$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa File: d8715c0f-d4b7-387d-9b13-8b219b245618.roa (raw, json) Hash identifier: 4bqr1mQrTM14vaHUfxMlXFHE/xDE1yyQAibx4Gin4K8= Subject key identifier: A3:BB:C8:F5:5E:6E:02:4C:CD:03:C1:E6:E8:04:27:B5:EA:F7:1E:A1 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F4974F9EEE1862C9B755A3F40 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35908 IP address blocks: 72.172.85.0/24 maxlen: 24 72.172.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f9:ee:e1:86:2c:9b:75:5a:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ddb25d8f-4f51-4b04-8dcb-7633b4180293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:79:91:6f:ff:81:ce:83:0c:05:7d:74:dc: ce:07:23:42:cc:43:ba:56:89:6e:a8:57:a2:e3:33: 5e:80:ad:ab:40:02:e6:0e:48:ac:0a:fe:0f:38:1f: 88:4c:1f:ce:aa:c0:65:d3:ee:6c:46:cd:b0:92:fe: 4f:80:0f:86:04:91:fe:16:05:18:3e:6c:4e:e3:76: a5:4a:33:e9:dc:11:51:49:32:e5:1b:a1:0a:72:f5: da:ff:6a:ff:3d:2f:9b:bb:3f:8d:9f:85:1f:aa:bb: bb:51:3f:3b:80:b9:8c:0e:c1:b6:61:9e:57:24:ed: 80:9d:c9:76:45:02:fb:6a:a5:ff:d3:83:b8:2e:83: 2f:e3:30:b1:e2:74:58:aa:6b:3d:54:b8:1a:04:f7: 68:a5:f0:8d:61:9d:10:a2:00:e0:98:dc:89:b7:eb: b4:33:59:70:2e:25:33:c3:2a:c8:b7:54:83:9a:77: 9e:b0:09:85:3f:38:5b:13:8a:8f:4f:24:d5:ba:38: 61:8b:72:0f:f4:56:f1:bd:eb:2c:ba:ad:40:3d:16: 8b:a6:06:05:87:b0:c4:ec:6f:4e:bd:51:56:ce:f1: 43:da:77:33:49:b9:08:88:c3:27:6c:51:d9:f3:31: d7:52:ee:74:12:61:47:16:cf:69:5b:51:c1:10:00: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BB:C8:F5:5E:6E:02:4C:CD:03:C1:E6:E8:04:27:B5:EA:F7:1E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 72.172.85.0/24 72.172.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c9:c6:34:90:03:97:79:10:11:03:f9:b9:88:bb:73:e7:58: d2:1b:c9:1c:ba:12:3e:33:5e:af:4b:c4:94:95:9f:99:ff:e6: 45:1b:ea:5b:f6:b6:ae:57:76:16:80:c0:19:35:9d:ac:77:ff: b0:57:0b:23:6f:3a:2a:d5:a7:e8:6b:98:9d:99:33:dd:4c:94: bb:e7:78:fc:cb:ac:97:7c:11:2f:91:df:0e:9b:4a:79:e6:9e: cf:89:a7:54:75:1e:1d:64:a7:9b:a1:fb:99:94:d6:8b:2e:e8: 17:bf:f1:78:cb:1c:4f:25:6b:83:68:2c:7d:9d:e6:50:51:c3: db:d8:d8:6a:7c:a3:cb:dc:d2:1e:50:c8:cd:1e:5f:2a:fa:87: 05:51:a2:fa:32:db:0a:40:f1:7b:71:b1:a5:2c:1a:5c:69:4c: 84:66:ae:16:9c:40:dc:8b:58:bc:3b:7b:41:a3:7d:83:f8:62: 12:31:93:e1:04:86:8f:29:d7:d7:b2:76:79:35:a6:b8:c9:dc: c7:65:6d:2e:42:57:8c:b2:a7:6a:3b:5d:cc:0c:a5:55:31:8a: 95:3a:20:d5:6a:79:88:dd:64:3f:63:10:bf:f1:7f:cb:58:ec: 60:85:a1:28:67:09:30:c2:26:f7:89:3c:0f:50:f9:22:f8:d2: 63:26:a3:44 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdPnu4YYsm3VaP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGRiMjVkOGYtNGY1MS00YjA0LThkY2ItNzYzM2I0MTgwMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkil5kW//gc6DDAV9dNzOByNCzEO6VoluqFei 4zNegK2rQALmDkisCv4POB+ITB/OqsBl0+5sRs2wkv5PgA+GBJH+FgUYPmxO43al SjPp3BFRSTLlG6EKcvXa/2r/PS+buz+Nn4Ufqru7UT87gLmMDsG2YZ5XJO2Ancl2 RQL7aqX/04O4LoMv4zCx4nRYqms9VLgaBPdopfCNYZ0QogDgmNyJt+u0M1lwLiUz wyrIt1SDmneesAmFPzhbE4qPTyTVujhhi3IP9Fbxvessuq1APRaLpgYFh7DE7G9O vVFWzvFD2nczSbkIiMMnbFHZ8zHXUu50EmFHFs9pW1HBEACVsQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKO7yPVebgJMzQPB5ugEJ7Xq9x6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZDg3MTVjMGYtZDRiNy0z ODdkLTliMTMtOGIyMTliMjQ1NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASKxVAwQA SKxYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJfJxjSQA5d5EBED+bmIu3PnWNIbyRy6Ej4zXq9LxJSVn5n/ 5kUb6lv2tq5XdhaAwBk1nax3/7BXCyNvOirVp+hrmJ2ZM91MlLvnePzLrJd8ES+R 3w6bSnnmns+Jp1R1Hh1kp5uh+5mU1osu6Be/8XjLHE8la4NoLH2d5lBRw9vY2Gp8 o8vc0h5QyM0eXyr6hwVRovoy2wpA8XtxsaUsGlxpTIRmrhacQNyLWLw7e0GjfYP4 YhIxk+EEho8p19eydnk1prjJ3MdlbS5CV4yyp2o7XcwMpVUxipU6INVqeYjdZD9j EL/xf8tY7GCFoShnCTDCJveJPA9Q+SL40mMmo0Q= -----END CERTIFICATE-----Generated at Fri Sep 25 06:24:19 2026 by rpki-client