$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa File: 3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa (raw, json) Hash identifier: jnSnNx3cvlR+mzMuLLfuNhAnTSZxoHdnB7fDgWL+yZM= Subject key identifier: 28:0E:1D:42:62:0D:1F:9A:B6:61:39:23:45:FE:C5:AF:FB:FB:1D:E2 Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584F3A17DBDE0DF943D64B2A97E0 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 13538 IP address blocks: 198.32.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:db:de:0d:f9:43:d6:4b:2a:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=27d1f495-f1f3-494b-ba9b-ed39788159aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:7d:59:ab:00:20:a7:c9:02:83:d3:15:d6: 1a:b8:43:d3:45:65:ad:34:5f:1c:78:bb:cb:80:57: 23:34:c2:3c:74:8d:eb:64:17:11:4d:6f:b8:e6:3d: 52:7d:50:00:ac:d7:a4:e4:33:0f:36:2a:14:4d:a4: b8:0b:e9:fb:a1:36:cd:c2:a3:8d:f6:97:d9:56:27: eb:63:3d:26:a0:78:85:cd:c8:41:b7:7a:7b:e7:07: d3:cb:89:b2:f0:f0:6c:d6:7e:63:75:25:4d:2a:db: 9b:74:53:a4:fc:fe:7f:e1:6e:25:c0:78:82:1e:48: e6:ba:9c:b8:f8:93:a6:be:54:3f:69:4e:63:47:b7: d6:c9:50:24:39:e7:9e:43:f5:69:73:35:67:40:f4: a9:2d:ad:16:2a:f3:c8:57:cd:b2:ec:97:5f:10:79: 4f:3b:18:e5:6a:5e:5b:e0:21:0c:df:61:82:76:14: c3:ed:e5:3a:96:db:a9:9d:6c:6b:2d:d3:19:3d:44: 85:6a:6d:c9:7c:70:ec:0b:da:51:a1:b0:cf:5c:e7: f8:67:4b:26:66:be:69:81:cf:6d:6a:4c:1b:3f:b2: 93:10:b0:6c:96:da:4c:89:8e:0f:d1:be:da:04:30: 18:74:3d:b8:86:14:ab:3c:59:33:78:71:50:1d:4e: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:1D:42:62:0D:1F:9A:B6:61:39:23:45:FE:C5:AF:FB:FB:1D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv4: 198.32.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c0:91:29:b3:8b:de:11:e0:e4:c6:5c:69:33:0a:62:04:b1: 3f:69:fd:59:43:35:93:e3:60:2a:d0:e9:5d:99:b9:7f:80:90: 82:df:7b:e2:5e:fc:47:80:d0:22:51:d1:32:5e:3b:5c:10:8b: 14:3f:2e:96:fd:3c:35:ba:8c:fb:04:48:2d:db:25:45:83:26: 30:d8:40:c3:22:36:59:28:ad:29:7b:b8:4a:53:78:a5:ca:07: 0b:20:13:58:c1:45:a6:42:a1:a8:e1:de:59:61:71:a5:96:07: 59:41:5a:21:6e:cd:7a:26:12:53:a0:ad:40:24:95:14:50:3b: 87:3c:96:1e:98:65:c3:d8:1f:70:99:38:d2:75:cf:05:e3:f4: 60:7f:ee:55:b6:ca:65:ad:1b:cf:a7:eb:20:8e:fe:83:f9:93: 01:19:6e:09:00:e8:a8:45:de:05:04:1b:eb:13:19:32:46:14: 8d:48:bf:1a:97:89:e5:07:80:d9:3a:4d:b0:53:24:b5:ab:a0: e2:7b:c9:72:be:64:0e:90:d8:f7:34:d7:a8:99:76:4a:a3:ae: 81:22:f9:a1:4e:6c:1a:2a:84:18:ce:5d:b1:07:7e:57:5c:9c: 94:8a:a1:5d:99:9d:1b:36:0e:a7:67:31:88:c5:6f:f5:33:0a: 8e:b4:fd:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9veDflD1ksql+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MjdkMWY0OTUtZjFmMy00OTRiLWJhOWItZWQzOTc4ODE1OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE59WasAIKfJAoPTFdYauEPTRWWtNF8ceLvL gFcjNMI8dI3rZBcRTW+45j1SfVAArNek5DMPNioUTaS4C+n7oTbNwqON9pfZVifr Yz0moHiFzchBt3p75wfTy4my8PBs1n5jdSVNKtubdFOk/P5/4W4lwHiCHkjmupy4 +JOmvlQ/aU5jR7fWyVAkOeeeQ/VpczVnQPSpLa0WKvPIV82y7JdfEHlPOxjlal5b 4CEM32GCdhTD7eU6ltupnWxrLdMZPUSFam3JfHDsC9pRobDPXOf4Z0smZr5pgc9t akwbP7KTELBsltpMiY4P0b7aBDAYdD24hhSrPFkzeHFQHU7J9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgOHUJiDR+atmE5I0X+xa/7+x3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvM2M2NTRjZDAtZmU2Zi0z ODhmLWFkOGEtZTdkZDA1NzZjMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvAkSmzi94R4OTGXGkzCmIEsT9p/VlDNZPjYCrQ6V2ZuX+AkILfe+Je /EeA0CJR0TJeO1wQixQ/Lpb9PDW6jPsESC3bJUWDJjDYQMMiNlkorSl7uEpTeKXK BwsgE1jBRaZCoajh3llhcaWWB1lBWiFuzXomElOgrUAklRRQO4c8lh6YZcPYH3CZ ONJ1zwXj9GB/7lW2ymWtG8+n6yCO/oP5kwEZbgkA6KhF3gUEG+sTGTJGFI1IvxqX ieUHgNk6TbBTJLWroOJ7yXK+ZA6Q2Pc016iZdkqjroEi+aFObBoqhBjOXbEHfldc nJSKoV2ZnRs2DqdnMYjFb/UzCo60/es= -----END CERTIFICATE-----Generated at Sun Sep 27 19:22:00 2026 by rpki-client