$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1/22bc1b22-7c96-3da8-97cf-f6d198ba05ce.roa File: 22bc1b22-7c96-3da8-97cf-f6d198ba05ce.roa (raw, json) Hash identifier: B/W53ReHNYX78S7tuoOy7Dyfq35Wr7lYMef68bt4OQI= Subject key identifier: 6A:2C:A2:24:40:55:22:1D:17:56:CD:48:DC:98:F8:E9:F6:21:C9:10 Certificate issuer: /CN=9c1759b5-2706-4b60-8453-84babf81f1c1 Certificate serial: 010D0C9F4328584F06723B1464AE7C35743CBD80 Authority key identifier: 99:20:53:2F:1F:C8:28:4B:39:C5:73:20:24:7F:30:87:62:B0:12:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1/22bc1b22-7c96-3da8-97cf-f6d198ba05ce.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 8075 IP address blocks: 168.98.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1/9c1759b5-2706-4b60-8453-84babf81f1c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1/9c1759b5-2706-4b60-8453-84babf81f1c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:3b:14:64:ae:7c:35:74:3c:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1759b5-2706-4b60-8453-84babf81f1c1 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=009432f3-2eb6-4e15-940c-451bc383872f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:94:d1:91:ef:9d:ca:04:ea:a0:3e:cd:61: f1:2f:66:1b:e1:a0:83:01:01:87:59:46:2b:1e:79: 92:d7:8b:75:17:ca:e0:bc:0b:7b:34:99:d9:dd:b3: f0:aa:9f:21:fa:53:8f:e9:d7:95:9d:3f:4b:e4:d2: b9:c8:b3:79:95:e2:b8:eb:0e:ce:9e:f3:3d:d7:b1: ad:08:b2:44:54:d1:8d:ba:f4:e4:81:99:7e:86:f6: 6a:c7:9b:c5:36:75:eb:01:56:77:8e:94:86:e3:37: 8c:0d:55:b4:78:e7:6c:c1:7a:56:6a:ea:e8:02:bf: 8b:f2:8f:15:c1:c9:41:30:94:74:1a:da:ee:81:14: 37:d5:bf:85:cd:b6:7b:b2:bf:6c:de:99:7a:bf:c5: 2a:0e:6d:fa:6a:8c:d0:d1:4a:20:db:0d:8f:f1:f4: 08:43:31:48:f6:20:a2:b8:d2:c3:a9:81:32:9b:15: e2:4f:f3:e8:cf:9b:2c:eb:80:f1:4c:f3:fa:db:d1: bf:75:15:24:01:c6:37:f7:1a:27:60:8d:3d:3a:c7: 58:58:ff:ce:48:c1:43:b9:03:eb:45:23:21:66:c4: 8f:92:59:df:ed:c6:f3:ea:ae:3a:71:67:90:03:4a: bd:88:af:d9:af:d1:17:c8:9b:51:13:89:63:ec:9d: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:A2:24:40:55:22:1D:17:56:CD:48:DC:98:F8:E9:F6:21:C9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1/22bc1b22-7c96-3da8-97cf-f6d198ba05ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1/9c1759b5-2706-4b60-8453-84babf81f1c1.crl X509v3 Authority Key Identifier: keyid:99:20:53:2F:1F:C8:28:4B:39:C5:73:20:24:7F:30:87:62:B0:12:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9c1759b5-2706-4b60-8453-84babf81f1c1.cer sbgp-ipAddrBlock: critical IPv4: 168.98.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:28:7f:97:18:f8:5f:68:f3:d4:9b:f1:fd:3b:e0:79:19:34: 7e:15:fc:d7:63:d6:2e:78:f7:f8:a2:0a:08:5c:fb:a9:3f:11: 61:2c:c8:6c:c2:fb:35:98:75:a1:61:4f:ac:6d:38:77:6e:ec: 71:95:12:c0:8a:3b:88:9a:94:f1:c4:6b:a2:b2:8b:08:c7:18: a2:0e:71:10:8a:8d:65:df:61:20:46:19:72:78:20:b1:e9:0a: 22:d5:fb:37:1c:94:8e:e3:ee:cc:08:09:f4:c7:46:66:ff:0b: 9e:f2:42:e1:6c:7f:d5:64:a2:47:8d:a7:c8:a4:e6:b4:5c:69: 71:17:00:f6:d6:93:5b:b7:cd:5d:41:76:3f:32:8d:19:48:c4: 3a:83:b7:4c:10:19:37:8c:33:f5:e0:bb:f8:f0:79:6e:d3:14: 37:b4:c2:90:bb:bb:f2:25:d9:8d:47:47:ed:6f:36:78:a6:15: 2d:7f:b9:5d:25:3f:ce:73:f7:1b:1c:aa:08:c4:f3:50:98:0e: c3:3e:cb:45:65:ff:41:bc:c0:3d:47:02:7f:6d:bd:2e:45:93: dc:4e:b2:0a:86:d2:6c:97:a1:00:d7:b3:95:59:46:8d:0c:9b: 64:b8:e3:b2:6f:9e:8d:71:ae:9e:83:fd:b6:9e:a3:16:8c:9d: c4:08:85:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjsUZK58NXQ8vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxNzU5YjUtMjcwNi00YjYwLTg0NTMtODRiYWJmODFm MWMxMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDA5NDMyZjMtMmViNi00ZTE1LTk0MGMtNDUxYmMzODM4NzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHuU0ZHvncoE6qA+zWHxL2Yb4aCDAQGHWUYr HnmS14t1F8rgvAt7NJnZ3bPwqp8h+lOP6deVnT9L5NK5yLN5leK46w7OnvM917Gt CLJEVNGNuvTkgZl+hvZqx5vFNnXrAVZ3jpSG4zeMDVW0eOdswXpWauroAr+L8o8V wclBMJR0GtrugRQ31b+FzbZ7sr9s3pl6v8UqDm36aozQ0Uog2w2P8fQIQzFI9iCi uNLDqYEymxXiT/Poz5ss64DxTPP629G/dRUkAcY39xonYI09OsdYWP/OSMFDuQPr RSMhZsSPklnf7cbz6q46cWeQA0q9iK/Zr9EXyJtRE4lj7J08nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGosoiRAVSIdF1bNSNyY+On2IckQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YzE3 NTliNS0yNzA2LTRiNjAtODQ1My04NGJhYmY4MWYxYzEvMjJiYzFiMjItN2M5Ni0z ZGE4LTk3Y2YtZjZkMTk4YmEwNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWMxNzU5YjUtMjcwNi00YjYwLTg0 NTMtODRiYWJmODFmMWMxLzljMTc1OWI1LTI3MDYtNGI2MC04NDUzLTg0YmFiZjgx ZjFjMS5jcmwwHwYDVR0jBBgwFoAUmSBTLx/IKEs5xXMgJH8wh2KwEv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YzE3NTliNS0yNzA2LTRiNjAtODQ1My04NGJh YmY4MWYxYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQof5cY+F9o89Sb8f074HkZNH4V/Ndj1i549/iiCghc+6k/EWEsyGzC +zWYdaFhT6xtOHdu7HGVEsCKO4ialPHEa6KyiwjHGKIOcRCKjWXfYSBGGXJ4ILHp CiLV+zcclI7j7swICfTHRmb/C57yQuFsf9VkokeNp8ik5rRcaXEXAPbWk1u3zV1B dj8yjRlIxDqDt0wQGTeMM/Xgu/jweW7TFDe0wpC7u/Il2Y1HR+1vNnimFS1/uV0l P85z9xscqgjE81CYDsM+y0Vl/0G8wD1HAn9tvS5Fk9xOsgqG0myXoQDXs5VZRo0M m2S447Jvno1xrp6D/baeoxaMncQIhXc= -----END CERTIFICATE-----Generated at Sun Sep 20 18:39:19 2026 by rpki-client