$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/2fa2bd2b-06e0-3857-96ec-ba156658b908.roa File: 2fa2bd2b-06e0-3857-96ec-ba156658b908.roa (raw, json) Hash identifier: cU/IwO6XsHKUVHybbrHtI3Q6Sj8JOdSSwISm/0oYpno= Subject key identifier: 70:AF:13:37:92:B7:FE:9D:08:34:1B:0C:0D:FD:CE:05:6A:EF:09:86 Certificate issuer: /CN=01430e13-506f-444b-8727-f36154b32c07 Certificate serial: 010D0C9F4328584EFF777B1FAFE21323F6942700 Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/2fa2bd2b-06e0-3857-96ec-ba156658b908.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 46256 IP address blocks: 198.217.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:7b:1f:af:e2:13:23:f6:94:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01430e13-506f-444b-8727-f36154b32c07 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=d14b975a-caa6-4d9f-b369-29f6d663f676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:38:78:61:59:02:a1:ea:31:a1:b3:8a:33: eb:7e:58:42:d3:36:c7:30:31:b3:ae:60:95:6e:b0: 58:03:40:3c:4d:47:9e:6a:7a:c0:2d:2d:91:13:9f: 02:33:75:4f:f0:3a:d5:f7:d5:52:63:37:45:5f:fe: a3:44:1d:05:d7:ec:88:10:48:4a:08:83:2e:ab:7f: 96:c0:c0:99:9a:47:32:c9:51:40:13:46:af:b6:97: c3:58:cb:91:45:77:49:4a:af:53:bc:66:ba:e5:f5: 97:99:ce:2f:34:7f:f1:02:45:0f:b5:13:7b:82:ab: e3:f9:ef:a9:ce:e8:6d:5d:4c:47:4c:61:37:d9:ab: b8:ea:a6:89:48:93:97:66:f6:9d:99:71:a0:41:96: ae:27:90:da:5e:b9:e5:8d:f9:5c:4a:6a:0b:09:15: e5:48:eb:55:42:4e:97:b9:93:50:13:d9:e5:1c:c9: f1:7d:87:e1:0f:f5:ab:5c:73:e7:ec:cb:d0:d8:c3: 20:6b:4c:a6:64:c9:58:29:d1:7a:d2:d1:10:48:12: 32:bd:0f:57:67:da:e4:c4:e4:4c:50:62:30:d4:5b: 81:05:1e:1f:22:fe:73:84:45:57:96:cb:73:50:f9: 95:40:e4:42:e5:88:39:6c:0a:e0:ec:7e:4d:5d:8d: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:13:37:92:B7:FE:9D:08:34:1B:0C:0D:FD:CE:05:6A:EF:09:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/2fa2bd2b-06e0-3857-96ec-ba156658b908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl X509v3 Authority Key Identifier: keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer sbgp-ipAddrBlock: critical IPv4: 198.217.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e5:5d:32:ed:b0:a1:66:5d:0e:27:59:dc:45:19:72:a3:96: d4:31:0e:00:31:4b:30:43:6c:4f:0b:fc:7d:36:12:5d:78:39: a7:eb:5d:b4:da:ed:87:f1:08:92:fb:04:b0:68:fb:0e:a8:1f: c0:61:17:07:07:08:13:cd:0b:fd:e9:d3:fe:2e:0a:7e:09:c0: 90:a3:9c:6a:63:78:ca:89:ee:56:e3:4b:49:19:b2:ae:5f:54: a0:2d:78:16:66:ec:13:c5:21:4a:c0:4e:1d:17:1d:00:48:76: f9:6c:51:0d:25:83:0f:c0:4e:2b:ea:32:91:70:c2:eb:d3:a5: 98:62:5f:ef:3b:e4:2f:b3:3c:55:e9:96:ec:bc:7b:a0:cb:9e: 1d:b8:54:11:43:96:46:bf:24:70:fb:b2:d5:8a:1f:78:4f:34: ff:45:54:48:67:dc:68:92:ee:d2:32:d7:88:c8:44:74:7a:ee: 25:dc:d7:73:0e:46:b1:4a:13:e4:da:d9:65:76:24:5d:ac:70: f9:e9:cd:6f:3d:90:81:3e:cd:28:3d:ad:5a:8a:c7:92:ac:f7: 31:2c:5c:cd:86:00:94:09:92:68:d5:15:5a:8f:dc:53:18:40: a1:1f:71:8e:c4:cb:a1:7f:3f:5f:4b:ad:b7:ae:18:d9:11:f6: 97:9e:f4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3sfr+ITI/aUJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE0MzBlMTMtNTA2Zi00NDRiLTg3MjctZjM2MTU0YjMy YzA3MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDE0Yjk3NWEtY2FhNi00ZDlmLWIzNjktMjlmNmQ2NjNmNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQI4eGFZAqHqMaGzijPrflhC0zbHMDGzrmCV brBYA0A8TUeeanrALS2RE58CM3VP8DrV99VSYzdFX/6jRB0F1+yIEEhKCIMuq3+W wMCZmkcyyVFAE0avtpfDWMuRRXdJSq9TvGa65fWXmc4vNH/xAkUPtRN7gqvj+e+p zuhtXUxHTGE32au46qaJSJOXZvadmXGgQZauJ5DaXrnljflcSmoLCRXlSOtVQk6X uZNQE9nlHMnxfYfhD/WrXHPn7MvQ2MMga0ymZMlYKdF60tEQSBIyvQ9XZ9rkxORM UGIw1FuBBR4fIv5zhEVXlstzUPmVQORC5Yg5bArg7H5NXY2MvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCvEzeSt/6dCDQbDA39zgVq7wmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMTQz MGUxMy01MDZmLTQ0NGItODcyNy1mMzYxNTRiMzJjMDcvMmZhMmJkMmItMDZlMC0z ODU3LTk2ZWMtYmExNTY2NThiOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDE0MzBlMTMtNTA2Zi00NDRiLTg3 MjctZjM2MTU0YjMyYzA3LzAxNDMwZTEzLTUwNmYtNDQ0Yi04NzI3LWYzNjE1NGIz MmMwNy5jcmwwHwYDVR0jBBgwFoAUSZ3GhVXxbkemQmYr+iuaFpHKKt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMTQzMGUxMy01MDZmLTQ0NGItODcyNy1mMzYx NTRiMzJjMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxtlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLlXTLtsKFmXQ4nWdxFGXKjltQxDgAxSzBDbE8L/H02El14OafrXbTa 7YfxCJL7BLBo+w6oH8BhFwcHCBPNC/3p0/4uCn4JwJCjnGpjeMqJ7lbjS0kZsq5f VKAteBZm7BPFIUrATh0XHQBIdvlsUQ0lgw/ATivqMpFwwuvTpZhiX+875C+zPFXp luy8e6DLnh24VBFDlka/JHD7stWKH3hPNP9FVEhn3GiS7tIy14jIRHR67iXc13MO RrFKE+Ta2WV2JF2scPnpzW89kIE+zSg9rVqKx5Ks9zEsXM2GAJQJkmjVFVqP3FMY QKEfcY7Ey6F/P19LrbeuGNkR9pee9EM= -----END CERTIFICATE-----Generated at Wed Oct 14 14:45:15 2026 by rpki-client