$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa File: 3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa (raw, json) Hash identifier: eg6FFmX7gYy9GD/l4PspWyViiG26mMHjzFFXqNjTC9c= Subject key identifier: 83:D7:A3:73:C9:49:62:3C:60:6A:6E:3A:2E:B8:81:AD:B0:9F:E6:AE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F3A17D59C2A7EF7CADCCBF700 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 158.115.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d5:9c:2a:7e:f7:ca:dc:cb:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=bf259f95-1e57-4e16-82bd-3760257eeffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:6c:78:9b:56:e9:58:35:cc:b4:74:78:fa: e3:34:81:97:62:72:3a:75:69:d9:ff:78:17:0c:03: 3c:8a:44:88:62:2e:cc:9f:f1:db:09:8d:0b:e6:3f: 11:a3:fc:0f:91:09:a8:72:ba:e7:51:50:b1:9f:43: 33:b9:05:96:6e:d7:a0:70:a5:0c:10:57:3b:30:a3: c4:ac:c9:31:b5:3a:69:53:04:e4:b0:a9:25:5b:ad: bd:ec:9e:01:86:ad:51:c4:19:d5:1c:bf:97:0e:ef: c6:f9:c8:e4:74:b4:20:70:d8:22:aa:6d:a9:43:f8: 11:b7:c1:ac:ae:89:94:f8:0c:63:f3:96:f4:5d:69: ba:41:a8:60:97:ea:b3:43:fb:d4:c7:92:54:6f:3e: 08:4f:26:3f:ed:fc:22:13:7d:7e:e9:a4:97:0a:09: d8:f0:f0:0b:40:dd:fc:68:50:9c:dc:22:40:4b:6f: 29:92:6c:59:3a:09:f6:9f:e6:50:d2:15:2f:c6:7b: 5b:7a:94:84:a0:55:f5:4f:98:3f:a7:70:a3:47:ef: ac:e5:71:3b:5a:fa:dc:ef:1c:1e:53:a1:a4:8f:25: af:d7:1b:52:4d:fe:5b:93:ad:c0:cd:93:23:66:4b: ac:96:94:17:9f:e9:b1:a7:f1:5c:0f:b3:37:24:40: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D7:A3:73:C9:49:62:3C:60:6A:6E:3A:2E:B8:81:AD:B0:9F:E6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b8:2e:f2:ec:aa:44:d5:83:26:65:38:80:ee:0e:58:e5:2f: 94:fc:38:97:40:84:1b:17:4e:82:8e:40:f1:ad:1b:5b:78:83: 7c:55:6e:fc:c6:7d:c4:fd:55:84:ec:e9:1f:b9:93:dd:b4:65: 7f:97:25:71:31:46:e2:15:18:d7:58:06:65:e9:2a:f7:90:52: 56:bd:2d:c4:28:d7:4c:5c:ac:02:ea:1f:45:ff:db:e0:ad:80: a7:ac:f7:b3:c3:ef:2b:22:88:ff:01:27:36:b6:d8:df:5b:aa: 20:20:01:b6:c5:d5:83:b7:39:36:6c:27:1b:2f:dc:92:ef:16: 12:0d:b4:16:6d:4e:70:2c:a9:8a:e8:25:c5:ed:71:41:3f:41: ce:31:fd:98:2f:09:1e:26:4e:38:c4:10:ab:b6:02:53:26:4d: 24:59:ff:9d:6d:bf:a3:67:4e:c3:cb:df:9d:42:80:3f:53:07: 61:fa:10:be:d4:63:81:39:44:80:d3:aa:b6:56:31:7f:12:b2: 40:48:8a:cd:6f:57:e2:84:5f:4a:d3:84:59:26:39:aa:95:8f: d1:8e:0c:c9:50:2f:de:a6:b0:1f:9c:90:a2:0d:cf:26:a8:32: 90:8f:04:b7:68:0e:74:8c:cb:d6:9a:17:aa:8d:b3:2b:1d:0c: 3a:70:73:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9WcKn73ytzL9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YmYyNTlmOTUtMWU1Ny00ZTE2LTgyYmQtMzc2MDI1N2VlZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB5seJtW6Vg1zLR0ePrjNIGXYnI6dWnZ/3gX DAM8ikSIYi7Mn/HbCY0L5j8Ro/wPkQmocrrnUVCxn0MzuQWWbtegcKUMEFc7MKPE rMkxtTppUwTksKklW6297J4Bhq1RxBnVHL+XDu/G+cjkdLQgcNgiqm2pQ/gRt8Gs romU+Axj85b0XWm6Qahgl+qzQ/vUx5JUbz4ITyY/7fwiE31+6aSXCgnY8PALQN38 aFCc3CJAS28pkmxZOgn2n+ZQ0hUvxntbepSEoFX1T5g/p3CjR++s5XE7Wvrc7xwe U6GkjyWv1xtSTf5bk63AzZMjZkuslpQXn+mxp/FcD7M3JEDeDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPXo3PJSWI8YGpuOi64ga2wn+auMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2JlNmFhYTItZTlmMS0z YmE2LWExMWItZTBmN2IzZjA2OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC4LvLsqkTVgyZlOIDuDljlL5T8OJdAhBsXToKOQPGtG1t4g3xVbvzG fcT9VYTs6R+5k920ZX+XJXExRuIVGNdYBmXpKveQUla9LcQo10xcrALqH0X/2+Ct gKes97PD7ysiiP8BJza22N9bqiAgAbbF1YO3OTZsJxsv3JLvFhINtBZtTnAsqYro JcXtcUE/Qc4x/ZgvCR4mTjjEEKu2AlMmTSRZ/51tv6NnTsPL351CgD9TB2H6EL7U Y4E5RIDTqrZWMX8SskBIis1vV+KEX0rThFkmOaqVj9GODMlQL96msB+ckKINzyao MpCPBLdoDnSMy9aaF6qNsysdDDpwc3w= -----END CERTIFICATE-----Generated at Sun Sep 20 16:51:59 2026 by rpki-client