$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/0a65f36a-cc94-3786-a427-6cbbdc9bc55e.roa File: 0a65f36a-cc94-3786-a427-6cbbdc9bc55e.roa (raw, json) Hash identifier: rQxERc5aHgjcSGVD0xK+bZYYoSfDr1hx/LzXVKlAJ/0= Subject key identifier: 30:6D:FF:AE:29:8D:F3:C0:2D:D1:26:0D:01:32:D5:2B:22:CD:27:E6 Certificate issuer: /CN=f568952a-f44b-4d9f-b700-cda11a2b0488 Certificate serial: 010D0C9F4328584F1FC247642222DEDBFDBE1C00 Authority key identifier: 21:7F:1D:16:D1:F2:E9:46:1C:7D:6E:47:F8:01:AC:22:8B:95:AA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/0a65f36a-cc94-3786-a427-6cbbdc9bc55e.roa Signing time: Thu 10 Sep 2026 02:36:57 +0000 ROA not before: Thu 10 Sep 2026 02:36:57 +0000 ROA not after: Wed 09 Dec 2026 03:36:57 +0000 asID: 396982 IP address blocks: 216.71.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/f568952a-f44b-4d9f-b700-cda11a2b0488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/f568952a-f44b-4d9f-b700-cda11a2b0488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:c2:47:64:22:22:de:db:fd:be:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f568952a-f44b-4d9f-b700-cda11a2b0488 Validity Not Before: Sep 10 02:36:57 2026 GMT Not After : Dec 9 03:36:57 2026 GMT Subject: CN=5f5dedaa-b2a5-4987-b4c3-446238789604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:1e:15:81:bb:76:d9:eb:34:61:5b:ab:0d: c7:fa:d1:47:49:91:5f:57:7f:50:2b:15:eb:76:90: 68:4f:a4:39:6a:3d:61:68:00:8d:60:4a:75:e6:43: 0b:06:6f:ae:68:17:a6:02:cf:e7:c8:da:66:fd:5b: 81:a3:8d:e4:47:cb:7b:38:c4:75:0c:60:35:89:d1: 01:65:9e:92:5d:93:7a:67:e4:02:e5:15:83:4e:1d: b2:55:5c:84:de:c4:25:f3:d2:d1:9f:d0:d7:3c:a0: 05:c2:ab:47:8d:af:b9:03:3f:d4:58:48:f1:b2:54: 23:c7:5f:4e:3d:d2:86:35:4b:91:d7:b6:74:53:f9: 5c:85:e5:1f:a6:c7:a6:ed:ca:05:77:85:67:ed:fd: 8d:1e:25:f8:fd:69:82:e9:82:69:4b:8b:0b:2a:8c: c1:92:a3:6a:b4:0c:1f:ef:5f:87:dd:fe:81:b4:4e: c9:19:53:58:df:54:22:90:ff:c3:8a:c7:c6:1d:42: 4f:b5:c6:6c:c5:43:0f:40:0d:d3:6f:2f:fe:57:5f: 2d:e3:59:6a:b9:68:c7:e2:2e:ba:5c:43:b6:75:ea: 9a:9a:67:6b:dd:a5:0e:bd:77:96:26:f7:c8:f9:f7: cf:9b:26:ac:fe:29:21:c5:7c:51:c9:d6:45:81:03: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:FF:AE:29:8D:F3:C0:2D:D1:26:0D:01:32:D5:2B:22:CD:27:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/0a65f36a-cc94-3786-a427-6cbbdc9bc55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/f568952a-f44b-4d9f-b700-cda11a2b0488.crl X509v3 Authority Key Identifier: keyid:21:7F:1D:16:D1:F2:E9:46:1C:7D:6E:47:F8:01:AC:22:8B:95:AA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488.cer sbgp-ipAddrBlock: critical IPv4: 216.71.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:18:6e:04:25:4a:55:3b:37:de:78:41:a6:a5:d8:e8:5a:a1: 49:58:59:2e:8e:68:a3:cb:3a:56:51:cf:65:82:1a:2a:e3:9d: f7:0b:17:bb:da:52:06:bc:31:9d:dd:24:d2:ae:15:d8:0d:79: 9e:d6:b0:52:33:c7:65:b9:10:28:e4:32:b0:1c:b8:07:2d:16: 07:f9:d1:fc:b5:f1:81:37:12:fd:22:93:1a:98:fe:92:0a:15: 83:41:7e:2f:ba:71:a5:ce:4f:5f:01:cb:20:b4:85:2f:8b:59: f5:58:50:1a:ed:2b:f0:85:70:56:bf:7a:af:d6:35:d4:6f:89: 21:70:12:2e:68:17:a7:a7:c2:a8:3b:c1:84:ac:80:c0:d9:87: a7:81:21:62:fc:b1:6c:d1:ff:e1:73:b7:82:c4:87:c8:fc:5c: 22:7b:34:e0:bd:57:ff:93:db:fc:0f:8b:7c:a3:b9:57:ae:3c: 1e:6c:a4:80:5c:b3:3d:43:05:4e:e1:0b:6f:60:47:58:71:6b: c7:c3:e9:b5:09:c2:5a:f6:99:2b:8e:b4:44:3f:a0:79:c6:a9: 3c:6c:54:f3:a3:e6:7f:24:67:75:c2:9b:87:34:f0:a6:63:c8: ec:60:da:fa:29:97:19:82:b2:b4:2b:2a:9c:ea:60:49:d8:07: 00:28:ff:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fwkdkIiLe2/2+HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU2ODk1MmEtZjQ0Yi00ZDlmLWI3MDAtY2RhMTFhMmIw NDg4MB4XDTI2MDkxMDAyMzY1N1oXDTI2MTIwOTAzMzY1N1owLzEtMCsGA1UEAxMk NWY1ZGVkYWEtYjJhNS00OTg3LWI0YzMtNDQ2MjM4Nzg5NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC4eFYG7dtnrNGFbqw3H+tFHSZFfV39QKxXr dpBoT6Q5aj1haACNYEp15kMLBm+uaBemAs/nyNpm/VuBo43kR8t7OMR1DGA1idEB ZZ6SXZN6Z+QC5RWDTh2yVVyE3sQl89LRn9DXPKAFwqtHja+5Az/UWEjxslQjx19O PdKGNUuR17Z0U/lcheUfpsem7coFd4Vn7f2NHiX4/WmC6YJpS4sLKozBkqNqtAwf 71+H3f6BtE7JGVNY31QikP/DisfGHUJPtcZsxUMPQA3Tby/+V18t41lquWjH4i66 XEO2deqammdr3aUOvXeWJvfI+ffPmyas/ikhxXxRydZFgQMDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBt/64pjfPALdEmDQEy1SsizSfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mNTY4 OTUyYS1mNDRiLTRkOWYtYjcwMC1jZGExMWEyYjA0ODgvMGE2NWYzNmEtY2M5NC0z Nzg2LWE0MjctNmNiYmRjOWJjNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjU2ODk1MmEtZjQ0Yi00ZDlmLWI3 MDAtY2RhMTFhMmIwNDg4L2Y1Njg5NTJhLWY0NGItNGQ5Zi1iNzAwLWNkYTExYTJi MDQ4OC5jcmwwHwYDVR0jBBgwFoAUIX8dFtHy6UYcfW5H+AGsIouVqjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9mNTY4OTUyYS1mNDRiLTRkOWYtYjcwMC1jZGEx MWEyYjA0ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EdxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8YbgQlSlU7N954Qaal2OhaoUlYWS6OaKPLOlZRz2WCGirjnfcLF7va Uga8MZ3dJNKuFdgNeZ7WsFIzx2W5ECjkMrAcuActFgf50fy18YE3Ev0ikxqY/pIK FYNBfi+6caXOT18ByyC0hS+LWfVYUBrtK/CFcFa/eq/WNdRviSFwEi5oF6enwqg7 wYSsgMDZh6eBIWL8sWzR/+Fzt4LEh8j8XCJ7NOC9V/+T2/wPi3yjuVeuPB5spIBc sz1DBU7hC29gR1hxa8fD6bUJwlr2mSuOtEQ/oHnGqTxsVPOj5n8kZ3XCm4c08KZj yOxg2voplxmCsrQrKpzqYEnYBwAo/50= -----END CERTIFICATE-----Generated at Tue Sep 22 22:51:22 2026 by rpki-client