$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/1a9e7db2-36a7-3940-bc71-24c5a9c49acf.roa File: 1a9e7db2-36a7-3940-bc71-24c5a9c49acf.roa (raw, json) Hash identifier: Uc1vYdKTjJJv/Pclt76CjjxW16hu8vXCUAvCxRwU7mE= Subject key identifier: DD:D0:B0:E3:34:ED:0B:93:2B:25:A4:BF:DB:F1:80:E8:8B:8D:3B:2E Certificate issuer: /CN=9a22d04d-6f88-4738-8ecf-c41ae7da9b73 Certificate serial: 010D0C9F4328584F42F0878D284E92AFAC25EFC0 Authority key identifier: 44:0D:5A:2B:EC:B8:BA:21:3E:A5:82:6D:7C:6A:4A:A2:F2:14:A6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/1a9e7db2-36a7-3940-bc71-24c5a9c49acf.roa Signing time: Tue 22 Sep 2026 17:03:26 +0000 ROA not before: Tue 22 Sep 2026 17:03:26 +0000 ROA not after: Mon 21 Dec 2026 18:03:26 +0000 asID: 399138 IP address blocks: 204.16.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:f0:87:8d:28:4e:92:af:ac:25:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a22d04d-6f88-4738-8ecf-c41ae7da9b73 Validity Not Before: Sep 22 17:03:26 2026 GMT Not After : Dec 21 18:03:26 2026 GMT Subject: CN=d3e03ad1-8ab0-4c4b-82d6-4fd18f2f0238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:ab:df:a9:0a:2c:6e:de:a9:88:08:12:16: 51:5a:95:85:0d:a3:0c:c2:7d:80:df:42:30:a0:72: 20:9e:7c:bd:27:b4:9a:4f:71:c0:5c:b3:ae:ea:16: da:e3:b3:fb:c3:be:7f:ba:33:b9:32:6d:db:bb:28: 6b:c9:21:0e:f2:b7:74:71:d0:e9:8e:70:6f:6e:ad: a8:49:fd:eb:6d:55:28:73:d4:a3:da:b7:cc:12:38: 68:79:e4:c0:19:6d:10:3f:44:37:6f:69:3c:30:25: 39:32:f1:05:52:14:de:77:07:11:00:e7:91:d0:2f: 70:a2:40:8b:49:79:ef:cc:38:15:92:d7:77:39:dc: 8b:e1:35:3a:c9:7d:b4:f8:07:43:ed:a8:59:2f:57: e7:d8:64:a9:3f:3c:dc:31:7f:d9:3b:38:57:60:32: 6a:bc:8f:59:06:1e:55:55:05:27:34:cc:f7:17:60: f4:e3:a6:8b:5b:86:04:19:8b:eb:2d:09:7a:fb:03: 49:12:49:b5:7f:50:83:3d:06:a0:06:20:61:44:cf: f4:9f:f8:ff:b7:22:fd:16:d6:5a:33:86:0f:d8:8b: fe:4b:55:92:6b:f5:7f:ca:2f:0a:e2:b3:cb:11:d7: 9c:7f:b3:e8:fa:4d:97:be:bc:e1:ef:43:45:a6:fc: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:B0:E3:34:ED:0B:93:2B:25:A4:BF:DB:F1:80:E8:8B:8D:3B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/1a9e7db2-36a7-3940-bc71-24c5a9c49acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.crl X509v3 Authority Key Identifier: keyid:44:0D:5A:2B:EC:B8:BA:21:3E:A5:82:6D:7C:6A:4A:A2:F2:14:A6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer sbgp-ipAddrBlock: critical IPv4: 204.16.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:4f:b6:5d:58:c0:38:93:43:05:eb:05:96:c1:82:41:dc:63: 3f:2b:1c:50:60:5e:53:74:bf:22:c2:7f:dd:82:bc:7d:b0:74: c9:32:37:10:94:10:1e:cd:2c:ac:78:bb:0e:97:08:b0:24:dc: ae:30:af:d8:ae:95:3a:c4:7d:a1:02:37:cf:7a:87:fa:3e:e2: ae:c1:78:7a:77:9f:75:17:64:4b:60:e0:1d:3c:f5:7f:ab:06: de:4e:16:db:0b:52:9d:c6:56:8b:5f:19:1a:0a:8d:fa:d5:05: f9:c3:ce:09:75:93:7d:16:3e:56:51:73:c5:dc:c4:f2:fd:30: 71:3c:7e:54:10:e4:c2:4d:ec:e7:dc:66:31:cd:6d:1b:50:24: 55:74:e6:86:3d:05:90:26:6d:26:e7:5a:ba:0d:6e:12:3e:82: 4d:bf:4d:a4:a7:13:7d:66:9d:90:3c:80:13:dd:45:03:b7:22: 73:50:3f:de:3f:7d:30:04:54:f0:df:49:02:9e:9c:1b:8f:89: ef:11:c4:12:87:82:a0:7d:07:ea:c8:16:32:53:07:ce:44:be: 1f:26:1c:22:74:f9:ed:bb:b2:34:2a:13:1a:b1:64:69:0d:1e: 67:f5:c8:3c:4f:1a:ea:23:24:f4:9e:d8:f3:c8:84:25:db:ff: 9a:9b:cf:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9C8IeNKE6Sr6wl78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEyMmQwNGQtNmY4OC00NzM4LThlY2YtYzQxYWU3ZGE5 YjczMB4XDTI2MDkyMjE3MDMyNloXDTI2MTIyMTE4MDMyNlowLzEtMCsGA1UEAxMk ZDNlMDNhZDEtOGFiMC00YzRiLTgyZDYtNGZkMThmMmYwMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eur36kKLG7eqYgIEhZRWpWFDaMMwn2A30Iw oHIgnny9J7SaT3HAXLOu6hba47P7w75/ujO5Mm3buyhrySEO8rd0cdDpjnBvbq2o Sf3rbVUoc9Sj2rfMEjhoeeTAGW0QP0Q3b2k8MCU5MvEFUhTedwcRAOeR0C9wokCL SXnvzDgVktd3OdyL4TU6yX20+AdD7ahZL1fn2GSpPzzcMX/ZOzhXYDJqvI9ZBh5V VQUnNMz3F2D046aLW4YEGYvrLQl6+wNJEkm1f1CDPQagBiBhRM/0n/j/tyL9FtZa M4YP2Iv+S1WSa/V/yi8K4rPLEdecf7Po+k2Xvrzh70NFpvwUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3QsOM07QuTKyWkv9vxgOiLjTsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85YTIy ZDA0ZC02Zjg4LTQ3MzgtOGVjZi1jNDFhZTdkYTliNzMvMWE5ZTdkYjItMzZhNy0z OTQwLWJjNzEtMjRjNWE5YzQ5YWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOWEyMmQwNGQtNmY4OC00NzM4LThl Y2YtYzQxYWU3ZGE5YjczLzlhMjJkMDRkLTZmODgtNDczOC04ZWNmLWM0MWFlN2Rh OWI3My5jcmwwHwYDVR0jBBgwFoAURA1aK+y4uiE+pYJtfGpKovIUpmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS85YTIyZDA0ZC02Zjg4LTQ3MzgtOGVjZi1jNDFh ZTdkYTliNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1Ptl1YwDiTQwXrBZbBgkHcYz8rHFBgXlN0vyLCf92CvH2wdMkyNxCU EB7NLKx4uw6XCLAk3K4wr9iulTrEfaECN896h/o+4q7BeHp3n3UXZEtg4B089X+r Bt5OFtsLUp3GVotfGRoKjfrVBfnDzgl1k30WPlZRc8XcxPL9MHE8flQQ5MJN7Ofc ZjHNbRtQJFV05oY9BZAmbSbnWroNbhI+gk2/TaSnE31mnZA8gBPdRQO3InNQP94/ fTAEVPDfSQKenBuPie8RxBKHgqB9B+rIFjJTB85Evh8mHCJ0+e27sjQqExqxZGkN Hmf1yDxPGuojJPSe2PPIhCXb/5qbz1E= -----END CERTIFICATE-----Generated at Thu Sep 24 17:43:27 2026 by rpki-client