$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa File: dfec57e8-4be0-3a83-b962-789595b0a605.roa (raw, json) Hash identifier: QdkE5TyuwOb8QO/IHWzHgZ7jXxZSWAUKcucV+xPJdj4= Subject key identifier: 9E:AA:E2:B4:D0:8F:FD:06:2D:FE:2E:5A:00:23:E1:9F:15:E7:C2:A6 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584F549D5555006F940E232FFF60 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 22987 IP address blocks: 198.52.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:55:55:00:6f:94:0e:23:2f:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=dc788a8f-22e0-4a4f-b668-8d114cd6930d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:4d:3f:c7:56:23:3d:12:32:a6:1b:b9:66: 20:c2:56:96:0d:f8:2d:c9:5d:de:9d:73:de:ff:19: fa:47:e2:7f:af:95:0c:9c:3b:77:bd:10:ff:fe:50: 6b:62:42:a4:d7:53:9c:7a:2f:1b:10:31:b2:12:1d: 54:de:e7:b0:cf:ec:f2:e5:1c:a4:0d:28:b1:ac:dd: 47:6e:ef:cd:a4:b2:be:36:e2:5a:14:76:d9:d8:d3: 73:c4:12:d5:dd:09:fe:c1:1a:da:cd:04:03:8d:38: 13:21:86:84:a0:eb:1d:17:1c:06:21:59:fa:0f:b2: 10:c2:85:fc:28:15:9d:12:86:fd:37:d0:d0:e9:df: 93:57:2c:0e:cf:a7:f7:f3:a0:f5:45:3a:4e:f1:a0: 69:63:c8:eb:d4:a6:d3:ea:ad:e1:9a:d8:66:94:a6: cb:2f:b3:f7:4e:1f:fd:73:fa:74:25:a2:38:a8:6b: 08:a8:d2:e0:8b:09:ea:53:7e:c4:c7:6e:d4:67:f0: e5:9b:75:30:fd:6b:7e:72:49:c1:c4:0b:e0:ac:f2: e7:d6:2e:32:62:75:ab:37:4b:4b:95:8d:88:ea:80: 46:e1:11:2e:f1:12:bd:a7:3a:94:fe:15:e8:c4:12: 27:0c:b1:4a:16:a9:0f:17:cd:dd:e0:2a:76:b1:0a: ea:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AA:E2:B4:D0:8F:FD:06:2D:FE:2E:5A:00:23:E1:9F:15:E7:C2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 198.52.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:16:cb:d5:e2:90:18:1c:6f:87:fd:45:a8:77:31:36:b6:87: 3c:6c:a5:d6:2e:46:4b:85:32:14:5a:bd:90:64:5e:87:11:f2: 1a:7c:3a:90:e9:15:27:6e:9f:69:a7:53:30:9a:e1:02:be:82: f7:4e:a5:7e:d9:1f:72:06:96:99:86:6c:62:eb:e5:f6:68:c0: 1a:62:d0:f9:a1:93:be:08:34:73:ce:37:6a:5e:2f:93:4c:81: 06:d3:eb:98:29:d7:d2:22:da:0c:60:08:40:d9:04:8c:c9:80: 8e:b6:a3:c3:b4:52:64:d2:84:42:47:68:5e:9d:1c:83:e7:92: 34:1e:d8:30:9b:e9:88:05:e2:b9:82:b9:93:ad:d6:60:b1:6c: 1d:0d:1f:3c:6c:d3:f1:af:00:b1:2e:b1:eb:30:6b:4b:6e:d8: 79:07:2f:e1:8e:3e:70:d5:e2:15:f8:85:ea:5c:0c:d0:ce:95: f3:d2:74:27:70:22:ff:7d:b9:88:77:cb:e0:69:09:8d:e0:9c: 2c:65:06:5e:13:7c:87:e7:73:d4:7f:29:0c:d8:cc:a7:d2:82: e8:fa:5f:38:25:f0:f1:3e:ee:79:7d:e3:ce:13:5b:50:7b:3e: bb:e2:d2:aa:76:86:d3:9d:86:2a:0a:c6:3d:85:73:ec:6c:2e: 13:af:ee:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVVVAG+UDiMv/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGM3ODhhOGYtMjJlMC00YTRmLWI2NjgtOGQxMTRjZDY5MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO9NP8dWIz0SMqYbuWYgwlaWDfgtyV3enXPe /xn6R+J/r5UMnDt3vRD//lBrYkKk11Ocei8bEDGyEh1U3uewz+zy5RykDSixrN1H bu/NpLK+NuJaFHbZ2NNzxBLV3Qn+wRrazQQDjTgTIYaEoOsdFxwGIVn6D7IQwoX8 KBWdEob9N9DQ6d+TVywOz6f386D1RTpO8aBpY8jr1KbT6q3hmthmlKbLL7P3Th/9 c/p0JaI4qGsIqNLgiwnqU37Ex27UZ/Dlm3Uw/Wt+cknBxAvgrPLn1i4yYnWrN0tL lY2I6oBG4REu8RK9pzqU/hXoxBInDLFKFqkPF83d4Cp2sQrqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6q4rTQj/0GLf4uWgAj4Z8V58KmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZGZlYzU3ZTgtNGJlMC0z YTgzLWI5NjItNzg5NTk1YjBhNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYWy9XikBgcb4f9Rah3MTa2hzxspdYuRkuFMhRavZBkXocR8hp8OpDp FSdun2mnUzCa4QK+gvdOpX7ZH3IGlpmGbGLr5fZowBpi0Pmhk74INHPON2peL5NM gQbT65gp19Ii2gxgCEDZBIzJgI62o8O0UmTShEJHaF6dHIPnkjQe2DCb6YgF4rmC uZOt1mCxbB0NHzxs0/GvALEuseswa0tu2HkHL+GOPnDV4hX4hepcDNDOlfPSdCdw Iv99uYh3y+BpCY3gnCxlBl4TfIfnc9R/KQzYzKfSguj6Xzgl8PE+7nl9484TW1B7 Prvi0qp2htOdhioKxj2Fc+xsLhOv7hM= -----END CERTIFICATE-----Generated at Tue Sep 29 19:45:19 2026 by rpki-client