$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa File: d1ce1a33-08c7-3209-8312-de68c758aa76.roa (raw, json) Hash identifier: IniSo/Z8BpznIvGnxTcbTF0HaHY3it/V+CIIyhy90+4= Subject key identifier: 44:EB:AD:16:5D:72:A2:19:4A:93:FF:97:52:08:B6:17:76:41:E1:BF Certificate issuer: /CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Certificate serial: 010D0C9F4328584F23C25E07C50DB17811C6A280 Authority key identifier: 6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 398335 IP address blocks: 45.42.156.0/22 maxlen: 22 64.32.52.0/22 maxlen: 22 209.172.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5e:07:c5:0d:b1:78:11:c6:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=b98446bc-0952-48a5-a486-2f1b14ca4f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:ca:e9:ad:56:08:d6:6c:26:ed:f5:2a:7d: c5:37:dd:8c:36:63:d6:c7:46:dd:9b:87:9b:b3:4d: 28:21:63:28:4f:b3:6a:22:a3:9e:e3:41:af:18:92: 54:57:b4:36:e9:60:cc:a0:ce:e2:88:2d:db:5a:2a: 3b:82:cf:54:d1:3c:fe:f8:c4:75:71:e2:02:e9:76: c1:77:47:c7:27:5a:71:ca:d8:e0:f6:df:96:b8:f7: 5f:2f:e4:4b:07:9f:f7:5b:29:19:b5:d3:74:bf:42: 7c:b0:f9:d5:d8:0b:f7:51:ad:e4:62:6e:6a:2b:e8: f0:39:45:2b:d4:f4:97:b3:25:78:55:a7:19:ad:3b: 3c:c7:5b:a9:4a:99:1c:06:14:ab:eb:fc:85:a1:4c: 58:a7:93:05:ec:38:fd:00:d6:73:63:a2:e6:d3:46: 43:be:85:57:77:f8:4e:b1:3c:56:81:d7:81:b3:97: 17:5f:6a:99:7d:5c:6b:0d:b9:9f:f7:5a:1f:0f:15: b5:d6:93:0d:e1:a4:3a:aa:91:df:77:c2:ee:66:54: 89:af:3b:67:f0:65:51:a8:73:64:bf:7d:11:0f:02: 38:32:0b:81:85:25:a0:65:c1:8f:56:9a:27:d3:03: 74:91:c1:e6:1f:55:f7:a5:da:6a:4e:a3:d1:83:f0: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EB:AD:16:5D:72:A2:19:4A:93:FF:97:52:08:B6:17:76:41:E1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl X509v3 Authority Key Identifier: keyid:6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.156.0/22 64.32.52.0/22 209.172.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f9:17:62:89:25:cd:53:73:63:87:3c:89:77:66:95:d4:74: b5:bd:2b:8b:ec:46:a4:fa:b6:41:78:d0:8d:48:d2:a0:5b:0c: 0e:d4:44:46:13:42:f6:b9:e1:69:7b:36:42:4a:b5:b7:7e:9a: 81:7e:17:df:3a:78:68:ef:3c:03:02:8d:d4:3d:1f:71:ee:c9: b4:7e:5c:cc:13:f8:75:88:a0:6c:f0:07:3c:77:da:2b:dc:aa: 79:d7:0a:58:41:b0:99:1a:00:47:a8:00:75:1b:9b:f6:1c:40: 58:e0:3b:a7:1a:3a:88:14:93:fe:4c:59:a6:4c:6f:52:e5:7b: f7:43:45:06:ac:67:73:98:fa:ec:ac:57:97:95:1c:e4:bd:49: 09:ee:4d:a1:ef:79:b9:f1:47:26:a1:bd:3b:20:fa:36:39:25: 4a:74:f4:e9:b0:d4:fe:de:79:bd:80:47:37:dc:3e:da:9b:e0: a0:7e:4c:7a:44:ee:51:8d:96:fa:da:34:cc:ec:98:66:22:39: b3:f9:13:99:56:e5:9f:b7:b2:a9:46:b7:b4:69:86:9a:7a:20: 17:77:fb:25:fd:3b:ed:8a:0c:39:e2:24:f4:df:e6:30:a3:9e: 23:28:f3:e0:44:f4:d7:7f:06:46:00:0f:01:fe:49:bd:a6:a0: c4:d8:66:9f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8jwl4HxQ2xeBHGooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZjIxNDMtNjEzMS00MTRiLTgxYWQtYmU5NjBmMmE3 OGMxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk Yjk4NDQ2YmMtMDk1Mi00OGE1LWE0ODYtMmYxYjE0Y2E0Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P3K6a1WCNZsJu31Kn3FN92MNmPWx0bdm4eb s00oIWMoT7NqIqOe40GvGJJUV7Q26WDMoM7iiC3bWio7gs9U0Tz++MR1ceIC6XbB d0fHJ1pxytjg9t+WuPdfL+RLB5/3WykZtdN0v0J8sPnV2Av3Ua3kYm5qK+jwOUUr 1PSXsyV4VacZrTs8x1upSpkcBhSr6/yFoUxYp5MF7Dj9ANZzY6Lm00ZDvoVXd/hO sTxWgdeBs5cXX2qZfVxrDbmf91ofDxW11pMN4aQ6qpHfd8LuZlSJrztn8GVRqHNk v30RDwI4MguBhSWgZcGPVpon0wN0kcHmH1X3pdpqTqPRg/AdqQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFETrrRZdcqIZSpP/l1IIthd2QeG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm MjE0My02MTMxLTQxNGItODFhZC1iZTk2MGYyYTc4YzEvZDFjZTFhMzMtMDhjNy0z MjA5LTgzMTItZGU2OGM3NThhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZjIxNDMtNjEzMS00MTRiLTgx YWQtYmU5NjBmMmE3OGMxLzRhN2YyMTQzLTYxMzEtNDE0Yi04MWFkLWJlOTYwZjJh NzhjMS5jcmwwHwYDVR0jBBgwFoAUasjFEWRe7Olu1mzcnOqP3x4E9OYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmMjE0My02MTMxLTQxNGItODFhZC1iZTk2 MGYyYTc4YzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLSqcAwQC QCA0AwQD0awYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJX5F2KJJc1Tc2OHPIl3ZpXUdLW9K4vsRqT6tkF4 0I1I0qBbDA7UREYTQva54Wl7NkJKtbd+moF+F986eGjvPAMCjdQ9H3HuybR+XMwT +HWIoGzwBzx32ivcqnnXClhBsJkaAEeoAHUbm/YcQFjgO6caOogUk/5MWaZMb1Ll e/dDRQasZ3OY+uysV5eVHOS9SQnuTaHvebnxRyahvTsg+jY5JUp09Omw1P7eeb2A RzfcPtqb4KB+THpE7lGNlvraNMzsmGYiObP5E5lW5Z+3sqlGt7Rphpp6IBd3+yX9 O+2KDDniJPTf5jCjniMo8+BE9Nd/BkYADwH+Sb2moMTYZp8= -----END CERTIFICATE-----Generated at Fri Sep 25 14:44:04 2026 by rpki-client