$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4c8a9fa-3255-35b6-8a87-b9bb1f50d138.roa File: a4c8a9fa-3255-35b6-8a87-b9bb1f50d138.roa (raw, json) Hash identifier: gfRjSyP6VKC8s8N37Zd4MRQRadv3B+8e24n7x8s6F64= Subject key identifier: A8:7F:F6:0F:17:6A:1B:A0:D2:12:C3:8D:01:38:38:93:54:FC:13:58 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584F06722A93D00CCFE46C8FD700 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4c8a9fa-3255-35b6-8a87-b9bb1f50d138.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 3848 IP address blocks: 216.208.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2a:93:d0:0c:cf:e4:6c:8f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=ae57331a-9040-4cf3-9760-cf20a8a2f0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:a1:d0:1d:5d:4a:ac:8f:bc:be:c6:65:d1: 55:c0:62:00:f5:de:ad:9f:50:38:e0:c0:68:4f:8f: 10:fa:98:c1:9b:ab:da:58:f8:0b:6d:64:3e:e0:36: 17:77:6d:ad:5c:48:63:da:4c:f5:cc:fa:70:d8:74: f3:d7:27:bc:40:7a:da:e2:34:2c:3f:2a:89:57:4d: d1:40:40:63:e9:76:87:ba:95:b4:0b:1a:e9:c5:49: 79:4e:61:76:bf:af:a6:f9:4c:7f:2d:50:53:22:bd: f3:4d:62:ee:2a:a1:a4:7f:67:c4:58:4f:4d:0a:3b: 27:5c:d7:6f:78:fe:ee:db:a0:d6:af:d6:6a:fc:a7: af:3c:21:30:42:09:61:9f:82:3b:54:bf:7b:85:39: ac:69:16:13:cb:35:db:39:38:b8:d5:0f:45:20:8a: 10:f1:57:92:db:39:38:90:31:7c:ec:72:fd:2b:41: 36:89:14:4c:b3:5c:97:02:48:47:5b:35:6e:97:65: f0:48:d2:c7:c8:2d:5d:42:fa:77:10:75:a4:ff:94: 89:82:18:ae:80:a1:ef:7d:80:6a:6a:a2:45:79:d1: b8:cb:59:48:c6:d4:95:67:2d:21:ad:8a:d9:1b:c5: 2b:6f:39:7a:d2:9d:ac:da:84:2f:e4:77:fb:00:2b: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7F:F6:0F:17:6A:1B:A0:D2:12:C3:8D:01:38:38:93:54:FC:13:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a4c8a9fa-3255-35b6-8a87-b9bb1f50d138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 216.208.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a1:e6:eb:18:da:4a:cb:b8:8e:26:f8:25:63:2a:59:45:1d: 75:ec:e2:10:ea:11:8a:49:ce:29:36:2b:41:09:7b:ec:ba:7d: d6:36:bd:c0:20:41:6b:fb:15:64:3b:e6:87:ce:ad:79:e1:e1: 93:56:27:af:9f:19:31:ef:41:39:52:e1:7a:27:ca:53:af:17: 21:83:a0:da:ed:fc:9a:70:69:bd:7a:08:55:20:0f:e8:fe:bc: 30:a7:c6:56:3e:66:a9:31:15:eb:43:cf:cc:7b:2b:87:52:69: ee:65:00:5a:67:47:91:eb:eb:42:5f:e3:70:d7:b7:f7:55:69: 73:bb:40:c2:c6:5b:f0:1b:44:e1:0d:3f:9b:15:9d:9e:1d:2b: b3:99:3b:fa:f4:84:ac:0b:30:ab:e9:9b:fc:b7:43:f0:b8:5d: 92:a9:4a:85:d8:f3:91:24:c3:56:ce:37:65:b4:df:a4:40:e4: 1a:f4:d3:0c:79:24:fd:ec:9c:bb:71:d6:d4:10:6c:2c:58:69: 57:ca:b3:64:1a:71:ae:8e:4a:58:76:1c:a4:9c:83:82:95:3b: e9:3e:11:54:bb:46:cb:00:59:8b:ca:18:a1:f8:d2:93:b5:b7: 6d:d3:4d:81:07:92:0e:5c:90:de:70:df:c7:30:c1:9e:98:50: a0:5a:17:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciqT0AzP5GyP1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YWU1NzMzMWEtOTA0MC00Y2YzLTk3NjAtY2YyMGE4YTJmMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBeh0B1dSqyPvL7GZdFVwGIA9d6tn1A44MBo T48Q+pjBm6vaWPgLbWQ+4DYXd22tXEhj2kz1zPpw2HTz1ye8QHra4jQsPyqJV03R QEBj6XaHupW0CxrpxUl5TmF2v6+m+Ux/LVBTIr3zTWLuKqGkf2fEWE9NCjsnXNdv eP7u26DWr9Zq/KevPCEwQglhn4I7VL97hTmsaRYTyzXbOTi41Q9FIIoQ8VeS2zk4 kDF87HL9K0E2iRRMs1yXAkhHWzVul2XwSNLHyC1dQvp3EHWk/5SJghiugKHvfYBq aqJFedG4y1lIxtSVZy0hrYrZG8Urbzl60p2s2oQv5Hf7ACtwtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh/9g8Xahug0hLDjQE4OJNU/BNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTRjOGE5ZmEtMzI1NS0z NWI2LThhODctYjliYjFmNTBkMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NBuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAah5usY2krLuI4m+CVjKllFHXXs4hDqEYpJzik2K0EJe+y6fdY2vcAg QWv7FWQ75ofOrXnh4ZNWJ6+fGTHvQTlS4XonylOvFyGDoNrt/Jpwab16CFUgD+j+ vDCnxlY+ZqkxFetDz8x7K4dSae5lAFpnR5Hr60Jf43DXt/dVaXO7QMLGW/AbROEN P5sVnZ4dK7OZO/r0hKwLMKvpm/y3Q/C4XZKpSoXY85Ekw1bON2W036RA5Br00wx5 JP3snLtx1tQQbCxYaVfKs2Qaca6OSlh2HKScg4KVO+k+EVS7RssAWYvKGKH40pO1 t23TTYEHkg5ckN5w38cwwZ6YUKBaF/U= -----END CERTIFICATE-----Generated at Tue Sep 22 18:00:01 2026 by rpki-client