$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa File: cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa (raw, json) Hash identifier: eIavTQRM4lmRiZwJQcDXIpRFlM/LcN6BspfPSEWOxDs= Subject key identifier: C6:75:0C:D6:B2:90:19:82:2C:EC:9C:AF:4C:7C:57:46:62:32:49:9A Certificate issuer: /CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Certificate serial: 010D0C9F4328584F454284FA1FB55E1B673F3300 Authority key identifier: B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 394015 IP address blocks: 172.93.124.0/22 maxlen: 24 2620:131:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:84:fa:1f:b5:5e:1b:67:3f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=1f07de15-d7f7-4ec9-8f45-9cc67f72cc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:11:51:ab:65:ec:76:0e:6d:86:f5:29:f8: 43:bf:4c:0d:35:41:92:b8:0b:53:64:88:fc:55:ed: 00:31:b0:49:7d:dc:92:e6:a7:55:cf:06:61:09:53: c0:53:3c:96:25:c9:fc:07:0c:b9:ed:8d:a7:31:5b: 98:28:ac:0c:99:8b:5b:3b:8e:1f:17:91:30:c5:b4: 5f:52:71:7c:a7:d0:22:2d:17:03:bd:2e:64:4f:d1: c9:f0:35:e3:fb:de:66:09:94:bb:32:7f:78:5a:1d: 52:73:c2:23:2e:c0:84:4e:e4:35:44:40:53:60:6a: 48:53:3c:49:e1:7b:16:95:ec:e0:6b:11:c3:46:fa: fa:96:d1:03:44:1e:8d:9a:16:69:04:9d:f3:ea:6b: 06:34:13:f9:5f:43:e0:e2:a0:9a:0b:0e:f0:98:83: 4d:16:0c:a1:d3:f7:ad:8b:2d:89:5b:f3:fb:ab:84: 4b:51:1e:b2:b1:58:b5:5c:e4:2c:5b:f0:a4:23:e4: 55:61:13:23:42:17:c9:58:01:b3:83:6d:22:40:45: d0:f0:51:26:3b:27:25:ab:d6:3d:1c:50:b3:6d:5e: 9c:1d:eb:9e:ab:a6:cb:84:31:a2:54:03:09:0b:50: 65:37:3d:c5:0f:04:fe:8a:5b:41:2c:25:60:c7:15: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:75:0C:D6:B2:90:19:82:2C:EC:9C:AF:4C:7C:57:46:62:32:49:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.crl X509v3 Authority Key Identifier: keyid:B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer sbgp-ipAddrBlock: critical IPv4: 172.93.124.0/22 IPv6: 2620:131:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e8:4e:0e:f5:5f:ea:6d:dd:34:e2:14:2d:0e:2b:da:f9:4d: ed:a0:b2:d8:08:2a:26:06:28:b2:f6:30:3b:25:4f:02:59:7f: 0d:18:91:9a:82:88:76:dd:e1:a4:ae:98:7c:39:db:53:b5:50: f7:16:41:65:be:8c:b8:be:1f:81:f0:ea:a8:c2:e3:40:14:07: 40:89:48:52:69:32:b1:dc:b5:68:08:60:d8:54:2a:64:13:1c: 17:99:65:75:f1:0e:82:02:8a:a8:fc:53:cb:9e:16:b8:68:92: 77:cd:ab:1e:00:9e:e1:38:35:fd:bf:ec:8f:c3:0e:2f:2a:50: d7:67:14:c2:d0:3e:d8:3d:82:0f:9a:6b:3f:7a:1c:8c:f6:52: 16:f9:8b:5c:2b:61:0a:1b:a7:7e:4c:f4:ea:ee:ec:44:b0:fc: d1:c1:e2:3e:a4:77:50:a7:7f:d4:ef:80:ac:85:27:1c:54:90: 9e:19:3f:3a:d8:e2:4a:31:6d:f6:6f:2c:05:91:cd:a0:af:2a: 01:70:84:d7:cf:cd:6a:8d:c2:be:94:97:bb:ba:e1:44:a9:11: fa:b4:4e:66:f6:5b:76:0f:80:f5:4f:2f:7b:aa:1d:bb:e9:c1: 53:6d:d5:ea:07:e4:20:2c:91:88:9c:0e:da:8c:df:6b:61:57: 7c:a9:61:62 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9FQoT6H7VeG2c/MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZhZGY0YWEtZTMxMy00MWZlLWE3YTEtNjg1Yzc2ODFl YWQyMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk MWYwN2RlMTUtZDdmNy00ZWM5LThmNDUtOWNjNjdmNzJjYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk80RUatl7HYObYb1KfhDv0wNNUGSuAtTZIj8 Ve0AMbBJfdyS5qdVzwZhCVPAUzyWJcn8Bwy57Y2nMVuYKKwMmYtbO44fF5EwxbRf UnF8p9AiLRcDvS5kT9HJ8DXj+95mCZS7Mn94Wh1Sc8IjLsCETuQ1REBTYGpIUzxJ 4XsWlezgaxHDRvr6ltEDRB6NmhZpBJ3z6msGNBP5X0Pg4qCaCw7wmINNFgyh0/et iy2JW/P7q4RLUR6ysVi1XOQsW/CkI+RVYRMjQhfJWAGzg20iQEXQ8FEmOyclq9Y9 HFCzbV6cHeueq6bLhDGiVAMJC1BlNz3FDwT+iltBLCVgxxXsIQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMZ1DNaykBmCLOycr0x8V0ZiMkmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZmFk ZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVjNzY4MWVhZDIvY2Q3ZDU1ZTEtNTJmZi0z NmU3LWE2ZTktMWZiZGRjYTE0ZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGZhZGY0YWEtZTMxMy00MWZlLWE3 YTEtNjg1Yzc2ODFlYWQyLzBmYWRmNGFhLWUzMTMtNDFmZS1hN2ExLTY4NWM3Njgx ZWFkMi5jcmwwHwYDVR0jBBgwFoAUs0jP/uyql5C29/0u9TMA4A1u8ekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZmFkZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVj NzY4MWVhZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCrF18MA4E AgACMAgDBgAmIAExQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY6E4O9V/qbd004hQtDiva+U3toLLYCCom Biiy9jA7JU8CWX8NGJGagoh23eGkrph8OdtTtVD3FkFlvoy4vh+B8OqowuNAFAdA iUhSaTKx3LVoCGDYVCpkExwXmWV18Q6CAoqo/FPLnha4aJJ3zaseAJ7hODX9v+yP ww4vKlDXZxTC0D7YPYIPmms/ehyM9lIW+YtcK2EKG6d+TPTq7uxEsPzRweI+pHdQ p3/U74CshSccVJCeGT862OJKMW32bywFkc2gryoBcITXz81qjcK+lJe7uuFEqRH6 tE5m9lt2D4D1Ty97qh276cFTbdXqB+QgLJGInA7ajN9rYVd8qWFi -----END CERTIFICATE-----Generated at Sat Sep 26 12:50:51 2026 by rpki-client