$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa File: 896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa (raw, json) Hash identifier: JeGvEuUB6nq/tjEUpWn/jMg6EQX/Yj+k5yZZJEsuaug= Subject key identifier: 1C:10:B6:48:4D:63:E3:4F:18:B4:75:F3:D1:C0:88:D4:FA:13:F7:41 Certificate issuer: /CN=0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2 Certificate serial: 010D0C9F4328584F5E62F2CF34BB197755C4B500 Authority key identifier: 5D:6E:D2:47:FA:F2:D0:17:9D:28:73:A0:B2:C8:52:9E:83:05:E3:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 8075 IP address blocks: 198.202.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f2:cf:34:bb:19:77:55:c4:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=f5ae0880-4ef7-4e2b-af4c-c72f5b3b4496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:68:1d:ae:0f:15:7f:ec:58:de:23:c0:df: 1b:fe:04:41:33:8d:66:af:ef:ad:3c:e8:35:dd:15: c8:bb:a0:ca:70:e0:f9:a2:3c:fd:5b:d4:e5:80:4e: 4f:ec:4f:65:64:4b:12:14:35:3a:a8:52:ef:99:c4: 97:30:fa:c7:39:57:74:d3:88:7a:d2:ba:68:4e:41: 5a:89:45:e3:3a:af:77:64:b6:ca:e7:85:1f:12:ee: e2:33:7a:31:1c:c4:5e:d5:38:53:6d:5a:41:0b:93: 9e:75:aa:73:d9:a6:f4:62:4e:ee:77:1e:60:04:1c: 42:f4:16:49:1a:f6:4c:b3:87:e5:09:ab:62:f2:6f: a1:1b:a0:16:a5:b1:c7:94:12:9e:05:2c:b6:95:e2: ae:cc:a0:7b:31:83:73:9d:81:5c:8e:cf:b5:dd:88: 37:aa:7a:4e:46:f1:5f:11:34:25:79:e9:ad:a9:78: 74:c6:23:10:7f:c2:39:f6:9a:16:60:7b:4f:b2:dc: 40:f6:df:07:b2:87:b9:cd:7a:e2:3a:6b:35:f8:77: a0:87:84:3d:2b:d4:79:4f:9a:21:e2:2e:27:e9:bb: 96:91:e3:7c:92:d9:59:4f:9d:1f:b3:30:ca:5c:be: e1:87:e0:e3:e4:b1:da:57:cf:0b:b6:23:27:35:5b: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:10:B6:48:4D:63:E3:4F:18:B4:75:F3:D1:C0:88:D4:FA:13:F7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.crl X509v3 Authority Key Identifier: keyid:5D:6E:D2:47:FA:F2:D0:17:9D:28:73:A0:B2:C8:52:9E:83:05:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.cer sbgp-ipAddrBlock: critical IPv4: 198.202.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bb:5b:81:bd:22:ef:76:95:7e:81:2c:71:fb:b5:10:27:cf: 0a:37:a3:54:57:21:3b:28:14:8d:49:7d:b7:7c:e9:6b:f6:e5: f2:94:ab:35:be:18:dd:f8:9c:ae:f7:c3:72:a4:c3:ac:50:d8: 2f:54:40:92:49:d3:fc:2c:9b:92:89:c7:68:47:23:fa:17:80: 8b:38:ec:dc:12:f2:2e:a2:97:ff:ce:a4:9c:4a:8f:57:3b:de: 19:be:6f:18:fe:5b:72:85:0e:75:20:72:96:51:83:b8:79:d6: 82:ff:65:db:fc:b7:e2:57:01:be:9a:88:d0:31:db:d9:93:4f: b4:40:0e:32:77:0d:83:03:bf:0d:33:51:90:02:77:35:74:27: 69:b8:63:09:c6:eb:b7:3d:4c:1e:c9:9d:e1:f8:77:ad:13:cf: 94:e2:79:88:3b:60:a1:3f:30:e4:91:cb:fc:d5:c6:8f:68:df: 7f:27:95:3f:fd:5d:67:3c:bf:23:e6:8c:3f:a3:f5:13:64:a5: b8:82:00:ea:88:ea:76:53:05:a0:2b:8e:7e:3e:43:aa:0f:ea: 2d:7f:bb:1d:67:a8:51:eb:fc:b6:55:08:b1:24:07:cb:b5:66: ab:84:b8:b7:c0:a8:8a:74:ac:8d:ae:66:6e:14:4d:b0:b8:e4: 10:7b:2e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvLPNLsZd1XEtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGViMmNkMmQtNmZjMy00NmUxLTljOGItYTJkYWIyZDhj MWQyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjVhZTA4ODAtNGVmNy00ZTJiLWFmNGMtYzcyZjViM2I0NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbdoHa4PFX/sWN4jwN8b/gRBM41mr++tPOg1 3RXIu6DKcOD5ojz9W9TlgE5P7E9lZEsSFDU6qFLvmcSXMPrHOVd004h60rpoTkFa iUXjOq93ZLbK54UfEu7iM3oxHMRe1ThTbVpBC5Oedapz2ab0Yk7udx5gBBxC9BZJ GvZMs4flCati8m+hG6AWpbHHlBKeBSy2leKuzKB7MYNznYFcjs+13Yg3qnpORvFf ETQleemtqXh0xiMQf8I59poWYHtPstxA9t8Hsoe5zXriOms1+Hegh4Q9K9R5T5oh 4i4n6buWkeN8ktlZT50fszDKXL7hh+Dj5LHaV88LtiMnNVtaHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwQtkhNY+NPGLR189HAiNT6E/dBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZWIy Y2QyZC02ZmMzLTQ2ZTEtOWM4Yi1hMmRhYjJkOGMxZDIvODk2ZDZhMGYtMDcxZS0z YjE4LWE3NGQtNjE4NGViOGYzZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGViMmNkMmQtNmZjMy00NmUxLTlj OGItYTJkYWIyZDhjMWQyLzBlYjJjZDJkLTZmYzMtNDZlMS05YzhiLWEyZGFiMmQ4 YzFkMi5jcmwwHwYDVR0jBBgwFoAUXW7SR/ry0BedKHOgsshSnoMF4zowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZWIyY2QyZC02ZmMzLTQ2ZTEtOWM4Yi1hMmRh YjJkOGMxZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsoXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK7W4G9Iu92lX6BLHH7tRAnzwo3o1RXITsoFI1Jfbd86Wv25fKUqzW+ GN34nK73w3Kkw6xQ2C9UQJJJ0/wsm5KJx2hHI/oXgIs47NwS8i6il//OpJxKj1c7 3hm+bxj+W3KFDnUgcpZRg7h51oL/Zdv8t+JXAb6aiNAx29mTT7RADjJ3DYMDvw0z UZACdzV0J2m4YwnG67c9TB7JneH4d60Tz5TieYg7YKE/MOSRy/zVxo9o338nlT/9 XWc8vyPmjD+j9RNkpbiCAOqI6nZTBaArjn4+Q6oP6i1/ux1nqFHr/LZVCLEkB8u1 ZquEuLfAqIp0rI2uZm4UTbC45BB7Lp0= -----END CERTIFICATE-----Generated at Wed Oct 21 21:14:46 2026 by rpki-client