$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa File: 28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa (raw, json) Hash identifier: q6tdL8jj7w5H+02yrRGmUJ5APij4gVjfr2q+qPJWz2s= Subject key identifier: 33:D2:E5:F6:2A:14:C0:50:53:80:54:63:74:3B:8F:74:92:48:26:09 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F497397B06AC8743345818800 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.158.24.0/23 maxlen: 23 171.158.24.0/24 maxlen: 24 171.158.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:97:b0:6a:c8:74:33:45:81:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1da6637d-82a8-463f-aa10-a23507a2f3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:28:27:a8:d6:a1:e2:5a:3d:46:9a:3e:42: e6:04:47:b4:d7:ee:b9:b1:31:7a:de:21:20:9c:c4: f3:20:21:d5:22:c2:79:be:18:6c:3f:f7:9d:c3:dc: 0e:9a:9e:a8:8c:4d:ca:ec:69:50:cb:7d:1c:19:5e: d3:13:1a:ed:66:a0:17:12:c1:c1:66:a2:1f:9e:34: 9a:c8:e6:64:6a:08:4c:26:32:5c:8c:bd:0c:92:15: 37:af:75:1d:4e:c3:36:3a:dc:d2:c3:00:12:23:f1: a7:d5:13:f6:20:be:86:b9:2e:a6:c0:37:bf:16:12: 3c:04:69:ee:44:54:29:24:34:46:d8:24:74:c6:fa: 04:c5:cb:e6:83:1c:d5:0c:ea:e3:c3:69:b8:ec:2e: 19:57:80:af:63:25:6e:5f:82:b5:e4:d5:41:93:75: cf:c8:b1:83:27:34:8a:ba:16:7f:85:55:e4:66:1b: e2:49:e3:94:ce:13:b3:2b:f6:65:17:14:07:86:f4: 91:d6:23:26:82:1d:40:b6:b1:92:bf:4e:6d:d9:c9: ee:ef:b0:32:86:84:d5:13:19:7c:b5:04:62:37:62: e5:3c:fe:76:32:e2:c0:18:17:05:4a:93:36:1c:45: 70:f0:5b:ce:2e:ee:ba:b0:42:bd:b5:59:67:b0:2c: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:E5:F6:2A:14:C0:50:53:80:54:63:74:3B:8F:74:92:48:26:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.158.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:13:94:fa:0e:ff:a6:7d:e7:66:d7:70:6a:e0:6f:86:3a:01: 1a:48:dc:06:15:0c:20:36:13:15:9b:43:68:63:87:02:9a:43: fb:6e:bb:a4:64:4b:68:eb:a2:89:b7:29:21:27:f4:b2:9e:6c: a0:01:a2:d2:68:42:35:d0:2c:1e:23:c4:41:e5:48:0d:84:09: 99:e6:21:6b:6a:8e:dd:f4:49:d7:6d:a0:66:02:c9:e1:48:11: 7d:c7:84:9f:e5:29:69:c8:1f:43:78:fe:a3:cd:18:e8:99:aa: 6e:3c:3c:2b:41:20:42:f9:c4:aa:4c:4d:1f:8e:6d:78:90:3f: 4a:08:f1:9b:b8:e3:0a:34:17:1a:0a:16:f0:6f:8f:fa:a5:73: c3:78:4f:8b:ea:ac:5b:54:ed:c7:ab:95:67:c2:ce:7d:79:13: 9e:7d:de:aa:2d:bb:f3:d0:d6:04:1f:c4:3c:22:8d:96:3e:2f: 74:8d:61:fa:0f:54:f0:f6:45:95:bc:10:47:89:90:dc:8b:c5: 76:ea:46:a8:47:58:26:c0:e2:2e:83:4c:03:9c:e8:4e:34:9e: 8d:56:bd:21:61:03:18:32:eb:58:44:bd:72:e9:50:15:36:5e: 8f:a4:1a:54:d3:3e:ff:21:d9:6c:72:9b:0e:7d:63:f6:c8:74: d4:2e:b5:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5ewash0M0WBiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWRhNjYzN2QtODJhOC00NjNmLWFhMTAtYTIzNTA3YTJmM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BMoJ6jWoeJaPUaaPkLmBEe01+65sTF63iEg nMTzICHVIsJ5vhhsP/edw9wOmp6ojE3K7GlQy30cGV7TExrtZqAXEsHBZqIfnjSa yOZkaghMJjJcjL0MkhU3r3UdTsM2OtzSwwASI/Gn1RP2IL6GuS6mwDe/FhI8BGnu RFQpJDRG2CR0xvoExcvmgxzVDOrjw2m47C4ZV4CvYyVuX4K15NVBk3XPyLGDJzSK uhZ/hVXkZhviSeOUzhOzK/ZlFxQHhvSR1iMmgh1AtrGSv05t2cnu77AyhoTVExl8 tQRiN2LlPP52MuLAGBcFSpM2HEVw8FvOLu66sEK9tVlnsCxC7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPS5fYqFMBQU4BUY3Q7j3SSSCYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMjhjODBmM2YtYWI4Mi0z ZjBkLWJlNzEtZjNhNTZiNDBjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq54YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0TlPoO/6Z952bXcGrgb4Y6ARpI3AYVDCA2ExWbQ2hjhwKaQ/tuu6Rk S2jroom3KSEn9LKebKABotJoQjXQLB4jxEHlSA2ECZnmIWtqjt30SddtoGYCyeFI EX3HhJ/lKWnIH0N4/qPNGOiZqm48PCtBIEL5xKpMTR+ObXiQP0oI8Zu44wo0FxoK FvBvj/qlc8N4T4vqrFtU7cerlWfCzn15E5593qotu/PQ1gQfxDwijZY+L3SNYfoP VPD2RZW8EEeJkNyLxXbqRqhHWCbA4i6DTAOc6E40no1WvSFhAxgy61hEvXLpUBU2 Xo+kGlTTPv8h2Wxymw59Y/bIdNQutTw= -----END CERTIFICATE-----Generated at Sat Sep 26 16:17:44 2026 by rpki-client