$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa File: 40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa (raw, json) Hash identifier: 7LwGMCwfMEqbN4EipL+FJ0hTPmcv8+HCLgduHhMJCnQ= Subject key identifier: A0:06:B0:77:69:95:6F:88:C7:28:1D:BD:10:B0:B6:1B:D5:B9:D1:05 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FA1632BF699542BB5AAE79A00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 13768 IP address blocks: 216.187.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2b:f6:99:54:2b:b5:aa:e7:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=36b9404c-80d4-4bee-a771-04f63e8a933e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:8e:65:19:5b:ea:24:26:45:6b:ab:ac:93: df:4a:ea:a3:02:7e:91:fb:b4:0d:cd:37:ab:f9:52: dc:4d:c1:ba:f0:89:13:96:97:11:39:d2:43:84:ce: e2:ea:04:ed:c9:10:7d:43:1e:7c:3d:d2:ac:73:df: c4:36:ca:ea:03:3f:e2:19:bd:91:b6:6b:6b:ca:0a: 95:87:31:87:a2:b1:8f:2c:79:6a:dc:47:a4:47:73: bd:4c:6b:1a:f0:8a:b8:77:75:b6:eb:26:60:06:3c: 4c:46:65:ca:b5:29:18:5f:53:24:71:c2:d3:da:4c: f0:eb:64:41:bd:f0:b9:aa:b0:07:ab:a5:58:e8:7f: f0:85:01:f2:2c:d5:19:be:6c:32:7b:59:b5:27:37: 9f:37:bb:34:98:d8:6d:fc:c0:14:12:23:a5:ae:7c: c1:70:e1:78:98:ab:09:58:9f:f5:98:3d:56:12:b5: 7a:c3:1d:0e:df:d7:7a:d7:e2:e7:11:c7:ec:cc:f2: 35:fa:12:60:c0:12:be:87:30:26:8a:ec:7b:d1:8c: 84:a0:59:4b:fb:45:4e:60:a3:06:7a:0b:20:c1:2d: d0:81:46:ec:c2:91:0b:1d:a9:28:a4:00:3e:28:ef: 02:e8:ef:b4:96:30:2b:96:02:e3:9d:6b:6d:d9:10: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:06:B0:77:69:95:6F:88:C7:28:1D:BD:10:B0:B6:1B:D5:B9:D1:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 216.187.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:68:73:b4:e6:b9:54:b7:f9:bb:62:17:a2:d7:10:2a:66: 64:26:3a:41:b7:d6:2d:17:72:8b:72:5b:66:49:b7:48:9e:3e: ce:75:97:ee:3f:6a:eb:24:d2:78:bf:d5:77:82:8d:df:9f:bf: 20:80:4d:e4:e7:1e:a3:a1:02:70:21:03:ee:3e:67:8a:e1:79: e6:8a:2e:14:43:2e:ac:2f:8c:49:f3:e3:79:f5:d8:ac:8d:6c: da:37:0b:ec:0c:0b:cd:2e:3a:0d:68:70:de:e0:c9:03:f7:d9: e8:49:d7:05:66:a5:6b:82:37:50:e4:23:ed:f3:84:5e:de:51: fd:53:4c:20:21:10:37:0c:89:c4:1d:4c:9c:39:90:10:1a:b8: eb:b2:97:0b:08:b0:35:6f:09:a6:49:ce:1b:22:c0:2f:a9:45: 2b:87:47:d5:27:f7:a9:30:0d:93:69:99:03:97:85:6e:4b:84: 7b:b7:4e:40:53:b8:00:24:32:39:a0:c8:e7:e1:db:05:73:51: 06:d3:06:2f:04:9e:10:61:f2:2a:35:3a:ba:c8:b7:f0:90:f0: 37:51:75:2a:9f:a3:52:ec:cd:70:0a:2d:87:4f:e9:5b:8e:6a: bf:6b:d8:1b:f5:a5:ce:9e:99:0e:8e:3c:38:51:25:03:e6:08: b2:9b:96:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYyv2mVQrtarnmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk MzZiOTQwNGMtODBkNC00YmVlLWE3NzEtMDRmNjNlOGE5MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp92OZRlb6iQmRWurrJPfSuqjAn6R+7QNzTer +VLcTcG68IkTlpcROdJDhM7i6gTtyRB9Qx58PdKsc9/ENsrqAz/iGb2RtmtrygqV hzGHorGPLHlq3EekR3O9TGsa8Iq4d3W26yZgBjxMRmXKtSkYX1MkccLT2kzw62RB vfC5qrAHq6VY6H/whQHyLNUZvmwye1m1JzefN7s0mNht/MAUEiOlrnzBcOF4mKsJ WJ/1mD1WErV6wx0O39d61+LnEcfszPI1+hJgwBK+hzAmiux70YyEoFlL+0VOYKMG egsgwS3QgUbswpELHakopAA+KO8C6O+0ljArlgLjnWtt2RDSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAGsHdplW+IxygdvRCwthvVudEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDBjOTUwMWEtMmFhNy0z MGE1LWIyMDItNjc3ZjU2ZGM5ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Lt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETDaHO05rlUt/m7Yhei1xAqZmQmOkG31i0XcotyW2ZJt0iePs51l+4/ ausk0ni/1XeCjd+fvyCATeTnHqOhAnAhA+4+Z4rheeaKLhRDLqwvjEnz43n12KyN bNo3C+wMC80uOg1ocN7gyQP32ehJ1wVmpWuCN1DkI+3zhF7eUf1TTCAhEDcMicQd TJw5kBAauOuylwsIsDVvCaZJzhsiwC+pRSuHR9Un96kwDZNpmQOXhW5LhHu3TkBT uAAkMjmgyOfh2wVzUQbTBi8EnhBh8io1OrrIt/CQ8DdRdSqfo1LszXAKLYdP6VuO ar9r2Bv1pc6emQ6OPDhRJQPmCLKbllc= -----END CERTIFICATE-----Generated at Sun Nov 15 21:26:48 2026 by rpki-client