$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1/5254d596-e309-313e-a231-5168343c7a92.roa File: 5254d596-e309-313e-a231-5168343c7a92.roa (raw, json) Hash identifier: yLDrIVj5BaikzDtwV051dcZJeGaIzzwF9jtwKl5A/Qw= Subject key identifier: 64:73:29:A8:47:A6:E1:53:4D:82:53:F1:66:C8:45:6E:2C:23:B1:B9 Certificate issuer: /CN=2cc4ab57-72ea-4775-afd9-0635c81745a1 Certificate serial: 010D0C9F4328584F3FAD867BE1397060F745B7B0 Authority key identifier: 0B:4D:DD:E2:B2:FC:A0:94:87:94:6A:66:32:76:0F:B8:B9:C7:6B:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1/5254d596-e309-313e-a231-5168343c7a92.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 198.199.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1/2cc4ab57-72ea-4775-afd9-0635c81745a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1/2cc4ab57-72ea-4775-afd9-0635c81745a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:86:7b:e1:39:70:60:f7:45:b7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc4ab57-72ea-4775-afd9-0635c81745a1 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=c8d371c6-6c4d-4fb3-ae59-966fa2911ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:75:6c:f2:5b:16:9e:4b:f4:62:10:6a:f3: 1c:f1:11:e6:cb:4a:a6:84:f1:b7:8f:16:a6:59:11: dc:37:7c:5c:27:4a:d5:1c:cd:35:6c:a9:04:3b:9c: 5c:13:d9:ff:88:78:43:96:9b:c3:2d:09:a3:b7:16: f0:ed:24:30:16:66:55:41:43:73:b2:b6:b7:8b:91: cf:1d:f5:87:0f:c2:38:fb:20:97:51:47:b7:c1:d2: e4:92:3a:7d:3c:f5:5a:dd:c7:ca:88:53:49:cf:19: d8:27:35:fb:f4:75:9f:4a:b7:ba:d4:3a:f8:39:98: 5a:6c:43:b6:02:10:32:a6:2d:36:3f:36:40:ee:1d: fc:24:03:19:b8:96:c8:f4:a1:c8:44:72:be:cc:dc: 39:b8:21:41:fe:5f:27:2c:9a:6d:2f:ae:70:ed:3c: ac:17:92:32:fd:6f:b6:cc:4c:12:6c:55:50:43:3d: 03:85:11:0a:3f:05:e2:07:bd:f0:8f:3b:22:e1:78: 77:a9:b3:28:1d:d8:ef:00:09:65:49:79:5f:a7:af: 96:c2:8d:73:19:e3:02:ad:e5:0d:4d:b9:ac:80:f0: 18:61:47:00:a3:b4:ac:cc:11:46:5c:a2:37:56:bb: 32:2b:0e:7c:cd:8d:46:32:36:5f:15:62:7c:97:bc: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:29:A8:47:A6:E1:53:4D:82:53:F1:66:C8:45:6E:2C:23:B1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1/5254d596-e309-313e-a231-5168343c7a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1/2cc4ab57-72ea-4775-afd9-0635c81745a1.crl X509v3 Authority Key Identifier: keyid:0B:4D:DD:E2:B2:FC:A0:94:87:94:6A:66:32:76:0F:B8:B9:C7:6B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cc4ab57-72ea-4775-afd9-0635c81745a1.cer sbgp-ipAddrBlock: critical IPv4: 198.199.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:18:54:14:52:14:cc:1a:e0:b6:0b:33:06:6a:90:ca:52:35: 78:18:98:7a:7c:5b:12:01:79:a3:d6:08:98:32:bb:54:57:d0: 57:07:d4:ef:50:86:42:e5:6f:98:47:89:bc:72:54:37:95:24: f9:51:99:6e:8a:2d:a5:a2:ab:55:a5:5e:c5:4f:2f:52:e8:e3: 99:63:95:9a:c5:50:dc:4a:4f:72:49:9f:37:9c:f9:8c:c9:ac: 15:c7:ba:c2:8d:2c:c9:e8:b7:bd:e0:1c:8f:1c:e9:4b:69:d4: 1e:44:6e:2d:12:c8:fe:5b:07:bb:c4:af:09:27:a2:39:06:47: c0:24:34:66:3e:f2:34:e4:fd:36:0c:6a:26:f3:82:00:2f:0b: 17:84:f5:86:11:df:64:c1:9d:b6:10:85:77:8d:30:08:f2:7e: 37:7d:db:25:9a:e0:c7:ce:f9:68:f5:b3:fb:dc:75:b2:7a:62: f1:57:bf:e7:76:2c:5e:39:fe:7a:05:d4:bb:78:06:09:57:54: bf:a7:ce:c2:48:fc:e3:91:2c:3f:8d:63:c9:47:0c:5f:88:87: b9:21:77:b6:09:44:0c:68:9c:6d:59:76:f9:3e:68:a5:71:9c: d3:6e:09:c3:96:54:56:8b:ab:b9:8a:9a:76:4b:36:2e:69:7c: 10:5d:fb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYZ74TlwYPdFt7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNjNGFiNTctNzJlYS00Nzc1LWFmZDktMDYzNWM4MTc0 NWExMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YzhkMzcxYzYtNmM0ZC00ZmIzLWFlNTktOTY2ZmEyOTExZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubh1bPJbFp5L9GIQavMc8RHmy0qmhPG3jxam WRHcN3xcJ0rVHM01bKkEO5xcE9n/iHhDlpvDLQmjtxbw7SQwFmZVQUNzsra3i5HP HfWHD8I4+yCXUUe3wdLkkjp9PPVa3cfKiFNJzxnYJzX79HWfSre61Dr4OZhabEO2 AhAypi02PzZA7h38JAMZuJbI9KHIRHK+zNw5uCFB/l8nLJptL65w7TysF5Iy/W+2 zEwSbFVQQz0DhREKPwXiB73wjzsi4Xh3qbMoHdjvAAllSXlfp6+Wwo1zGeMCreUN TbmsgPAYYUcAo7SszBFGXKI3VrsyKw58zY1GMjZfFWJ8l7yWVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRzKahHpuFTTYJT8WbIRW4sI7G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yY2M0 YWI1Ny03MmVhLTQ3NzUtYWZkOS0wNjM1YzgxNzQ1YTEvNTI1NGQ1OTYtZTMwOS0z MTNlLWEyMzEtNTE2ODM0M2M3YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmNjNGFiNTctNzJlYS00Nzc1LWFm ZDktMDYzNWM4MTc0NWExLzJjYzRhYjU3LTcyZWEtNDc3NS1hZmQ5LTA2MzVjODE3 NDVhMS5jcmwwHwYDVR0jBBgwFoAUC03d4rL8oJSHlGpmMnYPuLnHa94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yY2M0YWI1Ny03MmVhLTQ3NzUtYWZkOS0wNjM1 YzgxNzQ1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxseRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8YVBRSFMwa4LYLMwZqkMpSNXgYmHp8WxIBeaPWCJgyu1RX0FcH1O9Q hkLlb5hHibxyVDeVJPlRmW6KLaWiq1WlXsVPL1Lo45ljlZrFUNxKT3JJnzec+YzJ rBXHusKNLMnot73gHI8c6Utp1B5Ebi0SyP5bB7vErwknojkGR8AkNGY+8jTk/TYM aibzggAvCxeE9YYR32TBnbYQhXeNMAjyfjd92yWa4MfO+Wj1s/vcdbJ6YvFXv+d2 LF45/noF1Lt4BglXVL+nzsJI/OORLD+NY8lHDF+Ih7khd7YJRAxonG1Zdvk+aKVx nNNuCcOWVFaLq7mKmnZLNi5pfBBd+5I= -----END CERTIFICATE-----Generated at Mon Sep 28 02:23:24 2026 by rpki-client