$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa File: 2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa (raw, json) Hash identifier: XF3NsOUyA7KuKs0VIDGJd0vpfIw0OipO7GiFq+cQnKU= Subject key identifier: 75:B6:AE:C0:D5:12:27:2F:28:B0:06:F1:98:7C:52:63:02:11:BD:9A Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584EFE1227F0BC8766FD834D5480 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 22135 IP address blocks: 173.242.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:27:f0:bc:87:66:fd:83:4d:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=be831450-4e33-47b3-9eeb-ebc41e9bbd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:5a:58:52:84:b4:49:34:9a:45:c3:58:b1: 77:dd:0b:20:cd:cb:3e:a9:aa:0b:93:86:df:23:94: 9e:cc:7f:4f:c6:01:65:8f:d8:3c:7b:d4:72:00:19: a4:72:8b:15:c0:12:d3:53:b1:67:d5:fd:ad:da:23: 0c:92:2b:f3:09:53:1d:2d:fd:71:94:5f:44:18:90: c4:d9:76:3a:d9:9e:7c:50:8d:89:32:3f:3f:0c:1f: 89:04:5b:69:7b:8e:aa:cc:18:7a:36:a6:94:06:b2: a3:4f:03:09:3d:0a:42:26:56:47:59:ad:f3:71:0d: b6:3e:62:fe:b1:1c:8e:7a:23:5f:e9:2a:5b:99:8c: f6:ee:93:92:0c:72:5f:da:b9:d7:fc:33:6a:13:58: be:38:17:08:a6:a1:55:8a:3b:3c:3a:ce:27:74:de: c3:c2:29:d0:70:1d:19:2a:5c:cc:37:29:6d:6f:27: 0f:15:34:6e:86:f5:b1:89:06:63:d9:37:f0:df:fd: 0d:c7:65:2e:e5:89:94:49:7c:77:cc:7d:df:21:57: b0:6c:a1:a1:f3:5a:63:a7:95:7d:f4:b0:a6:17:23: e2:70:51:c8:6a:3d:1e:96:9b:2c:d7:b2:cf:cc:ee: 14:73:f8:61:29:24:76:35:30:07:82:57:d6:1d:93: b6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B6:AE:C0:D5:12:27:2F:28:B0:06:F1:98:7C:52:63:02:11:BD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:03:5a:5d:a8:c0:10:fa:b0:95:da:e4:28:9a:11:b2:2a:1d: cd:a0:c4:4c:3b:6e:14:91:11:83:bd:0d:c4:60:d0:d2:83:2b: 38:ab:a5:5a:61:36:7b:0c:2e:fd:44:0d:28:c5:70:76:65:34: cf:a0:05:bb:c9:54:66:6e:5c:cf:4a:35:5d:9a:5c:0b:86:fa: ae:85:87:ed:2c:03:ad:7a:25:b4:59:98:6e:11:db:42:2f:ff: 4f:80:fb:ba:79:ca:06:9a:04:88:ca:bf:65:05:11:44:ed:9f: 96:92:b0:d9:4d:48:f3:9f:16:19:8e:bf:61:c3:8d:1a:a9:a4: 7a:dc:56:b8:51:93:41:9f:a7:6c:bc:c6:6c:1b:7f:12:0b:00: 02:3d:83:c7:16:a4:3c:37:6e:d1:9e:13:2a:ba:d3:bb:cb:20: 4e:05:87:95:87:5e:ba:f6:7a:02:a7:db:15:9b:3c:df:26:36: a6:69:93:c2:1d:cf:54:30:f6:8e:4f:7e:c4:e3:28:68:1e:5a: b3:9b:e7:9c:64:41:00:50:8b:5a:c0:43:12:b1:c6:8b:ed:6b: 47:e6:e2:2f:df:c9:60:3d:98:56:bc:26:bc:82:a1:53:01:7b: f9:1e:c8:57:fa:72:bb:fd:54:7b:a7:47:ca:e7:b6:73:16:96: 38:27:42:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EifwvIdm/YNNVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YmU4MzE0NTAtNGUzMy00N2IzLTllZWItZWJjNDFlOWJiZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqdaWFKEtEk0mkXDWLF33Qsgzcs+qaoLk4bf I5SezH9PxgFlj9g8e9RyABmkcosVwBLTU7Fn1f2t2iMMkivzCVMdLf1xlF9EGJDE 2XY62Z58UI2JMj8/DB+JBFtpe46qzBh6NqaUBrKjTwMJPQpCJlZHWa3zcQ22PmL+ sRyOeiNf6SpbmYz27pOSDHJf2rnX/DNqE1i+OBcIpqFVijs8Os4ndN7DwinQcB0Z KlzMNyltbycPFTRuhvWxiQZj2Tfw3/0Nx2Uu5YmUSXx3zH3fIVewbKGh81pjp5V9 9LCmFyPicFHIaj0elpss17LPzO4Uc/hhKSR2NTAHglfWHZO20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW2rsDVEicvKLAG8Zh8UmMCEb2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvMmZmM2IyMjctYjQwMC0z Y2I4LWFmMTAtYTM1ZjRhMDgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQDWl2owBD6sJXa5CiaEbIqHc2gxEw7bhSREYO9DcRg0NKDKzirpVph NnsMLv1EDSjFcHZlNM+gBbvJVGZuXM9KNV2aXAuG+q6Fh+0sA616JbRZmG4R20Iv /0+A+7p5ygaaBIjKv2UFEUTtn5aSsNlNSPOfFhmOv2HDjRqppHrcVrhRk0Gfp2y8 xmwbfxILAAI9g8cWpDw3btGeEyq607vLIE4Fh5WHXrr2egKn2xWbPN8mNqZpk8Id z1Qw9o5PfsTjKGgeWrOb55xkQQBQi1rAQxKxxovta0fm4i/fyWA9mFa8JryCoVMB e/keyFf6crv9VHunR8rntnMWljgnQm8= -----END CERTIFICATE-----Generated at Sat Sep 26 22:21:14 2026 by rpki-client