$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa File: a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (raw, json) Hash identifier: E7WMDdjQOIY1BJbuH0C1NWZiEbK5je1Imvo1AVPZAf8= Subject key identifier: 51:B8:54:A7:08:75:1C:B0:18:8F:99:22:5B:7E:42:89:DC:BF:91:75 Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584F49762BCE256E4F527A53E540 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 992 IP address blocks: 198.169.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:2b:ce:25:6e:4f:52:7a:53:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=34ea470d-ed85-487b-8128-f092da4b0484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:f2:80:af:d5:f3:d9:e5:ce:4c:8a:06:ee: b1:5f:47:f2:0b:16:14:83:4a:4f:61:50:60:28:f1: a6:0a:d7:35:d4:d6:c7:83:96:26:2a:1a:51:aa:0d: 1c:22:31:05:3c:9a:3a:1e:04:58:94:78:ae:1c:fb: ee:be:bb:04:e2:a6:0b:fb:43:79:d7:f8:98:68:95: b0:43:76:e6:59:60:5e:83:88:15:9a:b1:27:70:27: 2d:08:b2:26:80:82:57:7d:f6:3d:1e:f2:21:e7:45: a0:60:24:48:69:2a:64:bb:63:fc:3d:2f:9a:26:b7: f0:7e:64:af:7c:54:70:8f:01:ae:3f:3a:d3:b7:ea: c6:a1:4f:80:d5:1e:2a:f6:9f:1e:80:a5:20:7c:ae: cc:19:7f:f4:ef:f2:8f:43:11:a6:6a:8e:ea:1c:e5: 74:0d:6e:6d:63:7c:ee:29:55:ad:24:02:e4:88:d3: 3f:57:86:e0:47:52:0d:19:b2:05:b9:52:85:36:20: 29:e7:0b:96:6c:a3:8e:86:b7:7c:a0:34:da:47:6a: 40:1e:51:d6:81:12:dc:88:25:1a:a5:00:ce:68:c1: 4e:89:91:e0:38:68:db:4a:eb:b6:2c:21:4b:b2:8f: 33:9c:0a:6c:d1:6b:0e:72:49:63:bb:1d:62:74:e6: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B8:54:A7:08:75:1C:B0:18:8F:99:22:5B:7E:42:89:DC:BF:91:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 198.169.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5f:ec:4f:98:a3:e5:f9:b0:f5:e8:8d:8f:41:90:8a:12:06: ca:0b:16:8f:93:d2:be:df:94:a3:61:80:45:c6:9b:67:b5:05: 35:d2:7b:5f:b9:57:eb:00:f1:55:94:0b:ba:c9:bf:e9:a2:b7: 05:2e:44:44:d0:15:98:cb:f5:e7:bb:a8:dd:5d:e6:7d:d9:c1: f6:e7:41:2d:6e:1b:e7:0c:60:ad:20:d9:b4:0c:c2:4c:b5:af: b2:c8:ed:24:e6:33:f1:88:37:1d:1d:0d:0a:b4:e0:ea:a6:e2: c1:ba:58:3f:a9:6a:16:97:3c:47:af:a8:55:1a:30:d5:cf:c6: a3:f0:d7:bd:48:7a:5a:a8:a9:34:34:6b:e0:63:33:01:c8:ab: f7:de:37:86:7d:18:a3:b0:33:29:bc:3e:32:c5:37:2c:34:da: 8b:04:95:ee:5f:d3:f5:2c:d5:a7:2d:5c:86:fd:45:f0:4b:38: 46:dc:2d:55:e3:0a:fb:32:03:62:74:e7:a1:a9:6c:44:28:d6: 87:d1:db:ee:7b:92:0e:07:da:19:3b:8b:0b:b8:37:07:6b:2f: e6:7f:c8:3b:41:39:39:e9:3b:4f:20:89:87:39:f9:5f:a1:4f: b9:0f:07:e2:38:5b:95:be:4e:e6:31:8c:4e:af:e6:26:32:ec: f5:19:26:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdivOJW5PUnpT5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzRlYTQ3MGQtZWQ4NS00ODdiLTgxMjgtZjA5MmRhNGIwNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRbygK/V89nlzkyKBu6xX0fyCxYUg0pPYVBg KPGmCtc11NbHg5YmKhpRqg0cIjEFPJo6HgRYlHiuHPvuvrsE4qYL+0N51/iYaJWw Q3bmWWBeg4gVmrEncCctCLImgIJXffY9HvIh50WgYCRIaSpku2P8PS+aJrfwfmSv fFRwjwGuPzrTt+rGoU+A1R4q9p8egKUgfK7MGX/07/KPQxGmao7qHOV0DW5tY3zu KVWtJALkiNM/V4bgR1INGbIFuVKFNiAp5wuWbKOOhrd8oDTaR2pAHlHWgRLciCUa pQDOaMFOiZHgOGjbSuu2LCFLso8znAps0WsOckljux1idOY30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFG4VKcIdRywGI+ZIlt+Qoncv5F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvYTI3ZmM2MjEtNWMwMi0z MjZjLTgxYWUtYzllOWUyYzY2OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1f7E+Yo+X5sPXojY9BkIoSBsoLFo+T0r7flKNhgEXGm2e1BTXSe1+5 V+sA8VWUC7rJv+mitwUuRETQFZjL9ee7qN1d5n3ZwfbnQS1uG+cMYK0g2bQMwky1 r7LI7STmM/GINx0dDQq04Oqm4sG6WD+pahaXPEevqFUaMNXPxqPw171IelqoqTQ0 a+BjMwHIq/feN4Z9GKOwMym8PjLFNyw02osEle5f0/Us1actXIb9RfBLOEbcLVXj CvsyA2J056GpbEQo1ofR2+57kg4H2hk7iwu4NwdrL+Z/yDtBOTnpO08giYc5+V+h T7kPB+I4W5W+TuYxjE6v5iYy7PUZJoQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:55:42 2026 by rpki-client