$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa File: 41de201d-f0c9-3b01-828a-2888d2923ae3.roa (raw, json) Hash identifier: 1qvBy52ISRiS8hp5BHCGspOAKYmeoXEWIG7b1EpvVmU= Subject key identifier: 98:94:2D:E7:13:A2:C7:A4:EA:21:6B:01:5C:AA:E7:18:E8:07:68:83 Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584F2D87C49E2431AB23868D6C80 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 55101 IP address blocks: 198.97.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c4:9e:24:31:ab:23:86:8d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=ce732c00-8d6b-4011-a902-1f5abb0f54f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:45:33:4f:95:14:21:b2:8c:0b:4b:e1:f3: 64:5b:ce:21:0b:ef:d3:0c:2e:69:fc:75:5a:a2:16: a8:f5:4c:d9:a8:b9:cb:f5:76:74:82:10:fe:9e:fa: 61:70:b6:a3:ae:4f:ee:91:a4:3c:0f:bb:c0:a4:2b: ee:71:7a:34:81:fd:48:66:ca:23:f1:87:fd:38:60: 6c:1a:28:25:99:19:48:04:49:26:7d:73:b0:43:58: f5:47:e9:32:32:5e:07:54:2e:42:1a:4d:72:fd:ef: 5f:90:fa:96:bb:cc:ff:34:18:67:0f:a3:cf:cd:5f: 7e:28:3f:ab:06:3a:78:41:67:1f:9d:2d:d8:be:91: 50:29:59:ff:20:1e:2d:79:89:24:8a:92:56:55:80: 42:2a:8a:c8:f8:15:22:fb:e2:ba:6c:28:23:21:dd: 9a:7f:b3:78:ae:53:6a:45:5c:4b:c3:40:57:0a:30: bf:58:af:ea:01:95:77:d1:59:73:2f:1d:b1:db:1c: a2:9f:2a:f9:0b:7d:7c:40:6d:bd:5a:da:6e:18:2c: 18:0b:fb:b6:d4:a5:b6:ce:b7:9d:6d:6f:5d:77:be: 54:80:30:e9:ef:31:01:38:c2:14:a8:67:b3:e4:10: 5e:4e:3d:e2:0c:e5:1b:b9:9f:9b:03:be:17:58:d4: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:94:2D:E7:13:A2:C7:A4:EA:21:6B:01:5C:AA:E7:18:E8:07:68:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:cb:95:ff:28:c5:65:fc:fb:16:66:b6:82:bd:fa:69:02:df: 79:ef:22:c5:d2:8e:6f:45:5c:59:6d:90:1b:be:7a:e9:31:24: 3f:0d:51:cc:b6:e6:85:50:4a:a5:e4:20:f0:f4:2f:64:cd:e5: 2e:17:d9:1c:ff:85:59:29:e4:52:ab:b2:55:0e:50:4d:f7:d6: ab:20:c2:11:1f:09:1c:c7:a0:15:28:d3:a6:c3:d9:ff:5c:d2: ba:67:09:c9:4d:37:b7:52:b5:80:7c:75:4e:33:29:3a:fe:c8: 20:21:b7:d5:75:ab:a9:17:af:c8:f8:c2:b7:da:8a:b5:38:a0: 25:23:47:84:b9:fd:20:16:45:bd:72:cf:65:bf:c1:51:b2:86: 69:90:f8:ab:c9:40:1d:ed:c6:16:30:a7:0e:34:c9:a4:b0:35: 2b:47:5a:35:bc:c1:66:fa:40:ee:d6:ef:ce:72:b4:67:9c:4f: 60:ca:c8:ab:a6:81:92:d0:29:99:13:6f:c5:a9:ed:91:a7:4f: c7:81:4c:ab:b7:8e:e5:16:90:8f:f9:05:3b:a5:1d:06:dd:b8: 35:e3:e4:d0:81:30:6a:f7:4b:02:e1:ae:17:63:8d:e5:d0:6b: 59:2a:ec:4b:f6:8f:04:ff:e2:5e:aa:99:4e:3c:35:91:ec:7f: 85:5a:d3:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8SeJDGrI4aNbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U3MzJjMDAtOGQ2Yi00MDExLWE5MDItMWY1YWJiMGY1NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZFFM0+VFCGyjAtL4fNkW84hC+/TDC5p/HVa ohao9UzZqLnL9XZ0ghD+nvphcLajrk/ukaQ8D7vApCvucXo0gf1IZsoj8Yf9OGBs GiglmRlIBEkmfXOwQ1j1R+kyMl4HVC5CGk1y/e9fkPqWu8z/NBhnD6PPzV9+KD+r Bjp4QWcfnS3YvpFQKVn/IB4teYkkipJWVYBCKorI+BUi++K6bCgjId2af7N4rlNq RVxLw0BXCjC/WK/qAZV30VlzLx2x2xyinyr5C318QG29WtpuGCwYC/u21KW2zred bW9dd75UgDDp7zEBOMIUqGez5BBeTj3iDOUbuZ+bA74XWNQ2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiULecTosek6iFrAVyq5xjoB2iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvNDFkZTIwMWQtZjBjOS0z YjAxLTgyOGEtMjg4OGQyOTIzYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANjLlf8oxWX8+xZmtoK9+mkC33nvIsXSjm9FXFltkBu+eukxJD8NUcy2 5oVQSqXkIPD0L2TN5S4X2Rz/hVkp5FKrslUOUE331qsgwhEfCRzHoBUo06bD2f9c 0rpnCclNN7dStYB8dU4zKTr+yCAht9V1q6kXr8j4wrfairU4oCUjR4S5/SAWRb1y z2W/wVGyhmmQ+KvJQB3txhYwpw40yaSwNStHWjW8wWb6QO7W785ytGecT2DKyKum gZLQKZkTb8Wp7ZGnT8eBTKu3juUWkI/5BTulHQbduDXj5NCBMGr3SwLhrhdjjeXQ a1kq7Ev2jwT/4l6qmU48NZHsf4Va06Y= -----END CERTIFICATE-----Generated at Mon Sep 28 10:33:59 2026 by rpki-client