$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/bebe2c1e-7a13-3008-8429-03b2aeba3936.roa File: bebe2c1e-7a13-3008-8429-03b2aeba3936.roa (raw, json) Hash identifier: sm2GJLGfjVf+InJLvu4S+DRafxE5Bniz+C/dNwqG/LE= Subject key identifier: 8B:63:71:04:4D:B4:1D:41:B5:F8:E9:A3:0A:C4:C3:A9:E6:7E:93:39 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584F4624662228388CAEA9A4DB00 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/bebe2c1e-7a13-3008-8429-03b2aeba3936.roa Signing time: Wed 23 Sep 2026 20:35:22 +0000 ROA not before: Wed 23 Sep 2026 20:35:22 +0000 ROA not after: Tue 22 Dec 2026 21:35:22 +0000 asID: 40934 IP address blocks: 189.25.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:24:66:22:28:38:8c:ae:a9:a4:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Sep 23 20:35:22 2026 GMT Not After : Dec 22 21:35:22 2026 GMT Subject: CN=9900d669-d97a-4de9-b367-9b544ec2fd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:1d:cc:21:bb:51:52:50:ec:5b:fc:8d:b4: 6c:43:2e:4c:35:4d:d9:50:8f:50:87:2d:26:15:8f: e0:d5:b3:c6:d4:a1:95:e1:9c:43:4d:7a:0d:10:03: 16:c1:0e:88:95:53:8e:08:97:34:c3:83:3d:b0:41: dc:83:47:a3:51:a8:f1:c4:99:8b:73:7f:4c:b4:d3: 6c:69:c6:a9:4d:f7:19:6b:16:35:94:9e:e5:3d:93: 5c:41:a1:62:5d:60:c1:ab:93:9f:2c:bd:d7:27:37: 2b:7b:1b:b7:11:8b:2d:e3:4b:7e:00:01:87:30:a3: 19:69:f4:ec:c5:55:e5:09:24:7a:b8:ad:e5:43:82: 86:1a:ba:41:83:35:9d:1a:06:63:d9:49:b3:f6:88: df:9b:f1:97:57:5f:2b:f3:40:53:94:13:1b:03:49: a4:4a:ca:b2:6c:92:8d:8d:ad:de:c1:19:d0:f7:fc: bc:d9:3b:38:da:45:ce:cb:0d:e1:d7:4a:04:62:7f: e9:c7:a5:13:7e:38:38:e7:c6:40:27:ef:20:fa:3b: 62:07:db:f9:8b:42:fb:05:8b:f8:fb:1f:1e:81:e2: 55:88:a0:6c:db:be:4c:10:22:88:db:85:32:ae:23: 33:ac:d1:ae:f7:bb:4f:df:1f:2f:be:7a:c3:21:e5: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:71:04:4D:B4:1D:41:B5:F8:E9:A3:0A:C4:C3:A9:E6:7E:93:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/bebe2c1e-7a13-3008-8429-03b2aeba3936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 189.25.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e1:ef:c5:79:1e:e9:22:8f:bb:03:cc:fd:e3:b2:54:2a:bb: 06:32:a1:0b:1b:a1:49:f9:3b:7f:bc:10:10:85:32:2f:f9:f2: c8:90:03:ab:e6:47:48:b6:c0:ee:6b:f8:ad:c7:3e:2d:66:14: fe:c2:8a:eb:f0:fb:a0:34:52:d1:98:87:95:12:78:77:d0:74: bb:97:d7:ad:80:23:cf:99:31:22:40:83:6e:75:cc:80:4f:b9: 85:46:0e:01:31:45:39:f8:f5:a4:81:21:75:c2:0d:f7:d9:3a: 6d:2f:36:5a:05:d5:ab:25:9a:6d:74:76:0f:33:e6:9d:bd:ac: 62:5d:53:51:81:35:f7:5f:81:ed:89:dd:92:af:a5:ab:79:17: 69:7a:54:8b:0e:3b:4b:7d:19:97:44:3c:20:5b:13:be:fd:99: 5d:60:23:2b:3d:b6:bc:ea:ac:c6:77:3e:83:3a:d2:4e:b8:51: 34:75:79:f7:88:f5:06:93:2b:81:11:84:6e:3f:b9:52:3b:76: 38:24:e8:63:47:af:fa:65:0e:e0:dd:92:d3:46:ca:2e:fc:7e: ad:73:46:41:c5:bf:7a:a0:51:1c:cf:10:c7:73:0d:1c:68:0a: 86:96:53:97:73:75:3f:88:49:0d:d5:65:55:d6:c5:15:6e:75: 5b:0b:ed:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9GJGYiKDiMrqmk2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI2MDkyMzIwMzUyMloXDTI2MTIyMjIxMzUyMlowLzEtMCsGA1UEAxMk OTkwMGQ2NjktZDk3YS00ZGU5LWIzNjctOWI1NDRlYzJmZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iIdzCG7UVJQ7Fv8jbRsQy5MNU3ZUI9Qhy0m FY/g1bPG1KGV4ZxDTXoNEAMWwQ6IlVOOCJc0w4M9sEHcg0ejUajxxJmLc39MtNNs acapTfcZaxY1lJ7lPZNcQaFiXWDBq5OfLL3XJzcrexu3EYst40t+AAGHMKMZafTs xVXlCSR6uK3lQ4KGGrpBgzWdGgZj2Umz9ojfm/GXV18r80BTlBMbA0mkSsqybJKN ja3ewRnQ9/y82Ts42kXOyw3h10oEYn/px6UTfjg458ZAJ+8g+jtiB9v5i0L7BYv4 +x8egeJViKBs275MECKI24UyriMzrNGu97tP3x8vvnrDIeWfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItjcQRNtB1BtfjpowrEw6nmfpM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvYmViZTJjMWUtN2ExMy0z MDA4LTg0MjktMDNiMmFlYmEzOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvRkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErh78V5Hukij7sDzP3jslQquwYyoQsboUn5O3+8EBCFMi/58siQA6vm R0i2wO5r+K3HPi1mFP7Ciuvw+6A0UtGYh5USeHfQdLuX162AI8+ZMSJAg251zIBP uYVGDgExRTn49aSBIXXCDffZOm0vNloF1aslmm10dg8z5p29rGJdU1GBNfdfge2J 3ZKvpat5F2l6VIsOO0t9GZdEPCBbE779mV1gIys9trzqrMZ3PoM60k64UTR1efeI 9QaTK4ERhG4/uVI7djgk6GNHr/plDuDdktNGyi78fq1zRkHFv3qgURzPEMdzDRxo CoaWU5dzdT+ISQ3VZVXWxRVudVsL7Xs= -----END CERTIFICATE-----Generated at Fri Sep 25 04:38:35 2026 by rpki-client