$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa File: fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa (raw, json) Hash identifier: S0zAT/Gb7Hg29rJ11LVrNn5yp0bYCDEOlPxhtmtmRF8= Subject key identifier: 8A:F2:A0:62:B1:D0:D6:4F:2A:66:22:20:40:DF:FE:6C:88:CA:49:74 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584F6F22E6F3BCDB2F28F9A8B800 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 54032 IP address blocks: 72.233.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e6:f3:bc:db:2f:28:f9:a8:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=bbabea88-6ffb-472f-bea4-bafc3f1cd78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:b4:ca:32:97:d9:f8:85:d3:2f:9d:9a:2a: 24:b2:f3:9b:e4:1f:1f:b2:d5:44:77:f6:f1:68:9d: 86:d0:a0:5e:46:6b:4a:5c:74:3a:cb:b6:a7:16:0d: fa:e9:d3:a6:c4:78:2d:b8:2f:a4:ba:5b:62:4d:8e: 81:03:2f:22:b8:96:cd:64:2f:5b:23:3a:31:9c:a8: 9b:52:99:eb:89:17:13:cc:15:d4:59:4f:04:0a:0d: cb:e1:5d:eb:24:f3:1e:41:a9:4f:13:46:b8:9e:49: 2a:52:5f:65:c7:8a:df:62:35:05:70:93:0d:97:fb: ed:6e:25:6d:50:0c:db:ae:c3:4d:01:9d:60:bd:05: 94:2a:9a:f8:dc:1c:e8:51:ad:46:21:d5:55:3f:55: e3:0a:88:81:cf:95:5e:79:d5:b0:cd:cf:a4:1f:b5: 0c:0a:db:e3:c8:22:f5:84:c2:88:55:60:9e:1d:c7: 21:11:e9:fe:54:00:29:99:7e:93:22:95:eb:96:74: e8:ae:5b:99:e3:92:6b:31:0e:f2:d8:f5:de:13:60: 49:79:26:6f:a3:53:b4:4e:c7:11:7c:76:24:b0:52: 74:37:ac:8d:aa:ab:4c:e9:51:52:c2:c3:58:78:a3: 15:f4:22:cb:d5:bd:58:32:38:3c:b1:4b:a4:5a:f2: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:A0:62:B1:D0:D6:4F:2A:66:22:20:40:DF:FE:6C:88:CA:49:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:89:e2:7a:4c:82:22:52:77:ca:50:a9:d5:9a:8a:e7:9c:e2: db:f0:2a:80:02:fa:b9:be:69:93:b4:2c:7f:d8:18:36:1a:28: 93:ec:a2:1c:8b:0e:cd:1e:50:af:69:69:5f:9a:b1:cf:10:8a: 78:ea:91:33:a9:ec:aa:fe:df:c2:3f:2e:6c:cf:d0:d3:76:a6: 38:90:1d:3d:39:ba:0c:40:10:0f:62:45:10:fe:2f:1e:45:1b: 7d:b2:7d:d6:7f:97:a2:16:46:ac:46:fd:97:b6:e9:76:a4:1e: 77:1c:b2:16:a9:fd:f7:34:b2:a3:a1:28:31:e3:cd:1f:29:53: 01:ea:b8:a9:bb:c5:7b:fa:f1:db:08:00:38:5d:f7:ca:df:90: 03:6c:59:e8:27:98:7e:8b:f8:e4:6b:66:0b:bf:de:e3:3b:76: 2b:37:e5:1f:7a:f2:5d:f0:1c:25:ac:95:25:ab:d1:bf:a6:cc: 7f:21:47:cf:e6:83:12:47:cd:9d:6a:e0:bb:01:6a:83:13:79: 8e:47:5e:2e:b5:75:b7:64:c1:bc:af:83:d2:7e:37:65:e6:82: 3d:01:49:ef:18:3e:91:f2:79:6c:84:11:6f:f6:db:7b:d7:e2: 2e:2e:c9:62:4b:fd:e5:b0:b7:e5:ce:49:03:55:66:d5:22:b9: 4b:54:67:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIubzvNsvKPmouAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YmJhYmVhODgtNmZmYi00NzJmLWJlYTQtYmFmYzNmMWNkNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGO0yjKX2fiF0y+dmioksvOb5B8fstVEd/bx aJ2G0KBeRmtKXHQ6y7anFg366dOmxHgtuC+kultiTY6BAy8iuJbNZC9bIzoxnKib UpnriRcTzBXUWU8ECg3L4V3rJPMeQalPE0a4nkkqUl9lx4rfYjUFcJMNl/vtbiVt UAzbrsNNAZ1gvQWUKpr43BzoUa1GIdVVP1XjCoiBz5VeedWwzc+kH7UMCtvjyCL1 hMKIVWCeHcchEen+VAApmX6TIpXrlnTorluZ45JrMQ7y2PXeE2BJeSZvo1O0TscR fHYksFJ0N6yNqqtM6VFSwsNYeKMV9CLL1b1YMjg8sUukWvIa6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIryoGKx0NZPKmYiIEDf/myIykl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZmE0ZmVmMGEtOGFiMy0z ZWNhLWEyZDYtYTU3MmMwYTQ2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiJ4npMgiJSd8pQqdWaiuec4tvwKoAC+rm+aZO0LH/YGDYaKJPsohyL Ds0eUK9paV+asc8QinjqkTOp7Kr+38I/LmzP0NN2pjiQHT05ugxAEA9iRRD+Lx5F G32yfdZ/l6IWRqxG/Ze26XakHnccshap/fc0sqOhKDHjzR8pUwHquKm7xXv68dsI ADhd98rfkANsWegnmH6L+ORrZgu/3uM7dis35R968l3wHCWslSWr0b+mzH8hR8/m gxJHzZ1q4LsBaoMTeY5HXi61dbdkwbyvg9J+N2Xmgj0BSe8YPpHyeWyEEW/223vX 4i4uyWJL/eWwt+XOSQNVZtUiuUtUZ2A= -----END CERTIFICATE-----Generated at Thu Nov 5 16:42:17 2026 by rpki-client