$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa File: a4d572d7-4e1a-3495-99a5-851c0396c090.roa (raw, json) Hash identifier: m1dIi1UxbrcrdcKhV9hXCAwN971ffMc5Zun2IZWvaK0= Subject key identifier: 4B:BA:F3:83:77:E5:DC:E1:B1:89:F6:BB:69:30:E4:25:2D:4F:78:61 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F45428778B823B1612FF8A280 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 14618 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:87:78:b8:23:b1:61:2f:f8:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=4186e5df-e27b-487b-a556-1051607c85e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a1:af:b6:f9:cb:ed:9a:f8:3e:1e:56:62:bc: c5:de:c2:5d:39:1f:65:20:43:1d:82:7f:1a:8c:41: 19:e6:29:a0:2f:8f:12:60:52:c7:29:fa:73:ed:0b: a7:9d:5f:1d:68:a2:75:ba:3f:41:5b:1f:1c:48:35: 10:99:f9:64:b5:37:ba:2f:81:eb:b6:40:3c:63:b7: a1:a9:51:a0:4d:a9:e7:7c:cd:86:8d:14:ce:32:da: af:1d:e1:22:a3:f3:b9:0d:9c:66:cb:49:82:01:0b: 82:e0:8b:e3:68:61:bf:af:84:73:38:b8:d0:67:e2: 62:4f:e0:cf:52:98:15:80:9e:12:15:6a:cc:7e:06: d4:60:3a:0c:09:da:99:f3:b5:3a:90:51:b2:70:90: 31:48:ab:34:e7:ab:d3:9b:e7:26:5d:b1:a6:12:7a: 19:42:30:bc:9d:2c:d1:e3:28:98:b8:5a:32:08:19: 18:d0:08:15:b7:f8:bb:da:cb:f3:af:f9:4f:82:fa: 79:d2:2e:c0:3a:31:30:fe:30:f0:ae:72:07:e3:25: 30:38:86:d2:94:db:c8:83:d3:b0:1d:c1:de:69:2b: 0e:5f:d1:45:2f:f1:e3:bb:b0:c3:64:c1:a8:68:a2: a9:49:ec:6b:d9:90:e3:71:7d:3c:2a:ea:35:dd:ef: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BA:F3:83:77:E5:DC:E1:B1:89:F6:BB:69:30:E4:25:2D:4F:78:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:47:52:27:50:1a:94:63:63:77:b5:93:d6:62:0a:90:50:82: 5a:9b:b0:7b:a1:a0:84:b5:e0:c3:b6:ee:d1:f7:21:fc:c1:9a: 1d:37:8a:f0:bb:07:5c:14:b9:fa:f4:92:f8:f5:67:3d:c1:62: 82:63:0f:cf:1d:b6:7b:28:a2:72:00:75:d0:36:db:65:72:a2: 22:53:bb:81:cf:00:17:7e:2b:47:55:01:70:98:72:41:17:2e: 75:d0:ad:1d:81:f9:96:f2:84:c6:fa:4f:c3:38:c0:ed:f1:48: a9:c3:41:1c:ca:72:1a:15:58:70:cb:63:1b:47:db:13:53:be: b6:c3:a7:8e:05:c0:90:af:b3:db:25:9c:7e:6d:15:61:e6:65: 99:42:ec:d3:a5:b0:3e:76:ee:87:34:c1:28:62:5d:48:df:bf: bb:06:99:93:00:a2:5e:09:30:d0:3f:ff:cc:10:d0:f5:64:f2: 09:e0:a3:6f:c3:b4:75:97:45:95:ea:6e:b3:e3:e7:7f:2b:aa: b9:4b:65:06:3e:43:86:20:66:a1:14:d3:c7:4b:27:1d:ea:af: 88:d0:0d:36:c7:ff:da:ff:ad:00:b5:88:b7:e8:bb:d0:a2:15: c5:50:4a:a1:41:b5:6c:71:c9:bb:75:3c:b2:5f:b5:e3:d0:0f: 88:16:9d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQod4uCOxYS/4ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NDE4NmU1ZGYtZTI3Yi00ODdiLWE1NTYtMTA1MTYwN2M4NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56GvtvnL7Zr4Ph5WYrzF3sJdOR9lIEMdgn8a jEEZ5imgL48SYFLHKfpz7QunnV8daKJ1uj9BWx8cSDUQmflktTe6L4HrtkA8Y7eh qVGgTannfM2GjRTOMtqvHeEio/O5DZxmy0mCAQuC4IvjaGG/r4RzOLjQZ+JiT+DP UpgVgJ4SFWrMfgbUYDoMCdqZ87U6kFGycJAxSKs056vTm+cmXbGmEnoZQjC8nSzR 4yiYuFoyCBkY0AgVt/i72svzr/lPgvp50i7AOjEw/jDwrnIH4yUwOIbSlNvIg9Ow HcHeaSsOX9FFL/Hju7DDZMGoaKKpSexr2ZDjcX08Kuo13e/9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu684N35dzhsYn2u2kw5CUtT3hhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTRkNTcyZDctNGUxYS0z NDk1LTk5YTUtODUxYzAzOTZjMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRHUidQGpRjY3e1k9ZiCpBQglqbsHuhoIS14MO27tH3IfzBmh03ivC7 B1wUufr0kvj1Zz3BYoJjD88dtnsoonIAddA222VyoiJTu4HPABd+K0dVAXCYckEX LnXQrR2B+ZbyhMb6T8M4wO3xSKnDQRzKchoVWHDLYxtH2xNTvrbDp44FwJCvs9sl nH5tFWHmZZlC7NOlsD527oc0wShiXUjfv7sGmZMAol4JMNA//8wQ0PVk8gngo2/D tHWXRZXqbrPj538rqrlLZQY+Q4YgZqEU08dLJx3qr4jQDTbH/9r/rQC1iLfou9Ci FcVQSqFBtWxxybt1PLJftePQD4gWnXQ= -----END CERTIFICATE-----Generated at Fri Sep 25 22:58:26 2026 by rpki-client