$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa File: 27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json) Hash identifier: QA1vZsMuUdyMH79iG0klbjGPmsSmACHJJUfFFalgqA4= Subject key identifier: 8C:F5:EB:28:58:8B:0E:54:0C:14:6F:4F:31:83:B9:18:C7:06:9F:0C Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584F1897A79EC328DB9992AA8F80 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 393433 IP address blocks: 162.254.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a7:9e:c3:28:db:99:92:aa:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=39769de2-dc83-49d2-9bd0-38ac000a2882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:d6:7b:fc:80:94:93:4c:5c:2c:5f:51:6d: e0:5f:5f:fb:58:e1:62:3e:52:9d:4c:81:d1:d2:1e: ab:31:20:80:b9:1a:2b:72:05:58:b8:0f:d9:a4:8f: 69:b5:eb:35:b9:5a:2b:30:f5:16:f7:95:6a:9a:70: 59:5f:67:e1:60:d0:56:d0:1e:ab:1f:02:6c:95:b2: b2:8d:c3:89:f3:92:73:c6:88:75:cb:0f:b7:1c:5d: 41:8e:26:29:3a:df:05:89:5b:0b:f7:e3:c5:c3:2b: 9d:5d:6d:43:a6:08:15:06:a4:34:31:3e:26:7c:0d: e7:a5:e4:f8:76:03:d8:58:92:01:33:17:66:99:c1: 9d:57:df:50:a5:8b:fa:0a:23:7e:06:3f:be:22:fe: 08:49:b2:c2:70:cd:33:c1:7e:72:e3:94:b2:ac:51: 78:e8:36:23:d1:09:e5:ba:d2:86:fc:c6:2c:ed:45: 58:be:a5:e5:3d:d1:4d:33:1a:be:55:ee:6b:f3:3a: f0:ce:f2:ab:32:59:05:df:d5:57:b3:9b:c8:61:02: cf:97:ea:d0:29:77:ef:c2:f6:c9:d7:23:29:8a:35: 2d:07:a8:b5:8c:75:1d:de:a5:19:18:5d:9e:33:af: 19:d1:d6:f1:40:f0:bf:8b:3d:4b:d6:23:f9:97:c7: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F5:EB:28:58:8B:0E:54:0C:14:6F:4F:31:83:B9:18:C7:06:9F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:50:b1:b4:4c:6b:5a:47:4e:a7:0f:3f:2d:a7:30:50:d6:20: 76:07:86:fa:1a:e0:96:d2:e4:e0:64:db:49:ea:49:b1:c3:c5: 42:16:79:52:3d:5d:38:57:5b:58:a6:23:b1:c5:c6:ef:43:5b: 5e:fa:a7:52:89:17:c2:3e:1d:ca:e7:fe:c4:01:55:c4:2c:2a: 29:d7:b8:45:c0:4a:b2:d9:9f:29:69:de:34:ca:f7:6c:41:ab: d4:dd:88:73:1b:57:39:1c:a1:0e:dc:82:93:38:3a:fb:04:bc: 97:b5:20:33:60:47:31:8f:8a:13:da:97:60:24:99:02:04:7f: 39:5e:3f:00:6d:ed:41:92:d0:4a:66:d4:41:c2:94:3e:75:7d: ec:6a:d5:a0:60:d7:92:62:d8:8e:24:1f:b0:be:c5:f6:cb:ef: 52:96:ed:4b:e6:7b:9c:3f:a8:a2:fa:e6:c5:47:4a:99:f4:fa: 3f:12:e8:3e:a4:2f:02:59:fd:a5:4c:3c:ad:bc:d5:30:f5:bc: 6a:c0:56:61:7a:bf:9c:3c:b9:b4:d7:0a:5d:fe:08:07:ee:5a: 60:94:31:eb:80:e2:51:45:c5:b5:7a:74:ff:2d:57:48:69:c9: 0a:83:5e:b0:30:00:9a:75:3c:e2:95:d7:ff:9b:bc:72:ac:8c: 87:e1:d5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6eewyjbmZKqj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk Mzk3NjlkZTItZGM4My00OWQyLTliZDAtMzhhYzAwMGEyODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtPWe/yAlJNMXCxfUW3gX1/7WOFiPlKdTIHR 0h6rMSCAuRorcgVYuA/ZpI9ptes1uVorMPUW95VqmnBZX2fhYNBW0B6rHwJslbKy jcOJ85Jzxoh1yw+3HF1BjiYpOt8FiVsL9+PFwyudXW1DpggVBqQ0MT4mfA3npeT4 dgPYWJIBMxdmmcGdV99QpYv6CiN+Bj++Iv4ISbLCcM0zwX5y45SyrFF46DYj0Qnl utKG/MYs7UVYvqXlPdFNMxq+Ve5r8zrwzvKrMlkF39VXs5vIYQLPl+rQKXfvwvbJ 1yMpijUtB6i1jHUd3qUZGF2eM68Z0dbxQPC/iz1L1iP5l8exRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz16yhYiw5UDBRvTzGDuRjHBp8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvMjdkZmEzNGUtZTk5Yi0z YTk1LWFmYWMtZjk4MzM1MGZhMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxQsbRMa1pHTqcPPy2nMFDWIHYHhvoa4JbS5OBk20nqSbHDxUIWeVI9 XThXW1imI7HFxu9DW176p1KJF8I+Hcrn/sQBVcQsKinXuEXASrLZnylp3jTK92xB q9TdiHMbVzkcoQ7cgpM4OvsEvJe1IDNgRzGPihPal2AkmQIEfzlePwBt7UGS0Epm 1EHClD51fexq1aBg15Ji2I4kH7C+xfbL71KW7Uvme5w/qKL65sVHSpn0+j8S6D6k LwJZ/aVMPK281TD1vGrAVmF6v5w8ubTXCl3+CAfuWmCUMeuA4lFFxbV6dP8tV0hp yQqDXrAwAJp1POKV1/+bvHKsjIfh1eI= -----END CERTIFICATE-----Generated at Fri Sep 25 20:17:56 2026 by rpki-client