$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa File: 9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa (raw, json) Hash identifier: AC5reTPYMScj/ekBak/2Vj//ajMqKWlwvLiQnsKFSHk= Subject key identifier: 1B:58:70:C5:E6:CC:9E:08:29:58:19:58:E7:16:82:81:93:5E:9C:15 Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584F0D6CDFFD68B0A299E83C3100 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 53405 IP address blocks: 192.199.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:df:fd:68:b0:a2:99:e8:3c:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=0c803232-9541-478a-884c-028d2670f690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:4e:b2:12:cd:7e:10:c1:2f:77:11:ab:44: a1:4b:1f:22:e4:39:c9:47:a5:76:32:ce:c5:d3:c8: cd:90:b7:d2:d0:04:53:f5:28:f9:92:80:d6:6b:12: 69:91:70:00:f3:7f:c5:46:4e:b5:0e:43:d2:3e:f1: 60:f3:34:e9:c9:2e:e6:5d:26:d6:c4:35:aa:07:2c: 98:cc:b5:29:71:c3:bb:73:c4:ec:00:a0:6d:88:f3: e3:b9:a9:00:45:af:44:b3:64:db:95:77:60:67:a1: d8:68:72:81:d9:f1:13:cb:ab:f5:6c:f9:ba:14:ce: 1c:d4:f9:c8:65:8b:2a:bf:f3:d6:6b:cd:5f:25:4a: f3:f1:76:68:94:82:63:aa:f0:05:c7:0c:1a:99:bf: 7c:b9:13:3d:e5:e8:34:d2:67:1f:27:c7:26:b4:ff: b8:ec:62:4c:a4:40:df:26:54:04:f3:7d:f6:b3:24: 0b:46:b3:a6:02:6d:58:bd:84:c6:23:0f:2e:ee:c1: 17:3b:1c:2e:a8:6b:da:d2:e8:b7:0c:5e:f4:8a:98: 5b:fe:6a:aa:ff:be:f7:e8:56:8f:68:59:50:9a:40: 9d:65:1d:03:d5:48:37:2c:1a:41:4f:ae:bd:db:77: 06:ce:c5:d1:3e:8f:2c:0e:28:2b:14:ad:b2:72:c3: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:70:C5:E6:CC:9E:08:29:58:19:58:E7:16:82:81:93:5E:9C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: 192.199.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:02:76:55:46:40:6d:11:d9:b9:1e:9e:27:38:98:6f:53:f9: a8:03:37:f8:10:86:47:bf:af:7c:6f:0b:8c:e2:78:fd:17:c3: 09:df:ab:5c:99:70:4e:62:c3:4c:f1:d5:1c:c1:d0:1d:c3:1b: fd:72:4e:99:e1:96:af:c4:43:2a:46:53:e7:f9:4c:4d:0a:26: 00:98:25:ec:fb:3f:eb:28:ff:42:78:c3:39:76:52:1f:0b:cd: 91:a0:48:fa:40:5e:7c:b9:80:fd:f1:20:58:b3:09:3e:92:8a: 4c:00:0b:c8:f0:25:a2:cf:fb:db:96:c7:1e:35:7d:26:34:3f: 99:b8:d5:bb:4a:b8:83:8f:48:68:58:99:36:33:e2:a3:41:f8: dd:a7:10:54:cf:10:43:94:bd:04:a8:33:06:8b:34:ac:3e:a2: d1:55:f4:80:8a:7f:ce:c3:ba:c0:ed:a6:e3:05:ea:3a:eb:7e: fd:2c:07:2d:4d:ef:f4:49:03:6c:dc:8b:87:24:e3:89:df:13: 36:37:6a:8d:2d:a3:04:86:0a:0b:a3:48:34:d6:3d:13:58:4d: 8d:ad:c7:1d:9b:c8:34:ff:d8:20:b7:b6:dc:54:06:17:f8:02: 40:7e:11:f1:5f:3c:dd:aa:b2:b1:59:eb:fd:f8:7c:07:de:af: 91:35:a5:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN/9aLCimeg8MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MGM4MDMyMzItOTU0MS00NzhhLTg4NGMtMDI4ZDI2NzBmNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlOshLNfhDBL3cRq0ShSx8i5DnJR6V2Ms7F 08jNkLfS0ART9Sj5koDWaxJpkXAA83/FRk61DkPSPvFg8zTpyS7mXSbWxDWqByyY zLUpccO7c8TsAKBtiPPjuakARa9Es2TblXdgZ6HYaHKB2fETy6v1bPm6FM4c1PnI ZYsqv/PWa81fJUrz8XZolIJjqvAFxwwamb98uRM95eg00mcfJ8cmtP+47GJMpEDf JlQE8332syQLRrOmAm1YvYTGIw8u7sEXOxwuqGva0ui3DF70iphb/mqq/7736FaP aFlQmkCdZR0D1Ug3LBpBT66923cGzsXRPo8sDigrFK2ycsO4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtYcMXmzJ4IKVgZWOcWgoGTXpwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOWIyZjVhNTAtMjI5OC0z NWNmLWE5ZGUtOWU2MzlkNmY1Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkCdlVGQG0R2bkenic4mG9T+agDN/gQhke/r3xvC4zieP0Xwwnfq1yZ cE5iw0zx1RzB0B3DG/1yTpnhlq/EQypGU+f5TE0KJgCYJez7P+so/0J4wzl2Uh8L zZGgSPpAXny5gP3xIFizCT6SikwAC8jwJaLP+9uWxx41fSY0P5m41btKuIOPSGhY mTYz4qNB+N2nEFTPEEOUvQSoMwaLNKw+otFV9ICKf87DusDtpuMF6jrrfv0sBy1N 7/RJA2zci4ck44nfEzY3ao0towSGCgujSDTWPRNYTY2txx2byDT/2CC3ttxUBhf4 AkB+EfFfPN2qsrFZ6/34fAfer5E1pYU= -----END CERTIFICATE-----Generated at Sat Oct 3 17:39:18 2026 by rpki-client