$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/ab79c886-6445-31a3-86e4-ecbd7a959612.roa File: ab79c886-6445-31a3-86e4-ecbd7a959612.roa (raw, json) Hash identifier: b2pM6RdJqTnZzXCHxHQh9mTAERykxgTWd8pQrCcUAaE= Subject key identifier: 6F:D1:40:89:EE:0B:F1:8F:F4:E3:5B:5A:53:D1:D2:A2:EC:91:30:5B Certificate issuer: /CN=a5099040-6590-4125-a5e9-764c474479ba Certificate serial: 010D0C9F4328584F2F5BBB5ACCA5A774CC0BE780 Authority key identifier: 71:71:F1:55:08:90:28:26:77:94:8F:E3:C1:98:7C:B3:BE:C9:0A:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/ab79c886-6445-31a3-86e4-ecbd7a959612.roa Signing time: Tue 15 Sep 2026 16:43:16 +0000 ROA not before: Tue 15 Sep 2026 16:43:16 +0000 ROA not after: Mon 14 Dec 2026 17:43:16 +0000 asID: 46175 IP address blocks: 67.158.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:5b:bb:5a:cc:a5:a7:74:cc:0b:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5099040-6590-4125-a5e9-764c474479ba Validity Not Before: Sep 15 16:43:16 2026 GMT Not After : Dec 14 17:43:16 2026 GMT Subject: CN=b5940ea8-6dca-4db0-9262-0e980628557b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:8e:61:9a:43:6a:f9:72:83:b1:0f:2e:71: f7:5e:11:e3:3c:32:e3:b5:83:b4:f3:fc:65:b1:82: bc:88:1e:e7:bf:09:56:2d:8d:0c:4f:0e:09:a5:13: da:5d:24:d1:8a:a9:f5:9c:ed:c1:d8:e1:6d:4b:55: a9:bf:23:8e:06:50:99:19:51:47:3b:26:7c:a3:4a: e9:94:18:32:00:be:eb:80:8f:3c:84:81:f4:8e:ac: c5:29:42:23:75:d3:e8:e6:51:af:a8:19:4f:91:0c: 6f:6a:e3:1b:17:58:95:95:ee:79:cd:97:54:e6:21: a2:d0:94:36:4f:b5:d9:ec:c6:27:3f:b1:f2:f6:0b: 58:81:84:36:f9:dd:6d:99:41:87:97:6b:3c:c4:0d: 44:85:c9:fd:6e:8d:4d:91:09:24:27:da:80:8d:c1: 7f:1b:28:7b:1b:1b:f1:bd:3c:a1:e4:8d:9e:e7:66: 8e:fb:6f:5a:5e:23:74:64:94:9c:a3:9a:4b:0d:c1: 14:7e:98:f0:89:7b:9b:44:3b:8e:6c:25:9c:33:d1: 32:bb:f9:47:0a:7c:b4:ff:00:f9:b9:4f:0d:de:45: f8:8d:d0:61:1e:fc:27:6f:ab:2a:b3:e2:dc:d4:bd: 57:7c:49:90:34:57:83:94:73:b2:09:b4:60:1f:be: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D1:40:89:EE:0B:F1:8F:F4:E3:5B:5A:53:D1:D2:A2:EC:91:30:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/ab79c886-6445-31a3-86e4-ecbd7a959612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.crl X509v3 Authority Key Identifier: keyid:71:71:F1:55:08:90:28:26:77:94:8F:E3:C1:98:7C:B3:BE:C9:0A:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer sbgp-ipAddrBlock: critical IPv4: 67.158.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ad:c7:e6:51:24:0c:f1:77:a7:f7:f7:c1:84:e2:5b:d8:2d: bc:1b:65:73:6c:7f:4b:ca:26:b1:88:81:76:d4:dd:c0:73:25: 65:d1:71:38:ac:50:45:7e:fd:ac:d4:01:8a:4d:45:87:1f:bb: 0a:63:09:e4:6c:d1:2d:85:70:43:2f:39:5c:19:d5:e7:76:ef: a7:a9:51:a5:4f:79:c5:45:34:e6:48:d6:33:a6:ce:e2:fe:97: 34:a6:e8:fd:78:bf:bc:4b:ef:46:88:ca:17:91:b9:67:a2:6d: 01:42:bb:96:99:30:30:fd:2f:5b:bb:09:96:bd:35:dc:db:52: ae:d1:4e:09:27:36:f6:93:e1:3a:8e:e1:d5:f8:8a:0b:5a:7c: 41:d7:62:78:31:c4:ff:e7:66:f6:7d:49:bf:b2:b4:6d:8a:90: 4d:53:0d:b9:12:5c:41:c8:35:dc:67:b3:fe:84:db:01:52:5f: b0:36:4b:b4:b1:ea:b0:93:76:58:8f:9e:f9:18:62:27:56:df: d4:ea:95:a8:1c:bb:dd:93:74:b5:d8:94:20:34:19:49:fc:67: 73:dd:12:0a:90:7f:76:5f:85:be:22:0b:3b:96:11:53:40:c9: e9:cb:18:37:10:63:31:87:2e:ca:10:c2:c6:01:bb:3d:ca:72: 8d:01:3a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8vW7tazKWndMwL54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOTkwNDAtNjU5MC00MTI1LWE1ZTktNzY0YzQ3NDQ3 OWJhMB4XDTI2MDkxNTE2NDMxNloXDTI2MTIxNDE3NDMxNlowLzEtMCsGA1UEAxMk YjU5NDBlYTgtNmRjYS00ZGIwLTkyNjItMGU5ODA2Mjg1NTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmWOYZpDavlyg7EPLnH3XhHjPDLjtYO08/xl sYK8iB7nvwlWLY0MTw4JpRPaXSTRiqn1nO3B2OFtS1WpvyOOBlCZGVFHOyZ8o0rp lBgyAL7rgI88hIH0jqzFKUIjddPo5lGvqBlPkQxvauMbF1iVle55zZdU5iGi0JQ2 T7XZ7MYnP7Hy9gtYgYQ2+d1tmUGHl2s8xA1Ehcn9bo1NkQkkJ9qAjcF/Gyh7Gxvx vTyh5I2e52aO+29aXiN0ZJSco5pLDcEUfpjwiXubRDuObCWcM9Eyu/lHCny0/wD5 uU8N3kX4jdBhHvwnb6sqs+Lc1L1XfEmQNFeDlHOyCbRgH76CdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/RQInuC/GP9ONbWlPR0qLskTBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hNTA5 OTA0MC02NTkwLTQxMjUtYTVlOS03NjRjNDc0NDc5YmEvYWI3OWM4ODYtNjQ0NS0z MWEzLTg2ZTQtZWNiZDdhOTU5NjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTUwOTkwNDAtNjU5MC00MTI1LWE1 ZTktNzY0YzQ3NDQ3OWJhL2E1MDk5MDQwLTY1OTAtNDEyNS1hNWU5LTc2NGM0NzQ0 NzliYS5jcmwwHwYDVR0jBBgwFoAUcXHxVQiQKCZ3lI/jwZh8s77JCh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hNTA5OTA0MC02NTkwLTQxMjUtYTVlOS03NjRj NDc0NDc5YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ57wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFetx+ZRJAzxd6f398GE4lvYLbwbZXNsf0vKJrGIgXbU3cBzJWXRcTis UEV+/azUAYpNRYcfuwpjCeRs0S2FcEMvOVwZ1ed276epUaVPecVFNOZI1jOmzuL+ lzSm6P14v7xL70aIyheRuWeibQFCu5aZMDD9L1u7CZa9NdzbUq7RTgknNvaT4TqO 4dX4igtafEHXYngxxP/nZvZ9Sb+ytG2KkE1TDbkSXEHINdxns/6E2wFSX7A2S7Sx 6rCTdliPnvkYYidW39Tqlagcu92TdLXYlCA0GUn8Z3PdEgqQf3Zfhb4iCzuWEVNA yenLGDcQYzGHLsoQwsYBuz3Kco0BOos= -----END CERTIFICATE-----Generated at Wed Sep 16 13:11:59 2026 by rpki-client