$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/15011994-9da5-3fcf-b23a-7c336ddae2b1.roa File: 15011994-9da5-3fcf-b23a-7c336ddae2b1.roa (raw, json) Hash identifier: vmSZkF4RJAoFFwnRtQVoBvG2tUxfhXOiKQis+4cDDJ0= Subject key identifier: 8E:AE:19:39:66:CA:5B:0D:84:CE:83:22:8A:BF:68:22:50:07:6D:E0 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584F0D6CE77671342273F6A1BAB3 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/15011994-9da5-3fcf-b23a-7c336ddae2b1.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16276 IP address blocks: 206.168.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e7:76:71:34:22:73:f6:a1:ba:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=bc35f96b-f3dc-4780-9255-1464947c4a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:bd:61:0a:90:6c:95:57:40:ea:e8:7d:c8: d7:6e:eb:6d:b1:d0:9c:11:68:c8:01:e1:24:1c:0d: 12:1c:e7:29:09:64:db:0d:86:00:f5:bf:d7:00:d8: 8f:ae:20:7e:f5:2f:8b:96:7a:95:4c:32:1e:91:e6: 95:ae:be:4a:c5:d6:cc:90:f3:67:fd:dd:a0:9d:8e: 83:d0:e7:04:58:e3:41:30:38:c9:2a:c7:7e:e3:b7: 88:a2:ac:e7:a6:42:99:53:a8:d3:ac:77:29:48:30: d2:cc:47:6c:42:f8:6e:8f:82:10:45:ef:49:44:40: 6f:10:16:8e:c6:47:33:af:ba:b7:df:50:d2:28:6c: dc:91:85:a0:bc:ae:00:1d:f0:74:66:37:b7:94:78: 4e:76:d7:6b:0d:e0:04:c7:46:f9:f9:b3:e4:b8:f0: 94:83:22:0c:3a:68:f5:96:38:52:df:53:a1:5b:57: 2d:5b:64:40:10:ad:1f:06:dd:13:b4:9d:d7:27:8e: 53:58:70:db:ae:0c:a2:e2:73:31:47:90:6b:79:57: 0e:20:9e:61:8a:09:ab:2b:8f:38:11:fb:46:5e:00: b6:47:3a:e5:3d:65:2a:ba:1a:ae:d6:79:f1:ce:cc: 23:d1:b8:a4:58:14:15:98:27:90:31:10:43:1f:40: 88:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AE:19:39:66:CA:5B:0D:84:CE:83:22:8A:BF:68:22:50:07:6D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/15011994-9da5-3fcf-b23a-7c336ddae2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 206.168.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:92:52:14:ef:b6:f3:de:b6:a6:23:96:58:a9:8c:16:39:ca: 8b:a1:96:78:eb:a6:56:33:50:9d:c9:3a:a2:28:35:05:d3:39: 16:46:dc:18:d9:b1:89:81:4b:24:d8:99:3e:b8:b1:f6:e0:d3: 02:87:42:65:2d:1a:19:b7:d5:e3:e4:2e:a3:ac:8e:7c:c1:41: 5d:93:f0:54:be:b0:2e:e1:1f:7e:b6:e2:1a:28:0b:f7:6c:44: ca:50:51:9c:33:61:54:6d:0a:42:69:e2:78:0b:72:fa:40:6c: 15:d8:37:b0:ac:da:6e:e0:98:20:4d:9a:d8:7f:9d:d1:5b:1e: e0:4b:bf:32:9d:45:b3:5e:14:64:a3:c7:cb:28:ee:91:79:4c: f7:5b:3d:77:4b:b2:4f:f8:d3:b6:68:60:d6:27:e8:d5:28:d2: 7b:69:47:42:2c:6b:4c:47:75:72:19:3e:ca:28:ce:ce:e2:21: af:14:d0:a6:ed:25:b3:82:cc:52:2f:b6:85:1b:ee:c1:8e:9d: c7:f1:0d:36:41:4f:07:ed:c8:4b:90:2e:26:f2:b1:6a:28:74: e1:6e:51:a3:66:5b:fe:48:74:a4:28:dd:72:b5:70:5e:d0:c6: e5:b7:d3:89:38:4e:4c:e7:f7:a9:82:9f:9a:fd:e6:1d:b3:f3: b7:00:f6:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOd2cTQic/ahurMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YmMzNWY5NmItZjNkYy00NzgwLTkyNTUtMTQ2NDk0N2M0YTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbq9YQqQbJVXQOrofcjXbuttsdCcEWjIAeEk HA0SHOcpCWTbDYYA9b/XANiPriB+9S+LlnqVTDIekeaVrr5KxdbMkPNn/d2gnY6D 0OcEWONBMDjJKsd+47eIoqznpkKZU6jTrHcpSDDSzEdsQvhuj4IQRe9JREBvEBaO xkczr7q331DSKGzckYWgvK4AHfB0Zje3lHhOdtdrDeAEx0b5+bPkuPCUgyIMOmj1 ljhS31OhW1ctW2RAEK0fBt0TtJ3XJ45TWHDbrgyi4nMxR5BreVcOIJ5higmrK484 EftGXgC2RzrlPWUquhqu1nnxzswj0bikWBQVmCeQMRBDH0CIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6uGTlmylsNhM6DIoq/aCJQB23gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvMTUwMTE5OTQtOWRhNS0z ZmNmLWIyM2EtN2MzMzZkZGFlMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2SUhTvtvPetqYjllipjBY5youhlnjrplYzUJ3JOqIoNQXTORZG3BjZ sYmBSyTYmT64sfbg0wKHQmUtGhm31ePkLqOsjnzBQV2T8FS+sC7hH3624hooC/ds RMpQUZwzYVRtCkJp4ngLcvpAbBXYN7Cs2m7gmCBNmth/ndFbHuBLvzKdRbNeFGSj x8so7pF5TPdbPXdLsk/407ZoYNYn6NUo0ntpR0Isa0xHdXIZPsoozs7iIa8U0Kbt JbOCzFIvtoUb7sGOncfxDTZBTwftyEuQLibysWoodOFuUaNmW/5IdKQo3XK1cF7Q xuW304k4Tkzn96mCn5r95h2z87cA9qU= -----END CERTIFICATE-----Generated at Fri Sep 11 14:55:19 2026 by rpki-client