$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa File: 88f16770-79cb-31a3-a635-4b9256702cdb.roa (raw, json) Hash identifier: Jh0rfAdH+DsEs7mYvHxNx3ei346X6icMz+MOvqrtqN4= Subject key identifier: D9:80:48:9A:22:77:0D:6C:5A:2E:9C:9F:2A:F4:09:5B:18:07:1A:73 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F49739B2A8AD04E7DCAC50830 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.162.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9b:2a:8a:d0:4e:7d:ca:c5:08:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4792651-f6e1-4bba-a274-f3ee1541bec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:82:6b:8e:e5:5b:19:b7:f4:a9:cf:9b:05: 9b:a5:64:a3:9b:41:80:10:9e:38:a0:d3:94:a3:7b: f8:cf:82:c9:ee:19:d3:d1:1d:29:78:3a:49:79:6e: 6f:08:29:8b:58:24:0f:8e:21:59:c0:6d:4d:04:14: 73:04:6b:19:20:79:5e:d2:44:cc:5f:5c:4d:20:69: 2d:f2:04:35:9d:69:4a:e2:6a:3c:ca:fa:b9:90:e2: 01:35:d8:04:a8:1c:d5:53:10:ce:a8:e2:e8:0d:87: 76:ae:ee:dc:54:05:c9:28:72:5e:91:8a:7b:10:ae: 0a:a0:3b:e2:58:21:5b:e6:26:55:ee:73:77:74:2f: 72:1d:df:01:0c:fa:be:6c:c0:84:1c:06:53:12:b3: c1:a1:9f:29:82:f5:a0:fc:de:72:89:11:53:b9:75: f3:96:86:64:b1:56:c1:77:1e:43:c5:61:ab:6a:37: 1a:4e:d0:7a:21:b3:1f:ee:f0:6d:82:1c:fa:60:bf: af:ff:3a:35:4e:c4:d9:0e:44:03:db:5e:20:c7:f9: 46:80:24:f8:04:0b:69:cf:40:93:52:10:6a:c3:90: 70:03:a7:5a:9c:cf:be:c9:e4:27:69:02:99:6c:cd: 51:69:c8:5d:6e:eb:1a:d5:a0:08:06:20:d8:6e:7e: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:48:9A:22:77:0D:6C:5A:2E:9C:9F:2A:F4:09:5B:18:07:1A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9e:35:af:90:1e:3f:10:47:a9:f7:12:74:0d:dd:74:d8:ec: cb:66:01:f0:16:f2:b6:c1:cb:97:0e:7d:ba:1c:f1:ac:12:68: 55:fe:ec:9c:b1:21:5e:8c:f2:52:cd:82:7c:61:e6:fd:1e:e8: 83:ad:69:64:29:83:68:2e:ab:7b:2e:73:4f:b1:da:64:77:ca: ec:74:49:b6:58:83:72:47:ef:8c:2b:0e:05:f6:95:c5:77:49: 0a:0f:1d:cc:3e:8f:4f:26:70:6b:75:ad:56:cf:cd:ff:1c:a2: bd:a9:82:44:ce:4b:ee:fe:f7:39:b0:3f:39:8e:c4:9d:e6:b9: 02:2f:0f:f4:e9:5f:1b:2c:bb:c4:d2:16:16:30:2b:c4:25:a9: c4:1c:df:4b:ef:3b:fb:bb:8f:02:98:f1:a9:24:d8:09:4e:0f: 96:df:24:95:31:14:b3:0c:0f:8a:88:35:ce:87:b3:40:1f:09: 12:dd:3e:00:1a:fe:f5:17:9d:aa:cf:e1:4d:6a:c8:03:39:14: 3e:0f:1e:41:27:09:3f:4f:e9:b3:a7:06:1c:2b:ae:b6:46:3e: 49:a1:30:59:1b:e4:67:52:7f:41:db:d6:0a:20:f9:d3:2c:4f: a3:32:1d:bf:0a:aa:f6:58:8f:82:7f:51:8d:6a:6b:90:34:74: db:cf:61:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5sqitBOfcrFCDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQ3OTI2NTEtZjZlMS00YmJhLWEyNzQtZjNlZTE1NDFiZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA006Ca47lWxm39KnPmwWbpWSjm0GAEJ44oNOU o3v4z4LJ7hnT0R0peDpJeW5vCCmLWCQPjiFZwG1NBBRzBGsZIHle0kTMX1xNIGkt 8gQ1nWlK4mo8yvq5kOIBNdgEqBzVUxDOqOLoDYd2ru7cVAXJKHJekYp7EK4KoDvi WCFb5iZV7nN3dC9yHd8BDPq+bMCEHAZTErPBoZ8pgvWg/N5yiRFTuXXzloZksVbB dx5DxWGrajcaTtB6IbMf7vBtghz6YL+v/zo1TsTZDkQD214gx/lGgCT4BAtpz0CT UhBqw5BwA6danM++yeQnaQKZbM1Rachdbusa1aAIBiDYbn499QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmASJoidw1sWi6cnyr0CVsYBxpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvODhmMTY3NzAtNzljYi0z MWEzLWE2MzUtNGI5MjU2NzAyY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6eNa+QHj8QR6n3EnQN3XTY7MtmAfAW8rbBy5cOfboc8awSaFX+7Jyx IV6M8lLNgnxh5v0e6IOtaWQpg2guq3suc0+x2mR3yux0SbZYg3JH74wrDgX2lcV3 SQoPHcw+j08mcGt1rVbPzf8cor2pgkTOS+7+9zmwPzmOxJ3muQIvD/TpXxssu8TS FhYwK8QlqcQc30vvO/u7jwKY8akk2AlOD5bfJJUxFLMMD4qINc6Hs0AfCRLdPgAa /vUXnarP4U1qyAM5FD4PHkEnCT9P6bOnBhwrrrZGPkmhMFkb5GdSf0Hb1gog+dMs T6MyHb8KqvZYj4J/UY1qa5A0dNvPYV4= -----END CERTIFICATE-----Generated at Fri Sep 25 13:59:50 2026 by rpki-client