$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/514b60b3-68dc-3b45-9724-79424b10208a.roa File: 514b60b3-68dc-3b45-9724-79424b10208a.roa (raw, json) Hash identifier: n1eRFGTGiUUugXy8L2tQP9EYRHyW3Hxq8NQ9tdW9XyQ= Subject key identifier: 4F:20:4E:0B:89:39:72:E3:A6:8C:19:0F:5B:6D:E9:C8:77:33:2B:83 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584F374D28F06F4DC0B3928F97C0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/514b60b3-68dc-3b45-9724-79424b10208a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 2920 IP address blocks: 198.188.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:28:f0:6f:4d:c0:b3:92:8f:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=aac9570a-4ecb-4b37-9302-7a18d0f65dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:83:48:c1:b2:55:4d:f7:e7:b7:af:06:71: 05:24:00:72:72:5f:2f:05:1f:9d:93:85:39:e1:d5: e6:37:58:c9:ec:9e:9e:0d:75:8e:92:7c:44:fa:89: 2e:71:ea:9f:ba:c0:ec:de:ee:a5:f4:67:bc:75:ad: f0:b4:00:57:ad:73:6c:3f:46:2a:c2:f1:30:b1:59: 18:39:11:b1:8a:4f:89:cf:63:5f:df:ec:d8:07:c9: e6:ac:ea:59:54:d9:de:de:3f:ed:4f:e3:ee:58:67: 48:30:3f:13:1a:e9:f9:85:7a:0a:5d:07:44:0f:29: 2c:15:cd:a6:53:0e:ec:01:ac:7d:7b:58:2f:aa:e9: ae:78:27:39:a1:8b:9b:b5:61:e2:d7:69:fc:7a:4f: 67:28:ad:9f:a4:b1:54:ef:76:9b:0f:ba:27:0a:88: ed:7a:8c:d0:df:1a:83:06:78:14:ac:6a:9b:bc:5c: 50:0c:3e:c6:97:a2:36:0c:cb:27:ff:41:ef:59:f8: 56:69:6c:ca:b2:1c:3f:bd:9c:44:0e:70:68:15:81: a3:40:d7:2e:17:73:03:90:d5:1e:af:b6:9e:04:88: a6:ee:86:0b:81:2f:33:70:10:7a:63:29:6c:65:f3: 3c:01:41:e4:82:a2:9e:4d:4e:a9:ad:9c:24:1e:e3: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:20:4E:0B:89:39:72:E3:A6:8C:19:0F:5B:6D:E9:C8:77:33:2B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/514b60b3-68dc-3b45-9724-79424b10208a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5b:af:3f:fc:a9:4a:e6:6a:07:66:c3:21:4b:5e:a7:8b:3f: c6:ef:a0:ed:2c:5f:f2:bc:74:5b:56:45:11:6b:5a:13:38:9e: 1e:c8:39:d8:62:7a:91:6d:e7:e9:ad:ef:20:19:85:18:99:94: a8:78:bb:66:5a:08:bb:c8:43:a3:df:e8:b7:96:35:a5:03:0a: ba:3d:0c:86:8f:b6:ff:da:16:37:c7:2a:8b:62:53:12:f6:6e: 91:97:a4:3a:d1:68:e0:4f:30:60:de:b9:84:a6:69:f4:25:b1: aa:76:f9:e8:0d:8a:d8:46:61:ed:93:8c:f0:ab:81:21:f1:2b: 3b:25:6b:bb:bd:55:c2:0e:ec:de:dc:11:bd:11:c9:fd:f9:47: e1:7a:9c:0c:e8:30:cb:39:24:77:b4:57:a5:37:95:a8:0c:31: de:a6:5c:98:d7:ad:00:62:72:78:27:41:c8:b6:74:2d:41:57: 63:fa:d7:52:8c:3f:50:f7:97:2d:1f:3e:20:d7:d3:5c:91:5b: f7:81:a1:5e:7e:5d:20:29:72:b2:84:16:c6:bc:c1:3a:8a:09: b6:be:e3:c0:b1:c1:8d:a6:f9:52:c5:59:c9:67:da:b4:ea:ca: ea:62:de:b8:49:e9:59:dd:7b:d3:89:8b:f8:07:06:64:6b:af: 8f:46:6a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSjwb03As5KPl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YWFjOTU3MGEtNGVjYi00YjM3LTkzMDItN2ExOGQwZjY1ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBuDSMGyVU3357evBnEFJABycl8vBR+dk4U5 4dXmN1jJ7J6eDXWOknxE+okuceqfusDs3u6l9Ge8da3wtABXrXNsP0YqwvEwsVkY ORGxik+Jz2Nf3+zYB8nmrOpZVNne3j/tT+PuWGdIMD8TGun5hXoKXQdEDyksFc2m Uw7sAax9e1gvqumueCc5oYubtWHi12n8ek9nKK2fpLFU73abD7onCojteozQ3xqD BngUrGqbvFxQDD7Gl6I2DMsn/0HvWfhWaWzKshw/vZxEDnBoFYGjQNcuF3MDkNUe r7aeBIim7oYLgS8zcBB6YylsZfM8AUHkgqKeTU6prZwkHuOGSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8gTguJOXLjpowZD1tt6ch3MyuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNTE0YjYwYjMtNjhkYy0z YjQ1LTk3MjQtNzk0MjRiMTAyMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlbrz/8qUrmagdmwyFLXqeLP8bvoO0sX/K8dFtWRRFrWhM4nh7IOdhi epFt5+mt7yAZhRiZlKh4u2ZaCLvIQ6Pf6LeWNaUDCro9DIaPtv/aFjfHKotiUxL2 bpGXpDrRaOBPMGDeuYSmafQlsap2+egNithGYe2TjPCrgSHxKzsla7u9VcIO7N7c Eb0Ryf35R+F6nAzoMMs5JHe0V6U3lagMMd6mXJjXrQBicngnQci2dC1BV2P611KM P1D3ly0fPiDX01yRW/eBoV5+XSApcrKEFsa8wTqKCba+48CxwY2m+VLFWcln2rTq yupi3rhJ6Vnde9OJi/gHBmRrr49GanI= -----END CERTIFICATE-----Generated at Sun Sep 27 16:50:02 2026 by rpki-client