$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/b1acef80-1c55-3848-91e5-434be008bdc8.roa File: b1acef80-1c55-3848-91e5-434be008bdc8.roa (raw, json) Hash identifier: DndWErpItKrJXTTj1IWzA7Nd7yN3sT3Kg6RgC9HsbPU= Subject key identifier: 15:29:91:2D:77:94:E4:39:5D:ED:99:D6:3B:AC:0D:1A:88:3A:6F:75 Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Certificate serial: 010D0C9F4328584F498A8C44AF25E52204F96E80 Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/b1acef80-1c55-3848-91e5-434be008bdc8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14277 IP address blocks: 65.50.172.0/23 maxlen: 23 2606:8180:5800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:8c:44:af:25:e5:22:04:f9:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=30c89f6c-de95-4896-9a3b-3a00701ed6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:86:6c:73:66:1d:98:b9:c1:ec:d9:31:75: fa:7d:f6:94:31:77:98:88:1c:7e:22:c5:80:cc:be: 60:34:c7:92:65:b6:bf:01:22:fe:ea:45:cb:c6:b6: 45:53:b7:d1:ab:08:0d:e9:2d:1c:f3:21:8a:cd:6d: 07:45:22:cd:a4:e0:c8:4b:d9:7a:fe:63:93:a2:bd: e6:6b:46:bb:8e:06:1e:44:5b:31:81:a0:31:42:ea: d8:08:ce:4b:52:1f:e8:f1:9a:c4:d9:c8:0d:fa:95: e9:e2:e4:44:6b:a3:3a:e6:d5:be:1c:15:2f:4d:30: a3:cb:3e:d8:f3:4e:e3:e3:cc:2e:ee:49:e6:49:69: 0e:14:f9:0f:2a:78:8f:22:1b:80:eb:b9:85:72:f3: d2:d9:f9:c1:26:f3:6b:8d:0c:93:d6:a1:7d:5a:fc: 16:53:cd:e5:9a:e3:a2:cd:fa:ea:ae:09:5a:8e:2d: ce:2a:d3:39:90:91:f5:6f:af:dc:18:1b:d0:73:11: 7b:ac:ce:b9:59:4a:45:09:64:85:8b:87:44:d9:1a: e4:6a:f4:71:76:4b:dc:02:87:06:32:68:98:2d:a5: cb:61:76:5e:b4:de:3e:d8:23:9f:47:ed:06:41:5d: 05:42:a8:60:76:83:ff:69:7d:49:c5:e0:75:71:f9: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:29:91:2D:77:94:E4:39:5D:ED:99:D6:3B:AC:0D:1A:88:3A:6F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/b1acef80-1c55-3848-91e5-434be008bdc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl X509v3 Authority Key Identifier: keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer sbgp-ipAddrBlock: critical IPv4: 65.50.172.0/23 IPv6: 2606:8180:5800::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b2:bf:e6:11:b4:95:a4:e4:f8:97:05:70:67:c6:53:eb:c2: 7b:5f:f0:d0:d0:66:24:24:4c:ae:da:0f:97:79:30:da:44:68: 6d:8c:f1:3e:36:61:93:39:49:6e:36:a7:82:b2:cf:c6:6d:dc: f1:86:8b:61:b6:35:1d:4a:f5:bc:d9:95:d6:1d:c5:bc:8d:bf: a8:70:6a:82:a0:b1:d4:81:32:05:da:a1:40:69:a5:05:7e:12: e6:5b:2d:29:37:e1:17:cb:42:a6:6c:a9:63:aa:09:0c:5f:73: 1e:b7:b9:99:11:d6:63:9a:69:80:a5:df:c3:57:c6:ba:9a:9b: 78:89:29:47:54:fd:52:df:8a:56:f2:3f:dc:4b:ba:be:b7:33: e5:a8:82:3c:18:ea:21:e8:53:1d:46:5c:0d:90:dd:53:39:57: 1a:0c:25:6b:71:57:1c:93:d9:47:a1:b1:02:96:c6:e2:f1:17: ac:ef:c3:9c:e6:be:dc:0b:67:86:78:93:c2:d3:26:fe:77:37: 26:57:01:cf:03:96:2c:a4:cc:26:3f:e4:87:71:54:b9:99:26: ca:63:a1:9a:0a:f5:aa:a8:3a:80:f5:70:f1:4c:ec:f9:c2:86: 16:6e:9d:a0:57:fc:f9:2c:b8:3d:01:01:01:01:1f:3e:89:9c: f6:da:7a:6b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JioxEryXlIgT5boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy M2RkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzBjODlmNmMtZGU5NS00ODk2LTlhM2ItM2EwMDcwMWVkNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJiGbHNmHZi5wezZMXX6ffaUMXeYiBx+IsWA zL5gNMeSZba/ASL+6kXLxrZFU7fRqwgN6S0c8yGKzW0HRSLNpODIS9l6/mOTor3m a0a7jgYeRFsxgaAxQurYCM5LUh/o8ZrE2cgN+pXp4uREa6M65tW+HBUvTTCjyz7Y 807j48wu7knmSWkOFPkPKniPIhuA67mFcvPS2fnBJvNrjQyT1qF9WvwWU83lmuOi zfrqrglaji3OKtM5kJH1b6/cGBvQcxF7rM65WUpFCWSFi4dE2RrkavRxdkvcAocG MmiYLaXLYXZetN4+2COfR+0GQV0FQqhgdoP/aX1JxeB1cflfZwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBUpkS13lOQ5Xe2Z1jusDRqIOm91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvYjFhY2VmODAtMWM1NS0z ODQ4LTkxZTUtNDM0YmUwMDhiZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1 OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx YzM0ZDIzZGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQTKsMA4E AgACMAgDBgMmBoGAWDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgsr/mEbSVpOT4lwVwZ8ZT68J7X/DQ0GYk JEyu2g+XeTDaRGhtjPE+NmGTOUluNqeCss/GbdzxhothtjUdSvW82ZXWHcW8jb+o cGqCoLHUgTIF2qFAaaUFfhLmWy0pN+EXy0KmbKljqgkMX3Met7mZEdZjmmmApd/D V8a6mpt4iSlHVP1S34pW8j/cS7q+tzPlqII8GOoh6FMdRlwNkN1TOVcaDCVrcVcc k9lHobEClsbi8Res78Oc5r7cC2eGeJPC0yb+dzcmVwHPA5YspMwmP+SHcVS5mSbK Y6GaCvWqqDqA9XDxTOz5woYWbp2gV/z5LLg9AQEBAR8+iZz22npr -----END CERTIFICATE-----Generated at Thu Oct 8 17:58:06 2026 by rpki-client