$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c252355f-f1da-3c02-9a36-072658e179f2.roa File: c252355f-f1da-3c02-9a36-072658e179f2.roa (raw, json) Hash identifier: XI24p8M9VkXU92Mw0m44WTBkKxihDyibW6613VQJGFI= Subject key identifier: FF:F8:49:A6:79:C7:8A:EC:31:18:BE:6F:FF:2A:86:A5:43:D2:FF:E0 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584F4975737A7077BAF8B304E200 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c252355f-f1da-3c02-9a36-072658e179f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 150.9.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:73:7a:70:77:ba:f8:b3:04:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e67fd0b3-ae03-4250-8d66-edfdc84c2a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:1f:f9:b4:9e:72:d9:6a:30:79:73:be:8d: 2f:46:19:0f:24:e0:a8:04:ac:8e:52:ad:3c:d9:00: 56:28:3f:36:c8:1e:61:ca:d9:22:67:0b:3b:11:e1: 86:4e:99:46:1c:82:06:d6:bf:e3:b1:7d:47:75:88: bb:e9:10:1b:b5:5c:35:6f:79:33:02:4b:b5:9b:c4: ae:32:c1:ef:a4:9d:a2:a3:0e:27:ef:a6:b3:23:6a: 6a:2c:9f:ef:4f:63:64:c0:90:b5:fd:80:03:e5:22: ff:0f:ed:02:8e:82:a3:66:6c:8e:7e:c0:8b:18:53: 68:99:17:77:52:cc:d9:97:ba:0a:4a:9e:04:95:c4: 1e:a8:b2:ff:21:7e:a1:fd:92:18:af:42:88:72:a9: 79:83:a0:6d:80:99:f5:b6:ee:bf:47:4f:c4:c5:4d: c1:a5:5f:1c:65:cc:1c:cf:81:78:42:5b:18:62:95: a8:57:51:24:d5:f2:03:b6:74:40:54:40:94:89:f1: 96:6d:06:4e:e1:d5:e3:74:75:21:74:1a:98:9b:bb: 37:d5:9c:8f:96:2e:81:ed:16:d2:a3:c4:7f:22:52: d8:f1:d7:4f:5a:1d:99:0e:50:5e:84:f9:fe:15:84: c1:8e:f0:6a:06:94:e4:32:ce:b9:41:7e:d0:65:82: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:49:A6:79:C7:8A:EC:31:18:BE:6F:FF:2A:86:A5:43:D2:FF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c252355f-f1da-3c02-9a36-072658e179f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:53:29:d9:b4:2e:1a:7a:61:8b:42:57:63:32:34:6b:48:dd: d9:ba:e9:3c:fa:00:6a:81:ef:26:2a:21:e8:7d:24:01:12:51: d8:ab:59:33:a1:ae:ed:9d:e2:e2:ec:5d:17:4f:87:51:89:4b: 4e:ae:66:07:15:fd:b3:01:dd:1d:7b:60:f4:b2:4d:31:40:70: 82:db:cf:42:ca:d0:92:ee:f7:dd:7b:6c:6b:8a:09:f9:80:ef: 58:44:37:07:32:50:96:b6:e7:4e:62:14:67:14:b3:e1:d5:80: ab:0c:67:c2:2c:10:c5:a4:cd:b2:33:10:ff:46:7f:d8:74:0c: a8:05:5c:0f:22:a7:52:3a:f5:16:59:1f:45:21:68:3d:f4:b5: df:a7:a0:31:08:b3:25:7e:1a:93:1b:5e:d0:e3:24:ce:42:fe: 65:fb:e4:dd:95:87:9c:a3:bd:b5:cd:fe:c6:95:0a:fc:04:a8: f8:4c:ae:fe:d7:16:c0:a1:08:89:21:ff:74:7a:6a:95:fa:1c: e7:38:9a:ed:e8:0b:ff:4d:e4:75:c2:05:e9:db:76:e8:a6:b5: 2b:a4:18:72:61:0a:bd:cf:4f:eb:46:3a:42:09:f5:69:f8:f0: 19:c6:31:54:59:0a:77:03:7f:ae:b6:66:7b:02:5c:27:f7:a0: a6:e4:f7:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXN6cHe6+LME4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTY3ZmQwYjMtYWUwMy00MjUwLThkNjYtZWRmZGM4NGMyYTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBQf+bSectlqMHlzvo0vRhkPJOCoBKyOUq08 2QBWKD82yB5hytkiZws7EeGGTplGHIIG1r/jsX1HdYi76RAbtVw1b3kzAku1m8Su MsHvpJ2iow4n76azI2pqLJ/vT2NkwJC1/YAD5SL/D+0CjoKjZmyOfsCLGFNomRd3 UszZl7oKSp4ElcQeqLL/IX6h/ZIYr0KIcql5g6BtgJn1tu6/R0/ExU3BpV8cZcwc z4F4QlsYYpWoV1Ek1fIDtnRAVECUifGWbQZO4dXjdHUhdBqYm7s31ZyPli6B7RbS o8R/IlLY8ddPWh2ZDlBehPn+FYTBjvBqBpTkMs65QX7QZYLsDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/4SaZ5x4rsMRi+b/8qhqVD0v/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvYzI1MjM1NWYtZjFkYS0z YzAyLTlhMzYtMDcyNjU4ZTE3OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVTKdm0Lhp6YYtCV2MyNGtI3dm66Tz6AGqB7yYqIeh9JAESUdirWTOh ru2d4uLsXRdPh1GJS06uZgcV/bMB3R17YPSyTTFAcILbz0LK0JLu9917bGuKCfmA 71hENwcyUJa2505iFGcUs+HVgKsMZ8IsEMWkzbIzEP9Gf9h0DKgFXA8ip1I69RZZ H0UhaD30td+noDEIsyV+GpMbXtDjJM5C/mX75N2Vh5yjvbXN/saVCvwEqPhMrv7X FsChCIkh/3R6apX6HOc4mu3oC/9N5HXCBenbduimtSukGHJhCr3PT+tGOkIJ9Wn4 8BnGMVRZCncDf662ZnsCXCf3oKbk9ys= -----END CERTIFICATE-----Generated at Tue Oct 6 01:08:41 2026 by rpki-client