$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d8f4397-0880-3942-92dd-1b23ba4a498f.roa File: 7d8f4397-0880-3942-92dd-1b23ba4a498f.roa (raw, json) Hash identifier: Onb7f/Ff4OzL5JvqvDtVenygkEOCF3hJIWeXmyBTARM= Subject key identifier: 5F:47:9B:08:31:5E:9A:09:A5:12:8F:68:7E:5B:3F:F6:9B:37:E9:A8 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052673D94F0048FF4982900 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d8f4397-0880-3942-92dd-1b23ba4a498f.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 395492 IP address blocks: 216.243.13.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:67:3d:94:f0:04:8f:f4:98:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=2ffd5d50-aa7f-453f-80e0-f9f271a8ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:55:fa:2e:1c:0d:c0:c5:fd:45:01:08:32: 5c:99:f0:60:18:2a:b8:ee:63:fa:d7:92:9c:ea:0c: 9c:b3:20:ff:e4:09:7c:82:69:1b:00:be:bb:22:0a: ad:db:7e:14:b8:b3:a9:34:93:c3:15:75:8c:58:b4: 0f:45:cc:f9:67:c0:2e:9b:04:79:97:e8:94:71:4c: 72:91:ae:ac:93:88:92:64:43:88:53:17:58:c6:96: 5f:d0:9e:a7:48:dc:d1:5f:cd:4b:80:85:5b:11:5c: 9e:9c:76:72:2d:e8:3a:af:20:19:ec:76:c8:94:50: ab:90:03:98:ad:95:03:c6:65:2a:7c:12:77:3d:6b: b9:5f:33:24:58:2e:32:af:4d:9a:ad:6f:d1:b9:55: 22:cc:5c:83:e9:e3:5e:bb:43:c9:5f:90:55:c0:0b: 35:37:3b:f7:99:ac:d2:64:a4:f5:da:7e:77:91:82: 25:b2:4f:d5:ff:36:ef:29:96:2c:29:1d:f0:70:20: cb:37:81:b9:e8:dc:80:ad:8b:ec:d1:af:88:b1:ee: 05:64:79:50:73:6e:82:be:d3:11:3b:38:5c:14:66: f3:8c:57:0f:0d:b7:a5:65:6c:d5:f8:27:42:fe:80: 95:82:da:c4:a6:18:b4:da:3c:ce:92:96:e2:58:b5: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:47:9B:08:31:5E:9A:09:A5:12:8F:68:7E:5B:3F:F6:9B:37:E9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d8f4397-0880-3942-92dd-1b23ba4a498f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1a:e4:77:7f:95:fe:85:39:89:cc:0a:c9:54:3b:38:eb:03: 5b:d2:36:90:de:f1:c2:5b:a3:4c:ea:59:75:e5:96:1f:58:22: e7:db:ac:74:60:7f:83:20:2b:1b:8b:c1:1a:be:ca:ba:85:9a: d5:c1:8d:1d:68:15:d2:3e:d9:78:85:82:94:4e:68:78:a3:1c: 76:f9:37:b2:76:a2:3b:82:fb:f8:ac:62:3a:ec:4d:7a:a8:26: fa:42:15:ef:05:ef:a0:15:f9:4b:9e:a3:f6:3a:a5:fc:4f:fe: c1:71:ed:48:37:1f:1d:06:b2:e6:16:d5:c5:9a:9a:e8:a3:1a: 37:2c:32:ce:00:9a:2b:05:05:f2:33:f2:1f:49:99:dc:dc:4d: e0:8b:63:44:10:6b:7c:4d:a4:53:43:6d:c9:17:9a:e4:af:1f: ec:93:08:09:fc:b2:19:ef:3d:4a:4f:0f:6b:34:6b:6e:ae:02: e7:1c:74:39:ce:0d:c4:df:2f:81:96:cd:d7:ec:85:2d:30:bb: a8:b2:fd:d8:57:63:47:4f:4a:20:66:5e:12:24:a8:34:78:f2: e2:5a:05:51:a6:8d:43:42:59:15:6f:b8:5e:a4:09:5c:a4:7f: 2f:8a:d9:a0:25:3b:0d:4d:51:d7:8c:56:d1:28:fd:d9:b7:c8: 3f:b1:3c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmc9lPAEj/SYKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MmZmZDVkNTAtYWE3Zi00NTNmLTgwZTAtZjlmMjcxYThmZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7RV+i4cDcDF/UUBCDJcmfBgGCq47mP615Kc 6gycsyD/5Al8gmkbAL67Igqt234UuLOpNJPDFXWMWLQPRcz5Z8AumwR5l+iUcUxy ka6sk4iSZEOIUxdYxpZf0J6nSNzRX81LgIVbEVyenHZyLeg6ryAZ7HbIlFCrkAOY rZUDxmUqfBJ3PWu5XzMkWC4yr02arW/RuVUizFyD6eNeu0PJX5BVwAs1Nzv3mazS ZKT12n53kYIlsk/V/zbvKZYsKR3wcCDLN4G56NyArYvs0a+Ise4FZHlQc26CvtMR OzhcFGbzjFcPDbelZWzV+CdC/oCVgtrEphi02jzOkpbiWLU0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9HmwgxXpoJpRKPaH5bP/abN+moMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4ZjQzOTctMDg4MC0z OTQyLTkyZGQtMWIyM2JhNGE0OThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0a5Hd/lf6FOYnMCslUOzjrA1vSNpDe8cJbo0zqWXXllh9YIufbrHRg f4MgKxuLwRq+yrqFmtXBjR1oFdI+2XiFgpROaHijHHb5N7J2ojuC+/isYjrsTXqo JvpCFe8F76AV+Uueo/Y6pfxP/sFx7Ug3Hx0GsuYW1cWamuijGjcsMs4AmisFBfIz 8h9JmdzcTeCLY0QQa3xNpFNDbckXmuSvH+yTCAn8shnvPUpPD2s0a26uAuccdDnO DcTfL4GWzdfshS0wu6iy/dhXY0dPSiBmXhIkqDR48uJaBVGmjUNCWRVvuF6kCVyk fy+K2aAlOw1NUdeMVtEo/dm3yD+xPH0= -----END CERTIFICATE-----Generated at Wed Sep 23 02:32:47 2026 by rpki-client