$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/e852e173-443d-30d3-9e19-e8549b6b4ef3.roa File: e852e173-443d-30d3-9e19-e8549b6b4ef3.roa (raw, json) Hash identifier: p7LvLQPdjIq8dFXRyMbB9eJrmnfamA4gZHbwv20J6co= Subject key identifier: 42:A8:86:FB:2C:95:74:46:6A:00:DE:F3:7E:C1:E2:94:7F:23:13:82 Certificate issuer: /CN=5c01ee74-e8b7-4457-94c3-87a79c9dfbf3 Certificate serial: 010D0C9F4328584FA163378FB394F944C2E1C480 Authority key identifier: 31:2C:01:67:14:5D:AD:FD:7B:CD:BB:D3:2D:23:FD:6E:61:91:78:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/e852e173-443d-30d3-9e19-e8549b6b4ef3.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 54520 IP address blocks: 192.30.98.0/24 maxlen: 24 192.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:37:8f:b3:94:f9:44:c2:e1:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c01ee74-e8b7-4457-94c3-87a79c9dfbf3 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=2356eb2d-4035-411f-a8d8-a929955e3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:ac:ed:42:76:60:26:07:ba:bb:c3:a9:86: 71:e8:7b:43:d4:a2:44:32:88:d3:3d:0d:51:e3:5d: 00:25:a7:81:5b:9f:56:11:6b:20:ac:e5:60:f2:c8: 06:0f:66:1d:82:11:dd:8a:02:d1:51:56:72:f7:08: e0:28:e7:d5:c4:3e:a0:6d:15:6d:b7:da:90:82:90: 27:ae:58:8a:01:3b:12:c1:af:36:d5:eb:ad:99:4a: a9:d4:dd:18:01:a1:55:e0:12:9a:1e:4a:e3:7e:a6: 87:cf:74:69:35:aa:52:f0:53:72:e2:0f:e4:48:66: bd:9a:77:de:2f:0e:2a:87:c5:9d:7b:f4:50:f5:06: 44:85:f1:8f:5c:c3:1a:f1:c4:11:08:16:80:e5:f4: d7:f3:0f:a0:38:75:92:82:4c:b8:66:07:42:7f:7c: 8c:95:52:34:b4:5f:21:b1:ce:70:11:a0:b6:ec:62: 18:0e:c6:43:3b:80:60:f3:7c:62:03:5a:6b:25:ca: b6:7b:fc:c9:1a:0a:01:95:16:62:94:e3:35:26:aa: 86:67:4a:e7:0d:e7:7b:a7:b0:61:b9:6a:53:c5:ed: 9e:35:6a:85:8e:fe:11:51:36:82:c1:c9:93:00:25: 5c:d0:c2:13:df:b3:34:6c:3c:aa:b5:e7:98:09:6f: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:86:FB:2C:95:74:46:6A:00:DE:F3:7E:C1:E2:94:7F:23:13:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/e852e173-443d-30d3-9e19-e8549b6b4ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.crl X509v3 Authority Key Identifier: keyid:31:2C:01:67:14:5D:AD:FD:7B:CD:BB:D3:2D:23:FD:6E:61:91:78:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer sbgp-ipAddrBlock: critical IPv4: 192.30.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:db:5e:4d:36:de:94:f8:70:04:eb:58:a7:85:ea:4f:29:1e: 36:e1:f4:25:87:7e:11:b8:4d:64:00:14:29:91:e3:d5:a1:52: d7:90:0c:b7:20:42:e7:d3:6a:ae:77:a2:50:de:22:05:e1:cc: 0e:0f:54:7a:50:b7:6a:4d:86:21:35:0f:d3:48:64:c2:19:bc: 83:ae:31:a7:42:df:1c:33:64:f7:33:1f:a3:02:9b:8f:61:9d: 39:48:43:b1:ce:3c:3b:92:4a:e7:b6:84:f1:82:2b:8b:c1:c7: 56:9b:ca:92:67:0a:7a:76:77:fb:2d:92:4f:8b:96:77:5c:dd: 10:71:7e:7e:23:08:ed:4a:a9:15:10:13:e8:a1:2e:ca:c5:5e: 3c:8d:c9:7e:9d:53:02:cf:c8:2c:2c:81:87:b2:3b:47:e7:22: f5:8b:b0:7d:d3:e8:cf:c6:f4:b8:b8:e2:7e:bb:a8:71:57:72: 45:ee:51:d1:10:a6:2a:55:e7:ca:f0:2b:62:e7:3a:8e:b1:14: f0:b0:94:6c:15:c3:55:fe:e1:5a:1c:88:10:e6:aa:0d:a3:50: b8:69:ba:76:1e:d2:af:4a:06:10:7d:64:8d:c7:bc:44:b8:4f: 06:53:b3:ef:11:20:d3:d2:64:6e:99:27:49:ff:a7:fe:17:62: a3:2c:2d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzePs5T5RMLhxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMwMWVlNzQtZThiNy00NDU3LTk0YzMtODdhNzljOWRm YmYzMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk MjM1NmViMmQtNDAzNS00MTFmLWE4ZDgtYTkyOTk1NWUzYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnOs7UJ2YCYHurvDqYZx6HtD1KJEMojTPQ1R 410AJaeBW59WEWsgrOVg8sgGD2YdghHdigLRUVZy9wjgKOfVxD6gbRVtt9qQgpAn rliKATsSwa821eutmUqp1N0YAaFV4BKaHkrjfqaHz3RpNapS8FNy4g/kSGa9mnfe Lw4qh8Wde/RQ9QZEhfGPXMMa8cQRCBaA5fTX8w+gOHWSgky4ZgdCf3yMlVI0tF8h sc5wEaC27GIYDsZDO4Bg83xiA1prJcq2e/zJGgoBlRZilOM1JqqGZ0rnDed7p7Bh uWpTxe2eNWqFjv4RUTaCwcmTACVc0MIT37M0bDyqteeYCW8NSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKohvsslXRGagDe837B4pR/IxOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YzAx ZWU3NC1lOGI3LTQ0NTctOTRjMy04N2E3OWM5ZGZiZjMvZTg1MmUxNzMtNDQzZC0z MGQzLTllMTktZTg1NDliNmI0ZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWMwMWVlNzQtZThiNy00NDU3LTk0 YzMtODdhNzljOWRmYmYzLzVjMDFlZTc0LWU4YjctNDQ1Ny05NGMzLTg3YTc5Yzlk ZmJmMy5jcmwwHwYDVR0jBBgwFoAUMSwBZxRdrf17zbvTLSP9bmGReKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YzAxZWU3NC1lOGI3LTQ0NTctOTRjMy04N2E3 OWM5ZGZiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXbXk023pT4cATrWKeF6k8pHjbh9CWHfhG4TWQAFCmR49WhUteQDLcg QufTaq53olDeIgXhzA4PVHpQt2pNhiE1D9NIZMIZvIOuMadC3xwzZPczH6MCm49h nTlIQ7HOPDuSSue2hPGCK4vBx1abypJnCnp2d/stkk+Llndc3RBxfn4jCO1KqRUQ E+ihLsrFXjyNyX6dUwLPyCwsgYeyO0fnIvWLsH3T6M/G9Li44n67qHFXckXuUdEQ pipV58rwK2LnOo6xFPCwlGwVw1X+4VociBDmqg2jULhpunYe0q9KBhB9ZI3HvES4 TwZTs+8RINPSZG6ZJ0n/p/4XYqMsLa0= -----END CERTIFICATE-----Generated at Tue Oct 27 06:05:34 2026 by rpki-client