$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa File: bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa (raw, json) Hash identifier: 9FGAOmHd4BJifrqedJLb462SvwdSsPnzIMloweCYSoM= Subject key identifier: 2A:82:46:6B:C4:22:F5:88:F9:A6:10:F5:34:E7:DF:B9:71:31:6F:31 Certificate issuer: /CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Certificate serial: 010D0C9F4328584F4112B35F7BC5B92B15BBA840 Authority key identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 54957 IP address blocks: 198.162.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b3:5f:7b:c5:b9:2b:15:bb:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=0cda970a-7635-466a-9562-9c7939f4313a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:30:33:08:77:eb:18:b6:7e:47:1f:ac:b1: ae:60:32:7a:69:b4:ae:0d:62:ed:c7:5a:e0:7e:af: 4b:23:25:00:c3:9e:9c:ae:49:e4:bc:0b:12:6f:2b: 82:c1:e8:d6:80:6a:23:83:3b:d4:af:31:7e:2d:69: 92:af:9a:e2:fc:16:a3:30:4e:94:d3:e9:ae:b9:cf: c8:46:96:1c:70:46:81:d5:bb:46:b6:d3:be:4b:47: 9d:d4:de:38:ce:ed:67:b2:2d:4a:b0:e2:c1:b6:8b: a8:01:f1:91:fe:0d:6d:dd:bf:71:85:5f:a7:b0:0a: b4:5c:9a:fc:07:86:ac:bd:ca:af:08:40:5d:76:e0: a1:7c:85:2d:74:37:55:cb:7e:19:92:5b:e7:34:a7: 29:cc:e5:fd:20:22:c2:43:89:a5:de:d0:4e:a7:db: 8a:c7:6c:03:34:23:dd:1b:40:ce:1f:2f:68:14:d7: 4f:7b:c7:26:00:11:3d:24:d8:72:ff:c1:ec:cd:ac: fd:24:fb:b7:fc:6a:d5:43:d9:f7:ab:cd:3b:59:92: 68:c9:71:bb:1d:6d:52:84:87:6a:d8:73:71:b5:a1: 6a:d0:54:ff:66:b0:80:7c:80:7c:1f:80:35:02:fd: 59:ed:97:98:3e:d6:81:d5:13:b7:17:a8:e7:93:9e: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:82:46:6B:C4:22:F5:88:F9:A6:10:F5:34:E7:DF:B9:71:31:6F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl X509v3 Authority Key Identifier: keyid:E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer sbgp-ipAddrBlock: critical IPv4: 198.162.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:57:b2:ee:9d:e6:93:0e:d6:0d:72:62:c9:66:2d:00:96:2e: f2:c9:d1:d7:f9:78:26:5d:06:2b:9a:01:e9:c0:83:d8:74:c1: 85:67:9c:3d:09:83:6d:5c:2e:8f:b5:16:3d:17:cb:0c:e4:ea: f2:5a:ed:b3:30:a8:2d:86:87:ab:f5:f5:e0:7b:04:a9:22:60: a3:6a:28:23:b3:53:6f:50:cd:c4:18:ca:93:d7:da:96:ed:5b: 94:f5:ed:cc:0d:af:5e:a3:b6:36:21:0e:42:dc:94:f9:20:b0: 9b:eb:45:b8:17:11:8e:bd:8b:87:69:fb:68:5a:d4:d4:2f:03: a3:a6:87:ea:1c:a7:b5:6f:59:1b:10:c8:2d:3d:07:be:15:85: a5:87:fe:11:b1:99:97:48:1e:1d:ac:ee:90:ac:11:88:83:28: 01:95:1a:29:02:07:22:c9:c1:24:b2:47:9a:43:15:0e:56:9d: 81:9b:ba:fc:25:89:f1:81:89:74:64:53:37:ea:dc:26:9d:a5: 66:04:51:5d:9a:fb:6a:1b:01:52:fd:c3:a8:43:5d:ee:51:05: 70:19:1c:4a:a3:c4:48:be:13:00:8f:7c:c3:15:9c:e8:b0:88: 62:ed:71:b8:7e:8c:93:39:46:d9:76:04:a7:65:6b:b3:e8:df: 8e:2c:23:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErNfe8W5KxW7qEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTRkZGQtYTRkMy00MmY4LWE4MTAtMjY4ZTc5YTAz MTg0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MGNkYTk3MGEtNzYzNS00NjZhLTk1NjItOWM3OTM5ZjQzMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZcwMwh36xi2fkcfrLGuYDJ6abSuDWLtx1rg fq9LIyUAw56crknkvAsSbyuCwejWgGojgzvUrzF+LWmSr5ri/BajME6U0+muuc/I RpYccEaB1btGttO+S0ed1N44zu1nsi1KsOLBtouoAfGR/g1t3b9xhV+nsAq0XJr8 B4asvcqvCEBdduChfIUtdDdVy34ZklvnNKcpzOX9ICLCQ4ml3tBOp9uKx2wDNCPd G0DOHy9oFNdPe8cmABE9JNhy/8Hszaz9JPu3/GrVQ9n3q807WZJoyXG7HW1ShIdq 2HNxtaFq0FT/ZrCAfIB8H4A1Av1Z7ZeYPtaB1RO3F6jnk55WHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqCRmvEIvWI+aYQ9TTn37lxMW8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYzlh NGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhlNzlhMDMxODQvYmI2YmNmNDctNjU1NC0z ZDM0LWI5YzUtOWFhYjJkMGE4NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWM5YTRkZGQtYTRkMy00MmY4LWE4 MTAtMjY4ZTc5YTAzMTg0L2FjOWE0ZGRkLWE0ZDMtNDJmOC1hODEwLTI2OGU3OWEw MzE4NC5jcmwwHwYDVR0jBBgwFoAU5QgC9/OZ3Tdagctm6iX04Fn7eocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYzlhNGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhl NzlhMDMxODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5Xsu6d5pMO1g1yYslmLQCWLvLJ0df5eCZdBiuaAenAg9h0wYVnnD0J g21cLo+1Fj0Xywzk6vJa7bMwqC2Gh6v19eB7BKkiYKNqKCOzU29QzcQYypPX2pbt W5T17cwNr16jtjYhDkLclPkgsJvrRbgXEY69i4dp+2ha1NQvA6Omh+ocp7VvWRsQ yC09B74VhaWH/hGxmZdIHh2s7pCsEYiDKAGVGikCByLJwSSyR5pDFQ5WnYGbuvwl ifGBiXRkUzfq3CadpWYEUV2a+2obAVL9w6hDXe5RBXAZHEqjxEi+EwCPfMMVnOiw iGLtcbh+jJM5Rtl2BKdla7Po344sI4k= -----END CERTIFICATE-----Generated at Wed Oct 7 05:00:47 2026 by rpki-client