$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/a8fecbb7-1b23-3686-b5d6-f9a8df600499.roa File: a8fecbb7-1b23-3686-b5d6-f9a8df600499.roa (raw, json) Hash identifier: FWFm9D3mZe3N7ji81tm7ESa8ZLi/xJGzP6/GrdOTT4w= Subject key identifier: 7E:6B:15:C8:D5:66:63:C1:12:42:47:4B:BE:8C:2B:ED:F2:B3:1F:B0 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F4277FD07853BF4486339B500 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/a8fecbb7-1b23-3686-b5d6-f9a8df600499.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 3755 IP address blocks: 192.77.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:fd:07:85:3b:f4:48:63:39:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f322fa7b-e0f6-47aa-8c3f-3ac9cd7f43b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:80:b9:b8:0d:f4:a0:33:75:fc:ae:49:78: 67:aa:34:0a:d2:23:d3:22:fe:73:9a:1f:c1:07:a7: 01:d1:96:95:66:70:3a:d6:5f:79:a8:a4:bb:bb:ac: a4:47:93:a8:4f:1d:e3:12:ea:02:86:f0:ed:6b:11: f0:2e:95:56:d7:4b:f0:49:94:46:56:fb:2f:b8:7a: 90:87:3e:67:07:0e:03:cd:d4:4e:13:b8:c3:57:5d: 7b:d3:f5:e3:f0:8e:1c:f2:b2:7f:0f:87:98:57:ef: 0f:a4:8e:d4:64:2c:b1:bb:c4:97:3b:f2:cd:c7:66: b1:28:cd:02:7d:de:15:51:47:04:f3:87:28:31:0c: a1:86:71:71:25:a8:a1:39:07:e4:fc:ee:08:9a:2f: f6:e1:20:b6:8b:e4:2c:28:de:c8:3f:46:3a:58:dd: 5c:32:81:44:b1:fe:b0:6c:f1:5d:d0:9c:61:1a:76: 1a:53:5f:9f:e3:52:8e:26:e1:d8:f8:99:35:59:c0: 5d:a4:87:57:9b:e3:37:e6:b3:c0:a1:d5:50:95:65: f8:7c:f1:0d:92:14:92:7f:bf:cc:4a:22:ae:8b:ac: 16:c6:17:35:30:bb:ec:5d:c2:66:8a:37:db:d5:4e: d6:35:89:2b:82:8a:ec:6c:2f:04:cf:3d:12:b3:b7: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6B:15:C8:D5:66:63:C1:12:42:47:4B:BE:8C:2B:ED:F2:B3:1F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/a8fecbb7-1b23-3686-b5d6-f9a8df600499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 192.77.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:58:d8:a5:bf:8b:90:53:ce:47:f9:fa:f4:93:cb:ad:10:62: 8a:76:f3:df:ca:b4:bf:94:c1:07:38:a7:78:27:bd:a2:a3:7c: 32:19:2e:57:ec:1e:ad:e0:3b:53:90:a7:8c:28:47:cb:28:19: 93:d5:80:70:c6:aa:38:52:af:a6:31:d7:bf:32:91:48:33:ca: 1e:b9:c3:b4:6c:9f:a9:00:f2:d2:94:54:97:69:36:4e:3a:fa: 2e:18:82:c4:2c:a4:b3:42:9f:d8:9c:e9:f7:be:e0:c7:58:58: 48:9c:ac:23:a8:90:fd:ab:97:94:50:c1:b8:3c:a5:1c:d2:62: 1f:7b:c7:50:9f:5b:f0:fe:05:64:b7:55:eb:5a:a9:84:8d:e8: ad:95:ca:d0:76:7a:ac:75:42:05:ab:5a:de:00:f6:96:b1:37: 7c:05:ba:e5:80:ae:00:25:ea:1c:d5:e8:9c:0d:e7:be:bd:c6: 28:fd:7d:d8:0d:51:49:87:21:46:8f:c1:75:a8:14:c7:db:3a: 36:d8:b4:38:3a:0f:e8:a6:4d:66:f1:cf:a3:d3:31:9c:81:49: d4:be:59:d4:3b:e5:57:e4:77:a2:92:f7:ec:b2:b7:43:c0:f6: 0f:5b:a2:57:57:5a:57:e1:74:ac:14:04:42:e8:17:9b:51:fe: 65:85:6f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/0HhTv0SGM5tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjMyMmZhN2ItZTBmNi00N2FhLThjM2YtM2FjOWNkN2Y0M2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjouAubgN9KAzdfyuSXhnqjQK0iPTIv5zmh/B B6cB0ZaVZnA61l95qKS7u6ykR5OoTx3jEuoChvDtaxHwLpVW10vwSZRGVvsvuHqQ hz5nBw4DzdROE7jDV1170/Xj8I4c8rJ/D4eYV+8PpI7UZCyxu8SXO/LNx2axKM0C fd4VUUcE84coMQyhhnFxJaihOQfk/O4Imi/24SC2i+QsKN7IP0Y6WN1cMoFEsf6w bPFd0JxhGnYaU1+f41KOJuHY+Jk1WcBdpIdXm+M35rPAodVQlWX4fPENkhSSf7/M SiKui6wWxhc1MLvsXcJmijfb1U7WNYkrgorsbC8Ezz0Ss7dMAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5rFcjVZmPBEkJHS76MK+3ysx+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYThmZWNiYjctMWIyMy0z Njg2LWI1ZDYtZjlhOGRmNjAwNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwE2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1Y2KW/i5BTzkf5+vSTy60QYop289/KtL+UwQc4p3gnvaKjfDIZLlfs Hq3gO1OQp4woR8soGZPVgHDGqjhSr6Yx178ykUgzyh65w7Rsn6kA8tKUVJdpNk46 +i4YgsQspLNCn9ic6fe+4MdYWEicrCOokP2rl5RQwbg8pRzSYh97x1CfW/D+BWS3 VetaqYSN6K2VytB2eqx1QgWrWt4A9paxN3wFuuWArgAl6hzV6JwN5769xij9fdgN UUmHIUaPwXWoFMfbOjbYtDg6D+imTWbxz6PTMZyBSdS+WdQ75Vfkd6KS9+yyt0PA 9g9boldXWlfhdKwUBELoF5tR/mWFb8E= -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:13 2026 by rpki-client