$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa File: cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa (raw, json) Hash identifier: KjxyUw6tvvW7nI2dl8S2kBXZIhAzc2RELhN3d8utfFw= Subject key identifier: 01:F4:9B:1E:AD:24:44:22:A5:DC:F6:53:85:7C:F3:84:4A:4A:13:36 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584FD956ADB08C8B6E8E81796520 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa Signing time: Sun 15 Nov 2026 14:00:13 +0000 ROA not before: Sun 15 Nov 2026 14:00:13 +0000 ROA not after: Sat 13 Feb 2027 14:00:13 +0000 asID: 9009 IP address blocks: 168.93.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d9:56:ad:b0:8c:8b:6e:8e:81:79:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 15 14:00:13 2026 GMT Not After : Feb 13 14:00:13 2027 GMT Subject: CN=63274b2c-37c2-494c-97ec-77d3b4491a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:6c:66:18:9a:a9:27:56:2e:90:5c:b6:66: 68:42:17:32:a7:44:f4:ce:20:c7:f0:3e:d2:60:ec: 63:fe:f5:04:1a:86:31:17:d2:d2:f4:c7:b7:b4:27: 3c:41:02:9c:58:4b:58:f3:94:ca:fe:b5:1a:f4:4d: a2:58:7d:e2:66:6d:8e:9d:63:27:45:37:2d:a7:3e: 21:4e:dc:14:af:15:74:71:99:a0:d4:43:bf:3d:08: 17:13:8b:b6:c4:ef:72:bd:d4:3e:01:35:f4:72:e8: e8:8d:74:d6:23:9c:bc:5c:9c:9f:8d:47:7c:24:94: 4f:bc:a6:22:44:5e:1f:7f:be:d1:54:3f:fa:0d:29: fb:55:10:3e:03:47:47:f5:93:46:39:ac:3d:47:96: 1b:61:99:59:5b:a6:59:32:58:42:60:2d:5f:44:bb: 9e:6b:21:dd:83:1c:ae:5f:03:b6:6e:78:03:0c:71: 0c:ed:75:1d:55:85:3b:1d:32:ce:18:89:65:5c:b6: ec:02:c8:23:4b:2a:d5:44:f2:2a:f6:0b:65:cd:e3: 45:4e:8f:ac:db:74:ab:81:79:82:de:75:5a:8f:a4: ba:c6:0f:fd:5b:b4:4c:de:7b:27:1d:57:f2:1b:5d: 29:e0:cb:fe:a9:24:20:c5:d3:32:35:84:66:9b:13: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:9B:1E:AD:24:44:22:A5:DC:F6:53:85:7C:F3:84:4A:4A:13:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:0e:92:24:23:62:9f:70:d7:ee:cc:1d:cf:3b:5f:80:f5:82: a7:d8:55:03:ad:0b:51:ae:f6:29:82:32:15:50:92:fb:40:dd: 88:a6:53:43:6e:69:ca:e4:72:b3:4e:36:2a:da:bf:44:18:55: 19:fa:80:12:77:c6:d5:47:7d:4f:a9:86:d4:d3:2d:56:14:8b: f2:39:36:f8:8d:f5:21:94:17:97:16:70:34:28:e1:91:0c:1d: 0e:fb:5b:15:17:a6:d8:8e:d5:0c:11:bb:4b:9e:49:02:e4:0a: 00:07:3f:3b:7c:c4:86:d4:0c:50:12:4d:89:6b:19:d4:7c:d0: 30:14:e7:00:0a:a7:12:ee:b6:c5:0e:11:6a:07:4f:73:88:bd: a8:5a:29:03:97:4e:62:c9:4c:e1:13:c3:42:83:01:b0:e7:b1: 68:65:09:48:85:71:03:e9:7e:a7:d6:dc:4a:9f:fc:f4:21:eb: 36:e9:1d:4f:56:47:c0:21:73:37:e2:c3:29:d0:f3:d8:36:e7: eb:e3:c2:9e:b9:5b:7a:91:5d:72:3d:1f:52:3e:7f:65:7f:a8: a1:d9:2c:fd:47:e3:03:4f:e3:00:e8:9f:cb:94:b8:08:41:92: 77:e4:d2:30:87:05:4e:95:26:52:fe:6f:3d:0a:f0:7a:3f:0a: 6a:bb:22:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/ZVq2wjItujoF5ZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTExNTE0MDAxM1oXDTI3MDIxMzE0MDAxM1owLzEtMCsGA1UEAxMk NjMyNzRiMmMtMzdjMi00OTRjLTk3ZWMtNzdkM2I0NDkxYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzxsZhiaqSdWLpBctmZoQhcyp0T0ziDH8D7S YOxj/vUEGoYxF9LS9Me3tCc8QQKcWEtY85TK/rUa9E2iWH3iZm2OnWMnRTctpz4h TtwUrxV0cZmg1EO/PQgXE4u2xO9yvdQ+ATX0cujojXTWI5y8XJyfjUd8JJRPvKYi RF4ff77RVD/6DSn7VRA+A0dH9ZNGOaw9R5YbYZlZW6ZZMlhCYC1fRLueayHdgxyu XwO2bngDDHEM7XUdVYU7HTLOGIllXLbsAsgjSyrVRPIq9gtlzeNFTo+s23SrgXmC 3nVaj6S6xg/9W7RM3nsnHVfyG10p4Mv+qSQgxdMyNYRmmxNBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH0mx6tJEQipdz2U4V884RKShM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2NhODlmZWYtOGZlZi0z ZjY0LWI2NjEtOWI0ZTNlYjhjYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoOkiQjYp9w1+7MHc87X4D1gqfYVQOtC1Gu9imCMhVQkvtA3YimU0Nu acrkcrNONirav0QYVRn6gBJ3xtVHfU+phtTTLVYUi/I5NviN9SGUF5cWcDQo4ZEM HQ77WxUXptiO1QwRu0ueSQLkCgAHPzt8xIbUDFASTYlrGdR80DAU5wAKpxLutsUO EWoHT3OIvahaKQOXTmLJTOETw0KDAbDnsWhlCUiFcQPpfqfW3Eqf/PQh6zbpHU9W R8AhczfiwynQ89g25+vjwp65W3qRXXI9H1I+f2V/qKHZLP1H4wNP4wDon8uUuAhB knfk0jCHBU6VJlL+bz0K8Ho/Cmq7Itc= -----END CERTIFICATE-----Generated at Sun Nov 15 21:24:08 2026 by rpki-client