$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/a09d3181-984a-3bec-82b1-9d6e3bd2b458.roa File: a09d3181-984a-3bec-82b1-9d6e3bd2b458.roa (raw, json) Hash identifier: E41hINEf3CFRi1mZWUc5ANIgIFigNnBiAaTNvMkNwnY= Subject key identifier: B0:B6:54:B4:0C:23:9B:4B:D8:F8:8E:65:16:DA:15:C8:78:63:D0:15 Certificate issuer: /CN=2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2 Certificate serial: 010D0C9F4328584F51D2C0D446154E3F141B4868 Authority key identifier: 16:7D:BA:31:7A:2C:B9:B4:E3:4C:43:9D:6A:02:6C:C3:5E:70:20:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/a09d3181-984a-3bec-82b1-9d6e3bd2b458.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 398989 IP address blocks: 169.197.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c0:d4:46:15:4e:3f:14:1b:48:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=0fc1ff8c-dc67-45c4-9d91-77aa303152f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:53:54:39:5c:6c:7c:0d:56:f4:68:99:84: 69:c0:a4:c3:a6:e1:75:fc:78:a2:c9:3e:02:5b:db: 39:82:56:43:3e:79:fc:c7:73:10:a4:12:b8:03:df: 7c:da:20:64:71:78:f0:ba:e0:16:ba:60:4e:c5:e7: 55:4c:51:71:76:33:40:ce:19:bb:64:7f:e0:91:b9: 79:03:d8:90:cf:33:d1:48:a6:88:79:7b:43:15:dc: 3f:3c:d5:99:22:41:dc:90:ba:20:87:e3:5b:d4:8b: 87:30:b3:6f:c1:61:9a:bf:e1:0a:fc:7d:69:54:49: 75:84:09:1a:3a:1d:c7:37:3c:ef:5b:49:09:fe:65: b3:59:0e:33:8a:03:e8:b4:97:c2:e7:a8:61:f1:71: c9:fe:ff:89:3c:40:c4:c6:22:4c:35:65:31:31:59: d3:9d:0f:1c:3a:a3:d2:d9:22:2f:59:20:88:ab:fd: 64:58:35:52:fb:58:14:53:5a:a2:b8:ac:75:52:01: a9:38:33:2d:58:a7:5c:bf:a8:06:2d:5c:73:58:8d: c7:43:9b:40:fb:f0:b5:8f:fe:96:3d:53:54:31:cc: 4c:6f:01:4f:52:15:28:07:60:39:de:82:a7:12:81: f3:4a:07:40:81:bd:c6:df:31:4f:d9:cf:64:59:c4: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:54:B4:0C:23:9B:4B:D8:F8:8E:65:16:DA:15:C8:78:63:D0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/a09d3181-984a-3bec-82b1-9d6e3bd2b458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.crl X509v3 Authority Key Identifier: keyid:16:7D:BA:31:7A:2C:B9:B4:E3:4C:43:9D:6A:02:6C:C3:5E:70:20:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer sbgp-ipAddrBlock: critical IPv4: 169.197.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c9:b8:09:9d:98:68:28:9c:8b:06:0f:d5:f5:e3:9b:06:9c: de:c1:5b:cd:dd:b6:3d:3b:79:c8:47:7e:8c:7e:98:6f:25:68: b1:77:1b:04:2d:d2:69:3f:12:fb:fc:24:59:58:83:fa:15:3f: fe:70:21:c6:bf:c4:83:e9:a5:ad:c7:ce:fb:44:92:5d:2b:4c: 93:6a:ee:3f:50:b3:0e:23:42:7a:0e:d5:ff:d0:d5:a9:63:ae: 2f:ac:f1:d4:9b:58:33:d7:ab:6c:06:32:a5:ee:22:3f:52:9d: 82:ec:0a:11:e4:e0:6a:4a:ee:5f:1b:80:1a:21:73:23:71:a2: fd:4d:65:20:ef:d9:80:f5:9f:85:eb:d7:c7:d3:2a:e8:5a:68: c8:af:19:50:cb:09:49:a8:e1:f2:c8:82:e7:dd:c1:13:3d:f7: 02:be:ab:61:9f:76:f3:88:ab:d5:4f:ec:88:2e:f5:6a:e1:16: 2b:a5:46:f0:19:88:bf:b5:54:11:d8:80:37:f8:ea:9b:91:0f: 5d:f3:c2:e1:c2:60:e6:d5:81:a9:81:01:ab:03:1c:7b:9b:64: 96:fb:3b:f9:c7:79:ae:7e:80:12:72:73:e5:4c:dc:f7:12:f1: 74:6b:0d:71:74:9a:62:80:a4:0d:8b:d4:30:d6:57:8c:3e:32: d4:11:86:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0sDURhVOPxQbSGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFkN2I3YjAtM2MxMS00ZDkyLTliMmItN2VkNGI0OWIz OGMyMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MGZjMWZmOGMtZGM2Ny00NWM0LTlkOTEtNzdhYTMwMzE1MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxdTVDlcbHwNVvRomYRpwKTDpuF1/HiiyT4C W9s5glZDPnn8x3MQpBK4A9982iBkcXjwuuAWumBOxedVTFFxdjNAzhm7ZH/gkbl5 A9iQzzPRSKaIeXtDFdw/PNWZIkHckLogh+Nb1IuHMLNvwWGav+EK/H1pVEl1hAka Oh3HNzzvW0kJ/mWzWQ4zigPotJfC56hh8XHJ/v+JPEDExiJMNWUxMVnTnQ8cOqPS 2SIvWSCIq/1kWDVS+1gUU1qiuKx1UgGpODMtWKdcv6gGLVxzWI3HQ5tA+/C1j/6W PVNUMcxMbwFPUhUoB2A53oKnEoHzSgdAgb3G3zFP2c9kWcQUuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC2VLQMI5tL2PiOZRbaFch4Y9AVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWQ3 YjdiMC0zYzExLTRkOTItOWIyYi03ZWQ0YjQ5YjM4YzIvYTA5ZDMxODEtOTg0YS0z YmVjLTgyYjEtOWQ2ZTNiZDJiNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFkN2I3YjAtM2MxMS00ZDkyLTli MmItN2VkNGI0OWIzOGMyLzJhZDdiN2IwLTNjMTEtNGQ5Mi05YjJiLTdlZDRiNDli MzhjMi5jcmwwHwYDVR0jBBgwFoAUFn26MXosubTjTEOdagJsw15wIK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWQ3YjdiMC0zYzExLTRkOTItOWIyYi03ZWQ0 YjQ5YjM4YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqcWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3JuAmdmGgonIsGD9X145sGnN7BW83dtj07echHfox+mG8laLF3GwQt 0mk/Evv8JFlYg/oVP/5wIca/xIPppa3HzvtEkl0rTJNq7j9Qsw4jQnoO1f/Q1alj ri+s8dSbWDPXq2wGMqXuIj9SnYLsChHk4GpK7l8bgBohcyNxov1NZSDv2YD1n4Xr 18fTKuhaaMivGVDLCUmo4fLIgufdwRM99wK+q2GfdvOIq9VP7Igu9WrhFiulRvAZ iL+1VBHYgDf46puRD13zwuHCYObVgamBAasDHHubZJb7O/nHea5+gBJyc+VM3PcS 8XRrDXF0mmKApA2L1DDWV4w+MtQRhvM= -----END CERTIFICATE-----Generated at Thu Oct 1 11:21:32 2026 by rpki-client