$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa File: 875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa (raw, json) Hash identifier: vAKZx60k6WmYiOrfiMsVC0owBFDbvg2M4G8IGkRqWwc= Subject key identifier: 4A:A7:C0:DE:AE:24:2E:18:28:E3:94:51:13:C9:9E:02:52:97:CC:60 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F71ED9E837FCE09728EE2B300 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 212238 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9e:83:7f:ce:09:72:8e:e2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=a2e57989-e789-4591-b41e-b8fab2eb328e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:95:29:89:d1:fe:d8:53:dd:19:38:ba:c0: 5a:38:08:3e:5d:0a:2f:db:a5:ff:44:11:df:f6:91: 44:09:41:c6:ac:ea:52:c6:5f:5e:3f:39:18:f7:f6: 35:53:cc:16:1a:bf:8d:a6:ea:72:da:0d:66:a5:8a: bf:55:03:0f:13:9a:98:6a:30:23:61:43:e0:04:0b: 0b:90:34:ed:20:86:39:ba:a9:cd:33:12:9b:a9:a5: 1b:05:77:07:4c:2b:a3:57:0a:10:41:d7:33:f6:f4: 6a:c3:29:4b:c4:84:ef:1b:fc:ca:a9:4d:16:8a:07: 7e:a3:e8:6f:81:e2:ab:db:eb:25:37:a2:97:59:cb: 0d:5f:7e:35:3c:e8:ce:e0:ca:e1:01:dc:c2:a6:e6: 98:77:8b:45:f1:54:41:eb:94:96:9c:18:de:23:0a: 47:36:03:3c:be:01:35:13:3e:88:00:a0:8c:39:4f: 7d:9c:db:da:6d:82:e5:fb:36:2f:e6:92:4c:7a:85: 06:24:88:62:99:b8:e0:47:9e:b4:0d:70:96:cb:a7: 21:1d:20:9e:c4:ab:96:f4:b9:d5:a0:19:a2:25:09: b8:13:81:64:ba:18:43:85:ea:51:7b:6f:de:5a:d0: a9:8d:5d:03:ca:b9:1e:fc:46:ba:18:01:0b:15:db: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A7:C0:DE:AE:24:2E:18:28:E3:94:51:13:C9:9E:02:52:97:CC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:aa:de:3e:8c:0c:75:d1:0b:79:26:e7:64:e4:2d:53:02:0e: 1a:86:b5:5e:f7:00:96:5c:fc:ad:7a:0e:da:93:9d:7a:f7:00: 9d:1a:fa:ee:9b:0c:94:2d:34:35:9a:30:67:92:62:b9:8e:de: fd:c7:b4:32:69:c9:0b:7a:82:1e:93:ec:b8:e8:40:c6:e5:4e: ca:f8:23:41:e5:66:aa:5c:8d:5c:02:2b:24:5c:74:31:4a:01: be:35:59:db:ad:f3:3a:3a:ec:b7:c3:5a:70:19:e8:79:b4:9e: 3b:40:20:0d:fe:24:8b:74:1f:e8:dd:bc:df:bc:bb:04:fa:0a: fe:48:ee:f6:f6:c5:c0:f0:ec:c4:b9:ab:a4:ae:14:2e:33:2c: e7:82:3d:0c:3d:92:4a:08:41:f7:f0:35:44:b4:b6:1e:87:82: 2c:b6:9a:d1:e3:a4:c6:59:1d:7a:c4:52:97:c2:cb:63:7e:aa: 6f:8c:bc:69:2f:55:6e:4d:13:d9:f7:9e:ea:e5:2c:7c:ba:cd: bf:11:c7:f5:fe:f7:ba:09:4e:5d:7f:e5:2a:88:6d:36:73:5b: 79:2b:79:6c:33:a1:3f:f4:b1:63:f4:76:75:9c:2d:f3:86:10: 09:91:a5:6f:2a:a0:d2:f2:cc:0c:63:76:f0:8b:ff:73:38:b7: ea:5d:1d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z6Df84Jco7iswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YTJlNTc5ODktZTc4OS00NTkxLWI0MWUtYjhmYWIyZWIzMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WqVKYnR/thT3Rk4usBaOAg+XQov26X/RBHf 9pFECUHGrOpSxl9ePzkY9/Y1U8wWGr+Npupy2g1mpYq/VQMPE5qYajAjYUPgBAsL kDTtIIY5uqnNMxKbqaUbBXcHTCujVwoQQdcz9vRqwylLxITvG/zKqU0Wigd+o+hv geKr2+slN6KXWcsNX341POjO4MrhAdzCpuaYd4tF8VRB65SWnBjeIwpHNgM8vgE1 Ez6IAKCMOU99nNvabYLl+zYv5pJMeoUGJIhimbjgR560DXCWy6chHSCexKuW9LnV oBmiJQm4E4FkuhhDhepRe2/eWtCpjV0Dyrke/Ea6GAELFdt8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqnwN6uJC4YKOOUURPJngJSl8xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODc1ZmI4YmEtY2M5ZC0z ZTgwLWExZDMtYzEwODU0ZGIxNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGq3j6MDHXRC3km52TkLVMCDhqGtV73AJZc/K16DtqTnXr3AJ0a+u6b DJQtNDWaMGeSYrmO3v3HtDJpyQt6gh6T7LjoQMblTsr4I0HlZqpcjVwCKyRcdDFK Ab41Wdut8zo67LfDWnAZ6Hm0njtAIA3+JIt0H+jdvN+8uwT6Cv5I7vb2xcDw7MS5 q6SuFC4zLOeCPQw9kkoIQffwNUS0th6Hgiy2mtHjpMZZHXrEUpfCy2N+qm+MvGkv VW5NE9n3nurlLHy6zb8Rx/X+97oJTl1/5SqIbTZzW3kreWwzoT/0sWP0dnWcLfOG EAmRpW8qoNLyzAxjdvCL/3M4t+pdHf0= -----END CERTIFICATE-----Generated at Mon Oct 12 23:55:15 2026 by rpki-client