$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa File: b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa (raw, json) Hash identifier: VVnFTQqxmWl2Gi5Z3kkl1ynGmWeHqeCWLmkpttW/3d4= Subject key identifier: 30:C4:87:28:B0:99:8F:E9:45:CE:D9:32:98:5F:83:9D:80:23:93:F1 Certificate issuer: /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa Certificate serial: 010D0C9F4328584F49740CDBF4BAB7960A39AB80 Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8070 IP address blocks: 165.159.132.0/22 maxlen: 22 165.159.136.0/22 maxlen: 22 165.159.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0c:db:f4:ba:b7:96:0a:39:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09b4789d-24bf-4063-962a-ad367d899ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7f:bc:c4:3f:f5:7d:4e:ae:f4:ef:7d:b6:94: fc:6e:12:bf:e2:3a:df:9b:49:ad:c5:51:f7:de:d6: c5:2c:ce:1b:77:c5:31:52:32:df:eb:af:ad:bf:00: 65:5f:5e:42:12:65:0a:f5:ae:34:ee:2d:45:81:4b: d8:28:f2:52:f1:b9:68:78:fe:86:22:eb:7a:41:e4: 7f:8f:df:b9:49:68:b4:e9:de:99:5c:4d:75:f5:db: 59:36:0b:45:f7:41:f7:0e:46:a7:29:cb:a0:8f:e7: 1a:fb:58:89:2a:fd:61:ca:7f:f7:f7:16:6d:b7:2a: 0a:e7:ec:1a:c9:34:64:93:50:70:7b:5c:b6:bc:b2: 99:37:f8:f9:2e:fe:49:23:09:b0:f5:be:c6:9f:46: bd:38:84:8e:0f:2c:49:74:27:18:cb:9c:32:5a:39: de:32:09:da:4c:13:26:d8:9d:63:34:eb:20:1e:1d: 9e:70:f9:89:a3:0d:d9:77:33:47:3d:4d:ef:ff:0e: 53:e0:84:98:af:74:b8:2d:a9:a9:7c:00:7a:7e:7f: d3:53:57:19:53:43:13:ff:ed:b9:ac:86:b0:f2:c4: ce:d6:8d:91:0b:00:b9:e8:c9:45:d1:11:d6:74:58: 39:ae:26:0c:89:ee:e1:ae:21:2f:97:e8:bc:61:6e: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:87:28:B0:99:8F:E9:45:CE:D9:32:98:5F:83:9D:80:23:93:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl X509v3 Authority Key Identifier: keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer sbgp-ipAddrBlock: critical IPv4: 165.159.132.0-165.159.139.255 165.159.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ff:fa:5b:92:a8:1c:56:23:06:fc:cc:08:56:11:d2:18:bc: de:dc:20:4c:65:a0:e1:06:1c:fc:3a:50:ad:f1:e9:fa:3b:ac: a4:d2:68:fe:4e:2b:ae:62:81:f2:f3:48:2b:a2:8d:78:d2:0c: 48:96:df:82:72:52:ce:e9:75:90:2d:0e:c9:2d:6f:55:bf:4c: bb:e5:8a:71:1c:c3:45:24:93:69:14:5e:f6:20:e8:e5:27:1c: 31:1d:eb:6b:86:70:e1:2e:d3:f3:97:68:df:62:3d:a3:b9:ad: 76:05:ea:d9:ac:34:21:5e:9e:bf:9b:72:5c:cd:7e:0d:11:62: f7:17:31:17:84:2e:a3:11:e9:3f:d8:85:5d:8b:49:c6:a0:88: 49:15:82:4b:37:46:14:bc:7a:e5:2f:e1:a1:0c:82:f2:d7:67: 67:9d:4c:c7:df:40:94:d7:b5:92:3d:82:ab:60:2f:6b:12:8d: c9:c3:82:c1:c8:17:e5:a3:a6:12:ca:e1:a4:c6:a0:02:36:92: bf:76:4d:f9:70:38:f0:26:b8:12:ba:b0:fd:f0:a0:6c:d1:95: 23:81:ae:e2:b3:ec:55:d4:52:c2:c5:aa:83:b7:4c:74:b2:b2: 08:f1:25:aa:31:a7:74:e6:d3:d2:2b:d5:89:4b:e6:07:e7:b8: 80:0b:3f:c3 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9JdAzb9Lq3lgo5q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAxN2VlNmMtMmYxZi00ZDVhLTgyZDktY2RlY2JmZmU2 OGZhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDliNDc4OWQtMjRiZi00MDYzLTk2MmEtYWQzNjdkODk5ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3+8xD/1fU6u9O99tpT8bhK/4jrfm0mtxVH3 3tbFLM4bd8UxUjLf66+tvwBlX15CEmUK9a407i1FgUvYKPJS8bloeP6GIut6QeR/ j9+5SWi06d6ZXE119dtZNgtF90H3DkanKcugj+ca+1iJKv1hyn/39xZttyoK5+wa yTRkk1Bwe1y2vLKZN/j5Lv5JIwmw9b7Gn0a9OISODyxJdCcYy5wyWjneMgnaTBMm 2J1jNOsgHh2ecPmJow3ZdzNHPU3v/w5T4ISYr3S4LampfAB6fn/TU1cZU0MT/+25 rIaw8sTO1o2RCwC56MlF0RHWdFg5riYMie7hriEvl+i8YW434QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFDDEhyiwmY/pRc7ZMphfg52AI5PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMDE3 ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVjYmZmZTY4ZmEvYjQ2OTA3MDQtMjlhMC0z ZmIwLTljOTEtNWQwNGEzYTc0ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzAxN2VlNmMtMmYxZi00ZDVhLTgy ZDktY2RlY2JmZmU2OGZhL2MwMTdlZTZjLTJmMWYtNGQ1YS04MmQ5LWNkZWNiZmZl NjhmYS5jcmwwHwYDVR0jBBgwFoAUy4/rg+jStXsWIDRr5cT7gKYGhkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMDE3ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVj YmZmZTY4ZmEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAKln4QD BAKln4gDBAKln7wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAOv/6W5KoHFYjBvzMCFYR0hi83twgTGWg4QYc /DpQrfHp+juspNJo/k4rrmKB8vNIK6KNeNIMSJbfgnJSzul1kC0OyS1vVb9Mu+WK cRzDRSSTaRRe9iDo5SccMR3ra4Zw4S7T85do32I9o7mtdgXq2aw0IV6ev5tyXM1+ DRFi9xcxF4QuoxHpP9iFXYtJxqCISRWCSzdGFLx65S/hoQyC8tdnZ51Mx99AlNe1 kj2Cq2AvaxKNycOCwcgX5aOmEsrhpMagAjaSv3ZN+XA48Ca4Erqw/fCgbNGVI4Gu 4rPsVdRSwsWqg7dMdLKyCPElqjGndObT0ivViUvmB+e4gAs/ww== -----END CERTIFICATE-----Generated at Fri Sep 25 20:38:53 2026 by rpki-client