$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa File: 0a6d902e-b68f-324b-862c-c6d4e9655731.roa (raw, json) Hash identifier: eZ0PJC7Zotau2rdTWaEJC5g+D8jfbvXxrR82ZG/LOc4= Subject key identifier: 5D:38:1B:83:BF:54:34:A5:1C:64:92:AE:9E:60:EA:A7:BC:BE:FA:AC Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584F1B624A8B30BF1A3A2E243900 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 16696 IP address blocks: 216.120.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4a:8b:30:bf:1a:3a:2e:24:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=2bba3c4d-55f1-442d-a2dd-0071147f9e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:f1:e5:00:c3:c3:02:30:16:df:a3:5a:6b: 7a:51:b7:07:cd:81:d6:e0:af:2b:7f:4d:df:b6:8c: 88:d2:ba:8a:cd:9b:b1:0f:ee:00:79:6b:66:e3:d3: 91:2e:c2:8b:18:cb:56:52:a8:9c:78:22:cd:45:a5: 96:13:00:dd:aa:88:14:10:33:d5:ab:64:5e:89:d6: d6:c0:8e:e9:57:7a:1d:0a:8a:a3:8c:1a:e6:13:0b: 1e:07:52:a0:ed:9a:b6:31:46:ff:ad:f4:67:83:4c: f6:60:13:2f:2b:5d:7e:c1:c5:61:c0:ef:b7:4c:db: 72:f0:00:2d:cb:38:08:2b:9a:06:86:8f:6d:a8:3b: 86:6c:33:20:8c:e8:0a:a6:ba:88:43:6b:bd:b0:c1: 1c:3e:80:00:ab:5f:2c:35:93:09:76:5c:15:3a:10: 63:8b:37:e5:2e:22:ab:b1:ef:0e:20:d6:fe:5c:6d: 4a:b7:99:9c:ab:35:5b:df:d8:9d:eb:cd:f6:4a:17: 49:ee:8d:ac:37:25:13:13:5b:52:da:ba:6b:2a:8f: 20:ee:9d:5c:57:8e:1a:3d:b6:72:cd:87:c9:98:95: e4:aa:a5:7d:be:cd:2e:a9:6f:23:2b:64:d7:e2:f5: d4:3e:66:95:be:0a:3f:a0:80:46:96:54:b0:be:da: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:38:1B:83:BF:54:34:A5:1C:64:92:AE:9E:60:EA:A7:BC:BE:FA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4c:3c:88:32:b7:ea:46:b2:c5:11:9a:0c:a4:28:19:c5:c5: 56:7d:e7:da:9e:7f:1a:99:28:22:9f:a0:cb:60:77:60:3a:6d: 62:b5:17:4b:4f:fc:71:00:fc:7a:15:ee:f5:18:5c:be:5b:e8: a2:51:88:5c:d3:3f:f8:21:ff:25:07:1f:1a:3b:d8:76:4c:58: 69:3c:5e:da:15:e5:79:e3:6d:44:94:40:3c:cc:66:a3:fe:db: 0b:67:09:c7:9b:3b:d1:63:be:9a:2e:52:93:52:98:49:2b:52: be:8b:87:f1:ad:b8:7d:87:b5:05:b1:2e:ef:8e:9f:9e:c5:fa: ae:20:83:8c:e9:2f:3a:65:18:c7:50:27:fd:22:0f:bb:84:dc: 41:eb:ac:cc:74:d3:ba:16:77:ee:3b:ed:ad:a3:75:a6:90:e0: f9:00:8c:3c:51:f5:11:46:86:fc:69:c1:d0:2c:71:a5:06:f8: 18:96:83:c9:db:35:21:d9:2d:2c:50:37:12:30:08:3c:af:be: bf:33:6e:ba:2f:ba:d4:1d:57:bb:51:ee:4c:58:45:c5:14:94: 11:54:64:d5:f8:d4:27:ee:35:d7:16:37:00:6b:ab:0a:19:aa: b6:f6:c9:84:29:e2:de:1a:15:30:16:d7:27:f4:c0:38:93:7f: 4c:63:25:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkqLML8aOi4kOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MmJiYTNjNGQtNTVmMS00NDJkLWEyZGQtMDA3MTE0N2Y5ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TXx5QDDwwIwFt+jWmt6UbcHzYHW4K8rf03f toyI0rqKzZuxD+4AeWtm49ORLsKLGMtWUqiceCLNRaWWEwDdqogUEDPVq2ReidbW wI7pV3odCoqjjBrmEwseB1Kg7Zq2MUb/rfRng0z2YBMvK11+wcVhwO+3TNty8AAt yzgIK5oGho9tqDuGbDMgjOgKprqIQ2u9sMEcPoAAq18sNZMJdlwVOhBjizflLiKr se8OINb+XG1Kt5mcqzVb39id6832ShdJ7o2sNyUTE1tS2rprKo8g7p1cV44aPbZy zYfJmJXkqqV9vs0uqW8jK2TX4vXUPmaVvgo/oIBGllSwvtp7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF04G4O/VDSlHGSSrp5g6qe8vvqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMGE2ZDkwMmUtYjY4Zi0z MjRiLTg2MmMtYzZkNGU5NjU1NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENMPIgyt+pGssURmgykKBnFxVZ959qefxqZKCKfoMtgd2A6bWK1F0tP /HEA/HoV7vUYXL5b6KJRiFzTP/gh/yUHHxo72HZMWGk8XtoV5XnjbUSUQDzMZqP+ 2wtnCcebO9FjvpouUpNSmEkrUr6Lh/GtuH2HtQWxLu+On57F+q4gg4zpLzplGMdQ J/0iD7uE3EHrrMx007oWd+477a2jdaaQ4PkAjDxR9RFGhvxpwdAscaUG+BiWg8nb NSHZLSxQNxIwCDyvvr8zbrovutQdV7tR7kxYRcUUlBFUZNX41CfuNdcWNwBrqwoZ qrb2yYQp4t4aFTAW1yf0wDiTf0xjJeE= -----END CERTIFICATE-----Generated at Thu Sep 24 08:10:53 2026 by rpki-client