$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa File: ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json) Hash identifier: cGOD2qFnNFsHEKipz+ZCDu81AM67Yz5uaP8tOYhDoBs= Subject key identifier: 44:07:D2:92:08:4B:F7:5B:05:2F:AD:DE:99:BB:18:C7:FA:EC:8E:AA Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584F1897A43ADD3DD2180C69B500 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 30383 IP address blocks: 198.208.9.0/24 maxlen: 24 198.208.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a4:3a:dd:3d:d2:18:0c:69:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=7d49b6d2-c850-485a-893e-e0d8941bedf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:41:e4:3d:01:e5:43:e3:7a:b1:ab:08:d0: 8e:8f:57:c2:4a:f5:df:ab:36:0b:1e:60:da:95:7c: 1b:48:2f:f8:f0:88:20:87:8d:3a:07:3a:3c:1c:97: 35:e3:94:9a:b9:b7:26:0b:85:87:12:79:1d:8d:ad: 68:d5:45:77:b4:f0:d8:22:53:e0:a8:94:d4:b6:3d: 72:48:49:a2:6c:1b:c7:83:cd:b7:28:7e:0a:39:b0: fb:dc:5e:4d:1d:74:fe:89:33:4f:da:1f:01:d0:54: b2:f0:8d:3d:68:cb:a0:b5:2b:e2:62:87:92:63:89: ef:db:a5:61:6d:c3:fd:e0:40:97:27:82:98:57:7e: 92:55:0c:25:d7:9f:f9:da:77:e0:be:20:86:23:37: 10:d4:2e:a5:24:7f:ab:05:b4:aa:83:63:05:27:cf: 89:71:84:32:15:81:7a:9c:17:6d:3e:da:e6:24:20: 06:00:c9:9e:1a:15:59:ad:6e:ba:d8:a1:d2:2a:7a: 0a:bb:c0:40:b3:25:63:b8:4c:52:f4:67:f6:7d:f7: fd:44:5d:4e:4c:89:50:68:f4:aa:04:a4:07:de:87: 9e:ce:1f:55:a9:75:72:59:39:35:5b:d8:b9:9d:ea: 3b:0f:99:ab:02:fe:65:7b:7b:9e:9d:e6:f0:67:0c: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:07:D2:92:08:4B:F7:5B:05:2F:AD:DE:99:BB:18:C7:FA:EC:8E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.9.0/24 198.208.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8b:38:2b:23:0c:30:15:ef:07:c7:43:e1:f4:3f:0c:f7:27: 88:04:79:21:37:ef:bf:47:ad:b7:bc:13:eb:18:da:a4:4e:b9: 8d:2a:95:af:ae:0e:5a:d1:67:80:ad:f5:40:e4:f5:d8:37:59: da:38:b8:0d:3e:a1:fe:9e:72:f3:3a:ad:fa:68:e9:72:30:86: c6:5a:da:16:46:a9:01:ff:18:7d:c2:d5:51:5d:c0:10:2c:97: 5a:42:c2:44:7e:1e:5b:d4:a5:c7:b8:1a:f3:ac:9f:23:d2:90: 94:81:73:32:3a:3e:7a:de:db:1c:cd:ec:1b:41:df:ad:cc:99: b0:de:aa:eb:a8:7a:8e:9e:4f:70:0c:fa:d9:8c:93:ad:57:80: d2:1b:66:9e:84:7c:ff:01:4a:b8:8b:29:5d:b9:44:1e:90:4a: da:12:bb:8a:55:df:2e:5d:66:0c:c0:19:61:6f:76:fc:be:19: da:07:b9:7c:6a:d8:27:68:7b:a1:62:3d:ff:78:87:a7:63:9d: 27:e9:c5:0d:aa:18:73:b5:25:e0:61:15:3d:8c:29:1f:60:f1: 1b:21:48:48:0d:eb:2a:68:31:c0:7a:82:c4:ea:56:37:8c:a6: c0:bd:06:cd:ab:f3:53:7f:3e:61:ea:93:68:e1:56:40:ff:dd: d2:1f:89:b4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8Yl6Q63T3SGAxptQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk N2Q0OWI2ZDItYzg1MC00ODVhLTg5M2UtZTBkODk0MWJlZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7NB5D0B5UPjerGrCNCOj1fCSvXfqzYLHmDa lXwbSC/48Iggh406Bzo8HJc145SaubcmC4WHEnkdja1o1UV3tPDYIlPgqJTUtj1y SEmibBvHg823KH4KObD73F5NHXT+iTNP2h8B0FSy8I09aMugtSviYoeSY4nv26Vh bcP94ECXJ4KYV36SVQwl15/52nfgviCGIzcQ1C6lJH+rBbSqg2MFJ8+JcYQyFYF6 nBdtPtrmJCAGAMmeGhVZrW662KHSKnoKu8BAsyVjuExS9Gf2fff9RF1OTIlQaPSq BKQH3oeezh9VqXVyWTk1W9i5neo7D5mrAv5le3uenebwZwyJtQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEQH0pIIS/dbBS+t3pm7GMf67I6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWJjMjRkYWMtZDA4ZS0z MzY3LWE2ZDEtNmJhMjI5NzBlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtAJAwQA xtDQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGOLOCsjDDAV7wfHQ+H0Pwz3J4gEeSE3779Hrbe8E+sY2qRO uY0qla+uDlrRZ4Ct9UDk9dg3Wdo4uA0+of6ecvM6rfpo6XIwhsZa2hZGqQH/GH3C 1VFdwBAsl1pCwkR+HlvUpce4GvOsnyPSkJSBczI6Pnre2xzN7BtB363MmbDequuo eo6eT3AM+tmMk61XgNIbZp6EfP8BSriLKV25RB6QStoSu4pV3y5dZgzAGWFvdvy+ GdoHuXxq2Cdoe6FiPf94h6djnSfpxQ2qGHO1JeBhFT2MKR9g8RshSEgN6ypoMcB6 gsTqVjeMpsC9Bs2r81N/PmHqk2jhVkD/3dIfibQ= -----END CERTIFICATE-----Generated at Wed Sep 23 07:36:27 2026 by rpki-client