$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/3afb8caa-991b-3067-b227-08532466f6f7.roa File: 3afb8caa-991b-3067-b227-08532466f6f7.roa (raw, json) Hash identifier: xt6IJpxHFuLlOGdc/kUxOydNGr0Oit2FutwS/Ci21v8= Subject key identifier: CF:63:F2:36:5C:7E:47:C0:0F:29:14:E4:5E:BF:6F:7A:E2:12:CC:C1 Certificate issuer: /CN=c7890c7a-293b-4953-a7a1-ffd97374a468 Certificate serial: 010D0C9F4328584F13024BF2FD63C98ED5983280 Authority key identifier: 95:DC:CE:F2:A1:A0:C9:93:E3:B8:6D:31:E9:E2:6D:86:F5:60:7F:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/3afb8caa-991b-3067-b227-08532466f6f7.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 400175 IP address blocks: 198.252.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/c7890c7a-293b-4953-a7a1-ffd97374a468.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/c7890c7a-293b-4953-a7a1-ffd97374a468.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4b:f2:fd:63:c9:8e:d5:98:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7890c7a-293b-4953-a7a1-ffd97374a468 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=2467fcd4-51cc-4c51-9af5-3e7cf51c730b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:ee:0f:fa:65:27:ed:fe:79:a0:f2:92:f8: 7e:82:93:eb:c1:fb:11:f9:f7:69:23:f4:c1:0c:df: 44:c3:be:7d:00:3c:4c:52:fd:f1:09:ec:b5:a2:a5: 06:1b:f9:02:b4:7a:f3:12:56:f0:29:54:40:95:f1: 13:9e:45:0e:17:4a:93:e3:46:d2:f0:26:6a:76:c6: 35:85:08:02:ec:39:5e:65:b0:06:f6:ba:c3:5a:a6: 3b:b0:e7:38:29:4d:20:64:8d:c6:ea:6d:bf:46:99: e4:33:c8:20:98:de:cc:37:24:6e:f7:61:37:25:fc: a1:8e:69:2f:b3:39:a4:f8:e0:80:73:1b:0a:5f:6d: c7:19:a6:0c:2b:af:e8:38:da:f8:4a:6b:d7:9e:4c: fe:c2:ef:af:01:1b:e6:f9:37:ac:7f:9a:0c:50:21: e2:7d:d3:06:81:27:ae:13:36:3a:66:8c:03:bd:47: 84:6e:58:14:ad:d0:a2:35:5b:43:7b:e2:26:db:00: e8:14:82:8f:9e:3c:73:e8:ce:59:a2:e5:07:a6:ab: 9e:e4:4f:64:b2:7e:42:4b:4e:ce:98:54:54:3f:d4: 71:99:65:27:4d:f4:de:82:8d:51:cf:8c:7f:b3:bd: 0b:5d:1d:2a:14:6d:15:7c:88:68:3d:b6:ed:c6:63: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:63:F2:36:5C:7E:47:C0:0F:29:14:E4:5E:BF:6F:7A:E2:12:CC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/3afb8caa-991b-3067-b227-08532466f6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/c7890c7a-293b-4953-a7a1-ffd97374a468.crl X509v3 Authority Key Identifier: keyid:95:DC:CE:F2:A1:A0:C9:93:E3:B8:6D:31:E9:E2:6D:86:F5:60:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468.cer sbgp-ipAddrBlock: critical IPv4: 198.252.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f2:0a:94:bf:41:8a:40:ed:a5:c7:ac:47:5a:0c:5c:77:0f: c9:70:3e:84:71:04:7f:d5:df:bc:7a:42:5c:6c:98:ee:35:73: 48:26:25:02:34:13:51:fa:62:0e:f5:e6:b8:37:5f:99:fb:76: 5c:91:7a:dd:fa:44:d5:59:60:36:af:e1:0a:36:63:37:42:e5: fb:9b:2b:f0:4d:12:06:b9:7b:b0:78:e5:02:63:c2:d6:8f:67: d9:b0:f8:bf:1d:1c:60:d4:11:c4:78:70:43:3e:91:10:9a:0c: c7:78:4d:15:78:59:84:d6:7f:d7:15:7d:0c:2c:d0:2b:60:b5: 61:79:55:5f:1c:b3:32:aa:da:16:03:ac:de:c9:aa:14:f5:97: 5b:4c:0f:c1:01:58:78:65:e1:56:4d:21:4e:31:1b:a0:1b:d9: a3:29:54:c9:cb:65:93:cd:4b:46:ca:f2:3e:0f:1b:ed:6e:e1: 41:68:c5:63:35:7f:f8:a9:f9:7e:95:ee:07:50:09:9a:36:ee: f0:b6:29:46:6e:16:9d:0d:ba:31:30:3d:c7:03:ea:97:ce:a2: 7d:f9:85:d5:6b:f1:07:95:3e:d3:27:e3:c0:43:90:c1:7a:38: ee:43:63:97:25:5a:fa:62:99:6b:2c:e5:b7:1d:9b:c0:41:9a: 90:8f:b6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkvy/WPJjtWYMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc4OTBjN2EtMjkzYi00OTUzLWE3YTEtZmZkOTczNzRh NDY4MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MjQ2N2ZjZDQtNTFjYy00YzUxLTlhZjUtM2U3Y2Y1MWM3MzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3zuD/plJ+3+eaDykvh+gpPrwfsR+fdpI/TB DN9Ew759ADxMUv3xCey1oqUGG/kCtHrzElbwKVRAlfETnkUOF0qT40bS8CZqdsY1 hQgC7DleZbAG9rrDWqY7sOc4KU0gZI3G6m2/RpnkM8ggmN7MNyRu92E3Jfyhjmkv szmk+OCAcxsKX23HGaYMK6/oONr4SmvXnkz+wu+vARvm+Tesf5oMUCHifdMGgSeu EzY6ZowDvUeEblgUrdCiNVtDe+Im2wDoFIKPnjxz6M5ZouUHpque5E9ksn5CS07O mFRUP9RxmWUnTfTego1Rz4x/s70LXR0qFG0VfIhoPbbtxmOyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9j8jZcfkfADykU5F6/b3riEszBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNzg5 MGM3YS0yOTNiLTQ5NTMtYTdhMS1mZmQ5NzM3NGE0NjgvM2FmYjhjYWEtOTkxYi0z MDY3LWIyMjctMDg1MzI0NjZmNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzc4OTBjN2EtMjkzYi00OTUzLWE3 YTEtZmZkOTczNzRhNDY4L2M3ODkwYzdhLTI5M2ItNDk1My1hN2ExLWZmZDk3Mzc0 YTQ2OC5jcmwwHwYDVR0jBBgwFoAUldzO8qGgyZPjuG0x6eJthvVgf1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNzg5MGM3YS0yOTNiLTQ5NTMtYTdhMS1mZmQ5 NzM3NGE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvyCpS/QYpA7aXHrEdaDFx3D8lwPoRxBH/V37x6QlxsmO41c0gmJQI0 E1H6Yg715rg3X5n7dlyRet36RNVZYDav4Qo2YzdC5fubK/BNEga5e7B45QJjwtaP Z9mw+L8dHGDUEcR4cEM+kRCaDMd4TRV4WYTWf9cVfQws0CtgtWF5VV8cszKq2hYD rN7JqhT1l1tMD8EBWHhl4VZNIU4xG6Ab2aMpVMnLZZPNS0bK8j4PG+1u4UFoxWM1 f/ip+X6V7gdQCZo27vC2KUZuFp0NujEwPccD6pfOon35hdVr8QeVPtMn48BDkMF6 OO5DY5clWvpimWss5bcdm8BBmpCPtkc= -----END CERTIFICATE-----Generated at Sat Oct 3 08:58:51 2026 by rpki-client