$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/2f2fd94d-94e6-37a9-8764-2aa9c61ca897.roa File: 2f2fd94d-94e6-37a9-8764-2aa9c61ca897.roa (raw, json) Hash identifier: +X79M4bo1lYFdxFDR0UH2RGl6SG8ZTUJ/b3oGqmJJOI= Subject key identifier: 86:84:AA:C0:A6:58:42:3C:F7:A9:71:21:75:CF:7A:4D:34:41:AB:EB Certificate issuer: /CN=5ef6a41f-901e-44c6-b31a-bc960d9dfb5e Certificate serial: 010D0C9F4328584F4804ED3FCC6382818972CA40 Authority key identifier: D9:75:E8:4F:AB:94:2B:E8:D0:7B:51:B2:D0:F1:94:76:AA:07:5E:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/2f2fd94d-94e6-37a9-8764-2aa9c61ca897.roa Signing time: Thu 24 Sep 2026 12:43:35 +0000 ROA not before: Thu 24 Sep 2026 12:43:35 +0000 ROA not after: Wed 23 Dec 2026 13:43:35 +0000 asID: 51847 IP address blocks: 198.34.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:04:ed:3f:cc:63:82:81:89:72:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ef6a41f-901e-44c6-b31a-bc960d9dfb5e Validity Not Before: Sep 24 12:43:35 2026 GMT Not After : Dec 23 13:43:35 2026 GMT Subject: CN=8aa676fb-f05f-41ba-ab73-2ddb0e84b01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:9b:2a:e3:d1:b3:05:b0:73:95:72:a4:3e: 6d:e2:ac:33:b1:7c:f4:f2:ab:dc:e8:f5:15:ef:d4: 11:d0:41:e5:03:a0:96:c5:99:a0:8e:88:b3:95:d8: 97:e3:4d:6d:ae:99:77:43:6d:7d:4b:9b:86:50:9a: eb:5a:b0:e7:34:45:2c:46:f2:26:51:da:0c:d3:2b: 7c:6c:d2:90:88:1f:c1:ef:3a:30:4b:8f:ee:b4:07: a9:af:21:be:69:a6:fb:73:62:ce:3c:5d:55:6e:da: 8c:1b:f0:3d:fc:40:91:e3:9a:17:f7:53:30:9b:15: 37:a6:e5:f8:3c:d1:d2:05:87:f3:01:dc:d8:bd:0b: fb:c0:71:fc:d3:e0:e5:ad:87:3e:53:02:f2:73:eb: df:82:6e:cd:71:e7:77:e6:c3:40:67:59:d3:19:49: ca:3a:a7:56:76:66:2b:bf:76:36:38:0f:4b:5d:9f: 58:38:18:06:22:69:3e:1b:4b:72:62:9b:90:76:42: 5d:fe:67:92:0a:28:ad:25:37:3d:3f:c5:ef:b7:23: d6:7d:a8:57:86:c1:58:98:83:45:ef:d4:b7:ac:79: 1c:22:a7:25:54:cd:d1:fb:66:c3:55:e8:84:fb:79: d7:51:af:d3:d4:44:81:09:b1:82:9a:57:1a:36:5a: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:84:AA:C0:A6:58:42:3C:F7:A9:71:21:75:CF:7A:4D:34:41:AB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/2f2fd94d-94e6-37a9-8764-2aa9c61ca897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.crl X509v3 Authority Key Identifier: keyid:D9:75:E8:4F:AB:94:2B:E8:D0:7B:51:B2:D0:F1:94:76:AA:07:5E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ef6a41f-901e-44c6-b31a-bc960d9dfb5e.cer sbgp-ipAddrBlock: critical IPv4: 198.34.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a2:89:60:b1:b3:01:b7:a3:44:66:a8:42:51:11:c1:01:91: 74:4d:eb:80:10:1f:b8:04:c0:23:6c:45:ca:66:2a:a7:55:f7: 23:9e:13:19:18:a4:3f:c9:33:bb:f6:65:7f:16:15:d1:da:65: 44:63:fd:01:50:d8:5f:be:06:05:52:88:fb:26:29:32:c8:56: bf:48:0b:7a:d7:06:ea:10:71:a7:d4:6b:b5:d2:db:f9:b2:d9: b4:8c:c1:88:96:60:04:49:19:66:5c:fb:44:ec:a3:90:0e:5f: fe:0c:9e:21:d5:20:78:9d:6a:5a:4b:68:92:95:1e:1b:c0:1a: 4c:76:bf:e2:38:ed:e8:72:84:99:71:d2:3d:cc:29:7d:6c:75: df:06:dd:0c:4b:d0:4e:49:98:33:73:ab:df:a7:15:de:cb:ba: b7:0c:b6:86:3e:d7:4d:50:ba:e2:f1:75:3b:23:8e:2e:b0:75: 59:0c:bf:83:0f:71:4a:af:83:a2:73:7c:82:e3:7a:9b:1f:2b: 1d:98:ec:d6:e6:dd:89:fd:b9:94:a2:69:83:9b:46:c9:f1:c2: 22:52:04:cd:69:4f:e3:cc:b9:c3:54:83:11:fc:be:e6:e2:10: e4:05:44:e5:1d:19:99:92:81:18:96:9d:c9:b0:55:fc:96:1c: 2c:3f:d6:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IBO0/zGOCgYlyykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVmNmE0MWYtOTAxZS00NGM2LWIzMWEtYmM5NjBkOWRm YjVlMB4XDTI2MDkyNDEyNDMzNVoXDTI2MTIyMzEzNDMzNVowLzEtMCsGA1UEAxMk OGFhNjc2ZmItZjA1Zi00MWJhLWFiNzMtMmRkYjBlODRiMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjWbKuPRswWwc5VypD5t4qwzsXz08qvc6PUV 79QR0EHlA6CWxZmgjoizldiX401trpl3Q219S5uGUJrrWrDnNEUsRvImUdoM0yt8 bNKQiB/B7zowS4/utAepryG+aab7c2LOPF1VbtqMG/A9/ECR45oX91MwmxU3puX4 PNHSBYfzAdzYvQv7wHH80+DlrYc+UwLyc+vfgm7Nced35sNAZ1nTGUnKOqdWdmYr v3Y2OA9LXZ9YOBgGImk+G0tyYpuQdkJd/meSCiitJTc9P8XvtyPWfahXhsFYmINF 79S3rHkcIqclVM3R+2bDVeiE+3nXUa/T1ESBCbGCmlcaNlqKRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaEqsCmWEI896lxIXXPek00QavrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZWY2 YTQxZi05MDFlLTQ0YzYtYjMxYS1iYzk2MGQ5ZGZiNWUvMmYyZmQ5NGQtOTRlNi0z N2E5LTg3NjQtMmFhOWM2MWNhODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWVmNmE0MWYtOTAxZS00NGM2LWIz MWEtYmM5NjBkOWRmYjVlLzVlZjZhNDFmLTkwMWUtNDRjNi1iMzFhLWJjOTYwZDlk ZmI1ZS5jcmwwHwYDVR0jBBgwFoAU2XXoT6uUK+jQe1Gy0PGUdqoHXsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZWY2YTQxZi05MDFlLTQ0YzYtYjMxYS1iYzk2 MGQ5ZGZiNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOiiWCxswG3o0RmqEJREcEBkXRN64AQH7gEwCNsRcpmKqdV9yOeExkY pD/JM7v2ZX8WFdHaZURj/QFQ2F++BgVSiPsmKTLIVr9IC3rXBuoQcafUa7XS2/my 2bSMwYiWYARJGWZc+0Tso5AOX/4MniHVIHidalpLaJKVHhvAGkx2v+I47ehyhJlx 0j3MKX1sdd8G3QxL0E5JmDNzq9+nFd7LurcMtoY+101QuuLxdTsjji6wdVkMv4MP cUqvg6JzfILjepsfKx2Y7Nbm3Yn9uZSiaYObRsnxwiJSBM1pT+PMucNUgxH8vubi EOQFROUdGZmSgRiWncmwVfyWHCw/1tQ= -----END CERTIFICATE-----Generated at Thu Sep 24 21:01:43 2026 by rpki-client