$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa File: a8472b68-cb56-34fd-b329-455d887033e9.roa (raw, json) Hash identifier: JjkNKWzzrTOxrq55OhiwQZIOnmLkex591KQlTp2Gz3g= Subject key identifier: FB:FA:08:F3:9B:29:F6:82:E4:1B:1E:AF:62:0B:94:C5:53:14:BB:45 Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F4328584F49761EEE2AA683E417F54EC0 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1100 IP address blocks: 185.216.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:1e:ee:2a:a6:83:e4:17:f5:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=440c51fb-c11b-4e2d-acba-872731ffac6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:f2:e7:b9:40:00:a4:ec:39:0b:47:0a:d6: b1:5f:98:41:ec:8b:03:e4:a8:cd:8b:c0:5a:2c:a7: a0:c6:fb:8a:9f:02:69:08:36:77:a2:9f:b8:9b:02: 62:c7:30:36:86:04:fe:6a:97:c3:f4:ad:85:fc:cd: 88:2c:55:a2:99:62:79:6f:f5:93:b9:fd:da:0a:86: 7b:47:e0:47:57:83:2f:9a:e8:d4:7b:79:80:a8:c6: ee:66:c5:4c:e9:91:82:6e:5e:54:af:ba:5f:80:aa: b5:fc:3c:67:37:3c:af:9e:17:f7:64:5f:68:ca:c7: d9:0b:3c:d6:e1:4e:00:71:4d:ad:78:53:e8:68:8d: e3:30:c2:85:cd:db:f8:4e:3b:09:c6:56:e8:9c:ef: 89:0c:05:d7:20:4b:00:65:7e:b4:5e:67:e5:1b:d9: 09:33:1a:b3:87:ba:77:da:95:40:45:fc:5f:d0:05: 5b:3b:8a:9c:6f:0a:25:06:8c:76:2a:ab:a8:0f:36: 01:68:a2:b9:e8:64:17:8d:e1:b8:b4:c4:b1:65:44: 33:4e:e8:c5:8f:c1:60:56:d6:b1:1b:67:52:3a:72: 9c:6f:69:96:c5:95:d1:fb:99:64:74:36:e8:6d:e6: 99:18:88:a8:e7:be:0d:f4:84:0f:57:7d:c4:56:10: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FA:08:F3:9B:29:F6:82:E4:1B:1E:AF:62:0B:94:C5:53:14:BB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:86:bf:c7:81:25:d6:12:c8:a4:a9:ef:98:0e:18:00:84:6e: 80:78:8b:3d:94:ec:83:63:08:bd:1b:e6:73:53:d0:97:03:ad: a0:8d:13:dc:4e:71:03:18:67:f6:db:72:d8:6c:0a:25:d3:c0: 75:a9:c2:34:22:7d:b9:82:a7:96:bb:eb:b5:02:5c:16:81:9c: 95:0d:f9:d9:8e:71:8f:bc:73:d3:79:09:c4:cc:4b:2f:65:5d: 67:79:33:b0:21:65:58:63:1f:a2:b8:4d:c1:5c:4f:f5:07:b2: 58:c0:b9:e0:d6:25:c2:ec:0b:18:27:7a:ce:8b:a0:11:73:1c: d9:87:82:67:7c:d1:42:65:95:1e:60:ef:5a:82:f2:f3:be:ba: 39:e5:5f:d5:e4:63:fd:2c:d9:92:43:58:75:df:26:b0:11:d7: 9e:e6:92:2c:1e:a0:ad:2f:67:08:e4:91:84:e1:50:7a:4e:04: ee:98:81:61:08:87:20:d1:3d:3d:2d:13:70:36:5a:0c:0e:9a: d3:67:39:78:00:9f:8f:92:79:28:0a:64:7c:2e:1e:c5:d7:4e: 51:8d:56:49:a2:6d:4c:91:4a:a6:e1:02:20:80:3d:aa:4f:6a: 27:a1:45:cd:b2:af:23:8e:45:66:95:89:7f:52:df:22:18:a6: 00:3e:23:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdh7uKqaD5Bf1TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDQwYzUxZmItYzExYi00ZTJkLWFjYmEtODcyNzMxZmZhYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKPy57lAAKTsOQtHCtaxX5hB7IsD5KjNi8Ba LKegxvuKnwJpCDZ3op+4mwJixzA2hgT+apfD9K2F/M2ILFWimWJ5b/WTuf3aCoZ7 R+BHV4MvmujUe3mAqMbuZsVM6ZGCbl5Ur7pfgKq1/DxnNzyvnhf3ZF9oysfZCzzW 4U4AcU2teFPoaI3jMMKFzdv4TjsJxlbonO+JDAXXIEsAZX60XmflG9kJMxqzh7p3 2pVARfxf0AVbO4qcbwolBox2KquoDzYBaKK56GQXjeG4tMSxZUQzTujFj8FgVtax G2dSOnKcb2mWxZXR+5lkdDbobeaZGIio574N9IQPV33EVhCWJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPv6CPObKfaC5Bser2ILlMVTFLtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvYTg0NzJiNjgtY2I1Ni0z NGZkLWIzMjktNDU1ZDg4NzAzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6Gv8eBJdYSyKSp75gOGACEboB4iz2U7INjCL0b5nNT0JcDraCNE9xO cQMYZ/bbcthsCiXTwHWpwjQifbmCp5a767UCXBaBnJUN+dmOcY+8c9N5CcTMSy9l XWd5M7AhZVhjH6K4TcFcT/UHsljAueDWJcLsCxgnes6LoBFzHNmHgmd80UJllR5g 71qC8vO+ujnlX9XkY/0s2ZJDWHXfJrAR157mkiweoK0vZwjkkYThUHpOBO6YgWEI hyDRPT0tE3A2WgwOmtNnOXgAn4+SeSgKZHwuHsXXTlGNVkmibUyRSqbhAiCAPapP aiehRc2yryOORWaViX9S3yIYpgA+IwU= -----END CERTIFICATE-----Generated at Mon Sep 28 03:44:23 2026 by rpki-client