$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/bbbd243b-a8c8-3a0e-872c-e8233002ea7c.roa File: bbbd243b-a8c8-3a0e-872c-e8233002ea7c.roa (raw, json) Hash identifier: h0h9aglzijrjXf3SAak42n2OMk91e6LBzC4AdtAkUrw= Subject key identifier: DC:93:22:79:8D:1A:92:4F:68:35:7C:0A:C2:D0:78:DA:E9:8C:D6:09 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584F497572EB4FF1B1DBE70E7C00 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/bbbd243b-a8c8-3a0e-872c-e8233002ea7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 150.9.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:72:eb:4f:f1:b1:db:e7:0e:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8096179-45fd-40e5-90ac-9e97ace80e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:36:54:81:cf:ab:4e:96:c9:75:58:67:35:41: 67:71:13:99:9b:51:52:3b:65:48:90:f2:4e:61:05: d1:57:bd:72:56:10:a9:ff:c6:af:5f:d8:a6:27:2f: cf:40:39:df:12:98:b5:6a:d3:4b:2b:7a:d1:b7:4e: c1:2a:d8:a7:5a:85:bb:ae:1b:41:81:0e:c8:58:2e: c0:f6:4d:23:a6:52:c0:67:dd:ce:4e:ae:19:5f:87: 5e:d1:72:9c:ae:ce:5f:e7:58:a9:d3:f4:e7:19:90: 50:de:73:d5:a7:68:01:2d:da:cb:94:09:26:5d:73: ad:3f:24:f6:e4:bb:bb:b3:6b:03:7a:4d:d4:8f:62: 4c:18:be:2d:d1:c1:bc:0e:63:5a:57:77:64:d1:c1: 05:d9:b8:5b:6b:15:32:9d:f5:42:45:fd:e6:38:7b: ae:f2:c4:90:b2:27:e2:97:c4:43:e3:d2:08:bf:c6: d1:33:ca:be:34:1f:08:05:f6:1c:a0:17:c9:45:2c: f9:52:f8:bd:28:32:df:59:7b:a1:f2:12:29:07:77: 41:9d:8c:f7:73:35:3f:00:10:07:c8:fb:c3:40:f5: 3d:d6:1c:b9:bc:29:2f:51:8a:4b:4b:d8:82:3f:95: 4c:9a:5e:0b:8f:c0:ac:14:28:e2:2b:0c:49:aa:04: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:22:79:8D:1A:92:4F:68:35:7C:0A:C2:D0:78:DA:E9:8C:D6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/bbbd243b-a8c8-3a0e-872c-e8233002ea7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ec:43:35:ef:32:6a:6e:02:ac:23:22:30:3a:3e:b2:7f:37: dc:5a:9c:f5:d0:05:4d:a9:91:42:f5:bf:09:bf:c3:75:f9:c6: 76:d6:83:7f:65:8d:95:03:29:75:6d:f6:65:43:46:62:f2:d8: e6:24:57:b1:d8:22:e5:85:70:74:67:e1:5b:70:30:85:c2:58: 7c:be:fc:71:ac:9c:94:53:23:9a:cf:ba:5c:ca:79:99:34:14: 20:70:ac:1a:a3:82:0e:67:1a:d3:cc:6e:03:e2:d2:45:3e:14: 0f:27:78:04:df:e8:f0:aa:f6:bc:f4:a9:bd:ed:9f:29:cc:24: ea:6b:37:35:bb:d3:fd:99:e5:08:38:e1:6d:df:92:ac:bd:4b: 57:7b:b0:92:39:26:54:ab:06:82:c5:35:b9:c1:b2:bb:f3:79: 53:50:41:0e:2d:b4:1d:59:b6:47:79:1c:ce:06:bf:91:ad:d8: 37:0a:61:28:e0:b8:91:0f:98:92:db:06:e4:cd:4c:90:72:6d: 64:5d:8c:22:53:36:53:75:e2:af:3a:d2:3a:fd:5f:79:0a:78: f4:15:1b:e3:ee:31:03:63:a0:76:c2:7d:ff:fa:77:1a:09:8d: b5:9f:ff:9d:5e:cf:ed:33:a4:a4:aa:c5:df:4c:ef:39:70:2b: 9c:0b:58:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXLrT/Gx2+cOfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDgwOTYxNzktNDVmZC00MGU1LTkwYWMtOWU5N2FjZTgwZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TZUgc+rTpbJdVhnNUFncROZm1FSO2VIkPJO YQXRV71yVhCp/8avX9imJy/PQDnfEpi1atNLK3rRt07BKtinWoW7rhtBgQ7IWC7A 9k0jplLAZ93OTq4ZX4de0XKcrs5f51ip0/TnGZBQ3nPVp2gBLdrLlAkmXXOtPyT2 5Lu7s2sDek3Uj2JMGL4t0cG8DmNaV3dk0cEF2bhbaxUynfVCRf3mOHuu8sSQsifi l8RD49IIv8bRM8q+NB8IBfYcoBfJRSz5Uvi9KDLfWXuh8hIpB3dBnYz3czU/ABAH yPvDQPU91hy5vCkvUYpLS9iCP5VMml4Lj8CsFCjiKwxJqgS/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyTInmNGpJPaDV8CsLQeNrpjNYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvYmJiZDI0M2ItYThjOC0z YTBlLTg3MmMtZTgyMzMwMDJlYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzsQzXvMmpuAqwjIjA6PrJ/N9xanPXQBU2pkUL1vwm/w3X5xnbWg39l jZUDKXVt9mVDRmLy2OYkV7HYIuWFcHRn4VtwMIXCWHy+/HGsnJRTI5rPulzKeZk0 FCBwrBqjgg5nGtPMbgPi0kU+FA8neATf6PCq9rz0qb3tnynMJOprNzW70/2Z5Qg4 4W3fkqy9S1d7sJI5JlSrBoLFNbnBsrvzeVNQQQ4ttB1Ztkd5HM4Gv5Gt2DcKYSjg uJEPmJLbBuTNTJBybWRdjCJTNlN14q860jr9X3kKePQVG+PuMQNjoHbCff/6dxoJ jbWf/51ez+0zpKSqxd9M7zlwK5wLWDk= -----END CERTIFICATE-----Generated at Tue Oct 6 03:16:22 2026 by rpki-client