$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa File: a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa (raw, json) Hash identifier: BO8LfJZUPBXlTtmA5RivJUNFWIfmUmnOFbAJz+MFq5w= Subject key identifier: 59:81:02:6B:D9:1C:54:4E:7A:82:CA:09:E8:8F:6D:B2:DD:2B:9E:8A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774D993DCD9FCC5CC5A100 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 167.94.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4d:99:3d:cd:9f:cc:5c:c5:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8fd49a89-f01d-487e-af8b-d949e2e454d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:25:a5:61:8e:bd:89:4b:6f:93:47:39:a3: 20:23:86:90:10:4f:01:28:7e:cc:af:eb:21:93:48: fc:58:d9:b1:75:90:a5:13:a5:64:bc:43:00:b7:2b: 80:ce:04:e1:a8:d3:ab:a2:f1:1d:5b:68:bd:51:61: 62:b3:db:cd:0e:1a:66:e6:e4:56:b2:6d:75:e3:1d: fb:7c:5d:23:47:08:d3:98:7f:8e:cb:c0:74:be:ee: 55:3b:03:24:72:8b:aa:ea:c4:59:37:20:6e:68:1b: d0:9a:68:bb:5e:a8:70:22:6f:e2:66:30:ce:5e:0a: 1c:21:b4:25:a5:e3:56:7d:c0:ee:5c:ae:67:eb:d5: 0d:04:d2:c1:b6:da:18:00:c7:cd:bf:2f:e6:cf:32: 39:fe:bd:0c:92:2f:88:2e:65:8b:8f:ad:d6:c1:03: f9:50:ad:92:59:00:98:d8:eb:52:ca:37:51:bf:11: ab:d1:05:09:83:4c:b0:36:dd:bb:e8:e8:f9:97:31: 04:d1:a0:43:12:26:5d:55:e9:bb:e8:27:3a:a9:2d: fa:2f:5a:95:8c:69:d7:61:55:f6:9d:57:0f:2d:6f: 69:80:83:f3:c1:05:8c:3d:44:88:e7:bb:c6:02:2d: 71:34:08:15:f3:07:b5:02:0f:d9:dc:75:98:ae:a0: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:81:02:6B:D9:1C:54:4E:7A:82:CA:09:E8:8F:6D:B2:DD:2B:9E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:12:8c:15:c5:95:d5:8d:6c:06:4f:0b:c4:80:75:58:01:9c: c7:c8:d7:96:e8:bb:bd:3a:c3:a0:ac:a1:4b:ac:6e:08:f1:a3: d5:01:86:28:3f:0d:f3:ae:18:78:cc:5a:3a:fc:11:e1:7a:f2: 10:21:3a:48:53:78:da:f3:23:4e:6a:c9:d0:ab:fa:96:a0:14: 02:8b:f4:5e:73:b1:b2:a0:8c:a4:e9:3b:6e:3b:7c:55:22:83: 05:0b:f8:45:56:b9:84:db:d3:73:2f:36:c2:fc:91:89:a5:15: 0e:84:d1:61:a4:71:29:39:5b:62:00:a0:59:3b:99:9d:57:de: ea:4f:c2:90:88:09:e6:66:cc:40:f5:24:76:01:de:b1:cd:ec: 9b:7a:eb:7c:16:a7:9a:c9:6a:7b:77:34:b8:75:2d:93:54:7f: a1:1e:3e:88:d0:29:7a:9a:69:8b:14:80:35:4c:27:48:3c:d8: f6:79:36:a6:b2:b0:a1:53:74:27:06:de:17:f9:51:93:36:e1: a3:20:a0:22:94:b1:78:b4:14:30:4f:44:51:32:aa:9e:97:fa: f5:85:1d:cd:50:1e:14:67:bb:50:bb:6c:12:f9:7b:5a:ec:58: c1:01:ad:dc:97:e3:83:d0:80:b7:dd:7a:e4:d1:18:eb:45:95: bc:ba:7d:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd02ZPc2fzFzFoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZkNDlhODktZjAxZC00ODdlLWFmOGItZDk0OWUyZTQ1NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaglpWGOvYlLb5NHOaMgI4aQEE8BKH7Mr+sh k0j8WNmxdZClE6VkvEMAtyuAzgThqNOrovEdW2i9UWFis9vNDhpm5uRWsm114x37 fF0jRwjTmH+Oy8B0vu5VOwMkcouq6sRZNyBuaBvQmmi7XqhwIm/iZjDOXgocIbQl peNWfcDuXK5n69UNBNLBttoYAMfNvy/mzzI5/r0Mki+ILmWLj63WwQP5UK2SWQCY 2OtSyjdRvxGr0QUJg0ywNt276Oj5lzEE0aBDEiZdVem76Cc6qS36L1qVjGnXYVX2 nVcPLW9pgIPzwQWMPUSI57vGAi1xNAgV8we1Ag/Z3HWYrqBWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmBAmvZHFROeoLKCeiPbbLdK56KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTE0YmFiZTAtYzgxNi0z ODkwLThiNmItN2Y1YzIwNGFkNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFISjBXFldWNbAZPC8SAdVgBnMfI15bou706w6CsoUusbgjxo9UBhig/ DfOuGHjMWjr8EeF68hAhOkhTeNrzI05qydCr+pagFAKL9F5zsbKgjKTpO247fFUi gwUL+EVWuYTb03MvNsL8kYmlFQ6E0WGkcSk5W2IAoFk7mZ1X3upPwpCICeZmzED1 JHYB3rHN7Jt663wWp5rJant3NLh1LZNUf6EePojQKXqaaYsUgDVMJ0g82PZ5Nqay sKFTdCcG3hf5UZM24aMgoCKUsXi0FDBPRFEyqp6X+vWFHc1QHhRnu1C7bBL5e1rs WMEBrdyX44PQgLfdeuTRGOtFlby6fYk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:46:56 2026 by rpki-client