$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa File: 7d504fa1-eb21-3521-9c74-4413e34563a4.roa (raw, json) Hash identifier: xbCqu9OoNyW9YOAowFex7Q7miwLm9HIgpj58i6GSlYo= Subject key identifier: 6F:FF:A7:B9:1A:43:21:E4:8C:DF:8A:C3:80:2D:BD:CC:FB:24:04:F3 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F4972CA58E7FFB897967D1180 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400666 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ca:58:e7:ff:b8:97:96:7d:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f713f88-238b-4ba2-938f-6c5dc8cd8f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:e4:bc:91:e4:a3:e8:c4:b1:66:8c:c6:dd: c0:8d:5d:20:d0:5e:55:0a:0e:ea:ef:2b:db:60:6a: 83:06:7f:c5:e7:70:e7:57:9f:86:24:c1:83:27:e6: a5:13:60:03:26:ab:b1:73:3b:70:e0:7c:8d:53:00: d6:a0:18:2b:98:fb:be:8a:5b:f6:63:11:d3:f5:b6: b2:6f:a6:00:68:bc:8d:b3:10:cd:40:cd:19:b5:c4: 7c:85:c7:2c:f6:68:54:24:ac:9d:4a:8c:95:5a:70: 91:74:ba:e1:39:6f:2b:56:f2:ea:33:fb:87:d2:52: 98:24:9c:c6:6a:77:bc:5f:e2:be:cc:ee:e5:d3:4e: 27:19:a6:68:08:4f:a4:65:c0:28:41:f0:21:8a:2b: 1b:0b:9e:20:ca:40:14:2b:41:b8:a7:76:cc:7f:d7: 0c:67:91:a4:17:3d:42:de:a4:ac:7d:9d:31:11:2e: f4:10:db:32:c9:99:5d:8c:7e:12:d1:e2:23:ef:24: 20:4c:3a:8c:03:d1:51:d8:59:a6:f0:eb:3a:87:29: 1b:51:14:27:cb:aa:b3:ee:da:f4:d0:e9:be:0e:87: e7:1a:59:81:d3:ea:12:42:3e:48:52:76:a4:5f:38: 37:10:f6:5c:69:c7:09:8e:8f:b9:cc:fb:df:25:ec: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FF:A7:B9:1A:43:21:E4:8C:DF:8A:C3:80:2D:BD:CC:FB:24:04:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d1:bd:c9:84:d5:96:a9:00:28:55:01:73:ea:c4:38:a3:7c: ff:bb:bb:b9:8f:fb:1f:8f:21:ff:e5:dd:04:2a:67:27:34:1c: d1:20:4f:4b:76:73:17:7b:57:86:78:53:5c:fe:7b:cd:a8:9e: b2:27:21:98:05:63:17:b0:86:76:f2:e1:20:81:d8:01:8f:2b: 25:23:33:0f:b5:5c:92:8a:62:b0:bf:80:94:dd:88:d3:ae:a7: 6a:6e:97:ab:bf:16:97:33:da:2d:42:1c:f3:1e:a3:db:3c:3b: 68:c5:6a:b9:53:aa:17:78:54:0b:00:8f:61:fc:f7:8f:73:d6: e8:38:02:59:3a:9d:23:4a:5c:05:29:5e:cd:45:a0:54:41:eb: b7:55:af:20:b3:7d:7f:0c:27:87:1c:ee:01:e4:57:8f:ed:1c: eb:48:d3:1e:6a:59:15:6a:12:90:43:cf:50:c8:bc:83:eb:38: 5b:d9:26:9a:e9:a7:85:30:6f:0b:b9:e2:fe:93:61:fc:74:9e: dc:19:a4:8f:f4:db:59:e4:01:84:31:91:e2:d0:32:6d:9c:10: 51:9a:fb:37:7a:c5:9c:e5:b2:31:93:dd:fc:bb:ca:3c:0e:95: bb:04:f9:cb:2d:88:77:42:6d:a2:e8:f9:e0:fd:34:a2:30:b1: 62:0a:95:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcspY5/+4l5Z9EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y3MTNmODgtMjM4Yi00YmEyLTkzOGYtNmM1ZGM4Y2Q4ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrjkvJHko+jEsWaMxt3AjV0g0F5VCg7q7yvb YGqDBn/F53DnV5+GJMGDJ+alE2ADJquxcztw4HyNUwDWoBgrmPu+ilv2YxHT9bay b6YAaLyNsxDNQM0ZtcR8hccs9mhUJKydSoyVWnCRdLrhOW8rVvLqM/uH0lKYJJzG ane8X+K+zO7l004nGaZoCE+kZcAoQfAhiisbC54gykAUK0G4p3bMf9cMZ5GkFz1C 3qSsfZ0xES70ENsyyZldjH4S0eIj7yQgTDqMA9FR2Fmm8Os6hykbURQny6qz7tr0 0Om+DofnGlmB0+oSQj5IUnakXzg3EPZcaccJjo+5zPvfJeyq2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG//p7kaQyHkjN+Kw4Atvcz7JATzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvN2Q1MDRmYTEtZWIyMS0z NTIxLTljNzQtNDQxM2UzNDU2M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7RvcmE1ZapAChVAXPqxDijfP+7u7mP+x+PIf/l3QQqZyc0HNEgT0t2 cxd7V4Z4U1z+e82onrInIZgFYxewhnby4SCB2AGPKyUjMw+1XJKKYrC/gJTdiNOu p2pul6u/Fpcz2i1CHPMeo9s8O2jFarlTqhd4VAsAj2H8949z1ug4Alk6nSNKXAUp Xs1FoFRB67dVryCzfX8MJ4cc7gHkV4/tHOtI0x5qWRVqEpBDz1DIvIPrOFvZJprp p4Uwbwu54v6TYfx0ntwZpI/021nkAYQxkeLQMm2cEFGa+zd6xZzlsjGT3fy7yjwO lbsE+cstiHdCbaLo+eD9NKIwsWIKlRU= -----END CERTIFICATE-----Generated at Sun Oct 4 05:58:32 2026 by rpki-client