$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa File: a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa (raw, json) Hash identifier: nVobTDfOdOsz1kohwxRDTnPB0uxLhhOcMqCCyoOStb0= Subject key identifier: CA:97:41:F1:63:39:CD:06:50:F1:F1:84:BE:0C:9C:F3:03:A9:21:81 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F18979306D49014D49AE74000 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 18434 IP address blocks: 216.189.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:93:06:d4:90:14:d4:9a:e7:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=41bcb749-e89b-4418-be22-9c3c3e53371a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:f6:8a:1a:fa:66:ac:6a:14:75:70:77:71: e4:b8:1f:94:ee:aa:08:49:d8:d4:0b:d7:dd:ae:90: 3b:5b:3e:7f:a7:5a:75:c6:07:5a:12:8d:ad:f0:e9: 67:a3:51:c1:f6:58:7e:f4:c1:0b:e6:1c:51:e2:49: 4a:ab:84:f5:b2:ef:3f:e5:4e:be:38:33:e1:16:f9: b1:71:57:a6:2e:9e:e7:ca:f8:eb:3f:fb:ca:59:cb: e9:ce:e5:9e:0b:f2:f4:69:a0:03:29:4b:25:a3:ec: e8:2d:91:b2:65:79:85:72:ed:53:e1:cd:3b:4a:83: 64:86:a8:43:99:a6:1b:1d:2d:85:46:cc:2c:24:07: 60:8e:3c:22:3b:ad:b3:d5:c5:87:86:64:d6:d8:72: e7:aa:a1:6b:d1:2b:e3:6c:a3:f1:28:8f:79:32:80: 84:0d:be:2f:04:ea:fc:21:a8:96:02:be:7e:0a:81: 86:75:f1:f6:e6:6b:79:eb:2d:14:07:ad:7f:6d:13: d5:12:f3:9b:c8:5f:6f:b9:c5:6e:0e:60:67:a6:17: 31:a4:11:dd:c5:29:3a:79:ed:ae:24:9a:4a:01:3a: 85:71:ef:44:d5:30:83:73:cc:b1:c2:1a:60:a6:a3: 39:e3:9f:fd:a7:86:6d:e7:94:44:91:59:96:03:a2: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:97:41:F1:63:39:CD:06:50:F1:F1:84:BE:0C:9C:F3:03:A9:21:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 216.189.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2e:98:f2:68:e3:29:2d:a0:48:b4:b8:a3:98:80:3a:c7:4f: 83:9a:bb:36:78:77:ad:e0:5e:c0:8a:4b:24:0c:e5:a0:ac:7a: 6e:b6:58:70:ee:e6:03:93:40:e6:2b:a5:32:11:94:37:18:6d: 95:39:7f:02:64:c3:a7:9f:c1:f3:14:56:f1:13:36:80:de:5f: 6a:ba:9b:47:9b:df:70:15:33:cd:7f:80:29:d8:90:3c:3d:94: 91:67:c6:ee:ea:be:23:36:e1:89:8f:d9:f9:2e:a7:76:45:52: b0:ad:81:d4:ea:71:70:0a:cf:04:4e:53:ac:0c:32:aa:00:d7: 8f:2c:52:c2:62:32:73:ed:bd:bd:94:bc:d0:f9:18:e4:51:0e: e0:af:bf:1d:77:f1:be:98:92:5a:97:9b:ee:63:84:1e:8c:43: 3b:6c:d9:18:b0:a2:cd:cc:ca:55:4c:af:83:29:76:6b:f1:5b: 98:11:d1:b9:78:00:9e:15:80:6c:b6:d9:e8:90:1c:66:10:cc: 34:73:a8:ea:26:79:ed:9e:50:2d:07:9c:c0:06:9b:5b:98:c9: de:ae:4c:e8:19:3b:7e:7e:ed:1f:e6:94:fa:c9:0e:15:fe:99: cc:93:0c:4c:d1:75:b9:5b:8c:e5:94:61:b5:55:5d:c7:90:f7: 91:ec:ef:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5MG1JAU1JrnQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDFiY2I3NDktZTg5Yi00NDE4LWJlMjItOWMzYzNlNTMzNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiff2ihr6ZqxqFHVwd3HkuB+U7qoISdjUC9fd rpA7Wz5/p1p1xgdaEo2t8Olno1HB9lh+9MEL5hxR4klKq4T1su8/5U6+ODPhFvmx cVemLp7nyvjrP/vKWcvpzuWeC/L0aaADKUslo+zoLZGyZXmFcu1T4c07SoNkhqhD maYbHS2FRswsJAdgjjwiO62z1cWHhmTW2HLnqqFr0SvjbKPxKI95MoCEDb4vBOr8 IaiWAr5+CoGGdfH25mt56y0UB61/bRPVEvObyF9vucVuDmBnphcxpBHdxSk6ee2u JJpKATqFce9E1TCDc8yxwhpgpqM545/9p4Zt55REkVmWA6LCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqXQfFjOc0GUPHxhL4MnPMDqSGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYTFmMmRlZDAtMTljNS0z YTk3LTk1M2ItMmVhMTI2ZGExYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcumPJo4yktoEi0uKOYgDrHT4OauzZ4d63gXsCKSyQM5aCsem62WHDu 5gOTQOYrpTIRlDcYbZU5fwJkw6efwfMUVvETNoDeX2q6m0eb33AVM81/gCnYkDw9 lJFnxu7qviM24YmP2fkup3ZFUrCtgdTqcXAKzwROU6wMMqoA148sUsJiMnPtvb2U vND5GORRDuCvvx138b6YklqXm+5jhB6MQzts2Riwos3MylVMr4MpdmvxW5gR0bl4 AJ4VgGy22eiQHGYQzDRzqOomee2eUC0HnMAGm1uYyd6uTOgZO35+7R/mlPrJDhX+ mcyTDEzRdblbjOWUYbVVXceQ95Hs76I= -----END CERTIFICATE-----Generated at Tue Sep 22 22:28:02 2026 by rpki-client