$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa File: 8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa (raw, json) Hash identifier: iLm2bgMwdTE+qlmKythCCLBSSdIqP0ru1WH2Xh9GW00= Subject key identifier: 17:AC:6A:2F:5F:B6:6A:CE:52:E1:08:26:20:66:67:A1:8C:E2:84:92 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F268D05576F1F35E5D6F1B000 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 22781 IP address blocks: 173.195.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:05:57:6f:1f:35:e5:d6:f1:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=0ca3feac-d773-453d-a49f-5aa1c21ec868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:08:a0:9e:b8:37:24:b4:83:51:f3:87:51: 58:41:a8:89:02:80:87:84:be:22:d3:10:b3:67:af: 6a:d5:7f:f8:85:81:ab:8a:16:f4:21:3a:7a:3e:d1: f9:52:6f:c2:fb:1a:24:e9:a0:95:70:3a:fc:d5:9b: 73:a8:12:20:7c:16:8d:66:45:9b:28:cd:e7:d3:0f: d2:14:4d:27:e6:43:5a:6e:a0:42:7e:f2:07:92:05: 45:7d:6a:ed:99:d5:74:e3:25:ab:84:3e:d2:ae:08: 17:8f:9e:20:8d:aa:b7:2f:34:36:63:8d:9b:6b:12: 8b:bc:a5:22:08:be:04:4b:12:c0:a4:be:e4:2a:f7: 0c:2d:02:b5:ec:2a:03:fb:0a:a6:1e:65:f9:a6:37: 23:e9:d6:af:53:88:58:e7:ed:6f:8f:70:9a:7e:df: 48:98:ad:1e:90:af:9b:0c:a9:e1:67:ed:3b:51:04: 0f:af:90:cd:18:6d:86:1f:fe:9b:d0:68:75:88:a1: bd:c1:1c:06:70:4b:73:fa:84:10:6a:7c:2c:09:0f: 2a:f2:c0:18:8c:2d:43:fa:88:8b:00:4e:54:c7:ba: f1:06:63:52:7a:f3:4f:bf:52:62:40:33:50:a5:18: c0:d7:e2:73:30:9c:4d:1e:cc:45:45:e6:aa:6c:6b: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:6A:2F:5F:B6:6A:CE:52:E1:08:26:20:66:67:A1:8C:E2:84:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.195.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8d:38:1b:d4:9c:83:0a:99:76:6e:fc:1a:3a:d5:ca:69:c2: 92:e8:78:b0:9f:f3:ed:3b:dc:4b:fa:70:df:b6:02:0b:f0:02: 2d:88:97:98:74:f0:93:a7:0d:b9:57:71:d1:6c:40:f0:52:cc: e5:a4:e0:f4:a0:9a:0a:14:8b:8b:53:38:60:78:04:53:df:a5: 0f:dd:ea:fd:fd:0c:9e:c1:51:6a:19:cb:d7:89:6f:b2:21:55: 25:82:99:e7:f7:74:e7:fb:eb:51:e7:0e:dc:d7:e3:71:fa:85: 3e:e1:75:ea:fe:29:87:85:21:59:49:b2:31:a2:c0:2c:f1:6b: 19:f8:eb:14:a2:e6:74:31:eb:8f:26:d4:05:29:be:f4:40:3b: 03:10:eb:b8:06:9e:e6:76:87:25:28:10:42:6f:04:af:d9:d4: 2f:b1:e9:20:55:8c:b4:6f:8b:f6:40:64:77:a1:89:33:3b:24: cd:21:e6:38:d7:39:a0:bc:2d:7d:4a:8d:71:fc:03:27:5a:27: fe:ce:39:1c:8c:df:21:58:b4:40:5b:c7:c5:15:97:0a:34:2a: a5:2f:82:94:32:1e:79:21:68:b1:29:99:5f:e4:97:ae:6a:c0: ae:b4:60:63:0f:5b:92:61:d3:cf:00:30:9f:c3:66:35:d1:c5: 33:80:0c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQVXbx815dbxsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk MGNhM2ZlYWMtZDc3My00NTNkLWE0OWYtNWFhMWMyMWVjODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql0IoJ64NyS0g1Hzh1FYQaiJAoCHhL4i0xCz Z69q1X/4hYGrihb0ITp6PtH5Um/C+xok6aCVcDr81ZtzqBIgfBaNZkWbKM3n0w/S FE0n5kNabqBCfvIHkgVFfWrtmdV04yWrhD7SrggXj54gjaq3LzQ2Y42baxKLvKUi CL4ESxLApL7kKvcMLQK17CoD+wqmHmX5pjcj6davU4hY5+1vj3Caft9ImK0ekK+b DKnhZ+07UQQPr5DNGG2GH/6b0Gh1iKG9wRwGcEtz+oQQanwsCQ8q8sAYjC1D+oiL AE5Ux7rxBmNSevNPv1JiQDNQpRjA1+JzMJxNHsxFReaqbGsj5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBesai9ftmrOUuEIJiBmZ6GM4oSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODk0OGUxZjgtMGNhYS0z OGEwLWE1OTYtNWI2YTc4MDJiZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASNOBvUnIMKmXZu/Bo61cppwpLoeLCf8+073Ev6cN+2AgvwAi2Il5h0 8JOnDblXcdFsQPBSzOWk4PSgmgoUi4tTOGB4BFPfpQ/d6v39DJ7BUWoZy9eJb7Ih VSWCmef3dOf761HnDtzX43H6hT7hder+KYeFIVlJsjGiwCzxaxn46xSi5nQx648m 1AUpvvRAOwMQ67gGnuZ2hyUoEEJvBK/Z1C+x6SBVjLRvi/ZAZHehiTM7JM0h5jjX OaC8LX1KjXH8AydaJ/7OORyM3yFYtEBbx8UVlwo0KqUvgpQyHnkhaLEpmV/kl65q wK60YGMPW5Jh088AMJ/DZjXRxTOADP4= -----END CERTIFICATE-----Generated at Sun Sep 20 15:18:00 2026 by rpki-client