$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa File: ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa (raw, json) Hash identifier: CNIWQtkcNy/ZqUK4Eiwn+bKjc7eIjEsMxoS6ZYKgOvU= Subject key identifier: B5:11:55:3A:08:93:12:98:B9:63:49:93:D3:EE:12:F7:99:34:4B:B4 Certificate issuer: /CN=f4e57a96-f0bd-4437-a5a1-fec9991b7c6d Certificate serial: 010D0C9F4328584F4974A934680187A03DE55880 Authority key identifier: D0:AE:FD:1D:67:3B:48:B2:D2:BD:E7:B8:46:55:2A:BA:7C:58:68:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1054 IP address blocks: 198.29.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a9:34:68:01:87:a0:3d:e5:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e57a96-f0bd-4437-a5a1-fec9991b7c6d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6c36a78c-6753-4bad-8597-74a158845edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:99:d8:9d:a9:3b:68:e4:91:f5:01:99:56: 7e:70:d9:33:cb:56:c3:7e:6b:f1:c4:f8:f1:47:b4: 53:e0:17:f7:ae:d4:91:24:f6:58:90:3d:e1:8a:26: d0:17:dd:5c:f5:b7:2b:de:59:bb:1b:d3:28:29:88: 40:03:f0:d7:ae:18:32:3c:9a:a0:ca:30:40:ae:32: cc:39:3a:21:92:25:6a:d8:b7:02:6e:d9:56:2f:e2: a8:30:32:63:02:3e:f6:7a:18:bb:f1:a5:6c:bf:e0: 55:57:63:05:19:cc:7d:95:c3:0b:02:25:36:a3:8c: 9c:64:7c:89:0f:b7:5a:4b:68:35:43:32:41:7c:e2: 38:f0:0b:b8:d1:c2:4e:e2:d7:98:35:de:22:1f:8f: e9:60:b9:59:3c:2e:29:77:5f:52:a8:fd:ec:38:d4: 97:36:34:5b:80:d3:65:59:84:01:71:06:af:90:b1: b6:35:bc:52:d1:35:3b:a8:c5:e7:55:cc:cb:82:45: c1:5e:a2:d8:b5:f5:e7:2e:59:54:55:c3:8b:9d:c6: 97:ad:ad:ef:ca:5b:72:02:29:8b:4e:39:15:9c:e0: 4c:bb:ca:81:6b:88:15:a3:81:17:12:70:58:b3:8f: 3f:b6:04:f9:25:31:2b:89:46:76:d7:37:49:dc:2b: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:11:55:3A:08:93:12:98:B9:63:49:93:D3:EE:12:F7:99:34:4B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.crl X509v3 Authority Key Identifier: keyid:D0:AE:FD:1D:67:3B:48:B2:D2:BD:E7:B8:46:55:2A:BA:7C:58:68:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer sbgp-ipAddrBlock: critical IPv4: 198.29.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8d:76:fb:94:f5:4f:9a:1e:e6:9a:44:8e:cd:4f:3d:1b:26: cd:48:c4:ff:f5:f3:9a:5c:b6:fd:93:b3:e1:22:0e:35:29:e8: cb:b5:1a:fb:77:16:f6:a0:34:fc:24:8d:91:02:4e:d3:f5:e6: 04:96:f4:73:45:2e:af:d7:a9:0e:6b:1a:bb:c4:98:f7:9e:c3: 4b:6c:19:1b:cd:01:97:34:14:5c:f9:c5:88:cc:1a:d2:90:68: ee:52:8c:64:c8:0e:90:61:5f:b2:2c:fb:84:7a:a8:4c:49:0a: ac:c1:30:3e:28:a7:31:f2:bb:8c:98:4e:da:82:6c:9c:48:25: 73:a1:72:76:33:fd:83:4e:37:a9:d4:7a:55:c7:62:b2:4c:be: 09:61:0d:1f:81:08:fa:2e:bd:0d:25:0f:ec:85:a8:a2:10:4a: 4f:d8:c5:b0:6e:72:79:ec:2b:8a:0a:37:fd:13:14:8e:00:3f: c9:a8:40:37:e4:96:94:d0:9d:b8:9c:9a:1c:cf:ac:a7:07:71: dc:80:82:7e:9b:13:ef:00:53:25:35:bf:19:67:f8:60:e9:66: 48:49:d9:d0:2b:44:0b:f2:25:33:38:6c:52:40:f4:7f:77:19: e2:60:49:18:22:e7:49:85:1c:01:f7:6b:9c:d9:61:22:60:35: 38:90:55:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKk0aAGHoD3lWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRlNTdhOTYtZjBiZC00NDM3LWE1YTEtZmVjOTk5MWI3 YzZkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmMzNmE3OGMtNjc1My00YmFkLTg1OTctNzRhMTU4ODQ1ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXCZ2J2pO2jkkfUBmVZ+cNkzy1bDfmvxxPjx R7RT4Bf3rtSRJPZYkD3hiibQF91c9bcr3lm7G9MoKYhAA/DXrhgyPJqgyjBArjLM OTohkiVq2LcCbtlWL+KoMDJjAj72ehi78aVsv+BVV2MFGcx9lcMLAiU2o4ycZHyJ D7daS2g1QzJBfOI48Au40cJO4teYNd4iH4/pYLlZPC4pd19SqP3sONSXNjRbgNNl WYQBcQavkLG2NbxS0TU7qMXnVczLgkXBXqLYtfXnLllUVcOLncaXra3vyltyAimL TjkVnOBMu8qBa4gVo4EXEnBYs48/tgT5JTEriUZ21zdJ3CsoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLURVToIkxKYuWNJk9PuEveZNEu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNGU1 N2E5Ni1mMGJkLTQ0MzctYTVhMS1mZWM5OTkxYjdjNmQvZWQ0N2JhNzctZWVhMS0z OWEyLWJhZjctZDYwYWJjMDhiYzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjRlNTdhOTYtZjBiZC00NDM3LWE1 YTEtZmVjOTk5MWI3YzZkL2Y0ZTU3YTk2LWYwYmQtNDQzNy1hNWExLWZlYzk5OTFi N2M2ZC5jcmwwHwYDVR0jBBgwFoAU0K79HWc7SLLSvee4RlUqunxYaOcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNGU1N2E5Ni1mMGJkLTQ0MzctYTVhMS1mZWM5 OTkxYjdjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxh3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuNdvuU9U+aHuaaRI7NTz0bJs1IxP/185pctv2Ts+EiDjUp6Mu1Gvt3 FvagNPwkjZECTtP15gSW9HNFLq/XqQ5rGrvEmPeew0tsGRvNAZc0FFz5xYjMGtKQ aO5SjGTIDpBhX7Is+4R6qExJCqzBMD4opzHyu4yYTtqCbJxIJXOhcnYz/YNON6nU elXHYrJMvglhDR+BCPouvQ0lD+yFqKIQSk/YxbBucnnsK4oKN/0TFI4AP8moQDfk lpTQnbicmhzPrKcHcdyAgn6bE+8AUyU1vxln+GDpZkhJ2dArRAvyJTM4bFJA9H93 GeJgSRgi50mFHAH3a5zZYSJgNTiQVd0= -----END CERTIFICATE-----Generated at Sat Sep 26 07:41:57 2026 by rpki-client