$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa File: c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa (raw, json) Hash identifier: G0czwXJBXG8tzri4fJ6UJ7PTK4uLaywRJbrSgleQJDE= Subject key identifier: 02:68:8C:08:61:5F:EA:90:7E:C1:E9:6C:96:49:A5:05:07:69:C3:F6 Certificate issuer: /CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9 Certificate serial: 010D0C9F4328584F4C3D77A6B84294E1CF125A80 Authority key identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 31782 IP address blocks: 216.249.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:77:a6:b8:42:94:e1:cf:12:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ea3dfa3f-e8fc-4481-8ea0-598531051bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:01:2f:f2:a4:ea:c2:d4:46:8a:5d:79:5a: 83:5e:10:c0:31:ec:2b:49:7c:d4:31:3c:dd:35:55: 29:8b:e4:b0:c6:89:ab:07:70:77:f0:c0:43:8c:0c: 4b:9d:d7:6a:c4:9b:69:43:a7:e9:d2:02:b5:ed:f2: 21:d1:f7:e4:bc:d3:ad:cb:77:30:95:a7:1d:ca:f4: d1:0f:5a:2f:8a:20:26:90:61:1d:78:dc:82:41:46: 09:c1:4e:75:eb:37:c0:bb:e1:01:19:58:33:e2:80: f0:e9:e2:1d:47:19:aa:d0:25:e3:67:72:7c:dc:21: 71:be:45:e2:e7:53:13:94:10:dc:ab:6d:44:b7:e6: 1d:f0:11:7f:39:11:71:ee:a2:58:a3:af:bf:ba:51: b7:25:4a:0b:25:df:f9:21:ff:4d:ba:06:51:f0:18: 6d:ed:c4:6c:d8:6c:dc:9f:28:03:a1:09:1a:f0:65: 05:e2:06:dc:eb:bf:a3:da:3e:19:36:29:d3:66:24: eb:65:00:c1:ee:ba:d0:90:20:9c:62:71:24:45:b7: e7:6e:b2:72:b8:f3:26:5c:a1:65:14:60:09:89:7e: f0:83:0b:7d:30:c6:cd:80:ac:45:c2:67:bf:62:73: 75:07:f7:a5:bf:1c:9f:bd:35:90:19:d3:91:27:1a: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:68:8C:08:61:5F:EA:90:7E:C1:E9:6C:96:49:A5:05:07:69:C3:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl X509v3 Authority Key Identifier: keyid:73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer sbgp-ipAddrBlock: critical IPv4: 216.249.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:08:b5:76:01:ff:80:ca:a4:70:02:76:d2:45:59:03:a4:80: ed:5c:da:3a:8c:d3:20:f0:cd:32:0e:d5:5a:83:c2:7b:20:d0: 40:30:8c:c1:72:f0:fb:9c:46:c5:fe:1b:8e:5d:79:07:25:87: af:91:96:75:ca:b6:67:d7:91:b0:94:3d:c7:00:53:fd:4a:47: 80:2a:74:a1:52:36:d6:e1:7c:26:5a:ed:a0:4e:d9:3d:2f:6e: 81:c9:bb:43:cc:72:a9:1e:a6:85:42:ec:1e:22:f2:8f:38:49: a2:54:94:9f:47:87:9a:8b:e6:af:56:ed:06:54:4f:b4:d2:10: 19:0c:50:6d:1a:f1:be:64:d3:84:0a:eb:37:57:f2:f0:37:e9: 6c:e3:a3:a5:7d:e7:05:95:e6:f6:72:e9:16:a6:64:73:f1:06: c5:b9:59:b6:93:ca:2f:b0:b7:a5:64:b0:64:52:91:15:ba:b4: 55:e9:47:a1:09:53:89:2e:bf:23:62:46:8c:04:53:8e:fe:4f: 43:f8:04:2a:da:08:f1:c1:35:12:07:e7:2e:b5:b7:f4:dd:70: 7f:0b:31:f6:f0:ed:8d:b3:38:a2:09:dd:34:3e:fc:ac:a8:dd: 56:bf:7c:ae:ed:b2:b2:57:03:d5:eb:d2:76:8d:91:a5:0f:08: 43:5f:03:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXemuEKU4c8SWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYyYTkxODktYzEyNS00ZTAwLTljOGEtMzQzODA1ZmY2 ZmI5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWEzZGZhM2YtZThmYy00NDgxLThlYTAtNTk4NTMxMDUxYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WgBL/Kk6sLURopdeVqDXhDAMewrSXzUMTzd NVUpi+SwxomrB3B38MBDjAxLnddqxJtpQ6fp0gK17fIh0ffkvNOty3cwlacdyvTR D1oviiAmkGEdeNyCQUYJwU516zfAu+EBGVgz4oDw6eIdRxmq0CXjZ3J83CFxvkXi 51MTlBDcq21Et+Yd8BF/ORFx7qJYo6+/ulG3JUoLJd/5If9NugZR8Bht7cRs2Gzc nygDoQka8GUF4gbc67+j2j4ZNinTZiTrZQDB7rrQkCCcYnEkRbfnbrJyuPMmXKFl FGAJiX7wgwt9MMbNgKxFwme/YnN1B/elvxyfvTWQGdORJxqOzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJojAhhX+qQfsHpbJZJpQUHacP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjJh OTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVmZjZmYjkvYzllZjc1ZjctMTg2Zi0z NjJhLThlMGQtNDMyNzJmYzNmNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWYyYTkxODktYzEyNS00ZTAwLTlj OGEtMzQzODA1ZmY2ZmI5LzVmMmE5MTg5LWMxMjUtNGUwMC05YzhhLTM0MzgwNWZm NmZiOS5jcmwwHwYDVR0jBBgwFoAUc4v7GOvUMjGCHKPXMhjfIfFEHRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4 MDVmZjZmYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEItXYB/4DKpHACdtJFWQOkgO1c2jqM0yDwzTIO1VqDwnsg0EAwjMFy 8PucRsX+G45deQclh6+RlnXKtmfXkbCUPccAU/1KR4AqdKFSNtbhfCZa7aBO2T0v boHJu0PMcqkepoVC7B4i8o84SaJUlJ9Hh5qL5q9W7QZUT7TSEBkMUG0a8b5k04QK 6zdX8vA36Wzjo6V95wWV5vZy6RamZHPxBsW5WbaTyi+wt6VksGRSkRW6tFXpR6EJ U4kuvyNiRowEU47+T0P4BCraCPHBNRIH5y61t/TdcH8LMfbw7Y2zOKIJ3TQ+/Kyo 3Va/fK7tsrJXA9Xr0naNkaUPCENfA40= -----END CERTIFICATE-----Generated at Sun Sep 27 21:40:33 2026 by rpki-client