$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1fa6848b-10d7-3dbc-a8ad-e135ce89141b.roa File: 1fa6848b-10d7-3dbc-a8ad-e135ce89141b.roa (raw, json) Hash identifier: HOr9f0kgghDs2VGiY6bG7GGxAM2NweA+qjz2JnlW4Nw= Subject key identifier: E9:F3:47:AF:04:1E:EA:45:5E:17:31:17:B2:09:D5:40:88:DD:AC:5F Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584F37FDE389185CBCC0E9FB9980 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1fa6848b-10d7-3dbc-a8ad-e135ce89141b.roa Signing time: Fri 18 Sep 2026 18:56:28 +0000 ROA not before: Fri 18 Sep 2026 18:56:28 +0000 ROA not after: Thu 17 Dec 2026 19:56:28 +0000 asID: 393559 IP address blocks: 157.96.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:fd:e3:89:18:5c:bc:c0:e9:fb:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 18 18:56:28 2026 GMT Not After : Dec 17 19:56:28 2026 GMT Subject: CN=79952d80-4fe3-46ad-a666-602eed64f0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:c4:c9:c2:9a:5f:a8:3f:29:cb:1a:bf:c6: ff:b6:ef:f4:a8:6d:38:de:c8:39:2c:80:d4:b9:d6: 4d:1e:c2:c9:fc:13:7a:4c:e7:02:61:f6:80:23:ca: 6f:ca:65:7a:51:77:88:0d:a5:16:15:1e:b5:b0:64: 80:24:25:09:f9:f4:9d:b7:fc:66:d3:6d:54:33:87: 1e:b1:cd:54:f5:a6:41:7e:06:87:9f:1e:50:3e:64: a6:5f:10:90:88:d7:75:ab:d1:4b:13:5b:c1:90:cb: 55:85:0d:a6:49:f8:97:55:60:6a:91:17:d9:57:b2: 9c:25:f9:63:35:c4:35:eb:60:92:35:29:a6:ba:0c: 06:3e:b1:dd:fd:2e:79:5b:d4:ca:a3:61:43:60:13: 74:0e:ae:2c:01:69:22:7f:4c:47:4a:d5:64:b4:e4: 94:60:2a:23:7b:0f:3c:2a:eb:9f:40:57:69:d9:8b: d3:3d:5a:91:50:5b:1e:58:a6:fb:11:8e:eb:91:4b: 7a:be:1f:69:a3:49:8c:79:b9:8d:03:c7:2b:a3:c4: 4e:21:60:9c:2f:5e:4e:d8:68:47:b7:1a:4d:21:85: 59:39:8e:4b:be:39:9c:3b:da:3d:3a:c1:85:1e:d2: 97:fd:cf:c7:4d:8c:18:89:a2:ea:98:05:46:e3:ee: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:47:AF:04:1E:EA:45:5E:17:31:17:B2:09:D5:40:88:DD:AC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1fa6848b-10d7-3dbc-a8ad-e135ce89141b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 157.96.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e6:d4:95:bc:cb:d3:7d:19:c1:92:5f:bf:9c:eb:35:22:7d: da:58:94:cc:c6:28:0f:1b:83:98:be:e2:aa:68:2a:a7:47:fd: 85:bd:99:4b:63:bf:c8:27:79:ec:13:1e:97:b1:4f:31:d1:c8: 67:e4:2b:1b:01:1e:01:a5:52:67:a6:31:33:c8:a8:a4:84:5b: 92:e8:dc:4d:68:1d:81:f9:20:32:e4:a5:f6:82:56:38:e3:49: fd:09:6f:0a:b5:0c:17:c3:04:9e:3f:d2:d3:d4:bf:7c:c9:d7: 4a:20:14:59:79:74:10:a7:d2:e3:e9:09:e2:23:47:38:32:10: 1c:6a:ed:0a:f8:89:dd:c2:fd:62:85:95:42:18:82:9d:12:7c: 3c:3d:51:11:dd:75:d5:31:2e:54:d7:6a:1f:15:e1:11:db:7f: c5:41:e8:b8:f4:f3:4d:1c:6d:b4:12:29:2d:b5:3e:84:89:ef: e5:55:78:7c:07:ba:04:2e:7a:0e:be:da:22:cd:1d:7b:14:60: 0f:c7:a1:03:e6:64:49:5e:34:43:9c:8e:06:75:b4:f8:9f:9a: 68:93:c2:46:48:31:28:cf:f0:7d:63:ed:3f:65:e2:d6:02:0a: 78:2e:3a:68:8c:05:e3:8a:17:09:52:15:71:3a:60:a8:2b:bc: d9:63:76:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83/eOJGFy8wOn7mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI2MDkxODE4NTYyOFoXDTI2MTIxNzE5NTYyOFowLzEtMCsGA1UEAxMk Nzk5NTJkODAtNGZlMy00NmFkLWE2NjYtNjAyZWVkNjRmMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPTEycKaX6g/Kcsav8b/tu/0qG043sg5LIDU udZNHsLJ/BN6TOcCYfaAI8pvymV6UXeIDaUWFR61sGSAJCUJ+fSdt/xm021UM4ce sc1U9aZBfgaHnx5QPmSmXxCQiNd1q9FLE1vBkMtVhQ2mSfiXVWBqkRfZV7KcJflj NcQ162CSNSmmugwGPrHd/S55W9TKo2FDYBN0Dq4sAWkif0xHStVktOSUYCojew88 KuufQFdp2YvTPVqRUFseWKb7EY7rkUt6vh9po0mMebmNA8cro8ROIWCcL15O2GhH txpNIYVZOY5LvjmcO9o9OsGFHtKX/c/HTYwYiaLqmAVG4+69hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnzR68EHupFXhcxF7IJ1UCI3axfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvMWZhNjg0OGItMTBkNy0z ZGJjLWE4YWQtZTEzNWNlODkxNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnWBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLm1JW8y9N9GcGSX7+c6zUifdpYlMzGKA8bg5i+4qpoKqdH/YW9mUtj v8gneewTHpexTzHRyGfkKxsBHgGlUmemMTPIqKSEW5Lo3E1oHYH5IDLkpfaCVjjj Sf0Jbwq1DBfDBJ4/0tPUv3zJ10ogFFl5dBCn0uPpCeIjRzgyEBxq7Qr4id3C/WKF lUIYgp0SfDw9URHdddUxLlTXah8V4RHbf8VB6Lj0800cbbQSKS21PoSJ7+VVeHwH ugQueg6+2iLNHXsUYA/HoQPmZEleNEOcjgZ1tPifmmiTwkZIMSjP8H1j7T9l4tYC CnguOmiMBeOKFwlSFXE6YKgrvNljdhI= -----END CERTIFICATE-----Generated at Tue Sep 22 17:48:13 2026 by rpki-client