$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/9f3a9aad-1894-37f9-9b71-667774d126c8.roa File: 9f3a9aad-1894-37f9-9b71-667774d126c8.roa (raw, json) Hash identifier: Bt36jdck3NYUq4LD4+G2pIrxBKv4k1jufZNR3MRR8NM= Subject key identifier: 9E:1D:47:40:42:53:8A:59:28:46:FE:11:81:FC:F1:D8:64:3E:D3:AF Certificate issuer: /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Certificate serial: 010D0C9F4328584F4972C0FCCC6F24ED4CD31800 Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/9f3a9aad-1894-37f9-9b71-667774d126c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 170.178.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c0:fc:cc:6f:24:ed:4c:d3:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=53a013ff-aebc-41c0-bc49-847b3ccf0345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:80:52:d1:a6:37:34:05:85:af:5d:dc:99: de:e0:28:a6:5e:29:fa:79:3c:5b:c8:57:72:e8:27: 50:27:18:77:d9:ac:fc:08:13:85:d6:09:e8:31:1f: 3e:44:79:dc:c1:12:6c:e2:cd:a7:a9:33:9c:de:08: dd:5e:6e:66:a6:7b:bd:f7:82:bf:54:c1:ee:e3:f7: bf:35:37:08:14:f0:7e:42:ad:8b:14:4a:6c:39:f1: ed:12:fa:b3:7b:c8:ee:da:47:bd:37:cf:ab:56:fd: e8:ad:bf:4b:fe:67:aa:f2:2e:76:01:1d:fc:ef:cb: 8f:94:1f:e1:71:49:ee:ac:9d:dd:14:57:d6:de:e7: e3:eb:74:bc:32:f8:70:e4:c8:4a:e0:34:ff:25:f0: 11:b5:a4:8c:01:6b:3a:04:9b:24:8d:93:e5:7a:a0: 8e:e2:b1:85:08:73:c1:65:7c:8b:02:52:ae:86:d6: 7b:8a:7b:2a:28:f2:da:e8:8c:a7:b4:27:29:54:6e: 71:7e:2d:aa:98:68:e8:fa:8a:4e:c5:18:a5:33:5e: 17:e3:72:32:e8:64:fb:0e:78:b1:29:21:28:2c:90: e9:93:5a:c1:86:de:c5:c3:aa:7c:5c:03:6e:d6:91: 05:79:ee:d6:9b:dd:b0:87:04:34:25:32:fa:ad:26: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1D:47:40:42:53:8A:59:28:46:FE:11:81:FC:F1:D8:64:3E:D3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/9f3a9aad-1894-37f9-9b71-667774d126c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl X509v3 Authority Key Identifier: keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer sbgp-ipAddrBlock: critical IPv4: 170.178.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:90:fa:b9:e8:c4:6c:27:e0:be:98:66:ed:6e:50:60:4d:16: 0c:0d:ac:30:08:72:50:ec:5f:2e:79:ae:1a:4f:89:fc:c1:af: 27:d8:0b:d8:8f:cb:32:17:24:fc:5f:e4:66:92:19:e1:a3:f2: 36:37:a0:da:f6:15:67:ba:65:38:e9:fc:b7:b2:38:a5:56:26: 56:83:1c:63:83:66:99:fd:71:86:8e:a4:3e:f9:99:19:de:73: 56:b4:94:17:24:97:5d:85:dc:54:2f:f9:f8:5d:a0:5c:f2:d5: 13:eb:0c:96:be:5e:3a:b0:66:2a:8d:77:d8:16:3a:47:99:94: 3d:d9:02:bd:d9:e5:a7:c4:28:f7:62:10:96:75:7c:5c:9b:d3: 1e:41:f9:75:17:14:1d:40:6e:b2:04:62:e0:f5:f2:e9:39:39: eb:96:4f:95:11:d3:ee:89:08:ea:b9:c5:e6:93:8f:9e:ee:27: 1a:db:0a:29:db:04:73:18:cd:7b:3c:a5:f3:b1:40:c7:3e:b5: 3a:67:1b:ca:5d:78:67:de:8d:d4:d3:20:cd:de:3c:eb:39:c9: 8b:99:76:1e:67:5c:02:ad:ef:24:ac:53:ea:22:08:9b:80:3d: 63:b2:1c:78:b7:0b:1a:ca:46:e4:73:12:4b:ed:82:d8:1e:35: 8b:04:0d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsD8zG8k7UzTGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjOWE5NWUtNTNjMS00ZTFlLTljN2ItMzlmOGYyNDI0 MThlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTNhMDEzZmYtYWViYy00MWMwLWJjNDktODQ3YjNjY2YwMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpOAUtGmNzQFha9d3Jne4CimXin6eTxbyFdy 6CdQJxh32az8CBOF1gnoMR8+RHncwRJs4s2nqTOc3gjdXm5mpnu994K/VMHu4/e/ NTcIFPB+Qq2LFEpsOfHtEvqze8ju2ke9N8+rVv3orb9L/meq8i52AR3878uPlB/h cUnurJ3dFFfW3ufj63S8Mvhw5MhK4DT/JfARtaSMAWs6BJskjZPleqCO4rGFCHPB ZXyLAlKuhtZ7insqKPLa6IyntCcpVG5xfi2qmGjo+opOxRilM14X43Iy6GT7Dnix KSEoLJDpk1rBht7Fw6p8XANu1pEFee7Wm92whwQ0JTL6rSbRmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4dR0BCU4pZKEb+EYH88dhkPtOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmM5 YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4ZjI0MjQxOGUvOWYzYTlhYWQtMTg5NC0z N2Y5LTliNzEtNjY3Nzc0ZDEyNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjOWE5NWUtNTNjMS00ZTFlLTlj N2ItMzlmOGYyNDI0MThlLzFmYzlhOTVlLTUzYzEtNGUxZS05YzdiLTM5ZjhmMjQy NDE4ZS5jcmwwHwYDVR0jBBgwFoAUv7hHWl8zbbcL3sRLmQA2rGdA0N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmM5YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4 ZjI0MjQxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqrKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKQ+rnoxGwn4L6YZu1uUGBNFgwNrDAIclDsXy55rhpPifzBryfYC9iP yzIXJPxf5GaSGeGj8jY3oNr2FWe6ZTjp/LeyOKVWJlaDHGODZpn9cYaOpD75mRne c1a0lBckl12F3FQv+fhdoFzy1RPrDJa+XjqwZiqNd9gWOkeZlD3ZAr3Z5afEKPdi EJZ1fFyb0x5B+XUXFB1AbrIEYuD18uk5OeuWT5UR0+6JCOq5xeaTj57uJxrbCinb BHMYzXs8pfOxQMc+tTpnG8pdeGfejdTTIM3ePOs5yYuZdh5nXAKt7ySsU+oiCJuA PWOyHHi3CxrKRuRzEkvtgtgeNYsEDSc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:08:04 2026 by rpki-client