$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa File: 1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa (raw, json) Hash identifier: bGVJuMsSicRrIma976mHQ9xnjGDK27Drg6PI7jbD79U= Subject key identifier: FD:82:8F:EE:92:E0:D3:AC:CA:D2:27:97:29:29:D0:B0:ED:73:9C:22 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584EFCACBA5B68B1BEDEC89FB280 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 33164 IP address blocks: 172.97.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ba:5b:68:b1:be:de:c8:9f:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=3a9cdc01-54fe-4dae-ac64-7535bbee8a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2b:26:59:74:b2:e6:8c:2b:a7:43:31:a7:72: 3a:8f:de:51:7c:99:aa:6b:f5:17:f0:1e:35:8b:62: da:26:b4:dc:71:43:b5:75:52:b0:60:a7:e9:96:01: a7:94:ef:6f:4f:87:c9:05:a3:c7:be:43:9f:77:66: da:27:41:3e:8e:ad:e6:49:b0:9c:4c:af:8a:ab:15: f9:36:2a:c9:99:18:3a:fb:bd:08:13:eb:37:83:f7: f7:2f:25:74:16:0c:84:a2:ed:3d:bf:42:74:80:2f: b4:cc:f2:72:6f:5e:87:60:ee:05:e8:93:a5:50:36: 6f:b5:01:7a:49:ef:b0:68:76:e5:7f:24:43:b6:69: 92:2a:10:d8:4d:c6:6b:2f:84:36:10:38:fe:b2:cc: 03:7c:08:eb:ab:0c:53:ae:55:d6:73:41:5e:c1:9a: f2:29:d0:52:94:fa:5d:37:b0:05:97:fc:e3:6a:b5: ba:f6:dc:7b:fb:54:7b:e9:4e:ff:90:91:6e:ec:ed: 78:1b:2f:e6:c6:ca:56:a2:1c:6f:d6:0f:59:d1:c1: 37:25:7c:ff:df:4c:98:a9:b0:2e:32:25:b6:a7:1a: d4:da:ba:89:4d:3b:b2:61:40:76:88:14:2a:7a:d2: 6a:43:e3:61:30:d4:92:ff:f4:5f:a8:67:3b:ea:83: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:82:8F:EE:92:E0:D3:AC:CA:D2:27:97:29:29:D0:B0:ED:73:9C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 172.97.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2b:54:1b:87:a8:48:a2:ba:37:4c:3a:3b:1b:7b:72:8b:49: 7a:28:39:65:47:27:0c:fa:b8:f7:6b:f7:f7:6d:ba:b3:0d:46: 62:24:bf:7a:1a:7f:98:b9:2a:89:ee:39:e1:31:d6:c7:be:6b: f6:5a:71:11:9e:d3:e9:7b:8f:fb:27:db:a3:f0:07:24:24:f2: 3c:ef:be:e7:39:e8:32:11:e2:cf:53:97:95:82:5b:f6:07:80: bb:2f:62:a9:3f:fe:cf:c9:dd:ea:16:af:8d:40:5a:5f:d1:a6: 0b:90:ee:38:83:7f:15:03:f2:fe:9b:5a:ed:03:bc:9b:a1:b4: b2:d2:fb:12:e5:6c:5c:3d:c1:28:b4:00:fa:40:55:86:f3:f6: db:ca:1b:8d:92:db:9f:98:e8:65:35:7a:7c:84:1d:79:0d:ac: c3:86:6b:dc:74:0f:63:41:93:eb:fb:0a:e7:f4:13:1c:2c:78: 64:57:61:d7:95:55:38:05:36:48:53:9b:7b:a2:8c:a1:c7:a9: d3:dd:d5:11:6e:10:e6:26:b8:57:f0:bd:db:1e:26:54:6c:df: 9a:31:0d:eb:3e:79:db:d6:2d:bb:bb:00:b5:6d:73:06:50:af: ba:bd:02:2d:9d:26:0d:bd:a7:0a:64:50:0d:61:63:83:c4:1c: cf:31:e8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLpbaLG+3sifsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2E5Y2RjMDEtNTRmZS00ZGFlLWFjNjQtNzUzNWJiZWU4YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCsmWXSy5owrp0Mxp3I6j95RfJmqa/UX8B41 i2LaJrTccUO1dVKwYKfplgGnlO9vT4fJBaPHvkOfd2baJ0E+jq3mSbCcTK+KqxX5 NirJmRg6+70IE+s3g/f3LyV0FgyEou09v0J0gC+0zPJyb16HYO4F6JOlUDZvtQF6 Se+waHblfyRDtmmSKhDYTcZrL4Q2EDj+sswDfAjrqwxTrlXWc0FewZryKdBSlPpd N7AFl/zjarW69tx7+1R76U7/kJFu7O14Gy/mxspWohxv1g9Z0cE3JXz/30yYqbAu MiW2pxrU2rqJTTuyYUB2iBQqetJqQ+NhMNSS//RfqGc76oNLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Cj+6S4NOsytInlykp0LDtc5wiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMWQ3ZmIxYzQtYzk2Ny0z NGIyLWIxNGYtOTUyMDZkYjc1YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFArVBuHqEiiujdMOjsbe3KLSXooOWVHJwz6uPdr9/dturMNRmIkv3oa f5i5KonuOeEx1se+a/ZacRGe0+l7j/sn26PwByQk8jzvvuc56DIR4s9Tl5WCW/YH gLsvYqk//s/J3eoWr41AWl/RpguQ7jiDfxUD8v6bWu0DvJuhtLLS+xLlbFw9wSi0 APpAVYbz9tvKG42S25+Y6GU1enyEHXkNrMOGa9x0D2NBk+v7Cuf0ExwseGRXYdeV VTgFNkhTm3uijKHHqdPd1RFuEOYmuFfwvdseJlRs35oxDes+edvWLbu7ALVtcwZQ r7q9Ai2dJg29pwpkUA1hY4PEHM8x6Cw= -----END CERTIFICATE-----Generated at Wed Sep 23 17:37:34 2026 by rpki-client