$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/5d12ad63-61af-3706-8c28-9b7e28889b06.roa File: 5d12ad63-61af-3706-8c28-9b7e28889b06.roa (raw, json) Hash identifier: S2tKGKjCvG83jnPacDopbtDT8M38baBqklpWWeGaApo= Subject key identifier: 5B:28:84:5A:A7:1C:B6:A2:B8:A4:A8:3B:CA:95:AC:8E:CB:D8:3A:FC Certificate issuer: /CN=722b521c-3ba6-4414-a082-89d05e3db36e Certificate serial: 010D0C9F4328584F2ABD0B52EFF2B7F2ECF1A480 Authority key identifier: A1:5B:07:0F:8C:55:44:FF:83:E9:98:63:01:4F:6C:FD:A2:AE:E4:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/5d12ad63-61af-3706-8c28-9b7e28889b06.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 198.133.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/722b521c-3ba6-4414-a082-89d05e3db36e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/722b521c-3ba6-4414-a082-89d05e3db36e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:0b:52:ef:f2:b7:f2:ec:f1:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722b521c-3ba6-4414-a082-89d05e3db36e Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=bc390e3f-cbf4-4c6f-875f-2618c466d55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:f8:71:32:a9:84:2a:fd:20:04:87:92:45: ce:b4:8f:32:45:f0:33:ea:7d:7b:6c:6e:83:42:9a: f3:21:67:04:be:11:e5:31:98:20:61:ac:2a:07:9b: b6:0d:fe:dc:10:1f:9c:e5:72:80:c7:d6:72:9d:03: 9c:ff:23:7c:91:7b:e9:19:7f:b6:fb:69:90:e5:f2: a4:f8:7e:0c:d8:cf:af:5a:6d:2e:6b:38:4c:72:98: 08:63:32:2c:5f:70:ff:c1:86:89:ad:1b:b0:8b:0c: db:49:6d:64:e3:9c:70:83:77:60:17:e0:e8:6b:81: be:ea:bc:97:c0:44:30:bf:c1:2d:70:c7:14:0d:54: a0:18:c4:d4:a6:89:73:9e:95:7c:29:5c:aa:93:98: 36:5f:17:48:2c:5c:ec:e8:34:ed:b0:7c:48:e9:a1: 93:ff:3c:d8:23:f0:d2:43:50:d7:db:58:c1:1a:7c: fa:75:44:74:96:2f:88:f2:79:31:a7:be:ea:51:57: b3:a8:a2:06:da:f1:91:e3:4d:d6:f1:39:08:43:98: 41:c6:30:e2:17:a1:b3:d5:8a:3e:35:df:86:fa:a7: c6:5d:61:b7:9a:a2:aa:2c:75:8c:20:d0:c1:64:71: 02:13:d0:df:7d:a7:3b:b2:d0:52:03:17:21:70:c5: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:84:5A:A7:1C:B6:A2:B8:A4:A8:3B:CA:95:AC:8E:CB:D8:3A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/5d12ad63-61af-3706-8c28-9b7e28889b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/722b521c-3ba6-4414-a082-89d05e3db36e.crl X509v3 Authority Key Identifier: keyid:A1:5B:07:0F:8C:55:44:FF:83:E9:98:63:01:4F:6C:FD:A2:AE:E4:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e.cer sbgp-ipAddrBlock: critical IPv4: 198.133.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:17:cc:3b:f0:ae:1e:66:59:8b:bf:02:0b:76:58:cb:de:2b: b3:22:03:19:ab:37:64:e4:88:85:78:fe:53:13:79:3f:f4:47: e3:e7:ee:41:ce:13:5b:51:a0:19:08:4b:23:8e:34:75:1e:f4: 81:4e:9d:84:ca:87:b7:5d:f8:a3:fc:32:43:48:d4:3c:e9:3a: 4c:39:76:1d:a6:6f:d3:a3:fb:20:b5:78:91:c3:e7:29:76:48: b3:bb:dc:83:ac:fb:80:ac:43:0c:a1:58:7e:9c:d7:45:b2:b0: 06:78:65:e6:86:98:db:5d:e6:b7:65:43:e9:ce:d4:db:2a:1b: e6:f7:c1:e0:54:99:31:37:4c:90:92:07:20:88:1a:05:e3:17: 41:3c:48:5d:6b:07:9d:be:ff:07:bc:ec:a7:bf:78:fa:e5:91: 03:0c:ff:a6:6a:0a:ad:28:fd:f0:5f:bc:70:12:42:c4:6c:0c: 20:d2:5d:30:1f:be:b4:be:ad:de:d0:bf:97:06:3b:1a:e7:25: 76:32:3c:4a:2f:0c:7a:94:fb:da:d4:f1:19:2f:be:9a:f9:c1: f9:82:b5:63:bd:f5:80:ad:e6:49:e7:d5:80:37:1e:65:48:8a: f1:aa:8e:7a:96:e9:93:f4:16:88:8f:f9:fd:53:cc:da:ea:55: 3a:e3:26:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQtS7/K38uzxpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzIyYjUyMWMtM2JhNi00NDE0LWEwODItODlkMDVlM2Ri MzZlMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YmMzOTBlM2YtY2JmNC00YzZmLTg3NWYtMjYxOGM0NjZkNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh//4cTKphCr9IASHkkXOtI8yRfAz6n17bG6D QprzIWcEvhHlMZggYawqB5u2Df7cEB+c5XKAx9ZynQOc/yN8kXvpGX+2+2mQ5fKk +H4M2M+vWm0uazhMcpgIYzIsX3D/wYaJrRuwiwzbSW1k45xwg3dgF+Doa4G+6ryX wEQwv8EtcMcUDVSgGMTUpolznpV8KVyqk5g2XxdILFzs6DTtsHxI6aGT/zzYI/DS Q1DX21jBGnz6dUR0li+I8nkxp77qUVezqKIG2vGR403W8TkIQ5hBxjDiF6Gz1Yo+ Nd+G+qfGXWG3mqKqLHWMINDBZHECE9Dffac7stBSAxchcMVyfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsohFqnHLaiuKSoO8qVrI7L2Dr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83MjJi NTIxYy0zYmE2LTQ0MTQtYTA4Mi04OWQwNWUzZGIzNmUvNWQxMmFkNjMtNjFhZi0z NzA2LThjMjgtOWI3ZTI4ODg5YjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzIyYjUyMWMtM2JhNi00NDE0LWEw ODItODlkMDVlM2RiMzZlLzcyMmI1MjFjLTNiYTYtNDQxNC1hMDgyLTg5ZDA1ZTNk YjM2ZS5jcmwwHwYDVR0jBBgwFoAUoVsHD4xVRP+D6ZhjAU9s/aKu5I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83MjJiNTIxYy0zYmE2LTQ0MTQtYTA4Mi04OWQw NWUzZGIzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsXzDvwrh5mWYu/Agt2WMveK7MiAxmrN2TkiIV4/lMTeT/0R+Pn7kHO E1tRoBkISyOONHUe9IFOnYTKh7dd+KP8MkNI1DzpOkw5dh2mb9Oj+yC1eJHD5yl2 SLO73IOs+4CsQwyhWH6c10WysAZ4ZeaGmNtd5rdlQ+nO1NsqG+b3weBUmTE3TJCS ByCIGgXjF0E8SF1rB52+/we87Ke/ePrlkQMM/6ZqCq0o/fBfvHASQsRsDCDSXTAf vrS+rd7Qv5cGOxrnJXYyPEovDHqU+9rU8Rkvvpr5wfmCtWO99YCt5knn1YA3HmVI ivGqjnqW6ZP0FoiP+f1TzNrqVTrjJk4= -----END CERTIFICATE-----Generated at Tue Oct 6 03:29:10 2026 by rpki-client