$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa File: b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa (raw, json) Hash identifier: ResO4UxVutThkNwBH811uifwzTWAijpPEVXoRZt1Rac= Subject key identifier: A5:64:CD:5A:FA:47:5A:69:02:16:3F:B0:01:E4:53:B9:16:76:F6:A1 Certificate issuer: /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732 Certificate serial: 010D0C9F4328584F2957C285ECB8EB5F89F1D500 Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 53823 IP address blocks: 198.15.0.0/21 maxlen: 21 209.172.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c2:85:ec:b8:eb:5f:89:f1:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=ba7ab079-8876-4e5b-ada8-1f96d6946f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:9f:07:a4:cc:2b:89:34:3b:8c:df:af:e0: 96:9c:b5:a4:68:d6:f8:69:ec:b0:72:35:5a:28:dd: d6:b2:51:65:a8:f4:94:59:e8:d6:cb:af:65:5e:a0: 61:19:5f:f6:0a:51:66:f3:61:ef:83:22:c7:c9:29: d1:56:f6:a4:fe:d0:ff:eb:0a:2b:77:8b:da:b0:bc: a8:6c:3b:3f:ef:79:c8:df:11:8c:3b:12:12:5a:41: 26:09:58:dc:bf:a0:8c:32:8f:36:a7:76:85:45:de: 1f:ca:32:3e:e1:db:43:7b:86:eb:e5:a4:c2:32:e0: f8:25:6b:03:38:30:c0:85:03:f5:f4:78:a0:c1:81: 09:f6:c1:a2:50:d8:5d:59:bb:9c:e5:7f:e4:e6:c3: 7e:9d:1b:93:6d:c6:0b:f9:3b:b3:34:f2:4c:2e:69: 32:35:8f:a3:a1:be:01:65:05:14:c8:c0:c3:8f:03: b6:dd:77:b0:d9:18:d5:87:18:50:2c:3e:a9:d0:7d: e4:25:a0:05:a8:e8:e0:ae:3b:02:33:8a:0d:3a:29: d5:e2:01:10:7e:1b:8f:0c:c3:3f:97:02:44:0e:ff: aa:8b:6c:f2:ea:43:53:c1:5d:3a:c2:1a:3b:de:56: 61:82:2d:51:0e:ba:a8:c7:80:a5:42:2d:da:5d:02: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:CD:5A:FA:47:5A:69:02:16:3F:B0:01:E4:53:B9:16:76:F6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl X509v3 Authority Key Identifier: keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer sbgp-ipAddrBlock: critical IPv4: 198.15.0.0/21 209.172.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:25:f8:a7:64:f4:1e:02:63:5b:98:75:73:fc:6f:23:e7:2b: 73:c9:6c:a4:93:ed:71:9a:5c:ae:d6:b7:33:55:65:ce:0f:7a: d9:02:36:c5:09:d4:3f:d9:e7:13:65:3b:89:67:b3:25:c7:3b: 51:6e:13:15:bf:9b:c0:64:60:6e:37:29:8e:f1:19:66:23:ff: e0:01:59:31:b6:de:e5:bc:24:3d:7e:e3:2c:71:a5:a9:6b:54: bd:de:f4:2e:ce:47:40:d9:c3:96:87:bc:aa:ec:c3:6c:09:45: af:8b:39:e6:aa:77:70:03:fd:53:f1:61:09:66:24:97:cf:05: ae:19:0c:b6:3a:f2:3e:34:70:60:1a:59:f5:37:bf:51:81:d8: c3:3b:a3:fd:3a:8c:39:07:bb:b8:40:df:08:81:b0:17:19:da: b7:63:23:d4:b6:62:6d:14:72:8f:61:76:55:56:18:90:14:40: 6f:25:79:2d:b8:e1:1d:64:93:81:37:9e:82:ce:fd:a4:be:9b: 84:6a:a2:d7:ba:06:46:66:6a:81:8e:f3:de:04:9a:d7:1a:f1: ff:d9:d6:04:2f:51:6e:b5:f6:12:a3:bc:d4:a9:06:b9:d4:52: 31:9a:25:02:22:11:bd:35:f2:43:8c:20:64:7e:43:92:1a:87: fe:79:d0:47 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8pV8KF7LjrX4nx1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2ZTVkZGItMDNmZi00MTM5LThhNTEtYjkxOGJjODRm NzMyMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YmE3YWIwNzktODg3Ni00ZTViLWFkYTgtMWY5NmQ2OTQ2ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOafB6TMK4k0O4zfr+CWnLWkaNb4aeywcjVa KN3WslFlqPSUWejWy69lXqBhGV/2ClFm82HvgyLHySnRVvak/tD/6word4vasLyo bDs/73nI3xGMOxISWkEmCVjcv6CMMo82p3aFRd4fyjI+4dtDe4br5aTCMuD4JWsD ODDAhQP19HigwYEJ9sGiUNhdWbuc5X/k5sN+nRuTbcYL+TuzNPJMLmkyNY+job4B ZQUUyMDDjwO23Xew2RjVhxhQLD6p0H3kJaAFqOjgrjsCM4oNOinV4gEQfhuPDMM/ lwJEDv+qi2zy6kNTwV06who73lZhgi1RDrqox4ClQi3aXQIxqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKVkzVr6R1ppAhY/sAHkU7kWdvahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZl NWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4NGY3MzIvYjNjYTY4ZTUtM2I0OC0z YzkxLTgyYTMtZGE3YjVhYjJhNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ2ZTVkZGItMDNmZi00MTM5LThh NTEtYjkxOGJjODRmNzMyL2FkNmU1ZGRiLTAzZmYtNDEzOS04YTUxLWI5MThiYzg0 ZjczMi5jcmwwHwYDVR0jBBgwFoAUf2yER0mnPE5Vc59aRhckKPgrd6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4 YmM4NGY3MzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDxg8AAwQC 0awIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIQl+Kdk9B4CY1uYdXP8byPnK3PJbKST7XGaXK7WtzNVZc4P etkCNsUJ1D/Z5xNlO4lnsyXHO1FuExW/m8BkYG43KY7xGWYj/+ABWTG23uW8JD1+ 4yxxpalrVL3e9C7OR0DZw5aHvKrsw2wJRa+LOeaqd3AD/VPxYQlmJJfPBa4ZDLY6 8j40cGAaWfU3v1GB2MM7o/06jDkHu7hA3wiBsBcZ2rdjI9S2Ym0Uco9hdlVWGJAU QG8leS244R1kk4E3noLO/aS+m4Rqote6BkZmaoGO894Emtca8f/Z1gQvUW619hKj vNSpBrnUUjGaJQIiEb018kOMIGR+Q5Iah/550Ec= -----END CERTIFICATE-----Generated at Tue Sep 22 03:18:26 2026 by rpki-client