$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/06bb41c5-4011-3300-8f8c-5c8d6eb4ab0a.roa File: 06bb41c5-4011-3300-8f8c-5c8d6eb4ab0a.roa (raw, json) Hash identifier: 85Dl8jIv+Y/xC2oali7Lrpdm6B2qfPEDsgiK7efGaFM= Subject key identifier: F9:C3:45:86:87:BA:BA:9E:27:28:28:29:0D:F7:1D:41:1A:34:DD:86 Certificate issuer: /CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Certificate serial: 010D0C9F4328584F29016185E9024F1C73A45AC0 Authority key identifier: EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/06bb41c5-4011-3300-8f8c-5c8d6eb4ab0a.roa Signing time: Sun 13 Sep 2026 10:06:22 +0000 ROA not before: Sun 13 Sep 2026 10:06:22 +0000 ROA not after: Sat 12 Dec 2026 11:06:22 +0000 asID: 29917 IP address blocks: 158.65.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:01:61:85:e9:02:4f:1c:73:a4:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Validity Not Before: Sep 13 10:06:22 2026 GMT Not After : Dec 12 11:06:22 2026 GMT Subject: CN=6ce9dafe-8516-4386-b672-110bacaee619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:97:dd:a7:1d:c4:92:ef:c5:4b:77:34:05: 42:35:3f:43:b7:3a:18:2d:1e:ee:4d:6a:78:6d:4f: 43:30:94:80:bf:8a:e3:51:2e:5d:ae:a9:7f:ec:d7: f1:57:34:81:42:bd:50:67:d8:a3:c0:48:d0:2b:a8: 71:c7:c5:c6:f3:f4:87:ae:0f:49:d3:7d:40:00:b8: 8e:49:c4:6b:69:7f:30:34:1b:03:22:52:ec:d3:80: cd:a6:3e:a7:c1:6c:45:02:6b:c9:2f:5e:44:e2:9a: c8:46:a6:f6:5e:19:3d:91:de:c2:1d:ef:df:9a:d6: 75:14:59:e9:5b:7c:7e:2d:cd:5c:21:23:7e:b5:b6: 48:13:9a:f5:e5:e9:7e:7e:84:58:b7:7d:2b:9a:81: bf:40:32:ae:d0:5e:a6:1f:a6:97:43:67:c9:55:66: c6:b5:80:72:fb:76:07:e7:3e:4f:5e:2d:a5:4e:b5: 61:cc:cf:c5:7e:f3:c3:ec:5b:44:bb:07:0a:7c:bd: 4b:d1:29:1e:67:3c:6c:43:96:0d:37:0e:1f:da:c8: 04:5b:54:6e:6a:a0:d0:44:79:b9:6b:b2:cc:c2:97: f3:21:a2:8a:5f:bb:29:90:ba:83:b4:c8:cf:03:37: 17:2f:63:31:b9:01:fc:b8:39:77:75:a8:13:62:f2: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C3:45:86:87:BA:BA:9E:27:28:28:29:0D:F7:1D:41:1A:34:DD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/06bb41c5-4011-3300-8f8c-5c8d6eb4ab0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl X509v3 Authority Key Identifier: keyid:EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer sbgp-ipAddrBlock: critical IPv4: 158.65.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2a:e4:f4:83:70:1a:e3:79:f8:99:fa:34:86:54:48:84:77: 17:21:63:ce:43:c6:77:42:15:32:9a:de:7c:54:dc:7a:75:fa: 80:33:fb:53:24:6f:cb:d9:82:24:4b:5e:74:25:28:09:b3:48: d3:9a:9e:db:8a:1f:67:35:b9:de:3e:6b:c5:70:7e:68:da:44: 9f:b7:7f:ad:ac:1a:68:d8:f4:a7:82:60:ce:9e:cc:c6:5c:a4: 25:4d:aa:4c:6e:14:59:dd:82:2d:34:b5:1b:61:5e:75:75:2a: 64:97:01:a5:4e:c5:1b:1d:df:16:bf:15:2d:7e:5d:c4:e3:47: b6:dd:73:38:80:1e:1e:2b:1d:c4:e3:c3:52:17:24:d5:da:b2: 1e:03:f9:b7:36:92:75:6f:74:8c:c9:c1:d8:2a:5a:39:0d:42: e2:f5:ea:c1:dd:45:87:4a:12:78:0a:40:3d:d7:d0:a9:6a:5b: cd:69:c2:4a:01:9c:73:bd:2c:d6:b2:33:c8:58:3b:eb:eb:97: cc:64:f6:f7:23:d0:e2:5a:17:50:0a:3f:07:38:f2:43:66:5b: ee:1f:b2:47:21:e1:9a:8a:f2:d7:1e:28:ba:53:49:6e:71:92: ae:0f:0e:9e:8c:8f:48:f8:b1:30:38:c2:6b:e1:7e:e5:d8:fb: 24:c1:9f:75 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8pAWGF6QJPHHOkWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0NGRkZmUtNmZkZS00MDgzLWExZGQtY2JiMzcwN2Ux YjcwMB4XDTI2MDkxMzEwMDYyMloXDTI2MTIxMjExMDYyMlowLzEtMCsGA1UEAxMk NmNlOWRhZmUtODUxNi00Mzg2LWI2NzItMTEwYmFjYWVlNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox6X3acdxJLvxUt3NAVCNT9DtzoYLR7uTWp4 bU9DMJSAv4rjUS5drql/7NfxVzSBQr1QZ9ijwEjQK6hxx8XG8/SHrg9J031AALiO ScRraX8wNBsDIlLs04DNpj6nwWxFAmvJL15E4prIRqb2Xhk9kd7CHe/fmtZ1FFnp W3x+Lc1cISN+tbZIE5r15el+foRYt30rmoG/QDKu0F6mH6aXQ2fJVWbGtYBy+3YH 5z5PXi2lTrVhzM/FfvPD7FtEuwcKfL1L0SkeZzxsQ5YNNw4f2sgEW1RuaqDQRHm5 a7LMwpfzIaKKX7spkLqDtMjPAzcXL2MxuQH8uDl3dagTYvIhpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPnDRYaHurqeJygoKQ33HUEaNN2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTQ0 ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIzNzA3ZTFiNzAvMDZiYjQxYzUtNDAxMS0z MzAwLThmOGMtNWM4ZDZlYjRhYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE0NGRkZmUtNmZkZS00MDgzLWEx ZGQtY2JiMzcwN2UxYjcwLzBhNDRkZGZlLTZmZGUtNDA4My1hMWRkLWNiYjM3MDdl MWI3MC5jcmwwHwYDVR0jBBgwFoAU61b6mf+W2WIibWtv4wAQCLrKqWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTQ0ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIz NzA3ZTFiNzAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnkEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYirk9INwGuN5+Jn6NIZUSIR3FyFjzkPGd0IVMprefFTcenX6gDP7UyRv y9mCJEtedCUoCbNI05qe24ofZzW53j5rxXB+aNpEn7d/rawaaNj0p4Jgzp7Mxlyk JU2qTG4UWd2CLTS1G2FedXUqZJcBpU7FGx3fFr8VLX5dxONHtt1zOIAeHisdxOPD Uhck1dqyHgP5tzaSdW90jMnB2CpaOQ1C4vXqwd1Fh0oSeApAPdfQqWpbzWnCSgGc c70s1rIzyFg76+uXzGT29yPQ4loXUAo/BzjyQ2Zb7h+yRyHhmory1x4oulNJbnGS rg8OnoyPSPixMDjCa+F+5dj7JMGfdQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:20:16 2026 by rpki-client