$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0bc957d-e827-353f-9650-48950ead8c23.roa File: f0bc957d-e827-353f-9650-48950ead8c23.roa (raw, json) Hash identifier: GAnrI5reLdF4wtDbcT8EUEgfjpV0OmspxUmlGkg/QRQ= Subject key identifier: 04:22:AA:04:36:2A:53:5C:09:41:54:39:4A:E5:E4:D5:EF:D7:44:22 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F498AC2D6164546A96F553500 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0bc957d-e827-353f-9650-48950ead8c23.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 214054 IP address blocks: 198.89.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:c2:d6:16:45:46:a9:6f:55:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67e8c5c5-977a-4d10-85d9-9e7194c48c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:00:ac:c4:5f:db:20:95:78:c7:80:a0:ce: ad:2f:40:2b:cc:74:ec:8b:35:a4:1e:c5:ed:da:57: 72:9c:cf:a8:71:6c:5a:ae:71:18:58:09:7b:6d:e5: ce:dd:4a:6d:37:c9:46:19:ff:7e:dc:91:e8:73:50: f7:d9:7c:34:c4:02:bf:c6:87:0c:4f:9f:6a:5c:51: 6d:7d:f1:62:d9:9d:6c:ac:f4:98:14:82:25:b9:3a: fe:f2:13:e0:3e:8d:63:23:2f:86:82:ab:4b:ae:11: 9f:20:bd:e9:b1:25:ac:82:b4:ec:e6:87:79:28:a8: 9a:fb:64:8a:09:77:ea:23:d9:84:dc:fc:64:ac:7f: 0b:6a:8f:2b:a8:ae:a8:d9:56:80:00:31:0a:ec:32: dc:6c:3a:5a:3d:2f:f4:76:57:96:b2:c4:24:cd:e8: ba:33:38:e8:12:25:72:96:9f:2e:20:e2:84:94:bc: 31:ce:30:83:50:01:dc:59:df:8c:ac:7a:51:6c:0f: 35:a1:85:6c:74:34:7f:7f:dc:7f:84:09:55:ff:15: 1b:1a:74:f2:38:06:e2:1e:ab:01:1b:6f:c0:61:c9: 96:d3:66:e5:e1:83:c9:a9:84:83:3d:23:d6:4a:bd: 29:8e:d8:af:7f:77:98:39:53:8d:89:82:eb:bc:52: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:22:AA:04:36:2A:53:5C:09:41:54:39:4A:E5:E4:D5:EF:D7:44:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0bc957d-e827-353f-9650-48950ead8c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:65:14:44:f4:d7:b8:a8:49:86:a5:bd:2e:c4:41:01:c4:84: ad:0b:f6:48:32:5c:4f:e3:cc:f0:4b:f6:1a:77:d3:46:1f:92: e6:6f:31:b8:a0:c7:1c:bf:37:ca:35:0d:a3:08:b1:29:35:47: a7:80:60:2a:1d:6a:a8:65:8c:bd:51:b9:e4:59:93:16:68:5c: 3b:e3:a0:7f:dc:67:47:c4:4d:60:3b:72:d7:fb:e8:04:c1:02: 6b:99:6a:d9:f9:52:77:9d:f1:eb:06:d7:a2:a6:fe:88:f0:ef: 81:ba:87:0c:b0:5a:03:08:38:3a:4e:8e:8e:51:5b:40:25:54: 76:d1:d8:58:2f:8a:ec:9d:00:41:2b:27:88:a7:ca:24:6d:2f: 15:be:4a:98:f8:c2:c0:16:7f:33:b4:bf:54:dd:ed:93:3f:26: 45:62:6e:cf:ba:10:52:d4:b8:24:d1:1f:3b:36:30:8d:65:dd: 43:e0:10:ff:1e:93:a2:1c:00:fe:7a:2a:c1:2d:63:ea:d1:6f: a5:16:43:58:40:33:b7:59:f5:23:18:80:27:0b:56:99:0b:9a: c9:c1:4d:e3:89:62:2a:d9:79:29:db:c6:8e:1a:b6:3a:b1:e2: c5:89:bc:d2:36:27:28:76:d8:8e:8e:5b:da:03:68:3e:62:4c: 1b:d9:a9:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JisLWFkVGqW9VNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdlOGM1YzUtOTc3YS00ZDEwLTg1ZDktOWU3MTk0YzQ4YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloMArMRf2yCVeMeAoM6tL0ArzHTsizWkHsXt 2ldynM+ocWxarnEYWAl7beXO3UptN8lGGf9+3JHoc1D32Xw0xAK/xocMT59qXFFt ffFi2Z1srPSYFIIluTr+8hPgPo1jIy+GgqtLrhGfIL3psSWsgrTs5od5KKia+2SK CXfqI9mE3PxkrH8Lao8rqK6o2VaAADEK7DLcbDpaPS/0dleWssQkzei6MzjoEiVy lp8uIOKElLwxzjCDUAHcWd+MrHpRbA81oYVsdDR/f9x/hAlV/xUbGnTyOAbiHqsB G2/AYcmW02bl4YPJqYSDPSPWSr0pjtivf3eYOVONiYLrvFJXwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQiqgQ2KlNcCUFUOUrl5NXv10QiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjBiYzk1N2QtZTgyNy0z NTNmLTk2NTAtNDg5NTBlYWQ4YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxll9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJlFET017ioSYalvS7EQQHEhK0L9kgyXE/jzPBL9hp300YfkuZvMbig xxy/N8o1DaMIsSk1R6eAYCodaqhljL1RueRZkxZoXDvjoH/cZ0fETWA7ctf76ATB AmuZatn5Uned8esG16Km/ojw74G6hwywWgMIODpOjo5RW0AlVHbR2FgviuydAEEr J4inyiRtLxW+Spj4wsAWfzO0v1Td7ZM/JkVibs+6EFLUuCTRHzs2MI1l3UPgEP8e k6IcAP56KsEtY+rRb6UWQ1hAM7dZ9SMYgCcLVpkLmsnBTeOJYirZeSnbxo4atjqx 4sWJvNI2Jyh22I6OW9oDaD5iTBvZqe8= -----END CERTIFICATE-----Generated at Wed Sep 30 20:56:06 2026 by rpki-client