$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4ed52ac8-3029-3597-9506-a991747a817d.roa File: 4ed52ac8-3029-3597-9506-a991747a817d.roa (raw, json) Hash identifier: MWkF70wOuyp9vu1JTkYwvy2PuIzdsM7xBPb5iSK2UWk= Subject key identifier: A9:23:3F:32:03:38:C5:83:BE:ED:97:6B:86:DE:BD:DD:71:EB:89:6D Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F2FA9F7CAAF47DA2AC853B400 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4ed52ac8-3029-3597-9506-a991747a817d.roa Signing time: Tue 15 Sep 2026 19:20:54 +0000 ROA not before: Tue 15 Sep 2026 19:20:54 +0000 ROA not after: Mon 14 Dec 2026 20:08:56 +0000 asID: 142146 IP address blocks: 192.48.159.0/24 maxlen: 24 192.82.167.0/24 maxlen: 24 198.29.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:a9:f7:ca:af:47:da:2a:c8:53:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 15 19:20:54 2026 GMT Not After : Dec 14 20:08:56 2026 GMT Subject: CN=d47a2c99-eeda-4b3b-b268-f421366de3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:92:b7:f9:cb:39:37:32:f7:28:39:ad:3f: 0d:eb:45:3f:6e:bb:c6:c6:a3:3c:19:13:dc:06:e6: 32:9e:22:4e:59:28:41:09:62:db:54:da:ab:a4:7c: 9e:a7:fc:46:99:1a:36:ac:7c:3c:64:5c:47:fe:15: 2e:60:52:90:9c:ff:b7:12:cf:f8:9d:c0:1d:7c:f5: 82:5d:70:6e:1d:4c:6a:aa:c1:97:43:15:5b:32:e9: a3:bb:b7:13:49:8b:1e:84:30:27:35:e8:0c:eb:4e: dc:25:45:bc:39:45:5f:c2:d0:37:42:4b:21:0e:f0: 99:a7:b5:47:91:ac:67:bd:48:8c:47:c8:2a:c1:23: 30:24:c0:9f:3e:05:68:47:1a:ea:dd:2c:5a:8b:1d: ea:a9:fe:11:3b:ee:05:39:ad:14:eb:b3:3f:86:dc: a6:67:66:08:19:cf:63:27:f7:93:70:24:b4:1f:26: a5:ed:e7:b0:50:f8:4f:f8:60:c4:ff:e8:05:6c:f7: b3:81:72:d7:d1:d0:1e:7e:2e:1b:cd:e5:30:15:e0: 3b:d3:bc:9a:05:88:55:29:80:2e:fb:15:37:88:8d: e0:18:4f:c6:b4:d5:48:eb:ca:5f:eb:3f:bb:9e:5c: ec:6a:34:f4:c0:9c:9c:26:7a:54:5b:b6:be:9b:c9: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:3F:32:03:38:C5:83:BE:ED:97:6B:86:DE:BD:DD:71:EB:89:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4ed52ac8-3029-3597-9506-a991747a817d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.48.159.0/24 192.82.167.0/24 198.29.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f2:45:47:9b:e0:88:95:b7:ff:46:2c:ed:e3:36:45:89:f0: 68:3e:d9:19:c1:77:a9:cf:b4:5d:40:aa:99:de:b3:dc:84:64: 93:44:82:4e:7a:07:95:a3:0a:6a:81:42:5a:01:0f:dd:81:cf: 93:e2:7f:b1:75:7d:57:57:de:1b:57:90:fe:68:13:9c:bf:27: 53:5c:9d:0d:6a:6f:4e:13:2c:e2:b2:6d:46:b3:8d:91:fb:56: fa:08:f4:17:4c:37:64:ec:7e:d9:ee:3c:77:d7:ac:6c:4e:5c: ab:f3:b8:11:d2:1f:2b:32:26:6a:71:a2:fc:5e:dc:67:44:34: 24:80:44:38:6f:a3:d2:23:3d:6c:fd:a4:e2:76:55:3f:46:65: cb:61:7a:bc:f9:81:5e:86:94:25:1d:db:49:32:97:d2:f4:d3: f7:27:01:e5:e7:45:9d:30:76:5e:ab:e1:76:82:bf:f9:51:95: a2:69:b0:4e:0f:ac:1b:7a:3c:98:e7:7b:ea:d0:e4:a9:e6:36: de:f3:eb:cb:74:91:b8:c6:58:72:b8:50:38:93:65:17:7f:b0: df:1d:a8:88:95:d6:6c:fb:18:a6:f1:71:d5:52:07:44:76:8a: aa:e2:c6:c2:dc:e4:0e:c9:f7:2b:88:2b:99:79:64:9a:18:20: b9:c4:42:88 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8vqffKr0faKshTtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkxNTE5MjA1NFoXDTI2MTIxNDIwMDg1NlowLzEtMCsGA1UEAxMk ZDQ3YTJjOTktZWVkYS00YjNiLWIyNjgtZjQyMTM2NmRlM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2iSt/nLOTcy9yg5rT8N60U/brvGxqM8GRPc BuYyniJOWShBCWLbVNqrpHyep/xGmRo2rHw8ZFxH/hUuYFKQnP+3Es/4ncAdfPWC XXBuHUxqqsGXQxVbMumju7cTSYsehDAnNegM607cJUW8OUVfwtA3QkshDvCZp7VH kaxnvUiMR8gqwSMwJMCfPgVoRxrq3Sxaix3qqf4RO+4FOa0U67M/htymZ2YIGc9j J/eTcCS0Hyal7eewUPhP+GDE/+gFbPezgXLX0dAefi4bzeUwFeA707yaBYhVKYAu +xU3iI3gGE/GtNVI68pf6z+7nlzsajT0wJycJnpUW7a+m8lGaQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKkjPzIDOMWDvu2Xa4bevd1x64ltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNGVkNTJhYzgtMzAyOS0z NTk3LTk1MDYtYTk5MTc0N2E4MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwDCfAwQA wFKnAwQAxh1LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHvyRUeb4IiVt/9GLO3jNkWJ8Gg+2RnBd6nPtF1A qpnes9yEZJNEgk56B5WjCmqBQloBD92Bz5Pif7F1fVdX3htXkP5oE5y/J1NcnQ1q b04TLOKybUazjZH7VvoI9BdMN2TsftnuPHfXrGxOXKvzuBHSHysyJmpxovxe3GdE NCSARDhvo9IjPWz9pOJ2VT9GZctherz5gV6GlCUd20kyl9L00/cnAeXnRZ0wdl6r 4XaCv/lRlaJpsE4PrBt6PJjne+rQ5KnmNt7z68t0kbjGWHK4UDiTZRd/sN8dqIiV 1mz7GKbxcdVSB0R2iqrixsLc5A7J9yuIK5l5ZJoYILnEQog= -----END CERTIFICATE-----Generated at Mon Sep 21 17:10:14 2026 by rpki-client