$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa File: 9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa (raw, json) Hash identifier: D+9K9ZDumUyKZGA+gAwqfCXy2sGEXJAJIiuTnm5393M= Subject key identifier: 4E:C1:78:2A:68:A0:23:3B:8A:D5:4F:13:24:4D:51:7A:CE:D9:E9:D6 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584F497508B633484B65E43161E0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25697 IP address blocks: 209.151.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:08:b6:33:48:4b:65:e4:31:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67ada6c3-8dae-49c9-90c8-0d13ae96940a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:1b:a2:43:65:97:ed:71:b2:f0:90:c1:82: 31:fd:95:a1:18:7c:94:1d:d8:6b:fc:d2:ae:ba:18: 3b:1a:8b:74:39:17:6b:1f:c2:30:7e:73:85:87:cd: 5a:3f:b1:0e:6b:9e:f9:84:76:74:ee:d9:74:b5:90: a9:f5:de:21:c3:1f:3c:17:32:d4:69:21:8d:02:90: 05:f6:37:6a:8f:a0:68:9f:24:cf:da:77:4b:cb:39: 7a:a3:35:0f:1d:f0:3e:19:27:3e:c0:cb:93:d1:68: fd:71:21:fe:04:a1:b7:e3:91:b1:15:40:fd:21:72: bb:b7:97:1e:c6:95:4c:05:4d:9e:eb:23:71:9f:4b: 53:10:cd:e8:b8:7b:ec:db:9d:8c:c6:2c:b7:d5:89: ea:74:5d:9f:96:2b:d9:d7:b5:e5:99:4b:66:95:b5: 1f:23:0f:36:7e:28:3f:69:f4:32:2f:34:91:7d:8d: da:36:97:d5:71:86:51:da:0c:22:1c:2a:2f:9b:27: b7:24:7a:ea:cc:cd:44:48:46:ec:16:f2:17:8a:0d: 7a:d1:9e:93:bb:de:0a:97:16:e0:13:83:56:b5:07: 01:25:4f:44:aa:1e:c6:c2:08:79:06:07:b1:ee:d0: 04:ad:bd:51:e1:1b:b0:31:bd:aa:d0:eb:15:53:f3: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C1:78:2A:68:A0:23:3B:8A:D5:4F:13:24:4D:51:7A:CE:D9:E9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0e:55:fb:b7:58:83:25:d3:3c:25:2c:96:1e:16:c7:ec:79: d0:45:30:35:40:c5:7d:85:95:2d:f7:69:f2:82:c0:0c:98:17: a7:aa:56:fb:a7:7f:a3:43:51:af:b4:6d:2a:22:20:41:2b:49: e9:4b:bd:eb:84:15:32:2b:1b:4f:0d:2c:25:90:e1:d2:46:01: 24:55:33:1a:f1:00:81:39:42:06:49:94:08:b4:81:1f:65:46: f1:0e:4b:55:43:57:b7:23:83:5d:01:87:ff:1c:07:bf:04:fa: 0e:63:e1:3a:f6:71:f6:a3:a7:73:c4:41:16:87:71:74:7e:97: f6:6e:17:45:93:a9:93:e9:3e:e9:ca:f5:b3:99:52:27:56:6d: c7:8f:49:c6:6c:74:c1:b5:5b:db:66:24:7a:83:a2:02:d8:09: aa:1b:cb:02:e1:c4:f0:3b:de:c3:36:09:51:68:d2:5a:3c:11: 6e:57:fc:63:5f:e8:8a:74:1c:71:ec:db:07:b7:ad:1d:63:14: d5:96:b4:23:47:92:ee:1d:3f:63:a5:72:b6:fa:e4:89:28:e8: dc:12:66:6c:e9:a7:2c:46:35:78:39:b6:f5:45:36:82:f0:95: 94:7b:fa:c2:ca:99:ab:70:09:85:08:21:b6:36:d5:e3:4b:f5: 53:e5:cd:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQi2M0hLZeQxYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdhZGE2YzMtOGRhZS00OWM5LTkwYzgtMGQxM2FlOTY5NDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLQbokNll+1xsvCQwYIx/ZWhGHyUHdhr/NKu uhg7Got0ORdrH8IwfnOFh81aP7EOa575hHZ07tl0tZCp9d4hwx88FzLUaSGNApAF 9jdqj6BonyTP2ndLyzl6ozUPHfA+GSc+wMuT0Wj9cSH+BKG345GxFUD9IXK7t5ce xpVMBU2e6yNxn0tTEM3ouHvs252Mxiy31YnqdF2flivZ17XlmUtmlbUfIw82fig/ afQyLzSRfY3aNpfVcYZR2gwiHCovmye3JHrqzM1ESEbsFvIXig160Z6Tu94Klxbg E4NWtQcBJU9Eqh7Gwgh5Bgex7tAErb1R4RuwMb2q0OsVU/M1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7BeCpooCM7itVPEyRNUXrO2enWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvOWFjZjQ3YmEtODE5Ny0z NTk4LTk4ZmUtZDc1NDRiN2M2ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkOVfu3WIMl0zwlLJYeFsfsedBFMDVAxX2FlS33afKCwAyYF6eqVvun f6NDUa+0bSoiIEErSelLveuEFTIrG08NLCWQ4dJGASRVMxrxAIE5QgZJlAi0gR9l RvEOS1VDV7cjg10Bh/8cB78E+g5j4Tr2cfajp3PEQRaHcXR+l/ZuF0WTqZPpPunK 9bOZUidWbcePScZsdMG1W9tmJHqDogLYCaobywLhxPA73sM2CVFo0lo8EW5X/GNf 6Ip0HHHs2we3rR1jFNWWtCNHku4dP2Olcrb65Iko6NwSZmzppyxGNXg5tvVFNoLw lZR7+sLKmatwCYUIIbY21eNL9VPlzUg= -----END CERTIFICATE-----Generated at Thu Oct 29 13:48:01 2026 by rpki-client