$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/5920a85d-f3d3-380a-b369-162ca959096d.roa File: 5920a85d-f3d3-380a-b369-162ca959096d.roa (raw, json) Hash identifier: Z+wGufXiAoZNkwNWrVtX62VJjUqm8WtXXEJdbHU2dfk= Subject key identifier: 3A:E5:28:D8:3D:ED:DF:51:3F:D1:8D:EE:91:01:4F:68:DA:93:89:B7 Certificate issuer: /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7 Certificate serial: 010D0C9F4328584F480D394FB2CC381587866700 Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/5920a85d-f3d3-380a-b369-162ca959096d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 198.160.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:39:4f:b2:cc:38:15:87:86:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=ff80697d-9a7f-4600-8587-3b8d7203ed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:0d:1c:b5:c9:b2:34:cc:31:e1:c4:79:66: a4:22:ca:40:9c:2d:51:99:e7:f7:96:34:ba:0f:31: f4:e6:02:d7:98:c0:e1:0e:20:17:71:65:e0:97:1b: 57:44:63:d2:09:0a:79:60:07:65:3a:fc:9b:31:ec: 14:d7:32:c6:fc:14:17:a9:7c:c6:40:83:ea:4b:ec: 5a:b0:4e:36:ff:c6:59:7d:4f:08:06:ca:32:4e:f1: 3a:12:3f:6f:7b:f3:67:5a:0b:8b:54:55:e5:2c:98: d3:88:7c:f1:52:43:7d:70:79:76:bc:a5:d9:ec:c2: a1:5c:b5:6d:4f:5b:50:1f:19:c9:98:47:27:ec:2a: d2:36:de:a4:38:8b:22:d0:16:eb:72:8f:f3:69:c2: 50:a6:43:06:86:48:eb:88:d1:50:23:95:8e:a9:bc: a5:c1:92:bc:be:53:31:35:42:5d:b8:18:0e:1d:4e: 29:77:a5:66:f8:ef:c8:c4:2e:8c:52:14:cd:e1:b2: 36:7f:30:39:0f:7f:66:ed:6b:66:ef:d2:71:6a:63: 7a:dc:52:6d:04:f4:2e:18:fb:ec:51:1a:69:60:cf: 02:90:8c:39:9c:c7:45:71:d2:e4:24:b8:9c:d0:9f: f4:6c:a4:17:2d:09:0b:80:81:ed:94:59:fc:86:da: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:28:D8:3D:ED:DF:51:3F:D1:8D:EE:91:01:4F:68:DA:93:89:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/5920a85d-f3d3-380a-b369-162ca959096d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl X509v3 Authority Key Identifier: keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer sbgp-ipAddrBlock: critical IPv4: 198.160.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f0:f2:cd:25:9f:63:ae:33:2f:22:98:54:2a:1c:65:3e:b1: 54:24:7c:7b:1e:a5:95:ac:8d:3e:74:29:d6:b0:f3:8a:9f:3a: 92:87:d0:a8:69:7b:01:c5:69:af:2d:45:87:28:18:63:69:20: b4:9c:6c:9f:24:4e:e3:a3:dc:e7:99:5b:78:e1:e8:b8:76:b5: 8a:94:e0:da:b9:9f:75:c5:bb:25:46:97:73:8b:70:b7:e0:8e: 02:bc:f8:f6:fc:b3:78:75:ee:f6:84:20:58:92:fe:b4:f6:f2: f7:9b:f2:0a:1f:4b:80:7a:05:0a:f4:ce:c8:ea:7a:e7:21:06: a8:8b:21:08:b4:ed:31:9d:b8:97:95:a8:1d:bf:40:21:1b:c3: bd:08:02:0f:42:7f:31:ae:45:1a:66:80:b1:61:05:02:70:ec: 78:f1:7b:51:6c:07:2f:17:ce:aa:7e:16:13:da:a0:60:f6:cf: d9:99:13:20:6d:72:9c:b6:38:d2:39:a4:19:aa:cb:b7:2c:ee: df:e7:b9:37:24:09:a0:89:d4:dc:54:8e:8a:83:0f:45:cb:0e: 79:16:e2:ab:a9:c1:e6:8f:ae:45:58:57:b3:d9:ca:4b:d2:96: 3e:16:65:65:3f:f1:ca:64:5a:01:0c:47:f3:57:78:ca:07:97: 8e:a8:f6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTlPssw4FYeGZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmMjgzMTQtOGZlMC00N2ZmLTgzZmUtMmNhMTExYjc1 OWE3MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmY4MDY5N2QtOWE3Zi00NjAwLTg1ODctM2I4ZDcyMDNlZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTENHLXJsjTMMeHEeWakIspAnC1Rmef3ljS6 DzH05gLXmMDhDiAXcWXglxtXRGPSCQp5YAdlOvybMewU1zLG/BQXqXzGQIPqS+xa sE42/8ZZfU8IBsoyTvE6Ej9ve/NnWguLVFXlLJjTiHzxUkN9cHl2vKXZ7MKhXLVt T1tQHxnJmEcn7CrSNt6kOIsi0Bbrco/zacJQpkMGhkjriNFQI5WOqbylwZK8vlMx NUJduBgOHU4pd6Vm+O/IxC6MUhTN4bI2fzA5D39m7Wtm79JxamN63FJtBPQuGPvs URppYM8CkIw5nMdFcdLkJLic0J/0bKQXLQkLgIHtlFn8htpo7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrlKNg97d9RP9GN7pEBT2jak4m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YWYy ODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2ExMTFiNzU5YTcvNTkyMGE4NWQtZjNkMy0z ODBhLWIzNjktMTYyY2E5NTkwOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGFmMjgzMTQtOGZlMC00N2ZmLTgz ZmUtMmNhMTExYjc1OWE3LzRhZjI4MzE0LThmZTAtNDdmZi04M2ZlLTJjYTExMWI3 NTlhNy5jcmwwHwYDVR0jBBgwFoAUAzaiNX4YMREjjb6wYqpgCuXMPCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YWYyODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2Ex MTFiNzU5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzw8s0ln2OuMy8imFQqHGU+sVQkfHsepZWsjT50Kdaw84qfOpKH0Khp ewHFaa8tRYcoGGNpILScbJ8kTuOj3OeZW3jh6Lh2tYqU4Nq5n3XFuyVGl3OLcLfg jgK8+Pb8s3h17vaEIFiS/rT28veb8gofS4B6BQr0zsjqeuchBqiLIQi07TGduJeV qB2/QCEbw70IAg9CfzGuRRpmgLFhBQJw7Hjxe1FsBy8Xzqp+FhPaoGD2z9mZEyBt cpy2ONI5pBmqy7cs7t/nuTckCaCJ1NxUjoqDD0XLDnkW4qupweaPrkVYV7PZykvS lj4WZWU/8cpkWgEMR/NXeMoHl46o9mc= -----END CERTIFICATE-----Generated at Sun Oct 11 20:11:51 2026 by rpki-client