$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa File: 35febe00-9c57-373a-948b-0f3b0e170f27.roa (raw, json) Hash identifier: hO33FUtC1DvHMcWe0rWyN1Dsygl0yvEyO76lZTCxooc= Subject key identifier: 8F:66:3C:7D:91:26:49:9A:C2:87:DD:2A:76:42:DE:FD:40:30:B8:B0 Certificate issuer: /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Certificate serial: 010D0C9F4328584F49756F41FCFB325EEFD77BB0 Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397984 IP address blocks: 198.184.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:6f:41:fc:fb:32:5e:ef:d7:7b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c1c4864-2274-46ae-a7e0-b5f68e52fee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:71:20:6d:91:fc:40:68:57:a1:1b:53:d0: 37:d5:c0:4e:a1:2a:7b:1e:dc:af:1d:03:d4:3d:4e: 30:68:90:f9:ab:36:e1:11:95:4f:f7:e9:98:5a:4e: 74:b5:ee:33:d9:0d:56:32:d9:eb:80:2c:f6:3c:fe: 67:b6:4d:d3:30:49:ac:f7:d3:5e:74:9d:9e:fa:15: 3d:ec:16:1a:b0:e3:da:26:18:58:d4:11:e8:c9:93: 1d:81:60:27:88:f5:2c:f1:13:59:25:21:06:51:35: 60:11:ac:d7:cc:c3:92:75:d5:f9:9d:a8:62:31:82: fb:f4:63:3b:24:85:62:54:fa:c7:1e:bd:1a:5c:22: 17:3b:a3:fd:31:c7:a5:4e:9c:9d:00:60:67:bb:c6: fe:d5:96:74:0a:c1:d1:f6:d4:9a:e7:17:b7:fb:47: d4:98:6d:3b:dd:61:98:21:76:15:b8:0b:74:18:f1: f4:6f:b7:78:b4:b5:de:6b:2f:c6:11:78:53:ec:54: ec:25:cd:f3:d5:7e:02:0d:52:18:d4:e4:9f:97:bb: 90:5b:f6:3e:7e:83:da:2d:ba:cc:90:20:61:45:f1: 18:2b:1e:30:7f:ef:7f:a8:9f:94:2d:e8:6f:83:75: c5:04:e6:1e:1e:4f:90:eb:ef:d6:6d:5b:c1:da:09: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:3C:7D:91:26:49:9A:C2:87:DD:2A:76:42:DE:FD:40:30:B8:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl X509v3 Authority Key Identifier: keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer sbgp-ipAddrBlock: critical IPv4: 198.184.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:01:c7:76:9c:8c:c1:14:10:ff:01:1c:6d:ed:c8:c4:cb: a2:9e:dd:69:db:7b:49:4c:2d:67:98:1d:f1:30:4d:7b:f3:92: 28:73:fe:a6:81:39:b7:af:b1:c0:20:8e:a0:7b:f8:6a:e2:90: 66:63:6d:41:46:59:a4:dd:15:ee:cb:78:31:06:d2:e4:e8:16: 50:2d:15:fe:19:e7:ff:c0:87:04:06:b8:6c:bb:2e:55:1b:c3: e0:f0:77:ac:72:73:2e:27:ea:c8:4c:89:b2:57:8c:95:53:6c: 7f:91:8e:58:73:cd:54:ea:77:7c:ca:fb:ee:e1:23:2b:35:c9: 90:51:52:37:91:b1:c4:f3:58:4a:bb:02:a4:df:96:7a:17:96: b0:ae:8d:c5:11:ae:6c:9c:bd:0d:ba:a4:c8:47:e2:3a:f6:77: 15:02:74:e0:1c:f8:40:f0:02:fc:3e:61:bc:5c:dd:19:ee:6d: e2:a2:9e:8d:56:94:ae:9b:e2:0f:32:f6:26:9e:13:3b:16:ba: 81:d5:50:13:bf:cf:06:80:cd:55:17:d3:b9:ac:21:38:87:8e: e5:64:e3:40:65:87:00:8b:27:1e:d7:9e:4c:fa:bd:3c:e0:e7: fb:e8:04:07:3d:c7:58:65:04:4d:ac:c8:e8:24:64:39:d3:f1: 65:45:e4:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdW9B/PsyXu/Xe7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm NDJlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWMxYzQ4NjQtMjI3NC00NmFlLWE3ZTAtYjVmNjhlNTJmZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC5xIG2R/EBoV6EbU9A31cBOoSp7HtyvHQPU PU4waJD5qzbhEZVP9+mYWk50te4z2Q1WMtnrgCz2PP5ntk3TMEms99NedJ2e+hU9 7BYasOPaJhhY1BHoyZMdgWAniPUs8RNZJSEGUTVgEazXzMOSddX5nahiMYL79GM7 JIViVPrHHr0aXCIXO6P9McelTpydAGBnu8b+1ZZ0CsHR9tSa5xe3+0fUmG073WGY IXYVuAt0GPH0b7d4tLXeay/GEXhT7FTsJc3z1X4CDVIY1OSfl7uQW/Y+foPaLbrM kCBhRfEYKx4wf+9/qJ+ULehvg3XFBOYeHk+Q6+/WbVvB2gmsowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9mPH2RJkmawofdKnZC3v1AMLiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvMzVmZWJlMDAtOWM1Ny0z NzNhLTk0OGItMGYzYjBlMTcwZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2 ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxricMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUqAcd2nIzBFBD/ARxt7cjEy6Ke3Wnbe0lMLWeYHfEwTXvzkihz/qaB ObevscAgjqB7+GrikGZjbUFGWaTdFe7LeDEG0uToFlAtFf4Z5//AhwQGuGy7LlUb w+Dwd6xycy4n6shMibJXjJVTbH+RjlhzzVTqd3zK++7hIys1yZBRUjeRscTzWEq7 AqTflnoXlrCujcURrmycvQ26pMhH4jr2dxUCdOAc+EDwAvw+Ybxc3RnubeKino1W lK6b4g8y9iaeEzsWuoHVUBO/zwaAzVUX07msITiHjuVk40BlhwCLJx7Xnkz6vTzg 5/voBAc9x1hlBE2syOgkZDnT8WVF5Ig= -----END CERTIFICATE-----Generated at Sun Sep 27 23:36:09 2026 by rpki-client