$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/0f71171a-ac46-3463-b305-da86ee868a44.roa File: 0f71171a-ac46-3463-b305-da86ee868a44.roa (raw, json) Hash identifier: XffhCGRi6KMSMctBzYQgU0eomRsf4kbyexkM4Fu4dmc= Subject key identifier: F0:C3:C6:CA:86:F9:EA:B1:36:3C:88:C3:0D:78:DC:48:22:22:D9:3E Certificate issuer: /CN=5ef6a41f-901e-44c6-b31a-bc960d9dfb5e Certificate serial: 010D0C9F4328584F44C8749DDCBDD8358027DD80 Authority key identifier: D9:75:E8:4F:AB:94:2B:E8:D0:7B:51:B2:D0:F1:94:76:AA:07:5E:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/0f71171a-ac46-3463-b305-da86ee868a44.roa Signing time: Wed 23 Sep 2026 08:54:19 +0000 ROA not before: Wed 23 Sep 2026 08:54:19 +0000 ROA not after: Tue 22 Dec 2026 09:54:19 +0000 asID: 218613 IP address blocks: 198.34.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:c8:74:9d:dc:bd:d8:35:80:27:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ef6a41f-901e-44c6-b31a-bc960d9dfb5e Validity Not Before: Sep 23 08:54:19 2026 GMT Not After : Dec 22 09:54:19 2026 GMT Subject: CN=a92f88f6-0da6-4679-9ba1-2a2804b36804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:55:92:80:68:61:9e:cc:d2:01:3e:7c:4e: 66:2e:92:c5:13:60:44:58:b7:78:42:eb:95:9c:f0: 3c:57:bf:e4:a3:31:ae:14:8e:3a:eb:6c:b6:82:4e: 46:48:f4:e2:fc:37:12:31:31:7c:16:00:a9:ac:9d: 0f:22:70:db:4c:c9:86:7b:e6:40:df:40:db:dd:35: d3:64:2b:24:e7:ac:57:9c:22:97:71:d9:a6:6f:b7: ee:c4:02:18:73:fd:15:56:56:d6:01:17:e4:3d:e9: 97:b3:b4:f5:cc:f0:14:42:19:dd:ec:7b:0a:f7:53: a1:19:f4:30:94:ed:24:bb:d9:04:5b:21:62:c1:5b: 54:ca:81:95:24:23:ec:51:8e:fb:da:4a:19:f9:0b: 9a:48:95:77:f2:a1:d3:95:91:87:ea:e3:19:49:5d: 31:23:d5:5a:4a:72:c1:31:e1:67:8d:6a:80:6b:37: 4a:aa:61:2f:43:53:8e:8d:f2:29:06:bc:14:46:64: dc:ce:51:71:55:fe:eb:a5:11:e7:1e:b0:39:f4:d7: 6a:b6:f8:94:5b:99:14:67:1f:c7:df:99:8f:1e:75: c8:5d:0a:d0:bd:3b:07:3b:5a:69:78:ae:04:0d:83: e8:ba:18:7f:9f:63:2a:08:23:27:9e:34:b0:5d:d7: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:C6:CA:86:F9:EA:B1:36:3C:88:C3:0D:78:DC:48:22:22:D9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/0f71171a-ac46-3463-b305-da86ee868a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.crl X509v3 Authority Key Identifier: keyid:D9:75:E8:4F:AB:94:2B:E8:D0:7B:51:B2:D0:F1:94:76:AA:07:5E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer sbgp-ipAddrBlock: critical IPv4: 198.34.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:38:4d:42:14:6d:f3:00:43:11:bc:fa:9b:10:8e:da:4b:89: 67:c5:8d:b3:a5:c3:e0:52:73:5d:76:7a:57:2c:aa:d3:d6:d3: a2:57:0c:01:ee:5e:26:d1:95:0e:d9:9b:b8:eb:f2:a1:3a:3b: ac:66:31:b3:ac:ab:49:17:bd:41:0d:ad:87:c8:51:9b:c9:1c: 8c:ef:47:03:5d:f8:a3:8f:8f:34:53:f8:6a:5c:06:49:08:c3: 31:a8:c8:8f:66:70:6e:ad:16:d6:7f:d1:6b:3d:a8:94:da:08: 99:8d:fe:9e:c8:1d:52:2e:88:d4:e2:bf:9c:dd:e6:3d:77:ee: 32:18:cf:03:83:14:b4:6a:33:5d:0e:2a:0c:7f:75:c3:0c:d7: a1:38:aa:92:87:e2:d7:67:d9:5d:b7:95:77:40:87:aa:e3:db: 51:97:d2:32:da:a9:91:f3:0f:51:22:8c:81:9e:bd:d6:3e:2d: c1:89:02:22:60:b0:cd:28:40:fb:ba:22:8f:31:6a:95:87:59: cf:be:a0:6a:10:a4:17:ad:cc:ba:ff:79:1f:61:7b:d9:3a:08: 43:d2:1e:f7:b2:4f:83:65:f4:58:48:15:68:19:6f:c0:26:ab: 7b:3f:fd:d2:8d:ab:0b:26:5e:b8:0a:9c:6a:66:a0:16:ae:b7: 54:26:3a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9EyHSd3L3YNYAn3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVmNmE0MWYtOTAxZS00NGM2LWIzMWEtYmM5NjBkOWRm YjVlMB4XDTI2MDkyMzA4NTQxOVoXDTI2MTIyMjA5NTQxOVowLzEtMCsGA1UEAxMk YTkyZjg4ZjYtMGRhNi00Njc5LTliYTEtMmEyODA0YjM2ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzpVkoBoYZ7M0gE+fE5mLpLFE2BEWLd4QuuV nPA8V7/kozGuFI4662y2gk5GSPTi/DcSMTF8FgCprJ0PInDbTMmGe+ZA30Db3TXT ZCsk56xXnCKXcdmmb7fuxAIYc/0VVlbWARfkPemXs7T1zPAUQhnd7HsK91OhGfQw lO0ku9kEWyFiwVtUyoGVJCPsUY772koZ+QuaSJV38qHTlZGH6uMZSV0xI9VaSnLB MeFnjWqAazdKqmEvQ1OOjfIpBrwURmTczlFxVf7rpRHnHrA59NdqtviUW5kUZx/H 35mPHnXIXQrQvTsHO1ppeK4EDYPouhh/n2MqCCMnnjSwXdcg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDDxsqG+eqxNjyIww143EgiItk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZWY2 YTQxZi05MDFlLTQ0YzYtYjMxYS1iYzk2MGQ5ZGZiNWUvMGY3MTE3MWEtYWM0Ni0z NDYzLWIzMDUtZGE4NmVlODY4YTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWVmNmE0MWYtOTAxZS00NGM2LWIz MWEtYmM5NjBkOWRmYjVlLzVlZjZhNDFmLTkwMWUtNDRjNi1iMzFhLWJjOTYwZDlk ZmI1ZS5jcmwwHwYDVR0jBBgwFoAU2XXoT6uUK+jQe1Gy0PGUdqoHXsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZWY2YTQxZi05MDFlLTQ0YzYtYjMxYS1iYzk2 MGQ5ZGZiNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM4TUIUbfMAQxG8+psQjtpLiWfFjbOlw+BSc112elcsqtPW06JXDAHu XibRlQ7Zm7jr8qE6O6xmMbOsq0kXvUENrYfIUZvJHIzvRwNd+KOPjzRT+GpcBkkI wzGoyI9mcG6tFtZ/0Ws9qJTaCJmN/p7IHVIuiNTiv5zd5j137jIYzwODFLRqM10O Kgx/dcMM16E4qpKH4tdn2V23lXdAh6rj21GX0jLaqZHzD1EijIGevdY+LcGJAiJg sM0oQPu6Io8xapWHWc++oGoQpBetzLr/eR9he9k6CEPSHveyT4Nl9FhIFWgZb8Am q3s//dKNqwsmXrgKnGpmoBaut1QmOrE= -----END CERTIFICATE-----Generated at Fri Sep 25 23:53:00 2026 by rpki-client