$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa File: ed318ff3-2835-3288-a505-9e112c93201b.roa (raw, json) Hash identifier: /0PrXROLNXUn2iy9pGBaiHHSW6YLXCrn8LTDqdLmQAw= Subject key identifier: B1:C8:B1:9C:15:54:BD:C2:68:9E:EB:30:29:88:12:29:CA:1E:38:BA Certificate issuer: /CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Certificate serial: 010D0C9F4328584F49754C1D4EA2E92A5ED25980 Authority key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396425 IP address blocks: 128.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:4c:1d:4e:a2:e9:2a:5e:d2:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae32c036-3ade-4ffd-be9a-cb58305be027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:8b:33:47:bc:e5:ec:04:75:c9:bd:73:2f: 3f:40:68:da:f9:1e:d8:a1:cd:c6:12:1d:2b:9a:c1: 14:1e:53:b1:0c:24:42:b5:61:36:80:a3:bc:28:29: ea:93:a4:a4:c7:30:51:e1:d9:42:93:ee:0b:f0:41: fe:d2:a3:cf:6f:d9:8b:95:74:38:82:60:43:54:d0: a8:6e:bb:65:fd:ef:7e:24:b6:b3:fb:3d:19:f9:75: 4a:ba:db:41:9a:7d:f7:9e:64:28:9a:9b:72:cd:51: a4:82:2e:07:4f:22:ce:ff:38:eb:5e:d7:f0:ff:30: da:e7:a3:9c:69:67:e4:8e:83:d2:d2:38:2f:e3:5e: e9:bd:87:29:f1:d1:a1:72:e8:bf:11:09:a6:31:57: 48:e5:f7:01:4b:17:5e:a3:4f:f9:79:94:1d:ab:a3: 09:2e:4a:65:76:b4:e6:73:81:4f:45:1f:98:b9:e6: 46:01:d1:bf:3c:7f:7e:de:63:5e:4b:c7:54:b9:50: bb:18:e4:da:1a:4a:17:75:bc:00:d0:c9:82:9a:8a: 0a:7e:09:27:3e:13:47:39:3d:8f:91:34:91:b4:a8: e4:0a:f9:06:d8:cc:a2:7d:bd:b6:5d:84:0e:55:88: a8:ee:09:e1:f6:ab:4f:7f:d7:c2:35:aa:0f:fd:eb: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C8:B1:9C:15:54:BD:C2:68:9E:EB:30:29:88:12:29:CA:1E:38:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl X509v3 Authority Key Identifier: keyid:97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer sbgp-ipAddrBlock: critical IPv4: 128.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:62:37:78:3d:72:d3:30:3f:db:9f:d4:58:95:29:aa:ba:53: c8:78:73:5a:38:1e:bb:a6:04:7d:4e:c9:dc:92:4a:b0:4a:15: 22:98:a7:23:7d:2e:f7:60:7a:e0:74:8e:c5:59:52:50:7a:ee: db:6b:e6:58:67:49:55:e4:72:ce:6f:fa:a8:29:f5:80:3f:86: dd:2f:aa:c4:70:26:b1:36:75:b7:91:13:1f:5d:e3:e0:db:78: 43:e6:a9:b9:e3:22:88:f9:ac:f7:f5:7c:a9:e5:2c:8c:f6:96: f6:2c:2a:03:98:51:de:b0:c6:29:c7:dc:4b:b8:53:ee:ba:34: 08:7a:50:aa:8a:e8:a2:a0:a9:ca:da:98:0b:0f:33:e4:15:a2: 56:49:99:d8:c0:ab:26:4f:c2:64:9c:0d:4d:71:75:57:93:d1: 34:00:60:7f:43:88:be:70:68:3d:d2:a8:ba:3e:4c:19:15:e9: a1:99:a6:92:67:ab:b4:88:06:89:dc:64:4e:bd:32:d6:ef:f7: 9e:24:90:e0:3f:be:9a:c2:cc:27:5e:89:01:96:59:29:31:38: 6b:90:8f:0c:a7:b2:2f:ff:3e:aa:b3:df:04:a2:97:83:6e:1f: a9:58:eb:a7:28:d7:f6:42:b6:0a:ab:99:db:73:94:21:90:7d: cd:35:22:e0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdUwdTqLpKl7SWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNjkzNGUtMGJiZi00MzljLWExMTUtNGU2ZjRhOGQ1 M2EyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWUzMmMwMzYtM2FkZS00ZmZkLWJlOWEtY2I1ODMwNWJlMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGuLM0e85ewEdcm9cy8/QGja+R7Yoc3GEh0r msEUHlOxDCRCtWE2gKO8KCnqk6SkxzBR4dlCk+4L8EH+0qPPb9mLlXQ4gmBDVNCo brtl/e9+JLaz+z0Z+XVKuttBmn33nmQomptyzVGkgi4HTyLO/zjrXtfw/zDa56Oc aWfkjoPS0jgv417pvYcp8dGhcui/EQmmMVdI5fcBSxdeo0/5eZQdq6MJLkpldrTm c4FPRR+YueZGAdG/PH9+3mNeS8dUuVC7GOTaGkoXdbwA0MmCmooKfgknPhNHOT2P kTSRtKjkCvkG2Myifb22XYQOVYio7gnh9qtPf9fCNaoP/euwOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLHIsZwVVL3CaJ7rMCmIEinKHji6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2 OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4ZDUzYTIvZWQzMThmZjMtMjgzNS0z Mjg4LWE1MDUtOWUxMTJjOTMyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWQyNjkzNGUtMGJiZi00MzljLWEx MTUtNGU2ZjRhOGQ1M2EyLzFkMjY5MzRlLTBiYmYtNDM5Yy1hMTE1LTRlNmY0YThk NTNhMi5jcmwwHwYDVR0jBBgwFoAUl3QYBBX9COHAfkms6zr4PoGpoMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZm NGE4ZDUzYTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgMYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKmI3eD1y0zA/25/UWJUpqrpTyHhzWjgeu6YEfU7J3JJKsEoVIpinI30u 92B64HSOxVlSUHru22vmWGdJVeRyzm/6qCn1gD+G3S+qxHAmsTZ1t5ETH13j4Nt4 Q+apueMiiPms9/V8qeUsjPaW9iwqA5hR3rDGKcfcS7hT7ro0CHpQqorooqCpytqY Cw8z5BWiVkmZ2MCrJk/CZJwNTXF1V5PRNABgf0OIvnBoPdKouj5MGRXpoZmmkmer tIgGidxkTr0y1u/3niSQ4D++msLMJ16JAZZZKTE4a5CPDKeyL/8+qrPfBKKXg24f qVjrpyjX9kK2CquZ23OUIZB9zTUi4A== -----END CERTIFICATE-----Generated at Sat Sep 26 07:49:36 2026 by rpki-client