$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa File: 524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa (raw, json) Hash identifier: eIgDUGatO2gBFxsdBcp/onmmfUWWHf5onBvhgDufosM= Subject key identifier: 67:8D:62:24:DD:DD:54:FA:95:70:D7:51:97:BA:0C:62:BA:51:B2:68 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584F49747431721546804F406880 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393559 IP address blocks: 156.70.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:74:31:72:15:46:80:4f:40:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4cef5cab-e985-4197-a817-d9cba73c5f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:49:f8:e3:61:d0:03:e7:8a:ca:d4:ee:a8: 8c:56:78:1f:8e:6d:79:ac:da:a9:c2:74:27:e8:4d: 8c:03:11:0f:6f:de:f6:3a:e8:34:b7:5f:ba:a0:9d: f1:38:8e:65:3e:1f:bc:d2:61:a7:5c:20:5d:88:61: 3c:6e:05:2b:c4:36:36:91:2d:ed:be:31:70:6a:3c: 23:1a:44:33:ba:c0:0a:4f:e1:47:1e:37:0e:b2:e5: 19:8e:c5:b2:70:08:18:35:24:f7:c1:37:54:c5:ac: a0:00:4f:b9:b2:32:50:c5:68:d5:99:33:20:7e:37: 62:9b:c9:94:e1:6d:a3:63:55:4b:7a:bc:37:93:c3: e0:6b:53:73:63:20:ee:f1:7c:80:1c:5c:e7:9a:c2: 77:84:d6:80:38:78:a7:01:f3:e5:dd:a6:1e:26:17: c6:3f:0d:00:81:f2:05:34:ec:05:80:07:be:06:51: fc:17:bf:4a:09:ae:f4:e0:75:86:03:a0:a2:02:0f: 25:ff:53:27:c9:a2:41:2c:0d:3f:6d:d2:80:34:33: e5:7b:20:32:03:90:b1:8b:68:24:61:c8:d8:f5:18: c7:18:aa:31:ee:8b:62:e0:ff:b7:9d:89:c5:74:fe: 3e:fd:bb:df:25:75:20:27:b3:ff:03:bf:4b:23:64: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8D:62:24:DD:DD:54:FA:95:70:D7:51:97:BA:0C:62:BA:51:B2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d3:7d:cd:b4:7a:39:7a:78:41:59:57:03:88:9f:40:0b:41: de:41:6b:6f:0d:4a:57:6a:7a:c9:ba:21:7e:64:c0:06:d1:02: 7d:83:ec:8d:9e:eb:e2:f8:79:3d:03:42:74:35:0c:dd:fb:7a: 5e:fd:d2:f4:60:23:43:b5:b9:47:a7:e7:63:3a:f8:fa:80:54: 89:75:54:17:49:98:61:c4:a5:04:7d:83:09:10:93:9e:2a:92: 2a:aa:6f:64:3b:69:99:83:7f:d9:51:68:1a:49:f1:fc:7d:4a: 8e:88:bb:ea:3b:59:f7:f8:12:ac:44:65:14:ed:15:44:6b:1a: f5:03:c0:84:b6:85:cc:53:1c:ab:b6:c7:b7:dd:da:ce:bf:c6: e4:6c:9e:fd:db:05:92:6f:5b:98:46:d6:8c:d9:1c:a9:e3:70: ba:dc:72:c9:ef:6f:e1:47:71:2f:61:85:05:38:a3:bf:48:fc: bb:34:10:13:9c:90:2b:ea:3e:a9:cd:b1:64:7c:14:9a:b4:6b: 61:fd:c9:b7:b8:38:90:68:9c:3c:ed:fb:c5:e5:e7:53:81:b4: fc:8a:3f:70:53:ef:96:a1:41:42:60:8e:a3:6f:ed:6a:63:57: 66:6f:0b:6b:50:5e:a6:80:28:34:2f:2f:bf:81:56:b6:10:b9: 75:69:c4:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHQxchVGgE9AaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGNlZjVjYWItZTk4NS00MTk3LWE4MTctZDljYmE3M2M1ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg9J+ONh0APnisrU7qiMVngfjm15rNqpwnQn 6E2MAxEPb972Oug0t1+6oJ3xOI5lPh+80mGnXCBdiGE8bgUrxDY2kS3tvjFwajwj GkQzusAKT+FHHjcOsuUZjsWycAgYNST3wTdUxaygAE+5sjJQxWjVmTMgfjdim8mU 4W2jY1VLerw3k8Pga1NzYyDu8XyAHFznmsJ3hNaAOHinAfPl3aYeJhfGPw0AgfIF NOwFgAe+BlH8F79KCa704HWGA6CiAg8l/1MnyaJBLA0/bdKANDPleyAyA5Cxi2gk YcjY9RjHGKox7oti4P+3nYnFdP4+/bvfJXUgJ7P/A79LI2TlNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeNYiTd3VT6lXDXUZe6DGK6UbJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNTI0ZmQ0YjMtNGI2NS0z YTk3LWJmN2ItMTE4MTEyOGIxOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbTfc20ejl6eEFZVwOIn0ALQd5Ba28NSldqesm6IX5kwAbRAn2D7I2e 6+L4eT0DQnQ1DN37el790vRgI0O1uUen52M6+PqAVIl1VBdJmGHEpQR9gwkQk54q kiqqb2Q7aZmDf9lRaBpJ8fx9So6Iu+o7Wff4EqxEZRTtFURrGvUDwIS2hcxTHKu2 x7fd2s6/xuRsnv3bBZJvW5hG1ozZHKnjcLrccsnvb+FHcS9hhQU4o79I/Ls0EBOc kCvqPqnNsWR8FJq0a2H9ybe4OJBonDzt+8Xl51OBtPyKP3BT75ahQUJgjqNv7Wpj V2ZvC2tQXqaAKDQvL7+BVrYQuXVpxDw= -----END CERTIFICATE-----Generated at Sat Sep 26 15:01:15 2026 by rpki-client