$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa File: 7489abd9-d972-3502-9bfe-8f60dd4caa20.roa (raw, json) Hash identifier: o4bt+cPF0DZyEUXInd3ISReJprvLZi2XPnh+4bySOkc= Subject key identifier: C9:1C:10:F4:78:A2:EF:F3:46:C8:8C:49:69:E1:77:C1:18:CB:59:C3 Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584EE7BCAC69D906E4F7352F7680 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 168.100.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ac:69:d9:06:e4:f7:35:2f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=de809cbc-3f63-4b6b-8a6a-9c0f88a58f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a4:af:dd:9f:04:1b:a7:e7:f3:d2:17:c0:4b: 9c:5e:be:89:81:64:e1:bc:da:5a:68:c9:7f:b5:ab: bd:9a:f3:71:0c:03:c1:3d:a7:53:ca:a5:5c:4a:c9: 58:a4:98:f5:f0:94:01:fd:74:ac:91:fe:be:e5:ee: 7c:87:3b:30:d5:5b:99:41:e0:28:af:06:65:16:cf: 7f:e4:47:d2:84:45:98:5c:d5:98:f2:c1:22:96:81: 43:81:0f:38:04:0c:c0:83:54:98:c5:d9:d0:1e:d2: f7:e8:93:62:76:68:cc:51:70:4f:8d:bb:20:78:4c: 12:3b:b7:96:3d:f2:c9:72:ed:f3:ca:57:c9:a7:4c: f5:db:1c:8c:b9:5e:85:76:33:66:d2:dd:1a:3d:5f: 94:64:ff:15:e0:09:47:d4:70:8c:c5:50:f1:9f:e7: 66:13:1d:61:06:56:f6:30:77:42:1e:96:bc:f6:3d: c2:70:79:03:2e:34:c0:90:41:56:ec:c2:2c:53:fb: 3f:8f:c4:28:42:94:00:46:72:2c:f3:df:61:d2:67: 1c:f1:9f:29:03:e9:a7:92:89:ba:aa:ca:f9:50:af: 5b:0f:d8:e8:2e:f8:24:0a:bd:96:79:05:a6:1b:19: 51:22:45:5f:4f:f7:c5:25:a6:15:66:c9:d9:df:7b: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1C:10:F4:78:A2:EF:F3:46:C8:8C:49:69:E1:77:C1:18:CB:59:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a9:6f:29:32:4f:a0:27:e6:51:0b:52:1d:cf:24:42:1a:39: fd:01:76:a0:2f:a3:09:fb:e9:57:bb:6a:7e:ec:bd:7f:7c:95: ce:0a:7b:f5:ad:cb:3f:0f:84:b7:fb:62:ec:55:08:95:2f:8d: 3d:aa:55:ef:be:29:e6:a2:5c:fd:dc:3a:6d:02:a4:72:1c:06: 9f:e5:5b:a6:39:bf:1e:01:86:e1:f4:cc:0e:8e:1a:b9:d8:9e: b4:cd:40:84:8f:a4:7f:da:19:e0:2e:f2:af:9c:d0:4f:47:cf: 50:5d:08:36:ca:bb:77:ec:a0:a1:75:69:0d:a2:b9:ce:44:f7: ec:2a:ec:af:88:74:30:96:28:0d:09:58:91:08:40:69:9e:32: 43:33:62:30:d4:59:b3:92:fe:39:fc:fa:9b:de:64:ed:9c:92: 12:69:1e:6b:2c:30:63:f7:50:b5:0a:43:c5:76:a0:03:99:72: 44:9c:d6:69:0c:7b:cd:61:96:10:e2:75:a4:5f:39:11:2c:b2: 29:ed:39:71:d8:29:90:d2:95:42:09:8f:aa:b9:d8:9e:4e:d5: 55:40:4d:34:04:d8:45:a4:b5:d6:ab:dd:e4:90:21:c8:7b:35: 71:19:4c:05:65:10:cc:fd:51:2d:b4:05:cb:58:ff:28:53:e0: 52:c6:d0:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKxp2Qbk9zUvdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGU4MDljYmMtM2Y2My00YjZiLThhNmEtOWMwZjg4YTU4ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Sv3Z8EG6fn89IXwEucXr6JgWThvNpaaMl/ tau9mvNxDAPBPadTyqVcSslYpJj18JQB/XSskf6+5e58hzsw1VuZQeAorwZlFs9/ 5EfShEWYXNWY8sEiloFDgQ84BAzAg1SYxdnQHtL36JNidmjMUXBPjbsgeEwSO7eW PfLJcu3zylfJp0z12xyMuV6FdjNm0t0aPV+UZP8V4AlH1HCMxVDxn+dmEx1hBlb2 MHdCHpa89j3CcHkDLjTAkEFW7MIsU/s/j8QoQpQARnIs899h0mcc8Z8pA+mnkom6 qsr5UK9bD9joLvgkCr2WeQWmGxlRIkVfT/fFJaYVZsnZ33u/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkcEPR4ou/zRsiMSWnhd8EYy1nDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvNzQ4OWFiZDktZDk3Mi0z NTAyLTliZmUtOGY2MGRkNGNhYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+pbykyT6An5lELUh3PJEIaOf0BdqAvown76Ve7an7svX98lc4Ke/Wt yz8PhLf7YuxVCJUvjT2qVe++KeaiXP3cOm0CpHIcBp/lW6Y5vx4BhuH0zA6OGrnY nrTNQISPpH/aGeAu8q+c0E9Hz1BdCDbKu3fsoKF1aQ2iuc5E9+wq7K+IdDCWKA0J WJEIQGmeMkMzYjDUWbOS/jn8+pveZO2ckhJpHmssMGP3ULUKQ8V2oAOZckSc1mkM e81hlhDidaRfOREssintOXHYKZDSlUIJj6q52J5O1VVATTQE2EWktdar3eSQIch7 NXEZTAVlEMz9US20BctY/yhT4FLG0FA= -----END CERTIFICATE-----Generated at Tue Sep 29 03:50:59 2026 by rpki-client