$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa File: cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa (raw, json) Hash identifier: CGib4ZFFsmBjcCPN1zgatppUJbZ6/go8hSVzXcx29Ak= Subject key identifier: 25:2F:37:A9:C6:24:3F:25:32:AA:DD:6E:C7:2F:D5:C1:39:91:0C:90 Certificate issuer: /CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Certificate serial: 010D0C9F4328584F74B82944EBC2DFAE96E21D80 Authority key identifier: 7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 173.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:29:44:eb:c2:df:ae:96:e2:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=aa83509f-ea52-4d98-a738-66131174a26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:86:de:fe:5e:1b:49:fd:1f:2b:37:b8:7c:31: 27:48:3f:a3:18:1b:c6:a6:7f:c8:f6:ae:58:6e:28: 4d:91:e0:aa:e0:62:63:28:70:16:e4:9a:03:1f:cb: 05:2d:e8:a9:0f:46:b8:73:5d:a0:b9:3f:bc:ab:90: 82:f2:13:95:19:7b:9b:d2:88:50:94:34:82:1a:03: e7:24:8a:1e:d6:a5:51:ed:f0:2b:d8:a3:a2:7c:9d: 97:51:3d:53:48:aa:00:7a:e9:b8:c1:f4:00:1f:a1: 69:a5:29:1a:2c:9b:ec:49:94:36:87:54:ca:44:89: 58:dc:b4:9c:54:5d:2a:87:13:9d:97:ac:e5:28:11: 32:f1:1e:4c:ee:7f:24:32:6c:17:9e:2f:a4:be:84: a7:4d:b6:13:bc:e7:dc:92:31:6f:68:1d:f9:26:e5: b9:ca:85:e6:ba:94:2c:87:81:25:61:fd:89:59:84: 03:ab:50:b1:33:00:28:de:74:eb:98:c8:84:9d:e3: 24:bf:0c:3f:12:f5:e4:26:47:27:71:a6:18:f8:f6: 77:e3:89:c6:6f:66:f5:99:d2:df:5e:13:82:d3:0b: d7:9c:3d:2a:42:3f:e4:74:0f:42:28:fa:ac:f2:bf: 92:ca:31:37:c3:1e:0f:81:ad:6a:05:b2:2b:1c:67: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2F:37:A9:C6:24:3F:25:32:AA:DD:6E:C7:2F:D5:C1:39:91:0C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl X509v3 Authority Key Identifier: keyid:7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer sbgp-ipAddrBlock: critical IPv4: 173.240.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c9:3f:ca:97:b8:dd:65:a2:63:89:6d:64:6e:de:6c:36:f2: 28:40:d6:fc:87:35:51:fe:fc:13:be:e3:89:2c:b0:c7:04:46: da:4e:fb:99:16:c9:86:fe:ac:7c:13:86:1a:a1:ca:50:d9:c1: da:fb:b0:9a:2a:e2:1f:de:08:3c:23:73:ee:f0:ad:6f:18:90: df:4a:e7:91:3a:c7:f4:cd:fd:cf:40:08:f8:13:85:fa:30:1c: f8:19:8c:59:de:44:0b:e1:2d:d3:53:93:78:43:e2:14:d1:e8: 38:f8:5d:fb:a1:30:8c:2c:73:0f:c0:7e:d4:25:cd:b9:21:c9: ba:af:fe:1b:cb:93:0b:9b:cc:0a:dc:4f:cf:e3:1c:e9:cc:39: 96:01:ed:18:3e:b0:79:46:b5:7d:6d:b1:87:ff:57:0a:79:59: ba:da:f7:3d:e3:8e:74:d5:26:4b:72:32:3b:a5:e9:c4:0e:48: 9e:e0:f7:74:df:f1:fd:a2:fd:89:a7:77:85:aa:76:08:03:f5: ee:17:1a:22:bc:f3:7e:61:7e:d1:4e:03:e2:f8:5c:ee:cf:f1: 7f:5a:83:39:ca:04:7c:60:7b:21:34:cd:a9:86:64:11:df:25: 7b:1b:f7:5d:f9:3c:be:8f:01:1e:c7:5c:e1:b5:58:a3:8b:d1: 31:f2:da:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uClE68LfrpbiHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4ZjE1MWUtNDY3OS00NTI3LWEyYjctMmIxYmY5YzI4 NzM4MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk YWE4MzUwOWYtZWE1Mi00ZDk4LWE3MzgtNjYxMzExNzRhMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIbe/l4bSf0fKze4fDEnSD+jGBvGpn/I9q5Y bihNkeCq4GJjKHAW5JoDH8sFLeipD0a4c12guT+8q5CC8hOVGXub0ohQlDSCGgPn JIoe1qVR7fAr2KOifJ2XUT1TSKoAeum4wfQAH6FppSkaLJvsSZQ2h1TKRIlY3LSc VF0qhxOdl6zlKBEy8R5M7n8kMmwXni+kvoSnTbYTvOfckjFvaB35JuW5yoXmupQs h4ElYf2JWYQDq1CxMwAo3nTrmMiEneMkvww/EvXkJkcncaYY+PZ344nGb2b1mdLf XhOC0wvXnD0qQj/kdA9CKPqs8r+SyjE3wx4Pga1qBbIrHGdjhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUvN6nGJD8lMqrdbscv1cE5kQyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOThm MTUxZS00Njc5LTQ1MjctYTJiNy0yYjFiZjljMjg3MzgvY2JiNWY2MWEtODk4MC0z ZWFkLWIxZjAtMGFiMGU1MGExZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4ZjE1MWUtNDY3OS00NTI3LWEy YjctMmIxYmY5YzI4NzM4L2I5OGYxNTFlLTQ2NzktNDUyNy1hMmI3LTJiMWJmOWMy ODczOC5jcmwwHwYDVR0jBBgwFoAUfq1L+MuH61XPFWjB6+XJBDwt+Y8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOThmMTUxZS00Njc5LTQ1MjctYTJiNy0yYjFi ZjljMjg3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7JP8qXuN1lomOJbWRu3mw28ihA1vyHNVH+/BO+44kssMcERtpO+5kW yYb+rHwThhqhylDZwdr7sJoq4h/eCDwjc+7wrW8YkN9K55E6x/TN/c9ACPgThfow HPgZjFneRAvhLdNTk3hD4hTR6Dj4XfuhMIwscw/AftQlzbkhybqv/hvLkwubzArc T8/jHOnMOZYB7Rg+sHlGtX1tsYf/Vwp5Wbra9z3jjnTVJktyMjul6cQOSJ7g93Tf 8f2i/Ymnd4WqdggD9e4XGiK8835hftFOA+L4XO7P8X9agznKBHxgeyE0zamGZBHf JXsb9135PL6PAR7HXOG1WKOL0THy2iM= -----END CERTIFICATE-----Generated at Sun Oct 11 22:33:51 2026 by rpki-client