$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa File: 9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa (raw, json) Hash identifier: oxtrV4GQ2abbq+vN0DsYbJ4xE9d55pC5MQHoqQcGwCY= Subject key identifier: B4:8F:20:4B:5E:99:C3:CF:63:CE:DF:A3:32:8D:31:A5:0F:21:96:96 Certificate issuer: /CN=f9694678-237c-4d99-9589-b106509825b7 Certificate serial: 010D0C9F4328584EC63C79EBEE6CA7E874BFCD00 Authority key identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 5511 IP address blocks: 167.254.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:79:eb:ee:6c:a7:e8:74:bf:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9694678-237c-4d99-9589-b106509825b7 Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=65e2adaa-c974-45f1-ab2c-d02b98b8dd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:ff:8b:02:7a:c4:e0:67:7d:fe:eb:d6:1d: eb:22:39:f2:3e:ef:4d:42:94:ad:1f:e7:a4:0e:fb: dc:d2:9a:cf:c2:e6:5b:d9:9d:3e:28:5a:e8:0e:a6: 4a:03:f3:29:59:ad:79:f9:fb:fe:e7:e8:f2:65:0a: ad:25:c6:04:1a:da:c0:6b:15:8b:d1:af:f8:6b:4c: 6e:c0:9b:d2:87:d1:73:da:4c:fe:29:8d:a0:9e:45: 89:26:3d:f5:b9:dc:f1:91:10:d0:af:05:90:bd:58: 3e:f9:f8:95:9a:08:54:8f:a8:9f:9e:1f:84:86:cb: 93:6c:e1:e0:ed:1b:41:4b:ff:e2:24:6d:dc:af:d0: f3:f9:31:fa:71:e1:61:60:f3:6d:e0:ac:fe:99:45: 5e:77:e8:d6:3b:98:82:a4:60:65:7b:c3:a9:e8:97: bc:6b:64:e0:8e:8f:2d:03:4e:9d:57:64:5f:5c:ba: 9c:44:99:27:4d:15:02:82:89:b5:c9:e0:0d:36:bd: d4:59:49:18:71:47:24:ca:c7:0c:6d:d8:16:be:a5: 95:cb:41:af:5d:0a:9f:78:e5:7f:52:85:0d:10:13: e2:4f:33:e4:c4:fa:32:28:b6:fd:c7:4f:bc:db:fe: d2:5f:ce:df:5b:55:36:01:20:a4:f5:3a:5b:70:61: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8F:20:4B:5E:99:C3:CF:63:CE:DF:A3:32:8D:31:A5:0F:21:96:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl X509v3 Authority Key Identifier: keyid:8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer sbgp-ipAddrBlock: critical IPv4: 167.254.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ef:95:73:18:83:e1:67:b9:ac:14:f1:51:b5:e5:ce:71:d3: 4a:ba:ad:e9:2a:d1:b6:23:50:2b:92:11:e9:b8:51:7f:73:d5: 4b:36:37:ba:3c:5c:0a:08:50:70:ff:bd:db:cc:91:eb:97:75: dd:4b:18:d2:78:96:16:62:ad:ac:9e:38:b5:ee:2a:46:63:0d: 7e:00:96:12:bd:e7:b3:ef:2e:80:7a:32:8f:67:fd:a5:4a:93: 0e:42:20:e2:42:08:13:d2:59:ad:ca:25:42:52:96:05:1c:8a: bb:b1:4b:5c:4b:4c:60:e1:28:d5:3b:6b:17:ae:66:47:5f:25: b9:fd:29:a6:9f:b8:f3:84:51:76:83:27:78:a7:ec:39:1e:0a: 72:5e:b1:ac:0c:b5:75:6b:76:4a:da:79:64:8d:04:df:a3:03: d2:4c:c3:91:3d:e1:af:da:cf:df:68:00:13:7a:c5:d9:75:e8: 2e:8b:04:92:92:09:35:ac:a1:9c:04:26:47:03:70:7e:f4:23: 23:73:0e:5f:d7:5c:9f:ac:86:4e:16:d0:05:11:d0:b5:c8:50: 73:d3:34:59:53:c3:c5:bf:cc:09:ee:44:7d:de:95:5a:ee:b0: ec:59:17:c7:2a:51:bf:bd:b1:e2:73:f2:0f:e6:ca:30:f3:93: c2:18:b5:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPHnr7myn6HS/zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1ODktYjEwNjUwOTgy NWI3MB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NjVlMmFkYWEtYzk3NC00NWYxLWFiMmMtZDAyYjk4YjhkZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtL/iwJ6xOBnff7r1h3rIjnyPu9NQpStH+ek Dvvc0prPwuZb2Z0+KFroDqZKA/MpWa15+fv+5+jyZQqtJcYEGtrAaxWL0a/4a0xu wJvSh9Fz2kz+KY2gnkWJJj31udzxkRDQrwWQvVg++fiVmghUj6ifnh+EhsuTbOHg 7RtBS//iJG3cr9Dz+TH6ceFhYPNt4Kz+mUVed+jWO5iCpGBle8Op6Je8a2Tgjo8t A06dV2RfXLqcRJknTRUCgom1yeANNr3UWUkYcUckyscMbdgWvqWVy0GvXQqfeOV/ UoUNEBPiTzPkxPoyKLb9x0+82/7SX87fW1U2ASCk9TpbcGHL0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSPIEtemcPPY87fozKNMaUPIZaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5 NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5ODI1YjcvOWQwYjc1YzItMTA1My0z ZjVlLWIxMzItNzljNTk5MmU4MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1 ODktYjEwNjUwOTgyNWI3L2Y5Njk0Njc4LTIzN2MtNGQ5OS05NTg5LWIxMDY1MDk4 MjViNy5jcmwwHwYDVR0jBBgwFoAUi8+I2icRrY03bYYNC8RvLIuTdIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2 NTA5ODI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbvlXMYg+FnuawU8VG15c5x00q6rekq0bYjUCuSEem4UX9z1Us2N7o8 XAoIUHD/vdvMkeuXdd1LGNJ4lhZirayeOLXuKkZjDX4AlhK957PvLoB6Mo9n/aVK kw5CIOJCCBPSWa3KJUJSlgUciruxS1xLTGDhKNU7axeuZkdfJbn9KaafuPOEUXaD J3in7DkeCnJesawMtXVrdkraeWSNBN+jA9JMw5E94a/az99oABN6xdl16C6LBJKS CTWsoZwEJkcDcH70IyNzDl/XXJ+shk4W0AUR0LXIUHPTNFlTw8W/zAnuRH3elVru sOxZF8cqUb+9seJz8g/myjDzk8IYtdM= -----END CERTIFICATE-----Generated at Thu Aug 27 05:37:59 2026 by rpki-client