$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa File: 450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa (raw, json) Hash identifier: e5KEiQ9fxyp6Ag+S5WwnneB01wKC9SMVu1BiQfo3slE= Subject key identifier: 25:44:8D:F3:B2:AF:96:58:E2:2A:6F:C2:21:D7:09:39:C2:54:15:AC Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Certificate serial: 010D0C9F4328584F49760283BDA8F6BDF6F5EA00 Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13347 IP address blocks: 167.253.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:02:83:bd:a8:f6:bd:f6:f5:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e87150d6-b9bf-43fc-a05e-e4ac9c60d7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:02:ad:00:0c:aa:b8:77:af:b3:f0:c3:b3:de: 68:a6:a9:78:ce:ae:ca:97:c5:0d:98:9e:38:da:f0: 11:73:1c:76:00:30:67:f6:82:5c:0b:6c:62:cd:c6: e2:18:05:35:dc:4b:05:4e:58:f7:c8:de:03:89:b1: 7c:82:0d:64:12:2c:7b:0e:9a:c2:0b:dd:c6:e1:bc: da:cb:f9:ea:0e:29:a6:7e:1f:7b:83:75:f7:2c:9e: 28:89:08:d2:94:aa:e5:7a:bb:7f:4d:94:e7:77:b7: 95:4e:d5:da:6c:ba:fa:ae:67:d9:d6:90:d3:a2:f3: e0:08:89:76:80:57:f2:fd:43:ae:69:dd:e6:a1:2c: c9:42:d7:d0:c8:78:fc:ef:13:51:53:54:bd:9d:1d: b9:ae:d5:e0:a1:77:c0:df:38:14:61:59:8c:78:3f: ec:47:c9:b1:f8:62:af:46:4f:43:b3:ab:24:4f:22: 02:7e:ae:76:b5:c5:e2:9c:1b:6a:b3:34:f5:d0:58: d6:01:c2:5d:71:7f:5c:7f:08:34:80:78:39:6e:2d: 8d:aa:65:42:4e:95:87:1d:d6:db:7a:b6:ee:c6:51: 34:49:67:b6:f1:23:90:61:6a:a6:ed:a3:71:43:61: cd:40:c2:48:63:b8:4d:05:3a:7a:74:6d:ed:28:dc: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:8D:F3:B2:AF:96:58:E2:2A:6F:C2:21:D7:09:39:C2:54:15:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl X509v3 Authority Key Identifier: keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer sbgp-ipAddrBlock: critical IPv4: 167.253.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f2:38:1c:4d:c8:03:4f:87:8f:36:c7:ed:72:46:74:bd:37: 69:e9:18:cd:90:69:07:8c:d0:df:b0:97:a3:50:b9:6f:b4:49: 96:57:dc:63:2d:61:ca:3d:0f:d9:e4:7f:11:d9:f8:be:74:e3: 1d:e5:ce:1d:0c:a1:95:17:b8:89:15:06:3c:83:17:12:14:43: 81:28:81:a3:ed:53:d9:e0:70:86:87:bf:b0:4e:6a:fb:fe:c2: 10:ad:c9:06:32:1f:85:1a:8a:73:6d:9d:3f:6d:6f:06:f0:99: 10:5d:de:d8:19:77:09:5b:f7:53:b0:50:1e:03:7f:e8:e0:67: 5b:00:48:b6:31:0d:67:30:a1:9a:2f:6c:23:d7:47:3b:bb:a4: ed:d1:3f:43:15:c7:9f:f4:bf:2a:0b:8e:c5:32:da:0e:be:90: 86:1a:e4:5e:74:39:45:22:51:90:b7:d3:91:90:79:5f:2b:fa: 94:5d:8d:3a:e9:e7:14:1f:16:b1:bd:51:23:eb:f4:f9:1e:23: aa:3d:e6:ef:a0:aa:0f:37:52:50:74:f5:84:08:dd:6e:17:ad: 32:6a:0b:60:89:cb:07:90:c8:68:9a:5f:ec:9f:24:d8:ef:b0: 41:10:57:77:55:17:a1:b9:50:cb:76:73:9f:d4:22:98:27:ca: 49:47:ad:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgKDvaj2vfb16gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNmI2ZjktYTA1Ni00NzFjLWJmOTYtZjJmZDUzMzBk YWM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTg3MTUwZDYtYjliZi00M2ZjLWEwNWUtZTRhYzljNjBkN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwKtAAyquHevs/DDs95opql4zq7Kl8UNmJ44 2vARcxx2ADBn9oJcC2xizcbiGAU13EsFTlj3yN4DibF8gg1kEix7DprCC93G4bza y/nqDimmfh97g3X3LJ4oiQjSlKrlert/TZTnd7eVTtXabLr6rmfZ1pDTovPgCIl2 gFfy/UOuad3moSzJQtfQyHj87xNRU1S9nR25rtXgoXfA3zgUYVmMeD/sR8mx+GKv Rk9Ds6skTyICfq52tcXinBtqszT10FjWAcJdcX9cfwg0gHg5bi2NqmVCTpWHHdbb erbuxlE0SWe28SOQYWqm7aNxQ2HNQMJIY7hNBTp6dG3tKNy2LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVEjfOyr5ZY4ipvwiHXCTnCVBWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yY2E2 YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZkNTMzMGRhYzQvNDUwZDNkOWEtNGE0My0z MTk2LWExYTItZjFlMDZmN2RhNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmNhNmI2ZjktYTA1Ni00NzFjLWJm OTYtZjJmZDUzMzBkYWM0LzJjYTZiNmY5LWEwNTYtNDcxYy1iZjk2LWYyZmQ1MzMw ZGFjNC5jcmwwHwYDVR0jBBgwFoAU0Gj22st2u5o08zsvhIvODS5JlDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yY2E2YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZk NTMzMGRhYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDyOBxNyANPh482x+1yRnS9N2npGM2QaQeM0N+wl6NQuW+0SZZX3GMt Yco9D9nkfxHZ+L504x3lzh0MoZUXuIkVBjyDFxIUQ4EogaPtU9ngcIaHv7BOavv+ whCtyQYyH4UainNtnT9tbwbwmRBd3tgZdwlb91OwUB4Df+jgZ1sASLYxDWcwoZov bCPXRzu7pO3RP0MVx5/0vyoLjsUy2g6+kIYa5F50OUUiUZC305GQeV8r+pRdjTrp 5xQfFrG9USPr9PkeI6o95u+gqg83UlB09YQI3W4XrTJqC2CJyweQyGiaX+yfJNjv sEEQV3dVF6G5UMt2c5/UIpgnyklHrUY= -----END CERTIFICATE-----Generated at Fri Sep 25 22:55:49 2026 by rpki-client