$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa File: 1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa (raw, json) Hash identifier: JyotFmVmbUM52vSWXDCvvU0XqInjjbg1g8CUp4sApr0= Subject key identifier: 69:CC:B1:E4:BF:21:6D:8F:AA:16:20:55:F5:55:DB:EC:A5:C4:62:4A Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F4328584F119CF0274DB99CB0FF036250 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 395214 IP address blocks: 172.82.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f0:27:4d:b9:9c:b0:ff:03:62:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=32df5821-2ee5-4d30-b340-f0f1f10efce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:0b:61:bf:fe:ac:93:19:bf:d6:b8:f1:da: c6:60:81:26:cb:12:29:44:2f:96:40:67:7b:0d:2f: 4e:66:26:6b:84:fe:53:a3:70:50:af:79:4f:13:03: 09:bd:ec:b1:49:79:de:dd:4e:17:d4:a6:5a:df:e1: 0a:26:64:0c:c7:2a:83:ce:0d:f2:25:5a:bc:ac:ba: 1d:9c:98:1b:99:22:9a:23:28:bb:1b:f7:3c:41:d3: d5:68:f8:d0:ad:de:93:78:f0:c4:49:04:ae:61:b0: e6:fb:3c:f0:d6:77:4d:90:a4:0d:79:84:1b:bc:22: 2b:88:e3:dc:6b:0c:e0:70:d6:29:91:dc:56:2f:93: b9:f2:28:0d:b0:aa:0e:18:e5:77:72:94:14:b2:a0: 58:98:26:7a:c7:27:ac:d9:f2:ab:75:dd:8f:75:e4: 1a:0d:b6:d4:72:e7:3c:eb:81:fc:6d:c5:00:23:3a: fc:1f:98:a5:f3:0a:1f:4f:a8:34:52:04:ab:0c:20: fd:73:d8:85:94:d6:ba:d9:ab:b8:33:77:7f:2c:74: 49:4c:aa:cd:d9:58:46:61:d8:3d:8a:f5:3b:21:d4: 82:8f:b4:b0:2f:e5:62:68:56:55:cc:56:b0:ef:3a: d9:fa:88:3c:fc:0e:9a:1e:02:3c:4c:64:20:da:a5: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CC:B1:E4:BF:21:6D:8F:AA:16:20:55:F5:55:DB:EC:A5:C4:62:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv4: 172.82.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:45:50:cf:3a:e5:ac:63:f1:39:58:2c:ae:1d:a4:df:45:80: d5:ca:ff:ab:3c:8e:39:f1:e6:fe:b0:99:99:4c:25:60:fb:17: fa:4d:4a:8e:2e:2d:99:5e:73:56:22:80:9d:42:f2:3a:e8:7a: 8b:b6:b8:06:44:8b:83:26:77:51:a0:22:16:90:d5:05:db:9c: 23:61:bd:11:9b:27:c1:cd:ea:25:0d:3c:96:35:84:e1:00:c4: 47:ef:94:14:bf:8d:ae:1c:97:a2:41:4a:17:55:a9:a7:fd:5f: 98:0c:81:15:4e:01:d5:c8:5a:d5:e5:98:e7:3c:11:a1:ca:13: 05:73:be:e8:0d:f8:16:1a:89:87:01:1a:1a:01:ca:0c:3e:8f: 56:54:b2:49:42:d0:d3:98:66:26:24:69:dc:0d:05:f8:7b:0b: 8b:93:1a:3a:7d:e3:00:ad:cb:85:51:e8:61:be:d1:e7:4b:ed: 24:d3:f0:14:46:97:1d:65:d7:29:31:df:8c:9c:46:b2:4f:43: aa:10:23:af:08:64:0f:9a:a6:1a:ec:6e:32:30:97:e5:a1:b7: cc:54:6a:43:6b:c7:97:f1:2e:9d:4a:94:28:3b:9d:17:15:84: 87:74:eb:78:b1:ee:86:c2:12:36:44:11:58:d6:4b:9e:19:05: 7f:86:53:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPAnTbmcsP8DYlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJkZjU4MjEtMmVlNS00ZDMwLWIzNDAtZjBmMWYxMGVmY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrYLYb/+rJMZv9a48drGYIEmyxIpRC+WQGd7 DS9OZiZrhP5To3BQr3lPEwMJveyxSXne3U4X1KZa3+EKJmQMxyqDzg3yJVq8rLod nJgbmSKaIyi7G/c8QdPVaPjQrd6TePDESQSuYbDm+zzw1ndNkKQNeYQbvCIriOPc awzgcNYpkdxWL5O58igNsKoOGOV3cpQUsqBYmCZ6xyes2fKrdd2PdeQaDbbUcuc8 64H8bcUAIzr8H5il8wofT6g0UgSrDCD9c9iFlNa62au4M3d/LHRJTKrN2VhGYdg9 ivU7IdSCj7SwL+ViaFZVzFaw7zrZ+og8/A6aHgI8TGQg2qWOsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnMseS/IW2PqhYgVfVV2+ylxGJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvMWQyYjQzNDItMDk0NS0z MmRhLTk0YWUtZDY5YTVhZTA4ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNFUM865axj8TlYLK4dpN9FgNXK/6s8jjnx5v6wmZlMJWD7F/pNSo4u LZlec1YigJ1C8jroeou2uAZEi4Mmd1GgIhaQ1QXbnCNhvRGbJ8HN6iUNPJY1hOEA xEfvlBS/ja4cl6JBShdVqaf9X5gMgRVOAdXIWtXlmOc8EaHKEwVzvugN+BYaiYcB GhoBygw+j1ZUsklC0NOYZiYkadwNBfh7C4uTGjp94wCty4VR6GG+0edL7STT8BRG lx1l1ykx34ycRrJPQ6oQI68IZA+aphrsbjIwl+Wht8xUakNrx5fxLp1KlCg7nRcV hId063ix7obCEjZEEVjWS54ZBX+GU2U= -----END CERTIFICATE-----Generated at Sun Sep 27 21:29:41 2026 by rpki-client