$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/99756ba8-748e-3d01-8177-e0de6e539f0a.roa File: 99756ba8-748e-3d01-8177-e0de6e539f0a.roa (raw, json) Hash identifier: HNd6VOwDFLFnhp4Forg4kbhsmypCMiVpScclvLj7kfs= Subject key identifier: 2F:A5:4A:1E:3A:1B:1C:E2:59:EF:6C:60:01:78:86:4D:A7:52:06:D0 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584F119D185B20472086B5591780 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/99756ba8-748e-3d01-8177-e0de6e539f0a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 393740 IP address blocks: 206.180.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:18:5b:20:47:20:86:b5:59:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5f6cfb83-a45f-4ead-9ada-94d8fecafe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:42:28:86:62:94:6b:c7:d1:6d:7f:16:4b: b4:84:6f:d0:73:71:e6:3d:03:3b:12:a3:a9:25:f3: c0:37:cd:34:91:26:fc:65:9f:ae:20:e5:67:6e:51: 4b:15:3a:cb:ba:5b:f8:a8:a2:1c:35:41:7c:cf:e2: 31:38:c3:72:60:6d:cc:8d:69:e6:4d:7e:0a:7a:66: 2e:86:02:53:bb:49:d9:23:7d:0a:84:e0:a9:e9:b8: cc:c7:0a:d5:ce:be:11:8b:4f:fb:b9:5e:44:42:89: ea:77:1a:04:a8:13:cf:28:fb:54:c6:7e:30:2f:b5: c5:63:9e:38:f6:64:75:a3:ef:f9:53:b0:7a:61:44: c0:93:89:d3:3a:37:b6:68:78:48:88:26:d0:55:91: 43:43:8b:f4:96:56:64:07:a9:f4:cf:56:68:aa:5b: 27:00:e3:f7:1e:bb:9c:7e:9e:31:fc:09:aa:ee:da: db:c8:23:0a:18:59:4e:88:c0:e2:a1:39:dc:a9:74: bb:2f:f1:7f:09:6a:f0:d0:3c:78:33:cd:09:d8:dc: 42:ec:43:b4:b3:fa:12:9d:2e:62:dc:02:20:93:55: 06:49:78:19:10:08:f2:59:d0:40:14:96:e9:f2:bc: 55:54:7a:74:e9:42:26:af:c7:b1:95:b7:6b:33:ca: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:4A:1E:3A:1B:1C:E2:59:EF:6C:60:01:78:86:4D:A7:52:06:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/99756ba8-748e-3d01-8177-e0de6e539f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 206.180.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a8:cd:af:b2:b2:7d:53:e4:a3:39:02:61:5b:7e:d5:07:b3: 35:b3:e5:4e:21:a9:62:a5:96:b3:96:a4:66:61:b8:8b:71:c5: b9:d0:af:2a:aa:34:7f:b7:83:b8:59:5d:83:3a:ef:37:92:67: 7e:82:bd:39:5f:6e:a7:98:d7:b9:4f:99:da:85:07:eb:97:53: 3b:3a:98:4a:55:5b:ee:7d:74:3a:f4:51:54:b4:68:76:4a:b4: d7:83:31:68:85:df:a9:0b:1e:5c:93:df:a9:a3:05:c2:9e:2a: 8f:fc:3a:f4:15:bf:78:53:9f:16:f4:7e:24:d2:78:44:5d:4d: 98:1c:94:a8:2e:bb:8f:e0:a4:0a:0b:f3:30:16:03:1a:62:15: 3d:62:fc:9e:9e:7f:38:53:b7:9f:5d:72:5d:67:2a:32:b7:b7: 56:13:6f:ca:50:0a:a7:18:f2:16:b3:09:2c:cd:32:24:8f:66: 8a:5e:d8:b7:90:05:31:94:00:b8:0a:9c:4a:fa:16:35:b6:ea: 68:9c:a5:e5:0d:94:95:0e:b7:31:b0:97:c1:bb:9a:30:a1:e0: 50:2e:44:87:51:7d:0f:a4:2d:61:a5:1f:75:c1:85:7c:e0:4d: 5a:1a:1b:de:a7:d6:be:92:41:04:43:c8:19:50:fc:97:8a:21: f6:9c:92:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRhbIEcghrVZF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NWY2Y2ZiODMtYTQ1Zi00ZWFkLTlhZGEtOTRkOGZlY2FmZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOhCKIZilGvH0W1/Fku0hG/Qc3HmPQM7EqOp JfPAN800kSb8ZZ+uIOVnblFLFTrLulv4qKIcNUF8z+IxOMNyYG3MjWnmTX4KemYu hgJTu0nZI30KhOCp6bjMxwrVzr4Ri0/7uV5EQonqdxoEqBPPKPtUxn4wL7XFY544 9mR1o+/5U7B6YUTAk4nTOje2aHhIiCbQVZFDQ4v0llZkB6n0z1ZoqlsnAOP3Hruc fp4x/Amq7trbyCMKGFlOiMDioTncqXS7L/F/CWrw0Dx4M80J2NxC7EO0s/oSnS5i 3AIgk1UGSXgZEAjyWdBAFJbp8rxVVHp06UImr8exlbdrM8qinQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+lSh46GxziWe9sYAF4hk2nUgbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvOTk3NTZiYTgtNzQ4ZS0z ZDAxLTgxNzctZTBkZTZlNTM5ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeoza+ysn1T5KM5AmFbftUHszWz5U4hqWKllrOWpGZhuItxxbnQryqq NH+3g7hZXYM67zeSZ36CvTlfbqeY17lPmdqFB+uXUzs6mEpVW+59dDr0UVS0aHZK tNeDMWiF36kLHlyT36mjBcKeKo/8OvQVv3hTnxb0fiTSeERdTZgclKguu4/gpAoL 8zAWAxpiFT1i/J6efzhTt59dcl1nKjK3t1YTb8pQCqcY8hazCSzNMiSPZope2LeQ BTGUALgKnEr6FjW26micpeUNlJUOtzGwl8G7mjCh4FAuRIdRfQ+kLWGlH3XBhXzg TVoaG96n1r6SQQRDyBlQ/JeKIfackpo= -----END CERTIFICATE-----Generated at Tue Sep 22 11:46:09 2026 by rpki-client