$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa File: 5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (raw, json) Hash identifier: tVGkuVtDjUAid6Nrxy2B7Cn22uT4hQ1RcyGsbDhnQHk= Subject key identifier: 24:EF:B4:14:DB:D8:58:15:D2:EE:5D:1E:03:62:C3:8A:DE:A1:D9:49 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584F2957B2BC028CBCD92ACBB480 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 21766 IP address blocks: 152.97.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b2:bc:02:8c:bc:d9:2a:cb:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=26cd94d0-5621-4499-ba22-a7db86c51ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:3e:f5:90:cd:8f:37:33:c3:84:8e:a2:aa: fd:87:1c:57:bc:a2:99:42:cc:bf:88:9c:de:07:12: 7c:46:09:9c:90:28:49:88:8e:a2:af:1a:e4:1b:35: b3:5b:d0:9a:cc:03:f6:bb:fc:98:96:f1:62:85:3f: 52:e8:9c:a8:b5:91:25:a6:64:15:b7:ac:00:ac:0e: 3b:fc:48:c2:a9:79:62:2d:26:1e:39:76:64:57:b3: 27:1c:77:e5:d0:a1:03:76:6d:6d:af:ba:b3:c8:a9: 35:ce:29:f3:04:b8:1f:92:58:5d:0c:75:ef:58:87: 19:6d:a3:f2:12:56:a8:19:9c:bd:8d:0a:27:5f:8c: 04:09:d2:19:0b:dc:4f:10:4a:09:e0:f3:63:9b:f2: c9:a3:53:59:9a:f9:0a:59:e9:82:ba:6c:22:27:3a: d4:16:ba:b7:ea:2a:03:07:05:98:2d:dc:28:61:5e: 46:4e:8f:96:20:e2:89:b3:0c:fb:0d:95:b5:44:56: db:3f:98:d3:42:f0:af:96:f0:06:c6:f8:d5:68:0c: 80:80:ff:6f:85:d1:19:b1:70:65:5c:02:4a:6b:a2: 9f:40:4d:48:b8:78:04:70:f1:31:a6:17:42:68:34: ce:fe:6f:d0:53:48:a0:39:e7:0c:8e:e8:87:83:3c: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:B4:14:DB:D8:58:15:D2:EE:5D:1E:03:62:C3:8A:DE:A1:D9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e8:86:6f:ce:bb:93:d3:8e:11:82:0e:20:9e:d5:01:20:82: 79:a8:24:68:e8:1b:da:6d:ac:80:7d:7f:02:d2:15:f6:67:85: 63:9b:97:20:5e:78:26:3c:c3:80:c3:81:9c:7a:57:9c:98:db: 7a:c9:3b:78:f8:2d:06:3a:59:f6:45:76:98:4b:bf:b8:cb:50: b1:84:98:e4:56:08:6e:6a:2f:e0:82:af:01:4f:a2:a4:43:2f: c9:84:85:31:5a:31:ea:37:54:82:3e:8d:28:23:53:6d:bc:e9: 87:f3:e6:00:37:bf:2f:99:96:71:f6:33:3c:49:52:fb:03:6e: 4a:e4:05:cf:02:ee:23:e1:ee:4f:3e:f5:f4:58:cc:4f:55:22: 3d:55:07:aa:da:e9:fe:dc:ba:f7:ed:12:bf:09:65:f6:60:fe: cc:97:4e:81:c4:95:33:a5:75:04:0b:38:bd:d1:1d:b0:6c:52: 46:7f:46:2e:f8:c6:cf:c5:f2:0f:ba:42:1c:3f:f9:62:14:73: 55:41:f9:b5:aa:df:ee:8c:6c:a3:ed:45:4d:dd:68:8c:a4:6b: c6:e3:6a:9d:d7:fd:15:8f:26:99:94:bd:47:9f:ff:94:fe:c7: 45:d0:02:45:02:07:a4:bc:eb:72:4a:c2:f1:d5:5d:62:6a:9e: 16:fa:07:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7K8Aoy82SrLtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MjZjZDk0ZDAtNTYyMS00NDk5LWJhMjItYTdkYjg2YzUxZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNM+9ZDNjzczw4SOoqr9hxxXvKKZQsy/iJze BxJ8RgmckChJiI6irxrkGzWzW9CazAP2u/yYlvFihT9S6JyotZElpmQVt6wArA47 /EjCqXliLSYeOXZkV7MnHHfl0KEDdm1tr7qzyKk1zinzBLgfklhdDHXvWIcZbaPy ElaoGZy9jQonX4wECdIZC9xPEEoJ4PNjm/LJo1NZmvkKWemCumwiJzrUFrq36ioD BwWYLdwoYV5GTo+WIOKJswz7DZW1RFbbP5jTQvCvlvAGxvjVaAyAgP9vhdEZsXBl XAJKa6KfQE1IuHgEcPExphdCaDTO/m/QU0igOecMjuiHgzw8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTvtBTb2FgV0u5dHgNiw4reodlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWFjZjU3YTktNmQ1ZC0z MmQ5LThlOWItOWEyMmNjZTFmZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmGFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITohm/Ou5PTjhGCDiCe1QEggnmoJGjoG9ptrIB9fwLSFfZnhWOblyBe eCY8w4DDgZx6V5yY23rJO3j4LQY6WfZFdphLv7jLULGEmORWCG5qL+CCrwFPoqRD L8mEhTFaMeo3VII+jSgjU2286Yfz5gA3vy+ZlnH2MzxJUvsDbkrkBc8C7iPh7k8+ 9fRYzE9VIj1VB6ra6f7cuvftEr8JZfZg/syXToHElTOldQQLOL3RHbBsUkZ/Ri74 xs/F8g+6Qhw/+WIUc1VB+bWq3+6MbKPtRU3daIyka8bjap3X/RWPJpmUvUef/5T+ x0XQAkUCB6S863JKwvHVXWJqnhb6B28= -----END CERTIFICATE-----Generated at Wed Sep 23 01:38:53 2026 by rpki-client