$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: jN7EU4c1rekPQM9nUlwDxEhqcmqGJMy2t7Uu55/NFC0= Subject key identifier: FB:6C:49:78:05:89:34:FA:12:4A:20:EA:B6:B7:85:46:7A:70:41:F8 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584F31B7C2388DB881C707DA9900 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c2:38:8d:b8:81:c7:07:da:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=d035afcc-0acd-4e71-8141-e46f1ec759d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:d5:11:04:0c:bf:05:8d:05:ed:36:04:99: 54:e4:eb:a2:01:e1:a2:9a:b0:06:fb:bf:9e:90:45: f5:dd:29:be:2d:a0:0b:27:33:42:97:30:ce:0b:c5: 0c:88:22:13:6c:d4:16:3f:da:bf:ba:9a:2c:7f:32: b9:53:9d:67:68:68:27:8a:f3:9a:1e:7c:b3:1b:03: 89:ba:ab:d0:1f:73:0c:de:fa:f2:98:31:eb:3b:4a: 80:3e:31:b6:8e:9c:63:70:13:7d:da:03:2a:82:bd: 98:42:3b:1c:cc:f3:9a:c3:51:83:04:37:de:c0:8b: 0d:cc:c6:cf:ad:62:18:0d:68:67:02:02:08:5e:33: af:3a:86:d3:70:c9:a3:d0:a2:e6:bd:75:06:47:ba: 8f:a8:14:b1:70:17:36:3d:cc:05:ee:84:99:14:e9: 19:23:92:13:c3:b8:14:5b:7b:ad:4a:44:17:80:8d: 83:52:8f:7c:c4:d3:ec:01:db:ce:f6:10:f3:eb:25: c9:1d:ff:04:a1:c9:3a:82:09:bc:ad:eb:70:3f:4f: 55:f4:c5:52:fe:95:dc:d2:a2:38:50:3a:96:08:22: 75:64:e6:4c:b1:9e:fb:27:4e:8d:5f:af:af:5b:d0: 7d:d9:f3:72:d0:9e:76:01:4f:13:f8:50:7e:fb:d0: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6C:49:78:05:89:34:FA:12:4A:20:EA:B6:B7:85:46:7A:70:41:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:da:e4:04:1c:b4:69:3a:c8:d6:b5:a9:a4:8a:a1:58:99:e9: a7:66:1b:cf:59:f6:54:55:f9:e9:dc:6b:5f:b2:51:24:b5:c5: e5:d3:54:2b:a7:14:09:40:6c:34:6f:46:bc:1e:bb:32:7c:a5: a4:16:6b:be:e1:5c:96:a9:7d:5a:a0:4e:87:3f:21:a9:42:3f: 1f:59:b0:d6:4b:0b:6f:aa:c9:36:6d:42:cc:2d:62:45:d5:48: 5f:52:24:51:41:5e:ae:c5:d0:22:12:a7:58:b4:8b:ed:6f:e1: 7f:e1:84:ec:55:2a:5d:49:68:3e:ed:9a:52:dc:42:ec:b4:5b: 21:67:e8:e7:d5:64:44:a4:f9:c0:07:f1:c2:12:7b:a2:87:7f: 73:e8:a8:13:78:f5:7d:98:b9:3c:3a:7f:d8:44:4c:3f:cd:e1: af:70:be:39:11:69:c5:bd:b8:38:61:61:05:7e:02:c8:62:84: c0:11:a1:e7:69:e5:0e:3f:11:3f:4c:9c:de:c3:c2:6d:f8:e7: 32:b2:51:17:79:62:4d:83:ac:f2:31:07:55:01:49:98:cb:1f: 56:a3:20:ec:27:fa:ac:df:6f:58:38:97:ed:fc:8f:6a:44:83: 15:86:4e:d3:13:62:dd:74:dd:90:a0:21:05:99:42:3b:b5:61: 67:c5:cb:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8I4jbiBxwfamQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDAzNWFmY2MtMGFjZC00ZTcxLTgxNDEtZTQ2ZjFlYzc1OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk47VEQQMvwWNBe02BJlU5OuiAeGimrAG+7+e kEX13Sm+LaALJzNClzDOC8UMiCITbNQWP9q/uposfzK5U51naGgnivOaHnyzGwOJ uqvQH3MM3vrymDHrO0qAPjG2jpxjcBN92gMqgr2YQjsczPOaw1GDBDfewIsNzMbP rWIYDWhnAgIIXjOvOobTcMmj0KLmvXUGR7qPqBSxcBc2PcwF7oSZFOkZI5ITw7gU W3utSkQXgI2DUo98xNPsAdvO9hDz6yXJHf8Eock6ggm8retwP09V9MVS/pXc0qI4 UDqWCCJ1ZOZMsZ77J06NX6+vW9B92fNy0J52AU8T+FB++9D0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtsSXgFiTT6Ekog6ra3hUZ6cEH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILa5AQctGk6yNa1qaSKoViZ6admG89Z9lRV+enca1+yUSS1xeXTVCun FAlAbDRvRrweuzJ8paQWa77hXJapfVqgToc/IalCPx9ZsNZLC2+qyTZtQswtYkXV SF9SJFFBXq7F0CISp1i0i+1v4X/hhOxVKl1JaD7tmlLcQuy0WyFn6OfVZESk+cAH 8cISe6KHf3PoqBN49X2YuTw6f9hETD/N4a9wvjkRacW9uDhhYQV+AshihMARoedp 5Q4/ET9MnN7Dwm345zKyURd5Yk2DrPIxB1UBSZjLH1ajIOwn+qzfb1g4l+38j2pE gxWGTtMTYt103ZCgIQWZQju1YWfFy5Y= -----END CERTIFICATE-----Generated at Wed Sep 23 01:49:09 2026 by rpki-client