$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b15c8ebe-a583-31c9-99cd-388cb687bf38.roa File: b15c8ebe-a583-31c9-99cd-388cb687bf38.roa (raw, json) Hash identifier: 6YHd8jIV/1+LEEF8nKxMBdAEDpDfBYnDi7DTbHaJ04w= Subject key identifier: F3:16:A1:52:CE:47:61:14:81:84:70:9F:54:25:FA:ED:C4:ED:19:96 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F305267038F2DD16F21F41380 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b15c8ebe-a583-31c9-99cd-388cb687bf38.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 54858 IP address blocks: 216.243.4.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:67:03:8f:2d:d1:6f:21:f4:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=1c402af0-a019-432a-a73a-ae6f61eeb838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:2b:cf:eb:ce:dd:3a:22:ec:57:3e:44:e6: 8f:12:23:47:fc:bd:1e:2a:ad:24:4f:f7:8c:37:ab: 79:da:f1:db:1a:d0:fb:8e:f1:a4:82:77:1d:72:89: f1:bc:10:8d:10:1a:04:81:4d:ce:1d:23:28:d2:4f: a8:ed:a3:a8:55:b4:ee:78:94:f2:7d:91:df:19:31: 07:2e:b0:09:6c:e6:6e:43:a9:01:9b:a9:8c:d7:18: bd:18:b1:d4:96:53:e1:0f:bf:08:15:37:e1:12:b6: 65:cb:81:9f:75:cd:c1:17:51:05:0b:94:2e:c5:dc: 20:b0:c7:95:1a:22:ad:40:8c:e6:f3:29:d6:b5:46: 40:85:13:e0:0e:fc:5c:47:47:f4:48:46:90:bb:65: cc:37:d9:ac:2a:c5:e9:13:f1:6a:6b:e3:31:ea:50: 5e:59:55:ee:8c:7f:58:ee:ce:10:93:c5:e4:8a:c7: de:65:da:b2:c9:f8:9a:96:69:1d:c3:62:56:8a:ab: 71:fe:ed:ad:c5:e3:17:03:c2:12:92:c9:2e:af:6f: 15:24:c6:cd:3c:5b:5d:8b:a5:ca:35:06:1c:36:08: 27:90:da:ab:98:4b:03:ad:4d:e4:86:50:4d:2f:16: 6a:40:87:3b:56:c4:7f:28:ad:b2:d5:f5:ff:2c:9c: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:16:A1:52:CE:47:61:14:81:84:70:9F:54:25:FA:ED:C4:ED:19:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b15c8ebe-a583-31c9-99cd-388cb687bf38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:75:64:43:b7:3c:10:1f:f4:0a:aa:76:ec:9d:81:3a:e7:1d: b6:11:57:4b:d5:99:78:72:cb:e7:b2:c4:b9:a6:dc:23:cb:e3: 57:af:e9:69:83:77:4e:2c:8a:cd:63:ad:bc:f3:87:51:57:3b: cd:2d:ee:2b:ad:41:bb:13:fc:54:1d:23:b2:82:11:2e:9a:09: e5:d5:e5:b6:10:db:48:b6:9f:58:0d:c8:58:17:b9:2a:c3:db: 8d:4d:16:43:9f:90:f8:51:71:65:9a:45:12:87:49:a7:1c:59: 8e:8b:db:9b:61:6e:3c:16:18:9c:15:00:c7:7e:d4:2b:4a:5f: 92:76:70:25:7d:e9:7e:a6:99:5a:bc:30:8e:60:4e:6c:9e:5f: 9c:52:21:10:47:8b:5b:e2:69:22:e8:c0:9e:2d:9a:5f:43:7f: b6:09:de:ae:ae:5f:8c:36:4c:96:1d:b2:7f:c0:23:16:f5:b9: f7:c2:c2:44:27:2b:0b:bf:26:8e:bc:02:c5:92:38:00:b6:93: 7a:6a:0b:10:7e:41:95:2c:eb:d8:31:d5:bc:09:37:58:cd:db: 2a:db:68:4b:0f:9f:e8:d1:b2:ec:65:ed:f0:f0:35:6d:26:27: 68:67:e4:f5:fe:d8:6f:33:9e:52:cf:89:f8:23:f3:d1:87:79: 07:4f:74:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmcDjy3RbyH0E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MWM0MDJhZjAtYTAxOS00MzJhLWE3M2EtYWU2ZjYxZWViODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih0rz+vO3Toi7Fc+ROaPEiNH/L0eKq0kT/eM N6t52vHbGtD7jvGkgncdconxvBCNEBoEgU3OHSMo0k+o7aOoVbTueJTyfZHfGTEH LrAJbOZuQ6kBm6mM1xi9GLHUllPhD78IFTfhErZly4Gfdc3BF1EFC5QuxdwgsMeV GiKtQIzm8ynWtUZAhRPgDvxcR0f0SEaQu2XMN9msKsXpE/Fqa+Mx6lBeWVXujH9Y 7s4Qk8XkisfeZdqyyfialmkdw2JWiqtx/u2txeMXA8ISkskur28VJMbNPFtdi6XK NQYcNggnkNqrmEsDrU3khlBNLxZqQIc7VsR/KK2y1fX/LJzsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMWoVLOR2EUgYRwn1Ql+u3E7RmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjE1YzhlYmUtYTU4My0z MWM5LTk5Y2QtMzg4Y2I2ODdiZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx1ZEO3PBAf9AqqduydgTrnHbYRV0vVmXhyy+eyxLmm3CPL41ev6WmD d04sis1jrbzzh1FXO80t7iutQbsT/FQdI7KCES6aCeXV5bYQ20i2n1gNyFgXuSrD 241NFkOfkPhRcWWaRRKHSaccWY6L25thbjwWGJwVAMd+1CtKX5J2cCV96X6mmVq8 MI5gTmyeX5xSIRBHi1viaSLowJ4tml9Df7YJ3q6uX4w2TJYdsn/AIxb1uffCwkQn Kwu/Jo68AsWSOAC2k3pqCxB+QZUs69gx1bwJN1jN2yrbaEsPn+jRsuxl7fDwNW0m J2hn5PX+2G8znlLPifgj89GHeQdPdNI= -----END CERTIFICATE-----Generated at Tue Sep 22 02:22:59 2026 by rpki-client