$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa File: 2c9575af-cc4c-380b-a190-1fe829176b88.roa (raw, json) Hash identifier: Q2YF59ZlRBJNXY34iglZo/1o5v8QYy2dnoNfSxqmsBk= Subject key identifier: 5F:9A:FE:B9:24:D8:AF:50:D2:35:CB:F7:A1:04:43:6E:A8:C4:31:6E Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F2EED1310EA8ACCCA76DCD080 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 69.170.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:13:10:ea:8a:cc:ca:76:dc:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=b10c29a1-619b-4156-abf1-5674d56abad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:b7:27:6d:8e:5b:ca:68:2f:7c:1f:8c:9e: d7:c6:9d:b1:70:d2:88:71:9b:31:b5:1e:d5:eb:8f: da:46:d3:52:59:b7:12:09:29:f2:5f:e6:83:b2:76: d9:11:42:ff:f2:bb:23:80:41:6e:30:f4:8a:92:20: b0:20:5e:0d:46:ae:ee:b0:ad:d6:53:77:0d:91:16: ee:da:f2:02:b7:08:e3:d0:ec:ef:34:12:48:c8:00: 5f:43:43:26:b4:36:28:28:33:cd:7e:5b:a1:6a:c8: 73:42:f4:c9:06:b7:b8:ec:0c:3a:f9:3b:b2:d2:2d: 9e:33:0a:3e:e7:84:14:48:c6:0c:36:83:83:c9:53: 2c:44:13:97:f7:a4:42:94:42:c9:bd:8e:21:a1:f8: 6c:66:b1:ef:8d:54:bb:53:49:e7:92:3c:7f:f4:b7: e7:3b:8e:f8:c0:7f:01:a4:13:9b:c7:5f:83:5b:5b: 6b:14:b1:f1:65:a2:48:4c:5c:41:b1:4e:4e:17:02: ed:25:36:b1:12:39:85:36:c7:07:54:99:34:f5:c7: 51:ab:3c:4d:1d:2e:b6:4c:a3:d8:71:fe:b2:f4:18: 3f:5d:c4:a1:9a:0c:0c:ff:9c:9e:8e:fc:09:7e:20: 78:b0:ca:95:32:90:a5:6e:d5:2c:43:a2:f4:68:4f: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:FE:B9:24:D8:AF:50:D2:35:CB:F7:A1:04:43:6E:A8:C4:31:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:95:a7:69:11:11:d5:77:27:17:5d:f0:a2:d3:b1:a8:f0:d0: d3:3e:0e:13:73:2d:64:da:59:98:8c:6f:4d:39:a1:95:43:a3: 45:12:86:0b:af:ca:a2:e3:21:15:49:c7:4f:70:f8:89:b2:0f: ff:16:24:0a:bd:03:64:70:48:d6:cf:d9:df:9f:05:af:a5:0a: b3:27:f4:49:8e:90:f6:10:7d:9e:13:1b:58:5e:b3:d3:d8:0c: 1f:44:17:1e:b1:31:b4:8a:7c:c3:1b:01:73:f1:31:45:e7:26: d4:70:f0:ee:50:dc:c8:75:01:c0:6d:1c:ea:9a:05:9c:00:e6: e2:d6:7c:e6:ad:36:2c:e3:b8:4d:99:49:0d:6f:db:1e:c0:19: e4:c2:77:2f:1f:22:c5:b6:41:7c:f7:6a:47:b2:6e:35:a2:08: 66:2f:68:ae:c2:1c:74:73:47:09:c8:3d:54:14:d5:bb:2a:f4: 0c:57:ba:11:02:4f:c9:e4:ea:0d:d9:3e:fe:af:6b:b9:af:63: d5:fa:8e:62:14:9a:73:88:48:f3:01:44:6c:d4:9c:24:f0:dd: 1d:aa:7b:f4:e5:da:53:e6:90:70:a8:41:0d:15:05:db:36:44: ea:71:1e:62:60:4f:e2:df:f1:a3:12:62:14:44:87:bc:a3:26: f9:a8:14:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RMQ6orMynbc0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YjEwYzI5YTEtNjE5Yi00MTU2LWFiZjEtNTY3NGQ1NmFiYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDO3J22OW8poL3wfjJ7Xxp2xcNKIcZsxtR7V 64/aRtNSWbcSCSnyX+aDsnbZEUL/8rsjgEFuMPSKkiCwIF4NRq7usK3WU3cNkRbu 2vICtwjj0OzvNBJIyABfQ0MmtDYoKDPNfluhashzQvTJBre47Aw6+Tuy0i2eMwo+ 54QUSMYMNoODyVMsRBOX96RClELJvY4hofhsZrHvjVS7U0nnkjx/9LfnO474wH8B pBObx1+DW1trFLHxZaJITFxBsU5OFwLtJTaxEjmFNscHVJk09cdRqzxNHS62TKPY cf6y9Bg/XcShmgwM/5yejvwJfiB4sMqVMpClbtUsQ6L0aE8RmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+a/rkk2K9Q0jXL96EEQ26oxDFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMmM5NTc1YWYtY2M0Yy0z ODBiLWExOTAtMWZlODI5MTc2Yjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOVp2kREdV3Jxdd8KLTsajw0NM+DhNzLWTaWZiMb005oZVDo0UShguv yqLjIRVJx09w+ImyD/8WJAq9A2RwSNbP2d+fBa+lCrMn9EmOkPYQfZ4TG1hes9PY DB9EFx6xMbSKfMMbAXPxMUXnJtRw8O5Q3Mh1AcBtHOqaBZwA5uLWfOatNizjuE2Z SQ1v2x7AGeTCdy8fIsW2QXz3akeybjWiCGYvaK7CHHRzRwnIPVQU1bsq9AxXuhEC T8nk6g3ZPv6va7mvY9X6jmIUmnOISPMBRGzUnCTw3R2qe/Tl2lPmkHCoQQ0VBds2 ROpxHmJgT+Lf8aMSYhREh7yjJvmoFI8= -----END CERTIFICATE-----Generated at Thu Oct 8 13:24:55 2026 by rpki-client