$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa File: a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa (raw, json) Hash identifier: 33WjlGgj2w+ecMGMHBYg7OWW22QlkSm6gC23txOVFUU= Subject key identifier: AB:0D:79:06:A8:66:38:C8:2C:15:99:D9:EA:7D:88:4D:D0:92:BE:32 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584F480D3CEAE7E391367717A800 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 5769 IP address blocks: 144.172.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3c:ea:e7:e3:91:36:77:17:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d939c582-662a-4b2e-9d57-77734d6992f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:89:ac:e7:02:d2:be:82:15:70:be:f1:02: 6e:8e:eb:7b:c9:de:d2:cd:38:12:a2:b4:6c:e3:27: 2e:83:87:68:5c:69:8d:b7:d1:b2:3d:24:65:24:1e: 48:a4:f6:e2:26:b5:d8:d6:5f:46:4e:21:33:05:97: f4:42:59:85:ae:e1:e4:be:1c:87:29:0a:09:e0:7e: 06:14:da:16:54:bf:dc:3c:41:b5:8f:c2:3a:67:3b: b0:93:f8:1e:fa:b5:5b:94:78:31:ca:76:6e:04:fa: 49:98:ce:d8:55:05:6d:ac:0f:fc:ed:83:d7:24:b4: d0:fd:e3:8c:d9:63:04:a5:ec:48:4c:98:f1:0c:43: 8f:7e:40:87:57:23:1d:87:6a:4c:e4:59:70:28:73: 33:07:2e:1c:79:8f:ca:28:2f:fc:c5:e4:60:50:17: 6c:6f:66:98:42:06:48:2e:45:14:d8:b8:62:af:cb: 36:44:a8:24:37:05:bf:8a:52:43:a1:6f:be:95:4c: 76:34:03:8c:2e:1c:8b:87:6c:1f:1d:17:53:1c:25: 81:2e:d3:be:8d:7a:9c:4e:86:5c:d1:ff:c0:91:e9: c9:98:b2:15:91:00:dd:a8:f0:f2:4e:3e:2b:d8:30: 8b:42:c4:47:fb:0c:df:aa:ee:f5:b6:48:9f:0b:98: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0D:79:06:A8:66:38:C8:2C:15:99:D9:EA:7D:88:4D:D0:92:BE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 144.172.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5e:27:40:57:81:0f:b4:9a:fd:85:45:2a:a3:b0:92:98:c3: c4:6d:02:1b:fe:fc:22:8d:61:e0:99:c4:af:9c:4f:48:d8:f4: 1d:27:44:0c:23:c9:49:07:ac:b8:6a:d4:73:40:04:92:ae:11: 6b:a3:ca:ae:bf:e5:22:a9:0f:7b:10:0c:e3:fd:0c:73:fa:29: ea:fc:ee:c1:57:f5:b4:79:35:d8:22:e6:47:f5:35:2e:92:95: 71:de:d3:78:ad:97:81:63:63:d5:03:a2:38:e4:74:0d:ac:b0: 9e:9f:f3:fe:e9:c0:81:51:75:5d:d8:42:d1:c2:62:00:ac:ea: a7:96:50:3a:e9:db:43:09:0a:d0:7d:fa:07:f6:76:7f:ec:80: ab:ab:ee:c9:e7:bb:42:3a:9b:3e:37:89:bc:53:ba:16:c1:b7: 72:42:db:c6:05:35:90:84:45:f6:82:66:fe:55:2e:da:43:c0: 8c:d9:b3:ca:91:2d:74:17:73:68:e2:2b:34:ef:10:61:26:74: 02:fd:3c:14:22:fa:36:5b:58:e1:d0:05:ee:4c:73:ed:41:35: 07:c9:53:8b:d4:92:30:00:d0:5b:71:26:62:d6:98:67:5c:9d: c5:26:67:47:a3:ab:1b:e7:e7:a7:a9:be:e4:64:f6:c3:5a:e2: 4d:6f:6a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTzq5+ORNncXqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDkzOWM1ODItNjYyYS00YjJlLTlkNTctNzc3MzRkNjk5MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV2JrOcC0r6CFXC+8QJujut7yd7SzTgSorRs 4ycug4doXGmNt9GyPSRlJB5IpPbiJrXY1l9GTiEzBZf0QlmFruHkvhyHKQoJ4H4G FNoWVL/cPEG1j8I6Zzuwk/ge+rVblHgxynZuBPpJmM7YVQVtrA/87YPXJLTQ/eOM 2WMEpexITJjxDEOPfkCHVyMdh2pM5FlwKHMzBy4ceY/KKC/8xeRgUBdsb2aYQgZI LkUU2Lhir8s2RKgkNwW/ilJDoW++lUx2NAOMLhyLh2wfHRdTHCWBLtO+jXqcToZc 0f/AkenJmLIVkQDdqPDyTj4r2DCLQsRH+wzfqu71tkifC5h/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsNeQaoZjjILBWZ2ep9iE3Qkr4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYTljYmJmZDQtZDM4OC0z M2QxLWJjNDItODZkNjBkZDJlYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkKyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9eJ0BXgQ+0mv2FRSqjsJKYw8RtAhv+/CKNYeCZxK+cT0jY9B0nRAwj yUkHrLhq1HNABJKuEWujyq6/5SKpD3sQDOP9DHP6Ker87sFX9bR5Ndgi5kf1NS6S lXHe03itl4FjY9UDojjkdA2ssJ6f8/7pwIFRdV3YQtHCYgCs6qeWUDrp20MJCtB9 +gf2dn/sgKur7snnu0I6mz43ibxTuhbBt3JC28YFNZCERfaCZv5VLtpDwIzZs8qR LXQXc2jiKzTvEGEmdAL9PBQi+jZbWOHQBe5Mc+1BNQfJU4vUkjAA0FtxJmLWmGdc ncUmZ0ejqxvn56epvuRk9sNa4k1vatI= -----END CERTIFICATE-----Generated at Fri Sep 25 06:09:51 2026 by rpki-client