$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a09ec38d-87ec-3326-b91c-41dc73841e04.roa File: a09ec38d-87ec-3326-b91c-41dc73841e04.roa (raw, json) Hash identifier: eYKmD6Tn6LZlANoYjpeNIah4nUv2jL+cv8Rl5n567WE= Subject key identifier: 8A:E5:ED:4A:6E:D4:FA:2C:F7:18:50:0A:0E:07:D6:11:2C:8C:88:B7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F411297C398EEDCEE9CADF880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a09ec38d-87ec-3326-b91c-41dc73841e04.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 198.69.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:97:c3:98:ee:dc:ee:9c:ad:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=65a1c3ae-ba8b-46b5-ae12-6d9808bf7346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:8d:d5:91:5e:f8:5b:b2:85:6c:d0:a3:8f: 5d:4c:30:a6:dd:98:b2:05:cd:f1:ed:ef:e7:a2:26: 1e:a5:8f:73:cb:5e:ad:48:db:26:e2:33:d8:fe:a2: ff:ea:1b:a8:dc:1f:71:b1:9e:40:b1:3e:74:ca:5f: fe:75:b7:0a:0f:01:d1:22:6b:55:55:dc:0b:72:6d: c1:09:e1:85:d8:1d:fe:44:f5:1e:10:fa:e5:f6:8c: d2:ec:cb:29:91:29:74:3c:b6:eb:6a:a2:28:60:9f: 98:8a:73:c5:c5:b6:83:68:6a:b1:c9:58:ca:2a:66: b1:85:eb:2d:a5:3d:c9:4a:32:6c:94:4c:04:1e:15: 3f:78:6d:69:cc:28:d2:04:05:38:90:95:39:8f:2a: 53:ad:3c:39:2b:b5:5a:e8:52:3c:f5:90:34:60:57: 85:c0:07:b4:f3:41:ed:03:81:8a:9c:eb:b1:2c:f9: 56:c8:c0:bf:05:08:a8:4d:57:69:e2:9d:1d:96:d8: 1d:0f:da:3d:74:13:67:41:72:47:4b:5e:5c:f7:77: fd:63:98:5b:12:fb:3a:3c:57:99:05:45:06:22:f4: f4:cc:d1:4b:ec:ef:5d:0f:6b:4c:9d:b8:17:a0:88: 88:f4:71:a7:4a:57:be:e7:d0:9b:51:3e:fb:64:d9: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E5:ED:4A:6E:D4:FA:2C:F7:18:50:0A:0E:07:D6:11:2C:8C:88:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a09ec38d-87ec-3326-b91c-41dc73841e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 198.69.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f2:54:a8:ad:1d:b8:44:1f:48:12:66:d8:4e:b2:2f:b2:8c: a3:13:24:d5:0e:64:a6:c0:f5:73:98:4b:9e:62:8d:ef:0b:1d: 00:82:00:ab:69:dd:54:a0:a2:91:b7:be:7e:84:76:9b:ed:bb: 98:93:ac:19:39:a5:17:9b:d6:9e:c1:4a:a6:01:73:03:b5:da: 9a:bf:99:1e:1f:78:49:9c:de:73:14:c9:ed:3c:28:75:22:77: 50:dd:ad:e5:20:63:98:e0:80:b7:f4:67:77:7d:63:27:67:a0: 33:bc:f3:4a:d6:52:4c:a7:fe:bb:9a:5b:26:50:d6:c5:76:0e: 43:08:1b:d3:7c:59:3d:b9:5f:5e:8d:84:8a:b8:40:8c:c3:cc: b8:d3:04:14:9b:89:f1:65:2f:9e:5c:2f:2d:ae:f8:db:13:75: 8b:b1:2a:6e:ad:64:3f:89:2e:f2:f6:a9:a1:d8:fd:4c:3a:cc: b8:49:65:cd:ee:b6:ec:1f:eb:dd:9e:d4:cd:1b:89:cc:4c:c3: 3a:be:d7:b8:22:88:d8:9d:60:93:37:03:5c:8f:a2:4e:06:dc: b4:06:09:cd:fd:53:86:d5:9a:38:95:4d:ee:21:05:24:4e:be: 6b:00:b0:f4:3c:fd:12:ba:88:e4:fe:06:48:fa:16:b9:99:46: c4:8c:96:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEpfDmO7c7pyt+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NjVhMWMzYWUtYmE4Yi00NmI1LWFlMTItNmQ5ODA4YmY3MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ON1ZFe+FuyhWzQo49dTDCm3ZiyBc3x7e/n oiYepY9zy16tSNsm4jPY/qL/6huo3B9xsZ5AsT50yl/+dbcKDwHRImtVVdwLcm3B CeGF2B3+RPUeEPrl9ozS7MspkSl0PLbraqIoYJ+YinPFxbaDaGqxyVjKKmaxhest pT3JSjJslEwEHhU/eG1pzCjSBAU4kJU5jypTrTw5K7Va6FI89ZA0YFeFwAe080Ht A4GKnOuxLPlWyMC/BQioTVdp4p0dltgdD9o9dBNnQXJHS15c93f9Y5hbEvs6PFeZ BUUGIvT0zNFL7O9dD2tMnbgXoIiI9HGnSle+59CbUT77ZNkKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrl7Upu1Pos9xhQCg4H1hEsjIi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTA5ZWMzOGQtODdlYy0z MzI2LWI5MWMtNDFkYzczODQxZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxkUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnyVKitHbhEH0gSZthOsi+yjKMTJNUOZKbA9XOYS55ije8LHQCCAKtp 3VSgopG3vn6Edpvtu5iTrBk5pReb1p7BSqYBcwO12pq/mR4feEmc3nMUye08KHUi d1DdreUgY5jggLf0Z3d9YydnoDO880rWUkyn/ruaWyZQ1sV2DkMIG9N8WT25X16N hIq4QIzDzLjTBBSbifFlL55cLy2u+NsTdYuxKm6tZD+JLvL2qaHY/Uw6zLhJZc3u tuwf692e1M0bicxMwzq+17giiNidYJM3A1yPok4G3LQGCc39U4bVmjiVTe4hBSRO vmsAsPQ8/RK6iOT+Bkj6FrmZRsSMlls= -----END CERTIFICATE-----Generated at Wed Sep 23 12:58:44 2026 by rpki-client