$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bf953474-b3f9-3e3e-be7d-af68bce99754.roa File: bf953474-b3f9-3e3e-be7d-af68bce99754.roa (raw, json) Hash identifier: BnZ6eLbvB8EupSKnCy8BcZfGKajSLNWSydkiSaS0hHA= Subject key identifier: 72:5E:D7:34:02:84:BE:D6:17:70:03:7A:85:8E:C3:32:F8:CA:C8:18 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584F2ABD1D9EADD117ACBFDA4300 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bf953474-b3f9-3e3e-be7d-af68bce99754.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16696 IP address blocks: 216.181.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1d:9e:ad:d1:17:ac:bf:da:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=15f749f9-f308-46cc-a29c-878f71f2ae0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:80:dd:eb:f7:2e:9b:42:b1:1c:0f:06:d4: 1f:9a:47:b8:06:73:54:6d:1e:f3:c6:5f:e4:24:36: 3b:07:50:b9:dc:db:a5:ac:cc:c7:9b:c8:ae:b1:56: bc:d3:8b:fb:3e:8e:01:68:46:b6:82:aa:f2:92:6c: 6a:7c:de:1c:ee:f3:a7:ff:89:17:bf:78:a7:64:e7: 70:0a:52:10:5b:6b:0c:75:e9:ea:14:e4:bb:e2:e3: 92:76:33:64:02:57:3f:01:02:1e:fd:91:cf:9f:ab: a6:28:23:8b:cb:f7:b0:65:8e:4b:3c:87:b6:45:a4: 3c:dc:62:22:23:d3:f3:a0:e2:d5:e5:67:d7:4c:e9: 75:14:79:03:7b:99:23:31:aa:89:64:b3:7d:4c:3b: d4:c6:f5:a4:34:54:dc:d1:f4:be:78:a0:fe:59:df: 15:0b:73:e7:a0:a7:fc:5a:28:1e:8e:d2:1d:db:77: 35:f6:0e:b8:76:3f:77:53:1b:87:43:66:47:1c:64: 7c:dc:b7:a7:83:b3:2e:e2:40:4a:93:42:f5:70:be: 29:58:01:70:ca:e6:a9:67:e8:d3:4b:b1:64:62:be: 02:db:9d:d2:50:7a:01:e4:e9:dc:ab:39:51:a0:2f: 8e:8a:d5:b7:bc:21:ab:d6:14:56:fb:6c:23:94:9a: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:D7:34:02:84:BE:D6:17:70:03:7A:85:8E:C3:32:F8:CA:C8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bf953474-b3f9-3e3e-be7d-af68bce99754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.181.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bd:32:92:96:90:93:3d:fe:49:5e:73:b3:73:c9:12:0c:c2: e8:06:c1:02:e0:5f:84:a2:21:07:d5:53:31:95:d8:dd:d1:7c: 78:fd:e3:9d:ec:6a:26:be:58:58:89:56:c0:8c:d7:bc:b9:54: 26:8a:d0:ca:2d:a2:fc:bf:16:d1:2f:1b:eb:0f:3b:c7:90:06: 36:8b:0d:cb:7f:ec:80:0d:20:31:39:26:db:5d:63:1b:35:50: e1:5f:dc:05:bb:05:66:5b:65:eb:b0:07:06:65:fb:c3:ff:2a: 54:1d:35:2f:f1:e8:45:01:21:86:d3:5b:de:cd:63:65:e9:e4: f9:83:8f:19:fb:3d:bb:7c:b0:e6:f4:be:3e:45:a5:6d:45:1b: 15:d4:06:66:04:3a:cd:55:0a:ba:23:ac:52:ab:48:a7:ce:11: e8:e5:eb:5d:4c:58:91:1b:60:2b:81:5a:69:e2:52:d4:0c:98: b7:b4:e0:4b:b8:3e:fd:55:f5:91:ef:6e:c0:1a:c4:77:39:81: b6:76:8b:5b:d6:32:9e:f0:58:f8:4c:ae:48:7b:70:6b:75:ec: ff:b1:87:3e:2e:72:a1:a6:32:af:c6:94:da:e1:87:49:28:87: 40:1f:89:ed:95:90:23:da:ee:e8:53:e1:57:7b:37:64:b3:bc: e1:82:7e:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvR2erdEXrL/aQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MTVmNzQ5ZjktZjMwOC00NmNjLWEyOWMtODc4ZjcxZjJhZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY+A3ev3LptCsRwPBtQfmke4BnNUbR7zxl/k JDY7B1C53NulrMzHm8iusVa804v7Po4BaEa2gqrykmxqfN4c7vOn/4kXv3inZOdw ClIQW2sMdenqFOS74uOSdjNkAlc/AQIe/ZHPn6umKCOLy/ewZY5LPIe2RaQ83GIi I9PzoOLV5WfXTOl1FHkDe5kjMaqJZLN9TDvUxvWkNFTc0fS+eKD+Wd8VC3PnoKf8 WigejtId23c19g64dj93UxuHQ2ZHHGR83Leng7Mu4kBKk0L1cL4pWAFwyuapZ+jT S7FkYr4C253SUHoB5OncqzlRoC+OitW3vCGr1hRW+2wjlJoffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJe1zQChL7WF3ADeoWOwzL4ysgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmY5NTM0NzQtYjNmOS0z ZTNlLWJlN2QtYWY2OGJjZTk5NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG9MpKWkJM9/klec7NzyRIMwugGwQLgX4SiIQfVUzGV2N3RfHj9453s aia+WFiJVsCM17y5VCaK0Motovy/FtEvG+sPO8eQBjaLDct/7IANIDE5JttdYxs1 UOFf3AW7BWZbZeuwBwZl+8P/KlQdNS/x6EUBIYbTW97NY2Xp5PmDjxn7Pbt8sOb0 vj5FpW1FGxXUBmYEOs1VCrojrFKrSKfOEejl611MWJEbYCuBWmniUtQMmLe04Eu4 Pv1V9ZHvbsAaxHc5gbZ2i1vWMp7wWPhMrkh7cGt17P+xhz4ucqGmMq/GlNrhh0ko h0Afie2VkCPa7uhT4Vd7N2SzvOGCfko= -----END CERTIFICATE-----Generated at Thu Sep 24 12:43:40 2026 by rpki-client