$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/887410aa-f238-321d-b685-4dc0f3986686.roa File: 887410aa-f238-321d-b685-4dc0f3986686.roa (raw, json) Hash identifier: /KSGrEVuAXrNXuILlJhwjvjAvMtnRH8DBi8C75jAIj4= Subject key identifier: 3C:75:5C:12:C0:9C:CF:86:25:5A:0D:AE:6E:A8:51:82:8E:A7:D0:94 Certificate issuer: /CN=533262a8-b69a-4f2d-9dc6-57837d45247d Certificate serial: 010D0C9F4328584F4973687D86043E0AF7C25860 Authority key identifier: 5F:92:6E:54:CC:2A:87:FF:E4:48:B3:FE:19:12:7F:0D:41:31:85:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/887410aa-f238-321d-b685-4dc0f3986686.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23005 IP address blocks: 198.161.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/533262a8-b69a-4f2d-9dc6-57837d45247d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/533262a8-b69a-4f2d-9dc6-57837d45247d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:68:7d:86:04:3e:0a:f7:c2:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533262a8-b69a-4f2d-9dc6-57837d45247d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c8b1425-6f5e-4d85-821a-e83f63f8ad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:54:aa:d1:7b:fd:d4:1f:39:1a:e8:09:55: a3:51:8b:a6:b7:88:92:fe:70:3d:7b:14:8b:9b:f3: 4d:e4:76:35:5f:8f:a2:e1:1c:e3:40:3b:7e:89:55: df:a4:d4:a5:54:c8:cf:e3:89:6d:82:1c:23:ee:10: 12:00:d9:27:04:ff:c2:81:61:3e:ad:06:cf:79:9f: 05:3c:96:ad:88:05:8d:6b:83:ce:4a:79:2c:6d:a4: 3a:32:21:00:12:5d:90:46:b6:c0:3a:a4:60:8a:42: b9:0b:df:aa:9b:ee:9c:48:00:5a:1e:b6:5b:05:76: 38:e0:9f:47:ad:94:ce:c3:d7:78:3c:50:5d:c4:79: e0:d0:d2:84:da:3f:38:0b:b4:ee:3c:0e:7f:73:ee: 2d:53:f6:d7:d2:74:33:bb:78:53:1c:36:42:bf:93: 5c:64:c1:08:d7:b3:fb:74:23:31:c8:42:c6:f7:4d: e4:91:5d:df:75:62:1b:a1:ca:f2:e3:5c:d3:b9:bb: 5d:aa:48:e2:12:82:81:59:8e:f4:cb:39:7e:df:ac: c8:65:05:19:f5:b0:d4:51:5f:8e:44:c4:4f:cb:1f: c2:b9:36:42:6b:90:d4:bf:48:2c:ae:2e:64:12:78: be:00:f4:47:08:87:1d:7e:9b:de:40:ac:33:cc:97: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:75:5C:12:C0:9C:CF:86:25:5A:0D:AE:6E:A8:51:82:8E:A7:D0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/887410aa-f238-321d-b685-4dc0f3986686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/533262a8-b69a-4f2d-9dc6-57837d45247d.crl X509v3 Authority Key Identifier: keyid:5F:92:6E:54:CC:2A:87:FF:E4:48:B3:FE:19:12:7F:0D:41:31:85:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:db:00:ea:e5:21:9b:a6:32:63:fd:39:ad:f8:e7:5c:dd:42: 2f:ea:5a:04:93:b7:19:b8:e3:0c:58:b0:7f:a5:01:d7:a2:be: bf:26:13:c4:16:54:41:77:ab:fd:23:29:d8:67:f3:b6:55:63: 2d:43:ad:1a:61:6c:18:f5:fc:0b:05:45:fd:d3:33:34:e8:93: b3:9a:4e:b5:66:77:07:16:f7:6b:1c:87:be:c9:e1:d8:bf:0d: db:e1:d5:d8:8b:20:4a:6a:af:41:a0:90:a4:21:06:e9:c4:33: 45:52:4d:e3:cd:72:46:af:ff:e2:a8:f7:a3:ea:1a:51:28:78: 90:cc:10:c1:df:8e:61:21:16:52:be:b8:b7:4e:e4:06:c8:d5: f0:7b:1d:22:74:16:fe:ee:4f:bc:19:d7:a7:23:10:07:ee:22: c5:fb:94:37:b0:9e:9a:fa:09:95:ed:d4:1f:20:ab:ab:7d:dd: cf:e4:45:bc:d1:83:1e:33:3b:a8:17:f8:d2:3f:74:f0:a2:b2: da:39:7d:4d:5d:b4:50:44:e4:58:e6:b0:3c:27:7a:ac:7c:0e: 90:5d:cd:7e:17:f3:e8:d2:30:0e:18:29:e2:42:8b:d2:0c:8d: af:0f:a7:cf:2c:c7:3f:91:36:04:c7:d0:b0:8a:d6:9f:2b:79: 6b:d1:b7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2h9hgQ+CvfCWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzMjYyYTgtYjY5YS00ZjJkLTlkYzYtNTc4MzdkNDUy NDdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmM4YjE0MjUtNmY1ZS00ZDg1LTgyMWEtZTgzZjYzZjhhZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/lUqtF7/dQfORroCVWjUYumt4iS/nA9exSL m/NN5HY1X4+i4RzjQDt+iVXfpNSlVMjP44ltghwj7hASANknBP/CgWE+rQbPeZ8F PJatiAWNa4POSnksbaQ6MiEAEl2QRrbAOqRgikK5C9+qm+6cSABaHrZbBXY44J9H rZTOw9d4PFBdxHng0NKE2j84C7TuPA5/c+4tU/bX0nQzu3hTHDZCv5NcZMEI17P7 dCMxyELG903kkV3fdWIbocry41zTubtdqkjiEoKBWY70yzl+36zIZQUZ9bDUUV+O RMRPyx/CuTZCa5DUv0gsri5kEni+APRHCIcdfpveQKwzzJdwawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx1XBLAnM+GJVoNrm6oUYKOp9CUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MzMy NjJhOC1iNjlhLTRmMmQtOWRjNi01NzgzN2Q0NTI0N2QvODg3NDEwYWEtZjIzOC0z MjFkLWI2ODUtNGRjMGYzOTg2Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTMzMjYyYTgtYjY5YS00ZjJkLTlk YzYtNTc4MzdkNDUyNDdkLzUzMzI2MmE4LWI2OWEtNGYyZC05ZGM2LTU3ODM3ZDQ1 MjQ3ZC5jcmwwHwYDVR0jBBgwFoAUX5JuVMwqh//kSLP+GRJ/DUExhQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MzMyNjJhOC1iNjlhLTRmMmQtOWRjNi01Nzgz N2Q0NTI0N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrbAOrlIZumMmP9Oa3451zdQi/qWgSTtxm44wxYsH+lAdeivr8mE8QW VEF3q/0jKdhn87ZVYy1DrRphbBj1/AsFRf3TMzTok7OaTrVmdwcW92sch77J4di/ Ddvh1diLIEpqr0GgkKQhBunEM0VSTePNckav/+Ko96PqGlEoeJDMEMHfjmEhFlK+ uLdO5AbI1fB7HSJ0Fv7uT7wZ16cjEAfuIsX7lDewnpr6CZXt1B8gq6t93c/kRbzR gx4zO6gX+NI/dPCisto5fU1dtFBE5FjmsDwneqx8DpBdzX4X8+jSMA4YKeJCi9IM ja8Pp88sxz+RNgTH0LCK1p8reWvRt2c= -----END CERTIFICATE-----Generated at Sun Oct 4 21:17:38 2026 by rpki-client