$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a6b56f69-9349-3b0f-a74f-7f3985aee483.roa File: a6b56f69-9349-3b0f-a74f-7f3985aee483.roa (raw, json) Hash identifier: CUwuKJ/toU5zCdv0R/Qxx+OwOlMieI8cb6PHO1rqPn0= Subject key identifier: A5:6E:8F:08:25:4D:EE:B9:B1:40:25:6A:29:DA:69:29:50:78:BF:5A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F4F07FB0D6E295CF656835C80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a6b56f69-9349-3b0f-a74f-7f3985aee483.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 23222 IP address blocks: 172.221.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:fb:0d:6e:29:5c:f6:56:83:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=9f96c7f7-9e00-4e1d-bee8-e3c6f594ba60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:13:6e:49:fb:d9:39:bd:32:90:71:1a:6c: 71:61:70:f2:4e:1a:58:59:5e:68:64:ef:dc:18:b6: f6:55:de:53:38:89:3a:67:f1:59:a0:e6:81:f9:29: 6d:43:3b:8c:3b:3d:b5:bd:ae:6c:e4:e6:d2:0d:97: ed:64:0d:57:bb:0b:84:4f:69:4f:2a:73:f6:f1:d2: 74:13:d5:11:ee:57:bd:01:64:65:8e:ed:65:e2:fb: 8d:6b:c5:46:f7:97:79:74:a5:7d:09:0c:a8:0d:e4: 53:db:ac:4d:33:ae:53:a2:a6:ad:35:1c:a9:81:70: df:2b:b1:24:06:c2:fa:43:52:2b:b2:ca:d8:ad:66: 92:53:0c:d1:be:c6:ea:fa:17:6e:6a:79:2f:a8:27: 1d:30:62:41:38:da:54:90:96:15:2d:18:0f:a3:f8: 10:90:5f:d1:2e:42:15:28:38:e9:8f:29:e7:f9:ce: 94:15:de:7a:5c:92:d2:b0:73:59:8b:80:1a:67:3c: ba:68:3c:69:0b:73:22:3b:4a:96:3c:a4:18:44:4a: 82:7a:06:e5:88:56:b2:82:57:f2:50:6e:c8:54:d9: fa:50:ed:91:26:62:46:99:2d:e8:1e:51:52:a9:a3: b3:21:b9:88:37:02:3c:6c:20:34:7f:45:4b:fb:3b: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:8F:08:25:4D:EE:B9:B1:40:25:6A:29:DA:69:29:50:78:BF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a6b56f69-9349-3b0f-a74f-7f3985aee483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.221.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:63:5d:64:fa:ed:72:9d:20:23:bd:8d:c9:6f:6b:37:e4:59: 06:39:5d:92:01:e5:84:9c:c3:cd:37:19:4e:32:72:85:a2:c1: 02:2a:6c:ed:0f:0d:b0:f5:1c:74:6a:7d:ac:3f:a3:a9:1f:89: fd:03:76:a7:0e:14:24:98:1b:9b:96:1b:0b:84:11:87:ab:37: 6a:58:23:77:74:2e:2b:5b:f9:47:29:44:a9:0e:7d:3b:f5:b1: 96:ad:c4:fc:78:2a:96:09:ce:37:1c:a5:d6:ba:e1:b3:6a:75: 2e:28:d7:bd:06:ec:99:84:7f:b1:63:54:5b:3b:d9:e4:22:d7: 15:b6:e2:c4:3c:8b:04:fb:b4:6a:6b:05:03:ee:19:2e:11:67: 1b:f7:c9:42:55:71:01:66:79:e8:bc:dc:91:fb:dc:13:56:75: a0:64:20:f4:44:12:37:bd:84:35:8d:d3:36:9a:ac:bb:90:76: fd:5c:1c:f6:4c:89:09:e6:92:e8:49:bf:ab:c9:bf:de:0f:dc: 1f:6c:73:f1:44:a6:9c:94:8a:b7:96:a8:b4:41:47:f0:ae:bf: 5a:18:30:2c:ea:19:3e:0a:a5:d0:36:4b:62:90:ed:51:27:0c: c0:a4:2f:ae:1f:e8:6e:1b:e0:94:47:0d:d8:69:b3:cc:a2:de: 4a:d4:0f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB/sNbilc9laDXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OWY5NmM3ZjctOWUwMC00ZTFkLWJlZTgtZTNjNmY1OTRiYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoATbkn72Tm9MpBxGmxxYXDyThpYWV5oZO/c GLb2Vd5TOIk6Z/FZoOaB+SltQzuMOz21va5s5ObSDZftZA1XuwuET2lPKnP28dJ0 E9UR7le9AWRlju1l4vuNa8VG95d5dKV9CQyoDeRT26xNM65ToqatNRypgXDfK7Ek BsL6Q1IrssrYrWaSUwzRvsbq+hduankvqCcdMGJBONpUkJYVLRgPo/gQkF/RLkIV KDjpjynn+c6UFd56XJLSsHNZi4AaZzy6aDxpC3MiO0qWPKQYREqCegbliFayglfy UG7IVNn6UO2RJmJGmS3oHlFSqaOzIbmINwI8bCA0f0VL+zuuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVujwglTe65sUAlainaaSlQeL9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTZiNTZmNjktOTM0OS0z YjBmLWE3NGYtN2YzOTg1YWVlNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFjXWT67XKdICO9jclvazfkWQY5XZIB5YScw803GU4ycoWiwQIqbO0P DbD1HHRqfaw/o6kfif0DdqcOFCSYG5uWGwuEEYerN2pYI3d0Litb+UcpRKkOfTv1 sZatxPx4KpYJzjccpda64bNqdS4o170G7JmEf7FjVFs72eQi1xW24sQ8iwT7tGpr BQPuGS4RZxv3yUJVcQFmeei83JH73BNWdaBkIPREEje9hDWN0zaarLuQdv1cHPZM iQnmkuhJv6vJv94P3B9sc/FEppyUireWqLRBR/Cuv1oYMCzqGT4KpdA2S2KQ7VEn DMCkL64f6G4b4JRHDdhps8yi3krUD5E= -----END CERTIFICATE-----Generated at Tue Sep 29 05:04:18 2026 by rpki-client