$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa File: 2f12a581-2028-3c4a-af0c-35b5904553d4.roa (raw, json) Hash identifier: KbbOQcVfq7Ajm5rWd4q30WgB4lSrqrqzvWkTUAsVwPI= Subject key identifier: B0:25:04:17:03:F7:BB:EB:02:65:C2:CB:3A:58:20:0E:1A:2A:21:A6 Certificate issuer: /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f Certificate serial: 010D0C9F4328584F119CFAB2FC486AD58ABD7AC0 Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 393316 IP address blocks: 198.169.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fa:b2:fc:48:6a:d5:8a:bd:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=04533311-f6dc-45b7-8bfe-450a0ad1aed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:8d:bd:c2:35:81:a9:f9:25:81:6b:b2:5d: 17:45:e7:cd:c5:8b:a3:ea:47:07:96:78:1b:62:85: 27:d2:00:d1:a1:5d:77:e0:c5:9b:75:c2:86:40:4c: 07:fc:ec:26:24:0f:1f:73:4a:96:93:5e:de:15:d7: c5:c6:5d:7a:d3:be:a6:6d:4e:ad:ad:53:3d:fe:b3: ba:bb:8f:7c:07:40:9f:58:33:17:1d:d0:21:60:26: 0e:9c:26:db:23:71:8b:d3:1b:1c:71:d7:6e:d0:df: 19:ad:83:00:3d:20:7f:62:a3:4f:f6:42:42:04:e1: ea:21:8c:9a:70:a5:4e:2b:cf:36:4a:8d:fc:52:32: c9:a8:ec:49:24:88:d8:bb:9c:f9:30:51:cb:6f:f6: a7:20:2d:f8:de:ac:f1:26:f7:30:f7:de:44:9f:cc: 65:55:af:04:29:52:f8:9a:bd:3c:16:5d:ed:4d:e5: 27:33:fd:a3:25:1d:8a:03:17:ba:53:f0:46:66:1d: b6:14:c9:71:eb:7a:ae:71:d2:ea:f2:a6:d8:0e:fb: 38:48:f4:bf:88:b5:65:d8:c0:04:d8:43:fd:c4:77: 6c:1b:42:5f:71:30:52:fc:05:40:95:7f:3a:51:e0: 11:53:9b:7d:5d:cf:a5:cd:da:ec:4f:9b:ad:a3:cb: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:25:04:17:03:F7:BB:EB:02:65:C2:CB:3A:58:20:0E:1A:2A:21:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl X509v3 Authority Key Identifier: keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer sbgp-ipAddrBlock: critical IPv4: 198.169.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3f:ef:48:f1:1d:ff:d1:48:54:89:bd:28:6b:5d:e3:08:a6: c7:d4:20:05:b9:5d:55:5e:44:3a:50:e3:46:86:10:79:bd:c6: a4:64:99:0b:b4:e6:bb:e2:df:44:e8:1e:b5:de:e4:a6:28:cd: c7:ee:c6:44:e7:da:ae:17:7d:c2:f9:9f:03:74:d3:d5:f5:35: 84:9e:0d:cf:fe:6d:e8:4d:a4:3f:1f:c2:76:25:7d:ff:93:48: 4d:32:90:7d:df:f4:a5:3e:9a:ad:80:74:84:fb:a6:66:53:65: 25:36:8c:99:da:7f:06:5a:e8:a1:8c:dc:ef:b5:81:be:45:68: 5e:6e:b5:59:d1:31:19:6d:a3:1a:e0:9a:fa:bb:4f:d7:66:04: b5:42:e5:31:dd:3c:f1:27:05:b2:83:7b:2d:7b:e9:68:f7:35: 39:cc:e2:41:ce:2e:3d:10:e2:56:5c:01:f7:c2:c7:08:cd:ef: 66:f8:5f:a5:ef:00:18:d7:cd:13:60:69:0c:14:0e:84:32:7c: 78:66:22:ef:17:8c:ef:81:8a:9c:1a:5a:97:fa:8a:b1:8f:bc: 86:fe:11:9a:8e:9c:8c:e0:2e:70:4a:c3:dc:56:76:15:cb:cf: 26:fc:01:8c:98:0b:1f:17:b6:67:1a:f8:28:5c:bb:96:41:66: 60:ce:22:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPqy/Ehq1Yq9esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOTdlYzgtYzg4MS00NWFhLWFjNDktMjVlZTIxYTkz YTVmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDQ1MzMzMTEtZjZkYy00NWI3LThiZmUtNDUwYTBhZDFhZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPiNvcI1gan5JYFrsl0XRefNxYuj6kcHlngb YoUn0gDRoV134MWbdcKGQEwH/OwmJA8fc0qWk17eFdfFxl16076mbU6trVM9/rO6 u498B0CfWDMXHdAhYCYOnCbbI3GL0xsccddu0N8ZrYMAPSB/YqNP9kJCBOHqIYya cKVOK882So38UjLJqOxJJIjYu5z5MFHLb/anIC343qzxJvcw995En8xlVa8EKVL4 mr08Fl3tTeUnM/2jJR2KAxe6U/BGZh22FMlx63qucdLq8qbYDvs4SPS/iLVl2MAE 2EP9xHdsG0JfcTBS/AVAlX86UeARU5t9Xc+lzdrsT5uto8sB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAlBBcD97vrAmXCyzpYIA4aKiGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5 N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVlMjFhOTNhNWYvMmYxMmE1ODEtMjAyOC0z YzRhLWFmMGMtMzViNTkwNDU1M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDBlOTdlYzgtYzg4MS00NWFhLWFj NDktMjVlZTIxYTkzYTVmL2QwZTk3ZWM4LWM4ODEtNDVhYS1hYzQ5LTI1ZWUyMWE5 M2E1Zi5jcmwwHwYDVR0jBBgwFoAUOHsSt98MP59S/msN47XbcN6/l0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVl MjFhOTNhNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE/70jxHf/RSFSJvShrXeMIpsfUIAW5XVVeRDpQ40aGEHm9xqRkmQu0 5rvi30ToHrXe5KYozcfuxkTn2q4XfcL5nwN009X1NYSeDc/+behNpD8fwnYlff+T SE0ykH3f9KU+mq2AdIT7pmZTZSU2jJnafwZa6KGM3O+1gb5FaF5utVnRMRltoxrg mvq7T9dmBLVC5THdPPEnBbKDey176Wj3NTnM4kHOLj0Q4lZcAffCxwjN72b4X6Xv ABjXzRNgaQwUDoQyfHhmIu8XjO+BipwaWpf6irGPvIb+EZqOnIzgLnBKw9xWdhXL zyb8AYyYCx8Xtmca+Chcu5ZBZmDOIj8= -----END CERTIFICATE-----Generated at Wed Oct 7 14:18:44 2026 by rpki-client