$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa File: b3556d71-daa7-3542-9d2c-911cecebd485.roa (raw, json) Hash identifier: vRu8rab/9upNyHkmZKSjutaUTB7YcxA7A82HxA1jJbo= Subject key identifier: CC:28:09:91:1C:BD:44:F0:F9:19:A8:0F:8F:68:91:2F:98:3B:16:5A Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Certificate serial: 010D0C9F4328584F4975A978E770539B56174D80 Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 158.247.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:a9:78:e7:70:53:9b:56:17:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a76cc166-cb8d-4dec-b970-dfb7ad757e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:91:a7:a0:5d:1b:9b:5a:d4:52:70:bc:32: 97:2d:ae:b1:a2:1c:a6:a8:fe:78:ab:4d:f8:29:41: 22:6c:75:bb:2a:2e:a1:9a:46:6e:1f:21:5f:c6:07: 22:bb:a7:aa:11:6e:aa:88:a7:bd:c0:3a:cf:a6:12: b2:3a:9b:5d:cf:29:2e:f2:99:62:75:25:30:54:14: 9c:4b:9e:84:88:83:51:01:e3:01:03:14:62:e5:5f: d0:78:6e:93:19:c9:ea:f9:c1:49:06:a6:fb:b7:9d: 33:81:db:43:4a:b9:0d:db:72:0c:7c:e8:9b:39:63: 4a:0e:52:9e:f9:f0:1b:a4:b4:0f:c6:53:04:d5:ad: 3a:36:76:2d:4f:14:24:78:df:60:a3:55:55:86:b0: 26:00:63:1a:d2:80:7c:e1:50:f5:10:1d:3e:1c:6f: d0:f4:55:5c:7c:66:a4:de:bb:44:7e:12:e9:e2:7b: ac:0f:cd:0a:3b:d1:b7:cf:b5:09:27:9e:62:f1:b6: 14:c3:15:19:75:70:e2:17:4c:79:cb:ac:d8:c0:85: b6:8b:dc:0a:b8:93:2c:24:94:47:53:fb:45:f8:8f: 01:71:02:f8:20:d4:71:c9:29:81:fa:b9:69:c6:86: 03:39:76:36:7a:4d:40:71:dc:4b:d0:19:c8:03:32: b1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:28:09:91:1C:BD:44:F0:F9:19:A8:0F:8F:68:91:2F:98:3B:16:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl X509v3 Authority Key Identifier: keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer sbgp-ipAddrBlock: critical IPv4: 158.247.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:36:c7:27:12:d6:6f:51:32:85:33:33:3d:94:99:9e:a3:ab: b1:7e:7a:14:f7:32:a0:2a:c7:d0:d1:9b:36:93:ce:18:fd:ec: 93:c0:bb:6c:1a:61:2a:41:63:2c:cf:00:5c:e1:4e:56:ee:c9: 5c:2b:33:f7:d3:b9:58:b9:d7:40:e6:f4:33:57:2c:2d:f7:19: d0:16:87:60:8d:d9:58:ae:4e:19:65:ff:91:ea:52:11:ed:fe: bc:0e:dd:34:71:c1:d6:c7:e0:4d:f3:0a:0a:73:59:92:e6:8d: 0a:51:c7:e8:e8:34:11:38:8b:bf:b7:5d:9f:84:59:4c:3f:bc: 8b:b6:be:f5:78:3e:53:90:87:f6:3e:e9:a5:ed:09:99:56:10: 6c:fb:ae:67:f4:37:7a:da:f0:de:f9:7e:4c:56:4e:45:b9:f8: 02:46:5a:df:78:42:71:f0:7b:26:fc:90:9d:b5:cf:79:db:0d: 5b:4f:03:7b:9f:c8:aa:f2:38:cb:e0:84:b2:4b:16:27:1e:e6: f6:60:47:21:5f:ac:98:99:cc:2d:cd:5e:7e:a7:c3:8d:87:a6: f6:49:08:61:81:2f:ea:15:ce:a0:fc:71:b6:7c:58:e1:3d:d1: 4b:0a:10:37:45:bb:90:83:a1:d4:b1:e0:64:24:40:1d:d4:8e: 4a:5b:63:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdal453BTm1YXTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix MDViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTc2Y2MxNjYtY2I4ZC00ZGVjLWI5NzAtZGZiN2FkNzU3ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0mRp6BdG5ta1FJwvDKXLa6xohymqP54q034 KUEibHW7Ki6hmkZuHyFfxgciu6eqEW6qiKe9wDrPphKyOptdzyku8plidSUwVBSc S56EiINRAeMBAxRi5V/QeG6TGcnq+cFJBqb7t50zgdtDSrkN23IMfOibOWNKDlKe +fAbpLQPxlME1a06NnYtTxQkeN9go1VVhrAmAGMa0oB84VD1EB0+HG/Q9FVcfGak 3rtEfhLp4nusD80KO9G3z7UJJ55i8bYUwxUZdXDiF0x5y6zYwIW2i9wKuJMsJJRH U/tF+I8BcQL4INRxySmB+rlpxoYDOXY2ek1AcdxL0BnIAzKxKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwoCZEcvUTw+RmoD49okS+YOxZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvYjM1NTZkNzEtZGFhNy0z NTQyLTlkMmMtOTExY2VjZWJkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm MmFjYjEwNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI82xycS1m9RMoUzMz2UmZ6jq7F+ehT3MqAqx9DRmzaTzhj97JPAu2wa YSpBYyzPAFzhTlbuyVwrM/fTuVi510Dm9DNXLC33GdAWh2CN2ViuThll/5HqUhHt /rwO3TRxwdbH4E3zCgpzWZLmjQpRx+joNBE4i7+3XZ+EWUw/vIu2vvV4PlOQh/Y+ 6aXtCZlWEGz7rmf0N3ra8N75fkxWTkW5+AJGWt94QnHweyb8kJ21z3nbDVtPA3uf yKryOMvghLJLFice5vZgRyFfrJiZzC3NXn6nw42HpvZJCGGBL+oVzqD8cbZ8WOE9 0UsKEDdFu5CDodSx4GQkQB3UjkpbY4w= -----END CERTIFICATE-----Generated at Sat Sep 26 19:49:13 2026 by rpki-client