$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa File: 434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa (raw, json) Hash identifier: x3cbQY1GKiKN/hmr4mq140skyp0VmnZt6vz4pjzqaYk= Subject key identifier: 89:53:30:AB:D8:AC:7A:E3:AE:F8:E0:49:67:7D:30:23:FD:09:06:F3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F3E47DA30D0167FF101B8A180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 4766 IP address blocks: 168.93.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:da:30:d0:16:7f:f1:01:b8:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=66680774-993c-4035-b250-f2a56721b75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:4b:43:1f:6e:59:7d:40:ed:d0:92:04:95: e5:78:bb:f5:13:a7:14:97:3e:30:fd:14:de:99:72: 38:a7:6f:40:c0:01:08:a8:d5:a7:69:6a:fa:0c:93: 8c:56:b9:9b:e3:8b:0d:f6:b0:50:e1:e3:dd:4f:67: 1c:e4:f7:e1:e6:1e:0b:06:a6:02:d3:72:80:46:fb: 32:29:be:9a:13:23:94:97:1b:a1:3f:d6:0b:7f:e1: 72:cb:98:ff:09:10:87:ff:4a:53:6f:28:19:3c:b0: 7c:fd:2c:8c:7c:c7:71:fd:84:0d:58:06:13:08:aa: f6:e7:74:1a:b3:75:9d:13:1f:57:c6:6f:20:2f:e9: f3:fb:6b:ae:8d:1b:45:34:82:bb:7d:a3:61:df:2f: 7a:bb:98:78:b2:34:e5:21:71:8f:eb:d3:19:a3:de: 27:60:45:91:1d:99:15:82:4d:d8:03:53:79:f2:04: 42:d0:ad:07:14:b8:b8:56:77:99:b2:a0:e2:c7:3d: 16:f7:52:af:8a:29:10:3c:12:d2:cb:1f:9a:a9:dc: 5e:81:da:03:21:b7:ba:2c:59:f9:84:64:53:74:49: 85:a7:e2:29:7d:bc:e0:93:47:29:d8:c8:71:1a:9c: 77:b2:a7:38:da:13:c6:fc:ed:b5:5a:70:0b:fe:18: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:53:30:AB:D8:AC:7A:E3:AE:F8:E0:49:67:7D:30:23:FD:09:06:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:63:89:6a:11:76:0f:d1:19:05:10:f9:d3:a1:9c:05:c3:cd: 4b:16:59:f7:1a:ed:4c:b4:2f:ab:2f:c5:66:09:cd:bb:13:13: d6:68:f3:18:6a:e1:7b:5e:41:ae:23:1a:41:6c:d6:61:e4:db: 77:6a:cf:61:9f:a6:0e:4d:94:af:bf:2f:e4:6e:9b:a5:51:90: 8c:2a:a6:23:67:30:6b:53:03:7f:ee:e2:e4:45:dd:57:a4:1f: cf:84:79:46:18:cc:14:35:c3:af:61:68:df:0e:89:b5:1e:de: d5:6d:8c:62:09:96:80:71:09:a9:ba:1c:9f:de:4d:a6:9a:99: ac:9d:3d:2d:f2:22:20:08:b5:e2:0e:64:0b:d9:20:1b:c1:cf: e0:a8:87:71:56:17:b4:37:25:f3:57:4c:e2:c1:a1:6e:59:88: 97:22:ad:45:df:9c:65:50:6d:d7:3f:e5:a7:1f:ed:83:5b:d3: fa:62:23:1b:c6:eb:b1:56:3e:81:e0:f7:12:dd:f6:5a:df:b9: 41:78:8c:42:8e:f3:80:9b:7e:2e:0c:87:c1:c0:91:1a:b3:2f: f2:3b:37:db:2c:c6:a9:44:39:c5:d6:f9:05:bd:96:b4:e5:aa: b1:21:a9:95:9c:24:93:0f:6f:a9:a4:53:d7:5e:f0:84:e7:1e: 2e:9a:9d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9ow0BZ/8QG4oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NjY2ODA3NzQtOTkzYy00MDM1LWIyNTAtZjJhNTY3MjFiNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/tLQx9uWX1A7dCSBJXleLv1E6cUlz4w/RTe mXI4p29AwAEIqNWnaWr6DJOMVrmb44sN9rBQ4ePdT2cc5Pfh5h4LBqYC03KARvsy Kb6aEyOUlxuhP9YLf+Fyy5j/CRCH/0pTbygZPLB8/SyMfMdx/YQNWAYTCKr253Qa s3WdEx9Xxm8gL+nz+2uujRtFNIK7faNh3y96u5h4sjTlIXGP69MZo94nYEWRHZkV gk3YA1N58gRC0K0HFLi4VneZsqDixz0W91KviikQPBLSyx+aqdxegdoDIbe6LFn5 hGRTdEmFp+Ipfbzgk0cp2MhxGpx3sqc42hPG/O21WnAL/hj8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlTMKvYrHrjrvjgSWd9MCP9CQbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDM0YzllOTQtYTVlZS0z ZDRmLWE0Y2EtOGE3NWZmODhlZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZjiWoRdg/RGQUQ+dOhnAXDzUsWWfca7Uy0L6svxWYJzbsTE9Zo8xhq 4XteQa4jGkFs1mHk23dqz2Gfpg5NlK+/L+Rum6VRkIwqpiNnMGtTA3/u4uRF3Vek H8+EeUYYzBQ1w69haN8OibUe3tVtjGIJloBxCam6HJ/eTaaamaydPS3yIiAIteIO ZAvZIBvBz+Coh3FWF7Q3JfNXTOLBoW5ZiJcirUXfnGVQbdc/5acf7YNb0/piIxvG 67FWPoHg9xLd9lrfuUF4jEKO84Cbfi4Mh8HAkRqzL/I7N9ssxqlEOcXW+QW9lrTl qrEhqZWcJJMPb6mkU9de8ITnHi6andg= -----END CERTIFICATE-----Generated at Mon Sep 21 19:05:13 2026 by rpki-client