$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c3e6edb7-9bed-3cc7-9b43-e39c35f82520.roa File: c3e6edb7-9bed-3cc7-9b43-e39c35f82520.roa (raw, json) Hash identifier: r0YhRm3EcafTd4mDpA0M4w+5U6de1PNqFuxCCFS4nOI= Subject key identifier: 6E:A9:C5:5B:B8:52:43:1D:72:27:14:8A:53:FB:D8:83:0F:E2:8E:B4 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F4B40AA81E906F57FAEB95FC8 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c3e6edb7-9bed-3cc7-9b43-e39c35f82520.roa Signing time: Fri 25 Sep 2026 16:31:22 +0000 ROA not before: Fri 25 Sep 2026 16:31:22 +0000 ROA not after: Thu 24 Dec 2026 17:31:22 +0000 asID: 21433 IP address blocks: 170.248.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:40:aa:81:e9:06:f5:7f:ae:b9:5f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Sep 25 16:31:22 2026 GMT Not After : Dec 24 17:31:22 2026 GMT Subject: CN=ea1dc10c-eb37-4d61-ab7f-701336e1fb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:c4:8c:1a:62:6b:1e:3d:68:be:a3:d7:a8: 9f:e9:5d:1a:50:03:8a:c8:8e:fe:3a:11:b1:5e:51: 2f:cd:26:96:87:0f:1b:7c:3a:1f:19:d7:34:92:ed: 03:e9:8d:1e:ea:0c:bb:2a:6d:b7:22:34:e5:c5:ed: 84:45:b4:f5:26:81:f4:46:7e:5e:3d:34:a8:b1:96: cf:4b:38:46:ef:a1:7d:4d:d9:2c:01:f9:ee:82:46: b1:b9:70:3d:ee:64:ba:6c:70:fd:f5:5b:4e:4e:ba: fb:ad:6e:2a:09:d6:cb:2f:a4:0c:88:01:50:6e:a9: c4:e5:44:3f:6b:c9:fd:f2:c5:8b:b3:b5:18:6f:42: dc:be:b9:c1:9e:3c:42:dd:ce:f4:0d:77:2f:3d:a5: 63:ea:d6:07:23:73:bb:d9:ca:f9:26:5d:6b:d6:07: 74:63:8c:cc:28:92:d3:7b:57:b5:93:a0:2a:b2:24: bd:9c:08:b3:60:5f:68:02:cc:4e:89:b7:13:40:25: 2a:0b:25:54:68:63:b7:17:7a:81:63:c4:42:9f:be: a0:78:ff:8b:ef:47:37:2f:25:c7:d6:5f:86:1a:b4: f9:ae:4f:26:79:de:95:94:52:8d:45:e6:24:78:d8: 9d:0e:8c:cf:32:2d:17:59:7f:c8:9c:2e:f4:d6:61: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A9:C5:5B:B8:52:43:1D:72:27:14:8A:53:FB:D8:83:0F:E2:8E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c3e6edb7-9bed-3cc7-9b43-e39c35f82520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4f:7c:73:eb:4a:9f:77:03:1f:d3:4d:aa:59:cb:a7:37:46: 3f:f6:f2:5e:22:bc:03:f1:47:ed:35:ab:89:e0:b5:b5:51:51: 6d:b8:90:2e:25:c3:0b:57:33:41:29:fc:57:93:cd:0f:ab:14: 76:53:81:21:0c:b4:a9:ea:6b:66:9c:b7:ca:db:83:a1:23:0b: c7:19:17:21:22:7f:57:2d:d3:e5:8c:fd:9e:03:9d:78:a4:95: a5:6c:b8:67:fa:be:3e:c1:da:a9:4a:62:d4:fc:f7:e2:b8:e5: 50:b2:c3:ed:a7:66:e9:e2:c6:a8:0a:bd:05:9d:11:44:f7:44: 2a:55:8c:3f:4d:68:74:a3:2b:62:f0:46:1f:6e:c1:e8:a2:48: 7f:1e:bd:a0:15:44:c4:0f:1b:73:81:b4:37:b5:6a:5e:88:b3: 49:2d:db:f0:45:5e:b7:46:cb:d6:b2:7d:e1:5b:2c:03:04:76: 74:bc:ea:44:67:f8:f5:b8:98:b2:7e:04:80:82:fe:ee:de:96: f8:70:a3:37:10:4d:46:69:ce:ed:1a:42:be:37:84:b8:36:f0: 2d:aa:5b:c1:7b:68:31:8a:cc:23:49:6f:76:a7:99:f5:1e:0d: de:e3:df:d2:d8:bd:7e:39:d1:c5:33:20:f1:93:7a:14:bb:4d: b1:ee:38:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LQKqB6Qb1f665X8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDkyNTE2MzEyMloXDTI2MTIyNDE3MzEyMlowLzEtMCsGA1UEAxMk ZWExZGMxMGMtZWIzNy00ZDYxLWFiN2YtNzAxMzM2ZTFmYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7DEjBpiax49aL6j16if6V0aUAOKyI7+OhGx XlEvzSaWhw8bfDofGdc0ku0D6Y0e6gy7Km23IjTlxe2ERbT1JoH0Rn5ePTSosZbP SzhG76F9TdksAfnugkaxuXA97mS6bHD99VtOTrr7rW4qCdbLL6QMiAFQbqnE5UQ/ a8n98sWLs7UYb0LcvrnBnjxC3c70DXcvPaVj6tYHI3O72cr5Jl1r1gd0Y4zMKJLT e1e1k6AqsiS9nAizYF9oAsxOibcTQCUqCyVUaGO3F3qBY8RCn76geP+L70c3LyXH 1l+GGrT5rk8med6VlFKNReYkeNidDozPMi0XWX/InC701mEuJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6pxVu4UkMdcicUilP72IMP4o60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYzNlNmVkYjctOWJlZC0z Y2M3LTliNDMtZTM5YzM1ZjgyNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5PfHPrSp93Ax/TTapZy6c3Rj/28l4ivAPxR+01q4ngtbVRUW24kC4l wwtXM0Ep/FeTzQ+rFHZTgSEMtKnqa2act8rbg6EjC8cZFyEif1ct0+WM/Z4DnXik laVsuGf6vj7B2qlKYtT89+K45VCyw+2nZunixqgKvQWdEUT3RCpVjD9NaHSjK2Lw Rh9uweiiSH8evaAVRMQPG3OBtDe1al6Is0kt2/BFXrdGy9ayfeFbLAMEdnS86kRn +PW4mLJ+BICC/u7elvhwozcQTUZpzu0aQr43hLg28C2qW8F7aDGKzCNJb3anmfUe Dd7j39LYvX450cUzIPGTehS7TbHuOEU= -----END CERTIFICATE-----Generated at Sun Sep 27 08:26:28 2026 by rpki-client