$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa File: 2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa (raw, json) Hash identifier: GcnTg+YLDum66HhrHqaUIoLjxRLW/+46hsaqLBlQLgk= Subject key identifier: 16:A2:92:F8:14:9D:2D:DF:0C:88:F6:10:AD:E4:B3:00:DF:68:D9:D2 Certificate issuer: /CN=c17dbfd2-c39f-4314-88e6-57ca9f713453 Certificate serial: 010D0C9F4328584F6F22CB4BDDA9FB8DB2BBC720 Authority key identifier: 71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 32150 IP address blocks: 198.49.126.0/24 maxlen: 24 2602:fbef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:cb:4b:dd:a9:fb:8d:b2:bb:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17dbfd2-c39f-4314-88e6-57ca9f713453 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=03897d08-7636-4e01-99e4-209196851530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:91:c2:c1:93:71:a4:a7:c5:bb:8e:e4:83: 8a:20:c2:8c:07:30:e3:9a:4c:01:7b:f8:8e:f6:5a: ea:f2:4c:8a:a9:93:f3:90:fa:d2:9d:bb:43:54:c2: 19:aa:70:64:2b:64:43:3b:09:73:6d:99:07:45:68: fe:be:56:4b:4c:31:78:8b:43:27:95:7d:11:de:08: 36:20:a4:8b:30:cb:d0:f1:4e:91:b6:c0:51:3d:bb: 7a:b7:f0:53:5e:d0:95:86:93:dd:fc:a8:1a:a7:98: 1b:66:d9:89:dd:e2:d1:f7:51:03:77:47:82:5f:d8: 78:98:da:55:59:84:41:35:36:32:97:fb:a9:bb:24: d5:d7:1e:6e:64:04:92:cb:0c:66:f4:54:5b:bc:3c: a8:ea:33:fd:70:15:6d:1f:d1:76:35:c8:5b:95:c5: 64:65:f4:3a:82:01:6e:8e:46:4b:37:a3:30:cf:5a: 93:40:f4:81:7e:2f:85:f5:16:41:05:87:d4:82:d1: b5:0a:61:1d:1d:a8:00:81:0b:e7:be:cb:94:3d:4c: 41:ca:0f:4d:4a:f2:d0:1c:4a:d9:93:60:a3:b8:4b: 6e:94:22:d3:6a:06:a6:3d:22:50:ff:44:87:59:bb: 4b:fc:23:d1:b4:15:00:b0:b7:36:3c:f4:ab:d3:22: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:92:F8:14:9D:2D:DF:0C:88:F6:10:AD:E4:B3:00:DF:68:D9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.crl X509v3 Authority Key Identifier: keyid:71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer sbgp-ipAddrBlock: critical IPv4: 198.49.126.0/24 IPv6: 2602:fbef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:02:1a:2d:80:e1:b3:70:e5:8c:23:a6:c8:02:c4:9b:23:9f: 0d:70:d0:d2:a6:78:d3:63:16:20:92:c0:02:5d:58:92:c3:d4: db:64:e6:cc:8d:1c:99:01:85:c6:b3:2b:22:8e:b1:f7:ec:25: ec:ad:ca:cd:f9:e4:f1:3c:c9:7d:c8:b1:72:9f:99:ec:fc:ee: 74:3d:c0:08:59:37:f2:03:d5:fa:a8:e2:75:5f:fe:e7:5c:ad: 18:28:2c:b0:f3:df:8c:49:b3:67:02:dc:78:2b:77:cf:6d:9c: d0:63:0b:2b:e3:c3:e9:0f:24:3e:c8:a9:9d:10:5a:f4:bb:e1: aa:22:84:97:01:f4:9c:a7:e6:be:57:21:aa:60:bc:92:50:9b: fc:e1:fb:95:90:de:15:d2:82:1a:f8:03:2e:a3:22:2f:c9:90: 37:ab:ab:c3:72:6c:43:30:72:43:2d:dc:56:0e:d6:2d:36:86: 6b:81:9b:ab:77:1e:f9:68:68:43:15:cc:9e:0c:d0:ae:99:37: 41:dc:a5:47:d9:2c:9a:68:c6:5d:ad:94:74:37:8f:21:19:7d: 1d:4a:5d:ad:44:d2:b3:80:a7:19:cd:6d:15:1d:79:c2:31:33: 61:04:bf:e3:4f:0e:aa:7f:10:cb:49:5a:0c:70:4f:c6:0a:d9: ee:b9:1e:01 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9vIstL3an7jbK7xyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZGJmZDItYzM5Zi00MzE0LTg4ZTYtNTdjYTlmNzEz NDUzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MDM4OTdkMDgtNzYzNi00ZTAxLTk5ZTQtMjA5MTk2ODUxNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6eRwsGTcaSnxbuO5IOKIMKMBzDjmkwBe/iO 9lrq8kyKqZPzkPrSnbtDVMIZqnBkK2RDOwlzbZkHRWj+vlZLTDF4i0MnlX0R3gg2 IKSLMMvQ8U6RtsBRPbt6t/BTXtCVhpPd/Kgap5gbZtmJ3eLR91EDd0eCX9h4mNpV WYRBNTYyl/upuyTV1x5uZASSywxm9FRbvDyo6jP9cBVtH9F2NchblcVkZfQ6ggFu jkZLN6Mwz1qTQPSBfi+F9RZBBYfUgtG1CmEdHagAgQvnvsuUPUxByg9NSvLQHErZ k2CjuEtulCLTagamPSJQ/0SHWbtL/CPRtBUAsLc2PPSr0yIExwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBaikvgUnS3fDIj2EK3kswDfaNnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMTdk YmZkMi1jMzlmLTQzMTQtODhlNi01N2NhOWY3MTM0NTMvMmYyMGQ2NDgtYTExYi0z MjQ5LWI5ZjYtYTJmZWUzZTA5ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzE3ZGJmZDItYzM5Zi00MzE0LTg4 ZTYtNTdjYTlmNzEzNDUzL2MxN2RiZmQyLWMzOWYtNDMxNC04OGU2LTU3Y2E5Zjcx MzQ1My5jcmwwHwYDVR0jBBgwFoAUcaUyBHa+aRLXrhZrIG0VPB6oBBAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMTdkYmZkMi1jMzlmLTQzMTQtODhlNi01N2Nh OWY3MTM0NTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxjF+MA8E AgACMAkDBwAmAvvvAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABQIaLYDhs3DljCOmyALEmyOfDXDQ0qZ4 02MWIJLAAl1YksPU22TmzI0cmQGFxrMrIo6x9+wl7K3Kzfnk8TzJfcixcp+Z7Pzu dD3ACFk38gPV+qjidV/+51ytGCgssPPfjEmzZwLceCt3z22c0GMLK+PD6Q8kPsip nRBa9LvhqiKElwH0nKfmvlchqmC8klCb/OH7lZDeFdKCGvgDLqMiL8mQN6urw3Js QzByQy3cVg7WLTaGa4Gbq3ce+WhoQxXMngzQrpk3QdylR9ksmmjGXa2UdDePIRl9 HUpdrUTSs4CnGc1tFR15wjEzYQS/408Oqn8Qy0laDHBPxgrZ7rkeAQ== -----END CERTIFICATE-----Generated at Sun Oct 11 10:50:39 2026 by rpki-client