$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa File: 3df5c989-5d1e-3810-980c-0ab3219805da.roa (raw, json) Hash identifier: 5HgrggnTRNvwPp784Ru03QUpYdLo69PshmdbIcModA8= Subject key identifier: 8E:4C:32:04:B1:F9:2B:60:55:3B:25:73:7E:51:46:09:57:E4:05:75 Certificate issuer: /CN=19e99068-492b-4b53-9e32-828f20955f8d Certificate serial: 010D0C9F4328584F0D6CE7592D3214FDBD901E20 Authority key identifier: 58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 27275 IP address blocks: 198.161.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e7:59:2d:32:14:fd:bd:90:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e99068-492b-4b53-9e32-828f20955f8d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=95f44a21-0148-4544-80dd-5b1efd9b245b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:bc:1a:19:1f:cf:b4:3f:b6:0f:40:92:96: 31:d5:29:de:7b:e4:32:f9:c9:a4:c0:0a:01:38:6c: bf:cc:47:94:53:e8:88:c5:97:b2:07:c6:61:11:22: f7:fc:14:6d:8b:06:0c:fa:2d:86:3b:0c:11:c3:f6: 69:94:b0:50:45:99:cf:1f:9f:31:8b:fd:5e:4a:c7: bf:b0:ed:bf:b9:34:68:0d:13:6b:84:a1:dc:2f:79: 35:d4:e8:7b:2a:5f:8d:9a:51:7c:51:cb:2c:98:6d: 15:75:7f:66:dd:ac:a4:4a:41:1e:05:56:2e:f5:a4: 58:7a:0f:33:aa:35:4d:c5:37:7a:19:16:cf:45:50: 8a:db:03:2e:b9:47:04:5c:c2:40:1d:5a:e5:49:72: 5e:8e:33:09:b6:94:b9:2a:98:12:88:3e:6a:05:64: a9:4f:f1:92:6b:c8:59:73:d6:9e:4f:ad:57:8b:6a: c9:15:66:aa:60:68:c3:da:ae:9c:be:f3:18:6e:12: 48:c9:30:53:ba:1d:23:ea:f7:de:c8:23:d0:b9:69: d1:f4:67:b1:f2:1d:67:84:11:76:6e:fb:32:ae:35: 02:5d:17:b0:61:1c:8d:84:27:e6:77:13:f8:2c:0a: 3d:ba:74:7c:48:17:b8:10:a2:a8:78:e2:4f:14:7e: 82:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:32:04:B1:F9:2B:60:55:3B:25:73:7E:51:46:09:57:E4:05:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl X509v3 Authority Key Identifier: keyid:58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3f:9a:ff:95:c2:ea:e4:5e:3a:03:1c:a8:02:6e:62:a6:e9: 90:a5:f3:d0:cc:ab:eb:4a:61:46:c8:d7:dc:a8:a3:6d:6a:df: 8f:32:10:b4:99:14:98:96:99:78:f5:d5:0e:1d:8f:3d:18:1d: e2:0b:66:c2:87:0a:80:c3:f9:12:4c:e4:b3:03:b5:7a:02:f7: 16:83:42:3f:9f:1c:93:38:da:31:c2:cc:61:70:9c:ec:ef:01: e1:f7:a4:0d:e9:56:59:ed:3b:a1:49:fe:65:f0:e9:d0:74:e8: 0b:d9:9e:11:bc:ea:06:49:40:2b:fc:4a:2a:d7:05:e1:d6:a3: e6:5f:31:1b:24:c7:09:2a:67:7e:6b:aa:79:36:75:17:bd:08: 4a:a0:1c:06:8f:c6:73:1a:03:4a:43:a4:26:49:c4:2f:e2:7c: a3:fc:fb:7d:dc:4e:a2:4c:93:d8:2a:d5:69:0c:af:37:18:54: 74:bf:a9:66:01:81:d9:38:e5:63:78:5b:5b:af:87:81:85:eb: 0a:dc:3d:06:61:cc:7c:93:22:8a:66:19:62:71:51:65:6a:5d: c1:50:c5:16:01:76:6a:e2:95:15:a3:a2:69:5b:86:d9:6c:c1: 4e:47:76:ee:17:ee:b0:4a:50:82:e7:48:92:1d:b4:fe:69:55: 20:74:0f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOdZLTIU/b2QHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllOTkwNjgtNDkyYi00YjUzLTllMzItODI4ZjIwOTU1 ZjhkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTVmNDRhMjEtMDE0OC00NTQ0LTgwZGQtNWIxZWZkOWIyNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk728Ghkfz7Q/tg9AkpYx1Snee+Qy+cmkwAoB OGy/zEeUU+iIxZeyB8ZhESL3/BRtiwYM+i2GOwwRw/ZplLBQRZnPH58xi/1eSse/ sO2/uTRoDRNrhKHcL3k11Oh7Kl+NmlF8UcssmG0VdX9m3aykSkEeBVYu9aRYeg8z qjVNxTd6GRbPRVCK2wMuuUcEXMJAHVrlSXJejjMJtpS5KpgSiD5qBWSpT/GSa8hZ c9aeT61Xi2rJFWaqYGjD2q6cvvMYbhJIyTBTuh0j6vfeyCPQuWnR9Gex8h1nhBF2 bvsyrjUCXRewYRyNhCfmdxP4LAo9unR8SBe4EKKoeOJPFH6CKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5MMgSx+StgVTslc35RRglX5AV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5 OTA2OC00OTJiLTRiNTMtOWUzMi04MjhmMjA5NTVmOGQvM2RmNWM5ODktNWQxZS0z ODEwLTk4MGMtMGFiMzIxOTgwNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTllOTkwNjgtNDkyYi00YjUzLTll MzItODI4ZjIwOTU1ZjhkLzE5ZTk5MDY4LTQ5MmItNGI1My05ZTMyLTgyOGYyMDk1 NWY4ZC5jcmwwHwYDVR0jBBgwFoAUWOqtfxWWBokA016B7EFTCIb4JYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5OTA2OC00OTJiLTRiNTMtOWUzMi04Mjhm MjA5NTVmOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE/mv+VwurkXjoDHKgCbmKm6ZCl89DMq+tKYUbI19yoo21q348yELSZ FJiWmXj11Q4djz0YHeILZsKHCoDD+RJM5LMDtXoC9xaDQj+fHJM42jHCzGFwnOzv AeH3pA3pVlntO6FJ/mXw6dB06AvZnhG86gZJQCv8SirXBeHWo+ZfMRskxwkqZ35r qnk2dRe9CEqgHAaPxnMaA0pDpCZJxC/ifKP8+33cTqJMk9gq1WkMrzcYVHS/qWYB gdk45WN4W1uvh4GF6wrcPQZhzHyTIopmGWJxUWVqXcFQxRYBdmrilRWjomlbhtls wU5Hdu4X7rBKUILnSJIdtP5pVSB0D24= -----END CERTIFICATE-----Generated at Sat Sep 26 10:47:26 2026 by rpki-client