$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/65aa0603-9a2a-3987-a41b-e097ebfb3676.roa File: 65aa0603-9a2a-3987-a41b-e097ebfb3676.roa (raw, json) Hash identifier: 3tRjZKXjiQfzm52sYsOlrEWi0UV6AwcDN+yNgp5LWxs= Subject key identifier: 70:9C:57:CE:79:D5:9B:C5:CB:8A:73:05:AC:F6:4B:6B:57:F9:13:85 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584F13024A1BE465EAA11781F760 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/65aa0603-9a2a-3987-a41b-e097ebfb3676.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 15296 IP address blocks: 199.216.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4a:1b:e4:65:ea:a1:17:81:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=1e080145-9d9f-4c83-afb0-bf9d45dff831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:5a:33:a5:a1:70:f1:33:7a:fe:bf:76:b3: a6:2f:aa:fe:a1:ee:b1:08:97:24:2a:fe:a4:d2:78: 0e:90:a8:29:c2:01:99:f8:60:62:eb:1c:00:28:95: fb:2d:44:ae:06:f3:a0:4e:45:db:ae:bd:e1:58:14: 5c:53:b0:38:a9:b9:36:27:a7:46:6c:ac:98:9a:57: 96:1e:00:15:63:b9:d0:ed:dc:6f:85:e5:25:3c:f6: a8:cd:b8:9c:da:1b:e4:bc:4f:d5:31:a4:97:4d:49: f6:60:50:68:fe:dc:99:db:59:08:f0:56:7b:8f:21: d3:f9:e2:b5:f0:66:4e:02:a9:3e:78:61:b9:e7:ab: c1:a4:ef:4a:85:7a:0a:0a:69:c9:6e:92:c0:cc:a5: e3:c6:a0:40:39:37:39:d3:83:dc:f0:12:ce:47:4e: 68:a0:5b:d3:af:96:fd:72:32:15:05:7d:52:b5:7d: 83:e6:5f:b6:72:54:57:2d:86:4a:d5:97:ba:90:cf: dd:69:8c:0a:58:f1:92:c7:76:1a:68:85:be:62:36: ef:7e:73:e0:18:28:f1:a4:dd:e3:9c:59:21:fd:64: 23:de:53:e1:cb:a5:f4:71:30:4b:29:27:b1:63:6b: ab:00:70:f5:52:e4:43:dc:86:e0:8e:15:d4:4b:c6: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:57:CE:79:D5:9B:C5:CB:8A:73:05:AC:F6:4B:6B:57:F9:13:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/65aa0603-9a2a-3987-a41b-e097ebfb3676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:8c:f6:5b:b8:a3:4d:18:d4:c8:ac:9a:fb:ee:58:73:7a:a5: 18:30:ed:d3:98:73:0e:7d:49:61:1e:0d:4e:95:d8:a3:2e:f2: 4e:6f:1a:df:2f:ef:eb:c7:31:d9:ae:7c:3d:4d:2d:44:58:23: 68:2f:f4:8d:fa:c3:b9:46:47:2e:c9:5e:83:dd:bf:d4:7a:68: c6:c0:47:ec:86:c6:9c:57:3a:b9:4a:65:4a:0c:75:39:39:6c: ea:7d:ac:10:c3:39:26:b6:81:72:92:fa:b1:c3:e4:84:53:9d: 6b:49:5a:cb:ff:47:f9:7c:2e:cf:40:1b:e5:2c:68:04:37:9f: b3:43:a1:f6:2c:39:31:8f:87:e6:76:3c:2c:b8:6e:a4:47:0b: 0e:58:63:cc:6b:cd:cb:e4:e7:4e:a7:c8:6c:7c:82:7f:47:4d: f2:f7:66:60:98:c0:25:df:45:61:c6:80:c8:19:41:32:4c:f1: a0:b8:22:8a:7c:3a:d6:85:e3:79:df:31:ef:90:ca:f5:ec:a5: 47:7b:73:77:b2:31:36:75:47:b6:86:97:a3:02:d4:44:7a:b9: c0:bd:71:a5:70:e2:1b:d7:0f:a5:21:84:76:f5:e9:14:e2:0e: cc:54:75:ca:28:22:a9:c1:7e:4c:46:a9:01:c1:88:2e:1c:f8: 0c:40:d7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkob5GXqoReB92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MWUwODAxNDUtOWQ5Zi00YzgzLWFmYjAtYmY5ZDQ1ZGZmODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf9aM6WhcPEzev6/drOmL6r+oe6xCJckKv6k 0ngOkKgpwgGZ+GBi6xwAKJX7LUSuBvOgTkXbrr3hWBRcU7A4qbk2J6dGbKyYmleW HgAVY7nQ7dxvheUlPPaozbic2hvkvE/VMaSXTUn2YFBo/tyZ21kI8FZ7jyHT+eK1 8GZOAqk+eGG556vBpO9KhXoKCmnJbpLAzKXjxqBAOTc504Pc8BLOR05ooFvTr5b9 cjIVBX1StX2D5l+2clRXLYZK1Ze6kM/daYwKWPGSx3YaaIW+YjbvfnPgGCjxpN3j nFkh/WQj3lPhy6X0cTBLKSexY2urAHD1UuRD3IbgjhXUS8aNuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCcV8551ZvFy4pzBaz2S2tX+ROFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvNjVhYTA2MDMtOWEyYS0z OTg3LWE0MWItZTA5N2ViZmIzNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+M9lu4o00Y1MismvvuWHN6pRgw7dOYcw59SWEeDU6V2KMu8k5vGt8v 7+vHMdmufD1NLURYI2gv9I36w7lGRy7JXoPdv9R6aMbAR+yGxpxXOrlKZUoMdTk5 bOp9rBDDOSa2gXKS+rHD5IRTnWtJWsv/R/l8Ls9AG+UsaAQ3n7NDofYsOTGPh+Z2 PCy4bqRHCw5YY8xrzcvk506nyGx8gn9HTfL3ZmCYwCXfRWHGgMgZQTJM8aC4Iop8 OtaF43nfMe+QyvXspUd7c3eyMTZ1R7aGl6MC1ER6ucC9caVw4hvXD6UhhHb16RTi DsxUdcooIqnBfkxGqQHBiC4c+AxA1x8= -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:41 2026 by rpki-client