$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/a09ea477-ced7-356a-b4ef-8659485aa4be.roa File: a09ea477-ced7-356a-b4ef-8659485aa4be.roa (raw, json) Hash identifier: rQ3CbpicT5YJs+O73gStn+lLBvU+OF5aPuiqqHvVyKY= Subject key identifier: 14:F5:81:15:AB:79:A5:83:86:DC:90:B2:B2:10:77:F0:01:8B:56:D3 Certificate issuer: /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Certificate serial: 010D0C9F4328584F26762AF9D7B205B85ADAEF40 Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/a09ea477-ced7-356a-b4ef-8659485aa4be.roa Signing time: Sat 12 Sep 2026 12:14:16 +0000 ROA not before: Sat 12 Sep 2026 12:14:16 +0000 ROA not after: Fri 11 Dec 2026 13:14:16 +0000 asID: 11179 IP address blocks: 146.12.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:76:2a:f9:d7:b2:05:b8:5a:da:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Validity Not Before: Sep 12 12:14:16 2026 GMT Not After : Dec 11 13:14:16 2026 GMT Subject: CN=ddc2b98a-f54f-4ed4-9712-15257b1278d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:34:7d:71:e0:1e:11:0d:ac:5e:ae:f5:51: ff:7e:e6:99:45:7d:f8:98:6d:ea:16:39:45:76:cc: f8:27:98:11:13:47:5c:15:07:35:2f:cb:7f:6e:53: b4:e9:6e:da:cb:43:a6:0e:95:a3:19:a7:3b:a0:d1: d1:61:fb:30:39:96:96:03:e0:77:1b:7c:95:31:5c: 7a:8c:c5:9c:75:cb:cc:76:ad:ed:a4:4e:d7:5e:4a: 4b:b0:f4:3d:e5:e3:61:52:0e:cf:cf:b1:5c:15:b6: d7:d5:97:07:54:7a:d2:84:c3:3d:f1:4e:2c:23:f9: 4e:d7:4d:6d:6f:00:28:7c:30:d9:45:6c:c1:f8:03: aa:31:d4:07:6e:99:93:1d:50:5f:2e:b3:a1:cd:4b: a9:ea:77:d8:bd:da:c7:e1:a9:17:0d:fc:1d:7c:68: 9f:70:2e:00:62:99:71:b5:c9:ae:96:fb:06:88:c2: fa:15:5c:5c:ab:ea:5d:f9:11:58:59:c8:d5:e2:70: a9:f5:39:f0:1a:fb:12:29:bb:57:56:41:bc:9d:1e: 08:65:01:2a:7a:e4:5b:2c:f5:f8:f5:b4:91:19:17: 27:50:e0:8d:21:50:be:db:73:4e:ba:60:9e:39:f2: 4f:5e:b8:18:7b:67:5f:24:98:53:55:f9:d9:49:ad: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F5:81:15:AB:79:A5:83:86:DC:90:B2:B2:10:77:F0:01:8B:56:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/a09ea477-ced7-356a-b4ef-8659485aa4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl X509v3 Authority Key Identifier: keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer sbgp-ipAddrBlock: critical IPv4: 146.12.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:78:5d:51:e4:ae:e5:51:cf:e6:4e:00:17:d9:44:65:58:a2: b4:8f:37:c2:23:1c:25:4f:7e:c1:97:a2:2c:6e:5d:3f:75:47: a6:2f:ee:a1:6f:53:b4:b7:3f:4f:9c:db:0f:30:31:43:93:d5: d1:6b:4c:30:ac:99:28:b9:30:f2:6f:bc:2c:9d:26:ae:70:51: 3b:e7:3a:bb:27:0c:1a:d2:71:03:5d:3a:b1:b1:06:6d:4b:12: b1:6a:87:aa:82:0c:96:df:a5:4a:35:cc:fe:02:15:36:fa:53: e3:f9:f4:56:cc:14:a6:ba:3a:39:7a:2c:e3:7c:3c:b0:ee:d5: 8a:2e:78:37:4d:18:db:bb:00:db:42:bd:79:36:72:c8:21:1c: 86:fb:93:6c:59:9e:f4:cf:8e:db:45:e9:6b:8c:40:e5:34:1f: 41:ce:89:ce:ed:72:3f:31:49:ba:7c:b5:77:c4:3d:41:20:eb: 5d:51:c2:4e:49:b3:17:5b:dc:98:cf:0a:df:af:b6:30:ff:e0: a9:54:f8:69:29:13:47:1f:2c:42:f7:3d:ea:a9:07:94:3a:b4: 6b:d5:20:59:cf:d3:11:d1:ab:9f:f3:28:16:e4:1f:b8:0f:35: 08:ef:c5:cd:20:92:db:d8:6f:d0:d9:0d:ed:ef:2d:07:8a:3c: 9e:59:19:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mdir517IFuFra70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm N2VjMB4XDTI2MDkxMjEyMTQxNloXDTI2MTIxMTEzMTQxNlowLzEtMCsGA1UEAxMk ZGRjMmI5OGEtZjU0Zi00ZWQ0LTk3MTItMTUyNTdiMTI3OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxs0fXHgHhENrF6u9VH/fuaZRX34mG3qFjlF dsz4J5gRE0dcFQc1L8t/blO06W7ay0OmDpWjGac7oNHRYfswOZaWA+B3G3yVMVx6 jMWcdcvMdq3tpE7XXkpLsPQ95eNhUg7Pz7FcFbbX1ZcHVHrShMM98U4sI/lO101t bwAofDDZRWzB+AOqMdQHbpmTHVBfLrOhzUup6nfYvdrH4akXDfwdfGifcC4AYplx tcmulvsGiML6FVxcq+pd+RFYWcjV4nCp9TnwGvsSKbtXVkG8nR4IZQEqeuRbLPX4 9bSRGRcnUOCNIVC+23NOumCeOfJPXrgYe2dfJJhTVfnZSa03BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT1gRWreaWDhtyQsrIQd/ABi1bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvYTA5ZWE0NzctY2VkNy0z NTZhLWI0ZWYtODY1OTQ4NWFhNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4 ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkgzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd4XVHkruVRz+ZOABfZRGVYorSPN8IjHCVPfsGXoixuXT91R6Yv7qFv U7S3P0+c2w8wMUOT1dFrTDCsmSi5MPJvvCydJq5wUTvnOrsnDBrScQNdOrGxBm1L ErFqh6qCDJbfpUo1zP4CFTb6U+P59FbMFKa6Ojl6LON8PLDu1YoueDdNGNu7ANtC vXk2csghHIb7k2xZnvTPjttF6WuMQOU0H0HOic7tcj8xSbp8tXfEPUEg611Rwk5J sxdb3JjPCt+vtjD/4KlU+GkpE0cfLEL3PeqpB5Q6tGvVIFnP0xHRq5/zKBbkH7gP NQjvxc0gktvYb9DZDe3vLQeKPJ5ZGTA= -----END CERTIFICATE-----Generated at Tue Sep 22 12:03:23 2026 by rpki-client