$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa File: 2d50375f-8500-3214-a11f-bd594b4aa849.roa (raw, json) Hash identifier: aZ+DUkF6jqqRLBwVI+E3003mc0nzbIQUB/PB2d7x81g= Subject key identifier: A0:0F:A2:7B:E7:54:A1:17:B9:33:9B:6C:A6:58:01:7F:42:5F:43:F2 Certificate issuer: /CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65 Certificate serial: 010D0C9F4328584F14679754DC5F09B334599100 Authority key identifier: 73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7773 IP address blocks: 164.154.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:97:54:dc:5f:09:b3:34:59:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ba6dece2-5786-40eb-96a5-4fab457a9528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:65:52:25:4c:ef:ab:07:6b:da:3c:7e:46: c4:6b:a0:76:b6:c3:76:39:5a:12:14:02:db:16:5f: 12:57:b5:ba:8b:de:0f:e8:7a:84:63:57:32:95:5e: 15:ae:0d:1c:42:ba:ad:15:a4:de:f2:c7:64:3c:5d: 07:47:0a:0c:d8:81:b3:ea:54:4a:f8:9a:7d:7b:91: 10:64:8c:09:b2:1d:a2:e7:d3:49:f2:33:e4:30:76: 6e:b4:04:90:f4:80:72:3f:6f:76:7a:d0:e6:1a:41: 78:fd:f5:99:4c:09:ee:1e:e6:92:2f:d0:65:90:77: 8e:75:e1:f1:b1:50:39:86:6c:40:a2:3a:53:5e:48: 9d:46:d9:4c:bc:98:3b:b3:2c:84:22:0b:71:de:b7: 14:fc:a1:1b:52:5f:ce:e2:d1:09:a7:73:b1:b0:c3: 3b:13:9e:74:78:1f:05:eb:9b:d4:df:91:b6:23:be: a9:61:b8:b7:52:a7:9f:4b:ad:84:7a:13:f9:d8:ef: 7f:6b:b9:c5:b7:41:ab:95:e9:b6:79:7e:cc:d3:69: 01:a0:9e:20:54:24:12:1f:5a:9a:e7:25:2a:5c:e1: b5:4d:b3:a6:1a:31:f3:16:17:a6:c2:94:72:d8:6e: c8:de:e1:84:02:17:f5:dc:8a:bc:23:8e:53:b4:e1: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0F:A2:7B:E7:54:A1:17:B9:33:9B:6C:A6:58:01:7F:42:5F:43:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl X509v3 Authority Key Identifier: keyid:73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer sbgp-ipAddrBlock: critical IPv4: 164.154.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c9:13:f6:08:db:8b:d1:28:51:2d:a1:5d:0f:e9:b4:9e:90: 35:d6:76:d7:11:31:a7:aa:16:ba:b8:d7:12:12:58:bd:17:0f: 76:ca:68:c3:e0:8a:84:2a:79:77:73:ed:61:e0:6b:c4:6f:62: a9:c5:ab:40:cc:43:2a:11:75:f3:ac:b2:6c:c1:99:d2:d8:a7: 1f:8e:07:18:0f:bd:cf:d1:18:ad:0b:f5:a5:77:9b:64:0d:87: 32:07:d7:a9:f2:ea:34:9e:7c:57:d9:9e:2a:24:05:8a:42:7c: 84:86:fa:69:36:3b:ee:e5:54:65:c9:48:c3:7f:c1:5d:5e:ef: 5f:64:47:a6:49:ce:65:90:24:67:a5:6b:1a:05:a7:d2:d9:3b: c1:9c:cc:49:47:cd:62:53:6c:96:81:6f:5b:5a:a4:13:b0:bd: 93:46:c0:9c:b0:54:ab:e4:07:70:4b:4d:e4:7c:0d:63:12:98: b5:7b:59:74:b1:4c:df:97:24:b9:bf:0e:ad:37:fa:1d:45:ff: 9b:52:dd:db:ff:0d:53:00:35:90:db:79:a4:e6:ce:74:f9:11: 73:92:1d:a4:06:7a:4a:ad:f8:56:10:15:06:ba:19:c9:93:d4: 8c:3c:b5:6a:3d:b7:b8:3e:62:4a:d6:67:f4:f0:b0:d6:73:35: 1f:69:4e:a4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8UZ5dU3F8JszRZkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJmZGM5ZTMtYzI0Yy00Y2ZmLWE4Y2YtOWYyOTZkZjQx ZTY1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YmE2ZGVjZTItNTc4Ni00MGViLTk2YTUtNGZhYjQ1N2E5NTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9dlUiVM76sHa9o8fkbEa6B2tsN2OVoSFALb Fl8SV7W6i94P6HqEY1cylV4Vrg0cQrqtFaTe8sdkPF0HRwoM2IGz6lRK+Jp9e5EQ ZIwJsh2i59NJ8jPkMHZutASQ9IByP292etDmGkF4/fWZTAnuHuaSL9BlkHeOdeHx sVA5hmxAojpTXkidRtlMvJg7syyEIgtx3rcU/KEbUl/O4tEJp3OxsMM7E550eB8F 65vU35G2I76pYbi3UqefS62EehP52O9/a7nFt0Grlem2eX7M02kBoJ4gVCQSH1qa 5yUqXOG1TbOmGjHzFhemwpRy2G7I3uGEAhf13Iq8I45TtOHVlwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKAPonvnVKEXuTObbKZYAX9CX0PyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMmZk YzllMy1jMjRjLTRjZmYtYThjZi05ZjI5NmRmNDFlNjUvMmQ1MDM3NWYtODUwMC0z MjE0LWExMWYtYmQ1OTRiNGFhODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzJmZGM5ZTMtYzI0Yy00Y2ZmLWE4 Y2YtOWYyOTZkZjQxZTY1L2MyZmRjOWUzLWMyNGMtNGNmZi1hOGNmLTlmMjk2ZGY0 MWU2NS5jcmwwHwYDVR0jBBgwFoAUc59gR4wRCkQq8g9fK8NMKFT0xTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMmZkYzllMy1jMjRjLTRjZmYtYThjZi05ZjI5 NmRmNDFlNjUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApJowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHckT9gjbi9EoUS2hXQ/ptJ6QNdZ21xExp6oWurjXEhJYvRcPdspow+CK hCp5d3PtYeBrxG9iqcWrQMxDKhF186yybMGZ0tinH44HGA+9z9EYrQv1pXebZA2H MgfXqfLqNJ58V9meKiQFikJ8hIb6aTY77uVUZclIw3/BXV7vX2RHpknOZZAkZ6Vr GgWn0tk7wZzMSUfNYlNsloFvW1qkE7C9k0bAnLBUq+QHcEtN5HwNYxKYtXtZdLFM 35ckub8OrTf6HUX/m1Ld2/8NUwA1kNt5pObOdPkRc5IdpAZ6Sq34VhAVBroZyZPU jDy1aj23uD5iStZn9PCw1nM1H2lOpA== -----END CERTIFICATE-----Generated at Sat Sep 26 04:11:36 2026 by rpki-client