$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa File: d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa (raw, json) Hash identifier: 7kKMJTaJ9ndTgm39WpY/elQDEanihSNlw4yUv008EmM= Subject key identifier: A6:2E:57:C3:73:B9:0F:93:E5:15:E1:9E:72:18:CA:E9:8C:85:0E:4F Certificate issuer: /CN=b927dc15-9316-467a-b50d-d6b361478436 Certificate serial: 010D0C9F4328584F119D0EA2593ABCB42ACD1E00 Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 2901 IP address blocks: 192.133.99.0/24 maxlen: 24 192.150.253.0/24 maxlen: 24 198.49.160.0/24 maxlen: 24 198.59.96.0/24 maxlen: 24 198.59.98.0/23 maxlen: 24 198.59.100.0/22 maxlen: 24 198.59.104.0/23 maxlen: 24 198.59.109.0/24 maxlen: 24 198.59.110.0/23 maxlen: 24 198.59.112.0/23 maxlen: 24 198.59.114.0/24 maxlen: 24 198.59.118.0/23 maxlen: 24 198.59.120.0/21 maxlen: 24 198.187.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0e:a2:59:3a:bc:b4:2a:cd:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b907569d-b119-421f-b5d9-8bb688a337d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:e6:26:60:74:94:d2:cf:d3:b2:76:85:0b: ab:41:41:a8:8a:17:00:e9:a1:e1:02:41:ce:a4:b7: 0d:13:cc:42:67:2f:d4:d9:a5:46:b9:85:9b:0b:97: bb:82:02:7f:59:80:e8:8b:cc:6b:3a:74:5e:96:28: 5c:3b:55:95:fd:3c:8d:7b:ee:2d:a9:b7:26:4d:04: b5:ce:01:81:2f:d8:f4:94:5e:9d:fa:06:38:2a:61: b3:a4:f6:03:72:51:00:90:cb:5f:84:c1:67:d8:f2: 09:88:71:a9:77:ec:6c:ca:5c:0a:e6:85:e4:43:1e: 75:28:14:7d:8e:32:47:d7:dd:34:16:ec:99:50:b4: b8:23:13:10:cd:e9:e6:26:91:e6:c4:73:a3:6c:f4: 9a:fc:df:9f:2b:39:f7:be:cb:f0:a9:77:92:0a:9e: 25:f3:ab:40:26:96:19:59:02:ef:8b:07:fa:58:3c: 95:52:33:be:fe:d0:9f:6f:26:d1:38:23:36:b2:b2: 2e:5e:0a:56:38:e6:9f:b0:e8:db:d8:13:de:0f:85: 87:12:f4:54:57:06:16:dd:82:b1:a4:b6:12:60:fd: ec:ec:75:17:2b:bf:f9:cc:4f:52:4b:90:c5:24:9a: 13:6d:25:b7:42:31:d9:e2:0e:b4:48:6b:cc:7b:48: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2E:57:C3:73:B9:0F:93:E5:15:E1:9E:72:18:CA:E9:8C:85:0E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl X509v3 Authority Key Identifier: keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer sbgp-ipAddrBlock: critical IPv4: 192.133.99.0/24 192.150.253.0/24 198.49.160.0/24 198.59.96.0/24 198.59.98.0-198.59.105.255 198.59.109.0-198.59.114.255 198.59.118.0-198.59.127.255 198.187.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:27:42:8c:4a:b5:24:be:5e:24:b1:00:0b:13:00:c8:25:fe: a6:68:e0:2f:3b:38:cc:f5:08:56:f0:af:25:f9:89:63:d9:7a: 64:c6:a4:7b:60:f9:4d:62:80:5d:8a:96:e0:f7:c5:1d:c3:e9: 7a:bb:ef:31:4f:70:a3:53:e5:5d:a6:dd:e1:7f:06:b8:e1:6d: 3b:cb:00:0f:24:59:ef:ef:71:38:3a:44:fe:87:a3:36:9a:76: 5b:d8:7a:6e:ef:bf:5d:0b:f7:ce:fe:5e:0a:06:9f:0b:e0:0d: ba:5a:4f:38:2a:86:24:3a:39:5b:23:08:0c:d9:85:50:f6:04: d5:3f:71:89:40:38:0b:4e:7e:ab:4f:66:66:95:ad:2d:0c:62: cc:ed:37:66:54:51:32:64:d0:e1:af:b9:a3:ea:21:af:2d:57: a5:b8:81:a7:e2:73:10:1e:10:f8:25:4b:53:10:a9:ff:3d:0b: 1c:d1:56:01:47:5a:0e:2f:fe:01:80:88:c3:b1:35:60:f2:b0: 80:51:b6:26:10:18:dc:61:97:40:b3:74:cf:a2:3f:a9:8f:5a: 64:02:5d:5d:4d:3c:92:68:3a:ff:93:bb:a8:31:a1:c6:62:eb: 02:e9:cd:35:e6:35:49:f4:70:c1:01:26:75:e7:0b:29:c5:f9: 7f:b6:98:26 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWE8RnQ6iWTq8tCrNHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4 NDM2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjkwNzU2OWQtYjExOS00MjFmLWI1ZDktOGJiNjg4YTMzN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvovmJmB0lNLP07J2hQurQUGoihcA6aHhAkHO pLcNE8xCZy/U2aVGuYWbC5e7ggJ/WYDoi8xrOnRelihcO1WV/TyNe+4tqbcmTQS1 zgGBL9j0lF6d+gY4KmGzpPYDclEAkMtfhMFn2PIJiHGpd+xsylwK5oXkQx51KBR9 jjJH1900FuyZULS4IxMQzenmJpHmxHOjbPSa/N+fKzn3vsvwqXeSCp4l86tAJpYZ WQLviwf6WDyVUjO+/tCfbybROCM2srIuXgpWOOafsOjb2BPeD4WHEvRUVwYW3YKx pLYSYP3s7HUXK7/5zE9SS5DFJJoTbSW3QjHZ4g60SGvMe0hS1QIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFKYuV8NzuQ+T5RXhnnIYyumMhQ5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3 ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvZDE0ZDBkM2UtMTcwMS0z YTViLTljYTctMzRhYTMzNmM2NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkyN2RjMTUtOTMxNi00NjdhLWI1 MGQtZDZiMzYxNDc4NDM2L2I5MjdkYzE1LTkzMTYtNDY3YS1iNTBkLWQ2YjM2MTQ3 ODQzNi5jcmwwHwYDVR0jBBgwFoAUmluCqADf1iMqRZ56S1UX9Bjlg+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIz NjE0Nzg0MzYuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAwIVjAwQA wJb9AwQAxjGgAwQAxjtgMAwDBAHGO2IDBAHGO2gwDAMEAMY7bQMEAMY7cjAMAwQB xjt2AwQHxjsAAwQAxrv7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB8nQoxKtSS+XiSxAAsTAMgl/qZo4C87 OMz1CFbwryX5iWPZemTGpHtg+U1igF2KluD3xR3D6Xq77zFPcKNT5V2m3eF/Brjh bTvLAA8kWe/vcTg6RP6HozaadlvYem7vv10L987+XgoGnwvgDbpaTzgqhiQ6OVsj CAzZhVD2BNU/cYlAOAtOfqtPZmaVrS0MYsztN2ZUUTJk0OGvuaPqIa8tV6W4gafi cxAeEPglS1MQqf89CxzRVgFHWg4v/gGAiMOxNWDysIBRtiYQGNxhl0CzdM+iP6mP WmQCXV1NPJJoOv+Tu6gxocZi6wLpzTXmNUn0cMEBJnXnCynF+X+2mCY= -----END CERTIFICATE-----Generated at Mon Sep 28 21:32:43 2026 by rpki-client