$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef/af76806f-08dc-34d6-95c5-1d6c46fcef0c.roa File: af76806f-08dc-34d6-95c5-1d6c46fcef0c.roa (raw, json) Hash identifier: CXq7gnSpMUnfvc3O1F5Dr0fw70Ag5XH/JxK8TXVzWDU= Subject key identifier: CA:9B:04:F2:EF:0E:A8:DD:34:0A:3E:18:1B:1C:1A:8F:91:E2:99:C2 Certificate issuer: /CN=4a9bf6eb-11dd-4d47-80b0-a110e56bbcef Certificate serial: 010D0C9F4328584F3CE27F35DAA0D19463309000 Authority key identifier: 70:23:7A:21:CB:47:DE:F3:F2:EA:3C:5B:5D:80:81:00:59:BD:1F:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef/af76806f-08dc-34d6-95c5-1d6c46fcef0c.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 8075 IP address blocks: 13.254.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7f:35:da:a0:d1:94:63:30:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9bf6eb-11dd-4d47-80b0-a110e56bbcef Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=8d715ec5-ddb0-4c36-9047-4cbe519dbb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:77:d3:99:f4:9f:ea:68:f0:cd:14:9e:75: 5d:d6:20:f1:46:a0:66:ee:da:f8:ad:ac:a0:a3:5d: de:be:da:06:f1:98:18:08:ad:c3:6f:e9:61:09:0f: ee:d1:d1:7b:14:e7:1f:9d:38:39:29:b1:3a:26:5d: d7:f5:91:f0:94:3b:28:7c:b6:a5:85:4b:bc:a9:71: b5:e9:42:d4:fc:4a:71:78:da:7d:f2:21:61:60:10: 04:4f:c4:b8:69:95:87:f6:42:85:ab:12:37:31:af: a3:b4:62:f7:d3:52:f7:d1:2c:36:9f:4d:a0:e8:f9: 10:84:97:fe:02:a7:b5:95:60:3d:77:90:90:44:0a: 88:5e:e8:f2:9b:a3:9f:d4:15:75:d2:6e:97:38:28: 09:4a:7e:17:22:4b:58:e9:b0:c6:c5:d4:f1:2a:65: a1:3f:cd:24:5d:e9:4e:a6:37:48:d8:89:51:5d:d4: d4:a1:60:f0:3c:0c:d7:3d:c4:68:0c:b1:ce:fe:37: 21:e4:8f:5e:ba:a5:26:b1:0c:68:b5:ca:2e:d5:9f: 9c:da:8a:2c:49:f2:be:98:79:ca:e3:95:7c:a1:3a: 0f:66:53:a7:33:bc:a5:d7:b1:20:6b:f9:2f:04:c9: 30:80:33:05:ce:3e:2a:be:11:36:99:79:6e:d5:6f: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9B:04:F2:EF:0E:A8:DD:34:0A:3E:18:1B:1C:1A:8F:91:E2:99:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef/af76806f-08dc-34d6-95c5-1d6c46fcef0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef.crl X509v3 Authority Key Identifier: keyid:70:23:7A:21:CB:47:DE:F3:F2:EA:3C:5B:5D:80:81:00:59:BD:1F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a9bf6eb-11dd-4d47-80b0-a110e56bbcef.cer sbgp-ipAddrBlock: critical IPv4: 13.254.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:55:70:14:05:51:c4:a2:c6:e0:00:fe:2d:51:f2:5e:3a:50: 64:d4:97:98:d3:15:c7:aa:6a:d8:56:d0:64:73:fa:da:0b:fa: cd:ef:75:e2:7c:dd:5f:3b:f5:93:4f:af:0b:11:c2:a2:15:4e: 5d:21:29:20:5e:31:9a:17:0a:b6:40:5b:95:fd:2a:ec:44:18: ea:f7:42:7f:53:06:e9:87:20:cc:7b:f5:bb:f6:90:7b:d4:6b: 94:c5:d9:92:62:71:2f:f8:d1:73:2f:ff:84:de:a2:58:1e:bd: e0:53:51:a7:50:c5:53:a3:06:53:ec:d9:9a:58:d5:4d:98:85: 3e:26:58:a1:13:0f:d9:01:17:d9:7d:65:d4:2a:af:dc:4e:9f: 34:3d:e0:a1:3a:c2:05:1c:11:7a:f2:5e:76:31:79:75:3f:e9: d3:74:52:1b:52:da:a1:43:b8:f7:88:f2:cd:52:34:8d:ee:a1: 56:ff:1d:6b:89:c9:e2:9d:7e:cd:9d:30:41:03:cc:64:d3:8c: d1:12:4f:a3:53:7b:5f:8b:4e:a2:13:5c:45:21:d0:29:6a:4c: 3c:e5:61:7d:70:f8:af:fd:91:99:ec:af:b2:ec:98:73:e6:ec: 47:e9:a8:4f:ee:e8:0e:23:7b:56:ac:d5:f3:0c:d1:e2:7f:aa: de:be:95:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884n812qDRlGMwkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE5YmY2ZWItMTFkZC00ZDQ3LTgwYjAtYTExMGU1NmJi Y2VmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OGQ3MTVlYzUtZGRiMC00YzM2LTkwNDctNGNiZTUxOWRiYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUZ305n0n+po8M0UnnVd1iDxRqBm7tr4rayg o13evtoG8ZgYCK3Db+lhCQ/u0dF7FOcfnTg5KbE6Jl3X9ZHwlDsofLalhUu8qXG1 6ULU/EpxeNp98iFhYBAET8S4aZWH9kKFqxI3Ma+jtGL301L30Sw2n02g6PkQhJf+ Aqe1lWA9d5CQRAqIXujym6Of1BV10m6XOCgJSn4XIktY6bDGxdTxKmWhP80kXelO pjdI2IlRXdTUoWDwPAzXPcRoDLHO/jch5I9euqUmsQxotcou1Z+c2oosSfK+mHnK 45V8oToPZlOnM7yl17Ega/kvBMkwgDMFzj4qvhE2mXlu1W+F8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqbBPLvDqjdNAo+GBscGo+R4pnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YTli ZjZlYi0xMWRkLTRkNDctODBiMC1hMTEwZTU2YmJjZWYvYWY3NjgwNmYtMDhkYy0z NGQ2LTk1YzUtMWQ2YzQ2ZmNlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGE5YmY2ZWItMTFkZC00ZDQ3LTgw YjAtYTExMGU1NmJiY2VmLzRhOWJmNmViLTExZGQtNGQ0Ny04MGIwLWExMTBlNTZi YmNlZi5jcmwwHwYDVR0jBBgwFoAUcCN6IctH3vPy6jxbXYCBAFm9H4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YTliZjZlYi0xMWRkLTRkNDctODBiMC1hMTEw ZTU2YmJjZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADf4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFVcBQFUcSixuAA/i1R8l46UGTUl5jTFceqathW0GRz+toL+s3vdeJ8 3V879ZNPrwsRwqIVTl0hKSBeMZoXCrZAW5X9KuxEGOr3Qn9TBumHIMx79bv2kHvU a5TF2ZJicS/40XMv/4TeolgeveBTUadQxVOjBlPs2ZpY1U2YhT4mWKETD9kBF9l9 ZdQqr9xOnzQ94KE6wgUcEXryXnYxeXU/6dN0UhtS2qFDuPeI8s1SNI3uoVb/HWuJ yeKdfs2dMEEDzGTTjNEST6NTe1+LTqITXEUh0ClqTDzlYX1w+K/9kZnsr7LsmHPm 7EfpqE/u6A4je1as1fMM0eJ/qt6+lSg= -----END CERTIFICATE-----Generated at Sun Sep 27 01:07:42 2026 by rpki-client