$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa File: bb95430e-8b80-392c-8296-34539bd6cb9e.roa (raw, json) Hash identifier: jFiErfFIS9yTMH4nWXlMLC+ErCQVIILscW+HwGmbQCw= Subject key identifier: F0:74:C1:A2:54:67:2A:2F:84:A9:9F:B0:B6:AC:70:8F:67:5A:05:96 Certificate issuer: /CN=9f263856-ae8c-471f-bea5-ef7480840262 Certificate serial: 010D0C9F4328584F024216E3D55410D3BDD99E80 Authority key identifier: FF:2E:01:66:79:76:80:AB:1E:2E:5A:47:7C:2F:BE:9F:4F:40:37:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 394473 IP address blocks: 158.120.88.0/22 maxlen: 24 192.190.154.0/23 maxlen: 24 192.190.156.0/22 maxlen: 24 199.250.224.0/20 maxlen: 24 199.250.251.0/24 maxlen: 24 199.250.252.0/23 maxlen: 24 209.16.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:16:e3:d5:54:10:d3:bd:d9:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f263856-ae8c-471f-bea5-ef7480840262 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=4c307376-db24-4e1f-9f6b-a86787765128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:59:c8:64:33:08:1d:98:2a:0c:08:0f:d7: ad:01:8e:de:e1:24:19:0c:d0:4c:26:5c:6b:ad:d7: 6b:32:ff:04:8f:e8:34:40:ed:38:ce:92:0c:e3:96: 00:bf:f8:17:dd:0f:6d:2c:37:ec:00:fd:08:af:b4: d9:33:d5:60:90:24:52:a1:56:7a:76:39:27:06:d5: 16:11:c6:f7:b6:3f:93:65:7f:ff:d7:e0:b3:97:ab: 63:64:df:ab:c6:57:85:e1:97:1a:1b:57:b6:08:6e: 62:da:e4:41:c9:b8:21:fb:4f:01:b3:ad:e9:96:35: 98:95:c6:48:de:fa:39:4d:89:fe:6c:73:e3:22:6e: 5b:65:d4:42:c3:11:fe:d6:bf:b4:e6:98:6d:42:77: 0b:d2:9a:4d:04:42:6a:fe:4e:f8:c0:61:f6:b6:b6: b2:85:b3:ab:dd:c2:02:ef:71:19:21:3d:8e:96:d5: 8a:cc:59:2a:08:00:de:87:3b:24:03:08:81:15:9e: 47:aa:86:cd:17:95:03:e9:e8:be:aa:ce:c1:bd:00: da:33:60:c5:6b:68:8a:35:ba:ca:c3:51:f7:1d:5d: f2:53:be:c0:d3:72:06:57:0b:09:14:89:8f:a6:21: d9:46:b9:3c:6d:63:69:d4:df:48:33:c2:cf:c8:56: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:74:C1:A2:54:67:2A:2F:84:A9:9F:B0:B6:AC:70:8F:67:5A:05:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.crl X509v3 Authority Key Identifier: keyid:FF:2E:01:66:79:76:80:AB:1E:2E:5A:47:7C:2F:BE:9F:4F:40:37:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer sbgp-ipAddrBlock: critical IPv4: 158.120.88.0/22 192.190.154.0-192.190.159.255 199.250.224.0/20 199.250.251.0-199.250.253.255 209.16.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:19:ee:2c:93:e5:fb:98:60:8e:3e:50:86:5a:51:d3:c6:e2: 2c:01:c1:91:35:51:20:1e:f5:92:54:42:d7:75:e3:65:98:03: ef:14:25:a3:c6:14:99:6b:26:55:84:db:38:f7:84:99:89:14: 56:d1:27:ac:8f:98:8e:ec:af:7e:bc:94:b8:cb:70:6a:92:19: d8:52:c0:11:fe:5b:e5:6d:f6:f3:c4:76:75:23:35:ae:21:eb: a8:03:a4:02:44:34:f4:28:c4:93:d0:98:77:1f:a9:75:aa:16: 90:65:0c:ee:23:60:21:3b:2d:66:9a:76:04:60:15:29:cd:6d: 8a:e1:13:ec:65:21:f3:74:e0:5b:cf:54:ff:48:ab:7f:8b:70: 99:96:4f:c2:42:a3:7e:f4:ed:54:4c:c2:a3:15:41:34:72:7f: 96:04:63:ba:92:51:e4:4f:10:55:6d:04:a0:bf:25:b4:26:7c: 09:1b:b3:d2:dc:e7:6e:95:5d:7b:31:70:7f:46:7b:c9:ed:fd: c5:a6:d8:19:81:f2:44:95:f2:5d:43:53:45:03:cd:3b:db:9d: 75:4e:e2:0d:ab:a0:8b:e8:20:a2:c0:23:21:34:f4:16:9e:59: 1e:56:04:24:09:f2:b2:63:a5:c7:5d:b5:3b:c8:c7:e0:e5:d4: 41:f0:3f:e0 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE8CQhbj1VQQ073ZnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYyNjM4NTYtYWU4Yy00NzFmLWJlYTUtZWY3NDgwODQw MjYyMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NGMzMDczNzYtZGIyNC00ZTFmLTlmNmItYTg2Nzg3NzY1MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMNZyGQzCB2YKgwID9etAY7e4SQZDNBMJlxr rddrMv8Ej+g0QO04zpIM45YAv/gX3Q9tLDfsAP0Ir7TZM9VgkCRSoVZ6djknBtUW Ecb3tj+TZX//1+Czl6tjZN+rxleF4ZcaG1e2CG5i2uRBybgh+08Bs63pljWYlcZI 3vo5TYn+bHPjIm5bZdRCwxH+1r+05phtQncL0ppNBEJq/k74wGH2trayhbOr3cIC 73EZIT2OltWKzFkqCADehzskAwiBFZ5HqobNF5UD6ei+qs7BvQDaM2DFa2iKNbrK w1H3HV3yU77A03IGVwsJFImPpiHZRrk8bWNp1N9IM8LPyFaq2QIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFPB0waJUZyovhKmfsLascI9nWgWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZjI2 Mzg1Ni1hZThjLTQ3MWYtYmVhNS1lZjc0ODA4NDAyNjIvYmI5NTQzMGUtOGI4MC0z OTJjLTgyOTYtMzQ1MzliZDZjYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWYyNjM4NTYtYWU4Yy00NzFmLWJl YTUtZWY3NDgwODQwMjYyLzlmMjYzODU2LWFlOGMtNDcxZi1iZWE1LWVmNzQ4MDg0 MDI2Mi5jcmwwHwYDVR0jBBgwFoAU/y4BZnl2gKseLlpHfC++n09ANxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZjI2Mzg1Ni1hZThjLTQ3MWYtYmVhNS1lZjc0 ODA4NDAyNjIuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCnnhYMAwD BAHAvpoDBAXAvoADBATH+uAwDAMEAMf6+wMEAcf6/AMEAtEQlDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk Ge4sk+X7mGCOPlCGWlHTxuIsAcGRNVEgHvWSVELXdeNlmAPvFCWjxhSZayZVhNs4 94SZiRRW0Sesj5iO7K9+vJS4y3BqkhnYUsAR/lvlbfbzxHZ1IzWuIeuoA6QCRDT0 KMST0Jh3H6l1qhaQZQzuI2AhOy1mmnYEYBUpzW2K4RPsZSHzdOBbz1T/SKt/i3CZ lk/CQqN+9O1UTMKjFUE0cn+WBGO6klHkTxBVbQSgvyW0JnwJG7PS3OdulV17MXB/ RnvJ7f3FptgZgfJElfJdQ1NFA8072511TuINq6CL6CCiwCMhNPQWnlkeVgQkCfKy Y6XHXbU7yMfg5dRB8D/g -----END CERTIFICATE-----Generated at Thu Oct 8 23:20:21 2026 by rpki-client