$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acc75625-6924-3fa0-b900-5b9a9155e832.roa File: acc75625-6924-3fa0-b900-5b9a9155e832.roa (raw, json) Hash identifier: 3xH2Dw4ZXeI6k3zoAeBrMafOF7fiW7otxLHPEvptsFM= Subject key identifier: 60:E8:A8:A6:46:E8:8C:DD:55:BE:17:5B:A9:26:E7:1D:BE:AE:A1:54 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F1CC7B0935C732732FA12B220 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acc75625-6924-3fa0-b900-5b9a9155e832.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 5650 IP address blocks: 168.93.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:b0:93:5c:73:27:32:fa:12:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=cf67347f-cded-4ec5-b627-1ba0e0ecc46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:c7:b0:8f:b0:0a:7b:be:15:f0:7c:32:62: 8a:37:69:1a:d3:42:57:e2:35:69:a2:ad:c5:8f:99: 17:d3:9b:94:b5:c2:24:ae:fc:b9:cb:40:03:6f:97: d3:3b:05:8b:be:b8:c8:b1:1f:b2:a2:b3:27:62:d0: ca:d3:c8:b1:8d:7c:17:73:4f:c0:c2:3a:c2:26:05: 48:11:ef:86:d4:c3:a4:f0:8e:fd:db:a2:78:1e:58: e3:a2:da:01:74:c3:eb:fd:fd:e2:1f:66:57:d0:e0: a8:73:07:d9:64:cf:4d:db:a7:35:e5:83:26:40:a4: 45:cb:e2:1a:5e:5e:7a:29:67:87:2d:d5:14:f4:1a: b3:b2:7d:21:87:ab:9e:c8:9e:fd:e7:9f:aa:dc:7b: 6e:53:d1:17:a7:56:7e:73:88:9f:25:da:90:50:a4: af:1a:3c:aa:cd:e2:57:b7:89:9a:02:09:5f:e3:04: a3:b2:24:80:4b:76:e1:c5:69:4b:2a:0d:73:43:e5: 74:e1:2b:b1:78:62:8e:15:a2:a9:80:9f:a8:f6:12: b7:e3:14:5d:5c:31:a9:27:e0:b4:68:61:f9:79:75: 86:83:09:61:41:f8:ae:bf:ba:e1:11:c5:db:5b:43: 42:35:e0:10:89:47:ac:31:e6:6a:6d:f5:46:fa:8d: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:A8:A6:46:E8:8C:DD:55:BE:17:5B:A9:26:E7:1D:BE:AE:A1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acc75625-6924-3fa0-b900-5b9a9155e832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1b:2d:be:c1:23:52:07:f2:70:f4:d5:b2:be:38:04:f7:82: 61:1b:b5:08:f2:82:67:83:91:80:a8:71:4d:53:df:38:d9:d9: 07:0d:9d:e5:a3:9f:54:ed:ce:d7:91:08:1b:03:52:65:45:df: f1:b1:9f:df:f7:a6:79:c2:87:e3:26:3c:93:87:7c:b0:1e:90: 80:b1:ab:9d:d0:2a:d5:a8:63:7a:c1:ff:77:1d:ac:6a:79:e3: ba:a5:48:96:4d:61:12:31:8f:c3:8f:27:69:4d:59:49:e5:cf: 5a:0b:fe:4c:c2:af:3e:32:79:98:3e:67:04:a6:8c:dc:a2:7b: 6e:da:de:d0:c4:f4:c6:bb:26:c2:cc:3f:a3:ea:8d:66:12:97: 26:87:e1:d7:28:a1:eb:87:54:de:11:fe:2e:97:30:9c:7b:46: a0:62:c4:e5:39:ee:09:b8:2c:bf:3c:d0:c3:b6:4d:6c:1d:80: 6b:90:18:65:58:78:7d:2f:7c:42:28:7c:63:70:f1:74:6f:aa: 8d:34:9c:76:90:9a:cb:85:af:d2:7f:c2:e7:e8:49:4e:f0:a6: 0d:ca:69:08:74:b7:33:a9:ff:a2:09:fa:b9:7f:bd:28:05:2b: 2e:5c:41:b4:dd:6e:7f:9b:d1:91:b1:d3:0d:a3:41:2b:a9:01: d2:a7:6b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx7CTXHMnMvoSsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk Y2Y2NzM0N2YtY2RlZC00ZWM1LWI2MjctMWJhMGUwZWNjNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUnHsI+wCnu+FfB8MmKKN2ka00JX4jVpoq3F j5kX05uUtcIkrvy5y0ADb5fTOwWLvrjIsR+yorMnYtDK08ixjXwXc0/AwjrCJgVI Ee+G1MOk8I7926J4HljjotoBdMPr/f3iH2ZX0OCocwfZZM9N26c15YMmQKRFy+Ia Xl56KWeHLdUU9Bqzsn0hh6ueyJ7955+q3HtuU9EXp1Z+c4ifJdqQUKSvGjyqzeJX t4maAglf4wSjsiSAS3bhxWlLKg1zQ+V04SuxeGKOFaKpgJ+o9hK34xRdXDGpJ+C0 aGH5eXWGgwlhQfiuv7rhEcXbW0NCNeAQiUesMeZqbfVG+o0V7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDoqKZG6IzdVb4XW6km5x2+rqFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWNjNzU2MjUtNjkyNC0z ZmEwLWI5MDAtNWI5YTkxNTVlODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUbLb7BI1IH8nD01bK+OAT3gmEbtQjygmeDkYCocU1T3zjZ2QcNneWj n1TtzteRCBsDUmVF3/Gxn9/3pnnCh+MmPJOHfLAekICxq53QKtWoY3rB/3cdrGp5 47qlSJZNYRIxj8OPJ2lNWUnlz1oL/kzCrz4yeZg+ZwSmjNyie27a3tDE9Ma7JsLM P6PqjWYSlyaH4dcooeuHVN4R/i6XMJx7RqBixOU57gm4LL880MO2TWwdgGuQGGVY eH0vfEIofGNw8XRvqo00nHaQmsuFr9J/wufoSU7wpg3KaQh0tzOp/6IJ+rl/vSgF Ky5cQbTdbn+b0ZGx0w2jQSupAdKna5Q= -----END CERTIFICATE-----Generated at Mon Sep 21 17:23:11 2026 by rpki-client