$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/5d145b87-618b-39b9-97aa-e4fae7498f78.roa File: 5d145b87-618b-39b9-97aa-e4fae7498f78.roa (raw, json) Hash identifier: vUed0yqlfmEVtoZemeoW31ao1iT6XehiztVov6miJoE= Subject key identifier: 84:09:F4:72:1C:96:16:CA:39:8B:69:37:BE:DD:20:5A:54:9A:19:36 Certificate issuer: /CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf Certificate serial: 010D0C9F4328584F3CE2A0E3704BFBFC07C7CB80 Authority key identifier: A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/5d145b87-618b-39b9-97aa-e4fae7498f78.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 14070 IP address blocks: 208.85.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a0:e3:70:4b:fb:fc:07:c7:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=034560bc-c11e-4842-9d34-511bad16d3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:9b:d4:cd:ab:aa:0d:f4:15:03:b3:21:c4: 41:53:67:75:a0:4b:b0:00:ca:88:d3:7e:0a:67:14: 37:5a:0a:33:99:59:fb:e1:6b:ee:79:ec:7c:09:11: 3b:f2:8c:3a:e0:ae:fc:f0:8d:88:19:0d:46:59:3e: 0a:eb:f3:80:56:81:4b:19:ff:1b:46:d8:d9:58:cd: 6e:66:69:bf:a7:a6:63:6f:84:2d:7d:0d:37:e5:4d: 8c:c5:1f:4c:90:24:cd:4c:74:fe:89:75:98:21:29: 1f:8d:f9:9a:8b:2b:70:a6:15:ed:f0:66:c8:b9:ec: 94:25:d5:a6:d9:48:48:f1:69:17:c0:97:a3:ce:67: ee:89:e3:03:cb:01:97:5e:1e:37:6f:8b:9d:12:7e: 6b:b3:76:a9:ce:20:75:45:c6:91:39:a6:33:99:bf: ee:c9:54:bd:d6:af:47:ec:f9:18:c0:42:62:52:13: 1f:5f:59:29:a9:55:16:2f:ca:ca:9e:84:5c:25:35: f2:c4:02:d5:13:66:f7:9b:46:51:05:96:bb:af:74: 83:ab:ac:d2:bf:46:ac:a8:2b:0d:ab:51:f3:8d:15: 28:9e:79:a7:df:10:05:38:25:3e:6e:59:eb:83:97: 79:35:31:67:79:14:09:2b:ff:e1:09:f4:88:b6:4a: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:F4:72:1C:96:16:CA:39:8B:69:37:BE:DD:20:5A:54:9A:19:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/5d145b87-618b-39b9-97aa-e4fae7498f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.crl X509v3 Authority Key Identifier: keyid:A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer sbgp-ipAddrBlock: critical IPv4: 208.85.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6a:09:64:2a:6c:a1:5d:07:ab:1c:61:b7:fe:31:b4:49:8e: 31:c6:73:98:2c:f6:77:18:8e:8d:67:ef:12:c5:e2:91:cb:b9: 0f:54:c8:48:45:90:bf:b6:19:d7:27:82:28:bc:bd:6b:92:d4: fd:45:df:5e:47:b9:2b:d4:e6:1f:7f:69:79:10:61:7f:a5:e4: c6:cb:60:a3:2c:69:47:da:ec:b8:22:19:7b:d7:23:ae:c3:de: 6b:4d:1c:c6:32:96:43:69:1b:46:d7:b3:1b:b9:db:c8:39:ce: 02:2e:79:28:a8:e9:ba:d2:5b:7c:5c:8b:e0:0e:f2:0b:e3:21: a6:4a:be:ff:5c:eb:60:46:42:98:55:40:39:36:47:2f:1c:60: 9b:a0:e3:4a:c8:3b:4c:78:5e:b2:59:9a:fc:f0:d8:95:ad:37: 61:35:11:b7:95:69:32:69:3b:8f:e4:17:f7:21:4b:13:d7:ca: 26:26:a7:4b:9a:03:f6:78:7c:e4:41:a9:62:0a:3f:7d:ec:f3: ad:40:21:c9:28:d7:84:8f:11:61:24:7b:a6:50:9d:fc:77:cc: 08:3b:72:f9:83:08:07:3a:48:e3:b5:78:91:0c:11:5b:c3:1e: fc:5b:06:22:5f:87:e4:0f:2b:25:bd:54:50:72:86:c2:20:ab: 68:7c:e1:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qDjcEv7/AfHy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4YjRkMTMtM2JmMC00YWNjLWJmZDQtYWVkY2UyZjg2 NmJmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MDM0NTYwYmMtYzExZS00ODQyLTlkMzQtNTExYmFkMTZkM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Ob1M2rqg30FQOzIcRBU2d1oEuwAMqI034K ZxQ3WgozmVn74Wvueex8CRE78ow64K788I2IGQ1GWT4K6/OAVoFLGf8bRtjZWM1u Zmm/p6Zjb4QtfQ035U2MxR9MkCTNTHT+iXWYISkfjfmaiytwphXt8GbIueyUJdWm 2UhI8WkXwJejzmfuieMDywGXXh43b4udEn5rs3apziB1RcaROaYzmb/uyVS91q9H 7PkYwEJiUhMfX1kpqVUWL8rKnoRcJTXyxALVE2b3m0ZRBZa7r3SDq6zSv0asqCsN q1HzjRUonnmn3xAFOCU+blnrg5d5NTFneRQJK//hCfSItkquKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQJ9HIclhbKOYtpN77dIFpUmhk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNThi NGQxMy0zYmYwLTRhY2MtYmZkNC1hZWRjZTJmODY2YmYvNWQxNDViODctNjE4Yi0z OWI5LTk3YWEtZTRmYWU3NDk4Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU4YjRkMTMtM2JmMC00YWNjLWJm ZDQtYWVkY2UyZjg2NmJmL2E1OGI0ZDEzLTNiZjAtNGFjYy1iZmQ0LWFlZGNlMmY4 NjZiZi5jcmwwHwYDVR0jBBgwFoAUpl0W7eQgeLEmxCuBiDzYApYUfKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNThiNGQxMy0zYmYwLTRhY2MtYmZkNC1hZWRj ZTJmODY2YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBqCWQqbKFdB6scYbf+MbRJjjHGc5gs9ncYjo1n7xLF4pHLuQ9UyEhF kL+2Gdcngii8vWuS1P1F315HuSvU5h9/aXkQYX+l5MbLYKMsaUfa7LgiGXvXI67D 3mtNHMYylkNpG0bXsxu528g5zgIueSio6brSW3xci+AO8gvjIaZKvv9c62BGQphV QDk2Ry8cYJug40rIO0x4XrJZmvzw2JWtN2E1EbeVaTJpO4/kF/chSxPXyiYmp0ua A/Z4fORBqWIKP33s861AIcko14SPEWEke6ZQnfx3zAg7cvmDCAc6SOO1eJEMEVvD HvxbBiJfh+QPKyW9VFByhsIgq2h84fM= -----END CERTIFICATE-----Generated at Tue Sep 22 06:23:42 2026 by rpki-client