$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ca0b795-8aa3-3712-b291-c0eefae98640.roa File: 4ca0b795-8aa3-3712-b291-c0eefae98640.roa (raw, json) Hash identifier: sYthGKx+8zhGQzcQT40cw9zKnE4MgPsGVZFsYurx+5c= Subject key identifier: 43:23:B6:39:45:AE:8E:8A:14:3B:46:38:E4:62:E8:E5:CE:46:72:D7 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584F06729B60FC5B5DB0765F1040 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ca0b795-8aa3-3712-b291-c0eefae98640.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 15321 IP address blocks: 216.208.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9b:60:fc:5b:5d:b0:76:5f:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=bd620832-a8e9-4e61-bf8f-880ba0f47c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:f5:71:04:dc:a0:31:17:a5:93:c5:26:ce: ad:1d:e4:55:52:e0:95:35:e6:62:5e:ac:3a:00:b1: 9e:f1:6d:6f:00:22:cc:4e:41:a5:5b:a3:ef:f6:5d: dd:35:80:68:37:65:46:e5:d2:70:7e:fa:c1:25:b1: 82:a1:b9:1e:69:3f:ec:0f:f4:eb:e5:c0:24:da:5d: 05:91:19:53:6e:3c:78:1d:67:15:38:43:0c:86:00: ad:8e:fe:90:36:b3:78:ed:a8:56:d8:e5:a7:3b:d8: c2:a5:f1:23:97:a6:a1:ed:c7:ce:f0:61:8a:0b:c6: 2d:65:4c:a3:25:36:2d:f3:71:21:b2:ff:19:b2:d2: 04:41:3b:77:11:c5:e9:e8:13:75:9e:e2:f7:42:a6: bb:96:6b:9c:b4:8e:68:0c:42:e8:5e:db:22:a2:df: d9:87:33:85:c6:8a:be:33:ad:c6:c7:68:16:35:ec: 0f:94:6b:cc:cb:4a:72:52:1e:6e:f1:26:a9:b3:58: 26:52:ab:1e:3d:9f:6d:ca:d5:ad:ef:85:fa:fd:5e: 89:9a:cc:24:f0:7e:72:19:9a:e7:01:9c:d0:8b:f6: c3:db:54:f7:15:f7:d5:1e:ec:2a:05:bd:e8:69:26: 53:55:99:40:25:8f:c9:7f:a5:aa:5a:27:31:68:24: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:B6:39:45:AE:8E:8A:14:3B:46:38:E4:62:E8:E5:CE:46:72:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ca0b795-8aa3-3712-b291-c0eefae98640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 216.208.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8f:e0:69:70:6d:20:32:75:6f:07:2b:9c:50:b5:dd:da:7c: e6:29:45:b0:43:86:f9:bc:44:c7:75:a7:e1:16:05:61:79:0e: 68:9c:3d:69:5a:f6:42:29:21:d3:c6:3b:3b:e0:09:94:0f:9d: 2e:22:4f:a6:be:aa:72:d3:19:88:89:bd:6a:2b:a8:df:0b:ed: 15:a8:b9:38:c0:7c:c6:c8:57:ff:62:cb:92:8c:ac:7c:2a:d5: 1f:9a:c1:26:1b:2f:ab:d7:d0:e6:06:1f:cd:83:2b:54:ae:7a: 01:68:c1:68:2d:f2:b8:da:23:d0:19:24:ff:93:f5:07:72:ae: 12:6a:7f:bc:5d:39:8c:59:cf:29:c4:2f:8c:b1:e5:11:15:51: 61:d2:2c:61:33:61:b4:a7:b1:07:bd:89:f6:ff:95:7c:e8:26: 49:50:83:f5:de:fb:e8:e0:9c:16:8d:de:0d:b3:ca:84:6c:22: 65:5e:32:fd:cd:29:7d:5c:36:79:aa:a5:10:e8:ac:c1:e6:9c: 3d:a4:4f:ba:fe:f5:6f:02:20:75:95:8f:71:c1:82:ad:e7:07: 51:a3:80:89:27:f1:7a:43:d3:6d:9b:7a:90:d2:35:ad:5c:08: aa:1b:9b:09:6d:a5:1a:f0:5f:45:59:50:5e:a8:92:5e:07:b6: 85:97:1c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcptg/FtdsHZfEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmQ2MjA4MzItYThlOS00ZTYxLWJmOGYtODgwYmEwZjQ3Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobn1cQTcoDEXpZPFJs6tHeRVUuCVNeZiXqw6 ALGe8W1vACLMTkGlW6Pv9l3dNYBoN2VG5dJwfvrBJbGCobkeaT/sD/Tr5cAk2l0F kRlTbjx4HWcVOEMMhgCtjv6QNrN47ahW2OWnO9jCpfEjl6ah7cfO8GGKC8YtZUyj JTYt83Ehsv8ZstIEQTt3EcXp6BN1nuL3Qqa7lmuctI5oDELoXtsiot/ZhzOFxoq+ M63Gx2gWNewPlGvMy0pyUh5u8Saps1gmUqsePZ9tytWt74X6/V6Jmswk8H5yGZrn AZzQi/bD21T3FffVHuwqBb3oaSZTVZlAJY/Jf6WqWicxaCSEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMjtjlFro6KFDtGOORi6OXORnLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGNhMGI3OTUtOGFhMy0z NzEyLWIyOTEtYzBlZWZhZTk4NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2NDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaP4GlwbSAydW8HK5xQtd3afOYpRbBDhvm8RMd1p+EWBWF5DmicPWla 9kIpIdPGOzvgCZQPnS4iT6a+qnLTGYiJvWorqN8L7RWouTjAfMbIV/9iy5KMrHwq 1R+awSYbL6vX0OYGH82DK1SuegFowWgt8rjaI9AZJP+T9QdyrhJqf7xdOYxZzynE L4yx5REVUWHSLGEzYbSnsQe9ifb/lXzoJklQg/Xe++jgnBaN3g2zyoRsImVeMv3N KX1cNnmqpRDorMHmnD2kT7r+9W8CIHWVj3HBgq3nB1GjgIkn8XpD022bepDSNa1c CKobmwltpRrwX0VZUF6okl4HtoWXHEI= -----END CERTIFICATE-----Generated at Tue Oct 13 13:04:45 2026 by rpki-client