$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa File: e5e560e3-7114-3301-9261-7725a1241fa8.roa (raw, json) Hash identifier: YnjjyHM56O6fO1xPuyPiCNZYLumr/FlvA8Ozh/WRuL0= Subject key identifier: 9E:06:B9:AB:3F:43:67:DB:07:93:58:C5:59:26:6A:D2:A8:1C:9A:B4 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584F4975622ABB6EE3FAB6CA5100 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4186 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:62:2a:bb:6e:e3:fa:b6:ca:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd45cb56-0a0a-4be1-907f-229df4c34d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:35:79:56:e1:b2:c7:8f:d0:f6:8c:09:e0: 50:ac:24:f9:86:99:cc:c7:7c:1b:d7:c1:38:b8:69: a4:19:ba:59:96:9c:08:2d:6b:98:d2:db:33:73:e5: 86:fc:1e:90:03:cd:71:e7:ff:a3:ff:4d:f5:39:cf: e5:95:9f:ac:4a:b8:5a:5c:60:d2:cc:7e:4b:15:4a: b0:27:60:a0:f0:d4:a6:92:ed:6a:89:89:32:63:31: 5b:14:c0:74:d6:4a:35:fe:40:fe:0c:1b:4f:1f:70: 59:b8:31:d4:33:b7:35:72:35:da:25:a9:56:18:71: cf:1c:53:0a:e6:f4:f4:9d:c8:ee:5f:dd:0c:83:c5: f5:6c:3a:33:58:63:a2:7e:ec:e7:5d:08:8f:12:31: 4b:96:e0:0b:c0:6e:fe:a4:2f:c1:65:4e:fb:2f:1a: a3:22:67:c4:b1:55:7f:23:c6:0b:27:4d:4c:96:39: 80:5c:23:de:14:d9:9f:ca:b8:3f:e1:22:d1:16:55: c2:ca:5c:67:fe:58:1f:27:51:b9:6b:bf:c2:a6:79: 68:fe:c5:58:69:1c:19:d4:cc:4a:fd:0f:57:24:51: 04:91:f1:8b:34:de:95:06:33:e1:b1:c0:0e:28:8b: 71:88:2f:92:a6:e0:11:6f:23:f0:cc:79:65:67:59: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:B9:AB:3F:43:67:DB:07:93:58:C5:59:26:6A:D2:A8:1C:9A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:28:f3:39:be:95:7e:cf:a1:13:dc:de:8a:6f:42:fd:6d:30: b5:28:fe:ba:0a:15:72:42:c8:69:59:ab:ae:d3:de:96:fc:f7: 76:fc:a8:27:20:77:b5:28:eb:0f:f5:a3:be:fb:45:1d:1a:3a: a1:b5:50:8d:38:4e:c2:b3:f1:01:a7:e8:b0:5e:94:96:22:63: 00:1f:56:14:1b:7f:b4:4f:bb:d5:85:cb:97:6b:9b:9e:06:41: 0f:e2:85:71:13:ed:e8:fc:09:2f:99:da:d4:9e:e9:27:bc:bc: 65:dd:45:70:29:41:3e:f4:e9:57:bb:0b:b7:f3:c3:db:93:92: 71:b3:54:82:b2:b9:c0:3a:4e:aa:e7:6b:13:cc:31:3f:06:65: 22:a8:95:e3:60:94:ee:43:d7:ca:76:c0:08:08:3d:b7:3a:89: b5:47:66:6a:21:fd:55:72:e2:0e:4d:94:0b:73:8b:1b:96:11: 16:d9:33:b4:c7:51:53:3e:69:01:c2:ec:cd:10:28:f6:d8:7d: 17:9a:a3:9a:b0:d3:68:c4:c0:13:57:f1:ad:e5:75:a5:d8:0a: aa:48:17:2d:ff:8c:30:f4:fe:f3:67:4b:b9:de:71:75:fe:1f: 93:08:d6:5b:98:db:f4:fa:02:eb:3e:ae:dd:06:e7:55:ce:58: 37:fc:73:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWIqu27j+rbKUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ0NWNiNTYtMGEwYS00YmUxLTkwN2YtMjI5ZGY0YzM0ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgps1eVbhsseP0PaMCeBQrCT5hpnMx3wb18E4 uGmkGbpZlpwILWuY0tszc+WG/B6QA81x5/+j/031Oc/llZ+sSrhaXGDSzH5LFUqw J2Cg8NSmku1qiYkyYzFbFMB01ko1/kD+DBtPH3BZuDHUM7c1cjXaJalWGHHPHFMK 5vT0ncjuX90Mg8X1bDozWGOifuznXQiPEjFLluALwG7+pC/BZU77LxqjImfEsVV/ I8YLJ01MljmAXCPeFNmfyrg/4SLRFlXCylxn/lgfJ1G5a7/Cpnlo/sVYaRwZ1MxK /Q9XJFEEkfGLNN6VBjPhscAOKItxiC+SpuARbyPwzHllZ1meUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4Guas/Q2fbB5NYxVkmatKoHJq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvZTVlNTYwZTMtNzExNC0z MzAxLTkyNjEtNzcyNWExMjQxZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQo8zm+lX7PoRPc3opvQv1tMLUo/roKFXJCyGlZq67T3pb893b8qCcg d7Uo6w/1o777RR0aOqG1UI04TsKz8QGn6LBelJYiYwAfVhQbf7RPu9WFy5drm54G QQ/ihXET7ej8CS+Z2tSe6Se8vGXdRXApQT706Ve7C7fzw9uTknGzVIKyucA6Tqrn axPMMT8GZSKoleNglO5D18p2wAgIPbc6ibVHZmoh/VVy4g5NlAtzixuWERbZM7TH UVM+aQHC7M0QKPbYfReao5qw02jEwBNX8a3ldaXYCqpIFy3/jDD0/vNnS7necXX+ H5MI1luY2/T6Aus+rt0G51XOWDf8c8k= -----END CERTIFICATE-----Generated at Thu Oct 8 20:42:20 2026 by rpki-client