$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ebef965b-a823-305c-8254-d724e3200797.roa File: ebef965b-a823-305c-8254-d724e3200797.roa (raw, json) Hash identifier: r438BQ8I/LcZy8guuR1lqVZcDyHTMxBZoJ8x/X5727c= Subject key identifier: 41:60:8B:CE:B9:C4:BA:EA:03:30:F7:BD:F9:71:81:72:67:FE:92:45 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584F0ED23723AF7EC88DDC256880 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ebef965b-a823-305c-8254-d724e3200797.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 395963 IP address blocks: 198.150.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:37:23:af:7e:c8:8d:dc:25:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=a058aeea-f6d8-47e1-823a-0e71bf16226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:8e:14:5b:15:d6:64:af:4c:76:db:8e:72: 23:29:3a:57:8f:9f:3b:6c:a8:20:c3:95:b5:35:3a: ae:3e:c0:75:34:12:d7:0a:eb:76:58:e1:3f:dc:37: e3:68:ce:85:72:08:90:fa:dc:db:c4:52:6c:23:40: a7:1e:07:9c:f0:af:07:d2:83:99:ef:aa:4d:0c:c0: 7e:34:09:95:f8:a2:78:79:dd:d4:c5:64:28:38:54: d2:b4:aa:81:65:ac:3d:3d:d9:f8:bf:e2:98:cf:be: 9d:59:fc:5e:74:a0:0d:fe:53:7c:01:e2:43:a9:1f: cf:a7:5c:f6:f9:11:9c:57:0e:8c:b6:63:0c:49:a4: d9:6c:f3:71:aa:27:11:80:d1:3b:b3:35:f3:a9:76: 85:08:42:c6:f4:1d:67:62:c7:73:51:2e:84:b9:59: 5d:d2:0f:e8:1b:1e:0f:4d:ad:3b:a6:57:42:b2:50: c5:b8:bf:a4:f1:5a:16:b6:f1:da:07:3c:d7:5a:1d: 5b:d5:49:d6:90:ec:79:33:0f:5b:ac:ad:90:21:ad: 6c:18:d5:4d:af:5b:e3:a0:08:08:96:d1:eb:22:f3: 97:df:d0:9c:79:5d:76:e9:aa:1c:ab:13:48:72:3f: 7d:09:38:60:d4:a2:a5:07:62:9c:05:71:ad:d0:15: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:8B:CE:B9:C4:BA:EA:03:30:F7:BD:F9:71:81:72:67:FE:92:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ebef965b-a823-305c-8254-d724e3200797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b5:3f:cc:fb:18:f8:c2:51:17:e6:d8:e6:db:f9:3a:7b:d0: 69:c5:87:19:1a:3e:64:0e:50:e2:3c:75:d4:46:50:e7:57:7a: 6c:85:1c:af:0e:cd:3e:a2:57:e2:3a:b3:5e:7b:dc:f6:ed:d3: a9:c5:94:e0:3c:36:78:7f:04:5a:31:f0:a6:dc:cf:60:e0:62: 08:8d:25:00:d8:71:81:cd:81:df:6f:9f:b8:02:24:d9:30:a6: 9e:6b:df:2f:f2:07:f1:8e:76:fc:a7:d2:3d:ab:b0:e6:16:0c: 0f:84:15:a3:ce:4e:61:53:20:f9:e4:70:e3:51:99:55:70:e1: b8:90:ff:77:be:10:63:f2:c2:34:46:47:90:46:86:7f:d2:03: 8d:b8:52:24:32:74:b4:9e:0b:aa:5d:ca:8f:a9:ce:0f:cc:70: e1:5f:93:c0:f0:49:5d:63:f3:28:80:0b:30:10:82:a9:1f:21: ac:3c:94:21:09:c1:86:29:ed:0c:7a:c9:e4:d0:3e:fb:6e:9a: a0:e0:79:14:02:d7:89:09:f5:b4:69:5f:0c:b5:99:2b:c4:af: 82:50:18:9b:0c:7b:34:3d:ef:76:ca:45:7e:c9:28:e1:40:48: 35:1c:9a:8f:5b:be:e6:e1:7e:85:b0:3d:61:0d:49:16:94:c5: ee:f1:80:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jcjr37IjdwlaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTA1OGFlZWEtZjZkOC00N2UxLTgyM2EtMGU3MWJmMTYyMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+WOFFsV1mSvTHbbjnIjKTpXj587bKggw5W1 NTquPsB1NBLXCut2WOE/3DfjaM6FcgiQ+tzbxFJsI0CnHgec8K8H0oOZ76pNDMB+ NAmV+KJ4ed3UxWQoOFTStKqBZaw9Pdn4v+KYz76dWfxedKAN/lN8AeJDqR/Pp1z2 +RGcVw6MtmMMSaTZbPNxqicRgNE7szXzqXaFCELG9B1nYsdzUS6EuVld0g/oGx4P Ta07pldCslDFuL+k8VoWtvHaBzzXWh1b1UnWkOx5Mw9brK2QIa1sGNVNr1vjoAgI ltHrIvOX39CceV126aocqxNIcj99CThg1KKlB2KcBXGt0BXgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFgi865xLrqAzD3vflxgXJn/pJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvZWJlZjk2NWItYTgyMy0z MDVjLTgyNTQtZDcyNGUzMjAwNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpYWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm1P8z7GPjCURfm2Obb+Tp70GnFhxkaPmQOUOI8ddRGUOdXemyFHK8O zT6iV+I6s1573Pbt06nFlOA8Nnh/BFox8Kbcz2DgYgiNJQDYcYHNgd9vn7gCJNkw pp5r3y/yB/GOdvyn0j2rsOYWDA+EFaPOTmFTIPnkcONRmVVw4biQ/3e+EGPywjRG R5BGhn/SA424UiQydLSeC6pdyo+pzg/McOFfk8DwSV1j8yiACzAQgqkfIaw8lCEJ wYYp7Qx6yeTQPvtumqDgeRQC14kJ9bRpXwy1mSvEr4JQGJsMezQ973bKRX7JKOFA SDUcmo9bvubhfoWwPWENSRaUxe7xgKE= -----END CERTIFICATE-----Generated at Tue Oct 13 19:19:30 2026 by rpki-client