$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa File: 866a1286-9086-381c-bebe-035302ba5bb7.roa (raw, json) Hash identifier: aoQg1mqgAZ4tA9k243gbnnqS7uipAa4MNhTSfXBsg5s= Subject key identifier: C4:10:3E:2E:EF:79:15:C9:F6:ED:7C:4B:53:E5:83:CA:6E:2D:F3:18 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584F4975745FBEE810425D715C80 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 150.9.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:74:5f:be:e8:10:42:5d:71:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=897c1c44-521b-4691-b8c4-caa8a43d0832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:03:e1:5c:93:55:1b:5e:ae:c0:6b:37:e9: 5c:d4:d3:68:9d:fd:28:ec:b6:92:03:b8:e3:3a:e4: 05:2a:e6:fa:37:02:da:ad:2a:f5:1c:4d:9c:3e:57: fe:bb:ee:56:50:46:6d:a7:a1:14:d1:e2:80:5d:c5: 64:f3:4f:56:4c:3d:43:6a:7c:28:9c:81:73:c4:b8: 32:b4:b5:da:62:2a:bf:23:05:6b:3b:43:8c:c9:d0: 7a:cb:f5:cd:41:45:53:d8:fd:bf:e9:6e:db:d8:1a: f2:af:e5:62:f4:68:69:cf:25:d9:3c:26:26:68:1e: 3e:fd:7a:1a:cd:0c:ce:1b:1f:e8:3d:b7:8f:3d:80: 75:dc:d8:32:3c:02:de:37:62:9e:7f:af:21:b8:bd: eb:00:75:52:33:e1:b5:8e:ed:b4:4b:c2:bc:8f:a6: 12:3e:fb:71:0c:07:cb:62:7f:82:f1:73:ee:50:2c: 85:f6:87:c6:d8:52:80:49:2c:21:e9:3f:05:7d:07: ad:db:82:a0:71:8e:9a:fc:99:01:37:16:73:9a:2d: 69:f0:97:43:79:d1:b6:8f:70:61:2d:6e:d2:bf:32: ae:e6:ca:f2:8c:79:0e:36:3d:42:e3:68:d2:19:36: 4e:17:bb:12:07:ca:60:bb:36:b8:fd:9b:2b:94:79: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:3E:2E:EF:79:15:C9:F6:ED:7C:4B:53:E5:83:CA:6E:2D:F3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:75:d9:e8:b5:db:fb:7a:72:4f:bd:92:d3:af:21:22:3a:dc: d6:2d:ef:e6:96:63:22:32:c6:99:f6:80:d8:5e:b9:1a:47:6c: 89:6f:04:59:a8:b6:97:3c:ac:73:5b:5c:a5:f9:1f:89:43:ab: a2:e5:11:7d:e8:a9:8a:8f:c7:f4:f8:9e:2b:55:7e:c5:b9:9c: aa:26:b6:3b:9e:0c:6a:27:84:8f:9f:ed:d1:62:4c:cb:ab:87: 9f:be:ce:08:39:a9:fc:17:42:44:65:1c:57:ec:53:b0:06:20: f7:52:fc:4a:42:5f:3c:19:2b:78:95:6c:a6:ae:79:ca:65:b6: 50:83:c5:5b:18:79:c7:ad:47:c0:32:57:ae:86:e3:58:86:ae: c9:9c:4e:94:2c:8e:0f:d6:31:38:29:36:02:9c:fc:52:c5:a4: 6d:35:17:65:b8:04:65:d9:5d:a9:61:03:41:0c:07:d5:1e:f9: 70:81:03:df:1f:7d:5a:c5:64:65:cd:17:5e:3f:ce:fe:d9:6f: 03:41:1e:70:b2:ad:86:e5:09:a8:3b:55:7e:7a:c0:82:a0:77: a5:f9:64:ca:5a:52:44:a6:ad:04:c9:d7:b2:e1:31:37:e4:00: 05:dc:fa:82:41:71:53:90:a6:13:52:e6:3f:10:ea:bd:7a:fe: b3:0d:0d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXRfvugQQl1xXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODk3YzFjNDQtNTIxYi00NjkxLWI4YzQtY2FhOGE0M2QwODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUMD4VyTVRtersBrN+lc1NNonf0o7LaSA7jj OuQFKub6NwLarSr1HE2cPlf+u+5WUEZtp6EU0eKAXcVk809WTD1DanwonIFzxLgy tLXaYiq/IwVrO0OMydB6y/XNQUVT2P2/6W7b2Bryr+Vi9GhpzyXZPCYmaB4+/Xoa zQzOGx/oPbePPYB13NgyPALeN2Kef68huL3rAHVSM+G1ju20S8K8j6YSPvtxDAfL Yn+C8XPuUCyF9ofG2FKASSwh6T8FfQet24KgcY6a/JkBNxZzmi1p8JdDedG2j3Bh LW7SvzKu5sryjHkONj1C42jSGTZOF7sSB8pguza4/ZsrlHlLoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQQPi7veRXJ9u18S1Plg8puLfMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvODY2YTEyODYtOTA4Ni0z ODFjLWJlYmUtMDM1MzAyYmE1YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN12ei12/t6ck+9ktOvISI63NYt7+aWYyIyxpn2gNheuRpHbIlvBFmo tpc8rHNbXKX5H4lDq6LlEX3oqYqPx/T4nitVfsW5nKomtjueDGonhI+f7dFiTMur h5++zgg5qfwXQkRlHFfsU7AGIPdS/EpCXzwZK3iVbKauecpltlCDxVsYecetR8Ay V66G41iGrsmcTpQsjg/WMTgpNgKc/FLFpG01F2W4BGXZXalhA0EMB9Ue+XCBA98f fVrFZGXNF14/zv7ZbwNBHnCyrYblCag7VX56wIKgd6X5ZMpaUkSmrQTJ17LhMTfk AAXc+oJBcVOQphNS5j8Q6r16/rMNDQs= -----END CERTIFICATE-----Generated at Wed Sep 30 05:59:47 2026 by rpki-client