84:AA:4D:8E:16:6E:B0:11:0A:58:64:2B:F4:27:B7:DC:47:11:B2:9C Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584F6F22DBC115FC61ED13D5F1C0 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 2906 IP address blocks: 198.45.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:db:c1:15:fc:61:ed:13:d5:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=d1d1b286-f070-4753-bdaf-4fe4cea41171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:da:d8:55:0d:19:4c:a7:7d:4d:2b:08:e5: 23:19:3c:b1:b9:97:4e:4b:39:07:26:7c:c3:44:c8: f0:2b:80:4a:7f:cf:ed:90:75:f4:f8:ad:b7:d3:2f: d8:54:23:ed:51:c9:c9:55:92:6f:04:14:70:93:cc: 96:71:a9:fd:3b:6d:4c:fd:2e:cf:d3:34:b6:86:ad: bb:d3:a9:03:fb:63:52:d2:22:d2:eb:bb:70:30:07: 2c:d7:3a:59:c3:87:98:0a:9b:53:a4:b7:a3:22:8e: 6e:dc:ca:b7:e3:15:38:ec:00:21:8e:dc:4d:f2:fb: 26:35:1d:dc:c0:4d:90:ca:26:88:62:cb:52:f4:61: 24:67:cb:6d:24:ad:42:09:9f:9e:d3:a5:31:df:d8: df:2f:3a:18:e8:81:64:79:36:72:d1:0d:e9:95:20: c4:94:94:8a:51:17:98:f6:9b:60:61:69:3e:96:be: 9e:5d:e9:94:84:16:c3:52:e1:00:2b:f5:e0:f8:ba: a4:46:78:94:12:ec:cf:f4:d0:ea:b9:8e:8c:20:0a: d9:15:00:92:59:65:d3:bd:33:eb:40:f4:4a:8f:10: 65:c9:40:de:69:7e:4a:42:07:35:fc:ee:fa:ac:95: 74:2d:67:2b:63:4f:94:2e:b4:90:9f:5e:62:5b:e4: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AA:4D:8E:16:6E:B0:11:0A:58:64:2B:F4:27:B7:DC:47:11:B2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 198.45.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:23:6a:35:2c:60:57:13:5c:13:ac:8a:32:e6:f1:9b:68: 46:e2:7f:9a:cb:5d:9e:3d:67:f4:ed:b8:09:d3:b8:81:fe:d0: 2f:7e:93:de:33:23:d4:2b:e2:de:69:f9:76:f3:cc:58:25:37: 52:39:56:79:ad:09:c1:36:10:34:8f:ca:fe:e9:a0:12:55:97: 53:4c:30:72:2e:74:40:91:96:52:14:1c:5d:bb:8f:75:b0:8f: 21:0c:37:d7:4e:2f:64:5b:b3:4c:d1:ce:96:99:79:f0:d1:04: ac:fe:e3:0e:81:77:3b:4e:f7:1f:5e:40:8a:e5:6a:ea:bb:97: 84:28:56:c6:40:be:ec:fb:6c:55:c4:68:67:9c:c8:4c:1b:7b: 6a:0f:75:45:df:a7:97:8f:e7:94:dd:d3:50:89:04:e5:14:72: 78:69:c0:10:2e:34:8a:53:6e:f9:37:1b:27:4d:a1:fc:b1:64: bb:58:90:e3:e1:ae:ef:a4:0b:16:3a:77:9d:a0:93:9f:fa:41: da:c7:ed:fe:53:b3:3d:6b:ce:ab:17:bf:a0:f0:a0:15:27:09: 0e:ec:62:b5:07:d5:de:a3:a3:e5:9b:9f:97:e1:15:74:75:75: 78:96:9b:32:e3:fb:86:bd:cc:52:db:73:4c:d2:17:be:47:9c: 02:b1:98:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vItvBFfxh7RPV8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDFkMWIyODYtZjA3MC00NzUzLWJkYWYtNGZlNGNlYTQxMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnra2FUNGUynfU0rCOUjGTyxuZdOSzkHJnzD RMjwK4BKf8/tkHX0+K230y/YVCPtUcnJVZJvBBRwk8yWcan9O21M/S7P0zS2hq27 06kD+2NS0iLS67twMAcs1zpZw4eYCptTpLejIo5u3Mq34xU47AAhjtxN8vsmNR3c wE2QyiaIYstS9GEkZ8ttJK1CCZ+e06Ux39jfLzoY6IFkeTZy0Q3plSDElJSKUReY 9ptgYWk+lr6eXemUhBbDUuEAK/Xg+LqkRniUEuzP9NDquY6MIArZFQCSWWXTvTPr QPRKjxBlyUDeaX5KQgc1/O76rJV0LWcrY0+ULrSQn15iW+TIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISqTY4WbrARClhkK/Qnt9xHEbKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvNDA5ZjY0MmItYmU4ZS0z YWI5LTllYmMtZTBjODhlYmE3OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExi0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2CI2o1LGBXE1wTrIoy5vGbaEbif5rLXZ49Z/TtuAnTuIH+0C9+k94z I9Qr4t5p+XbzzFglN1I5VnmtCcE2EDSPyv7poBJVl1NMMHIudECRllIUHF27j3Ww jyEMN9dOL2Rbs0zRzpaZefDRBKz+4w6BdztO9x9eQIrlauq7l4QoVsZAvuz7bFXE aGecyEwbe2oPdUXfp5eP55Td01CJBOUUcnhpwBAuNIpTbvk3GydNofyxZLtYkOPh ru+kCxY6d52gk5/6QdrH7f5Tsz1rzqsXv6DwoBUnCQ7sYrUH1d6jo+Wbn5fhFXR1 dXiWmzLj+4a9zFLbc0zSF75HnAKxmP8= -----END CERTIFICATE-----Generated at Sat Oct 10 10:13:54 2026 by rpki-client