$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/f0a6706c-9ec8-33c6-838d-f23f96cae957.roa File: f0a6706c-9ec8-33c6-838d-f23f96cae957.roa (raw, json) Hash identifier: d3Dv4bSG/LbFIOgC6dTdnsmz9wbI1xkd8fqXGKncKA8= Subject key identifier: 8D:DB:C9:78:F9:BD:AC:38:49:3C:C1:36:C2:8D:24:D8:5B:37:76:77 Certificate issuer: /CN=bf895287-fee6-4682-8ac4-732f64947fe4 Certificate serial: 010D0C9F4328584F3B7D1EF6B2F48ED070D41580 Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/f0a6706c-9ec8-33c6-838d-f23f96cae957.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 54847 IP address blocks: 216.182.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1e:f6:b2:f4:8e:d0:70:d4:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=9f280a18-f5b0-42a7-8c58-e4eaa23af8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:55:fe:47:26:89:92:c6:29:27:63:79:86: 87:bc:7f:ce:6c:e5:76:68:ef:5a:4b:c5:49:f9:45: d9:1c:c9:c7:6b:0a:b4:2d:9c:7f:ff:ca:46:44:01: 89:db:1d:14:1e:26:24:57:d0:f0:bd:02:ec:f6:d7: a9:a5:8a:dd:dc:95:ba:1c:e8:5c:d1:86:1b:e9:f4: 27:79:05:c0:4d:62:82:30:38:d7:e6:2a:0a:6b:44: bb:f6:91:f3:70:5b:24:6f:aa:38:47:6a:67:d9:86: c0:cf:04:42:eb:13:92:0d:69:f5:01:04:f3:0b:c1: a4:50:e9:e1:20:7a:e3:5c:aa:de:fe:d1:3f:1e:04: 30:d1:79:08:92:27:da:c9:8d:75:dc:8c:61:77:b1: 26:6d:af:98:72:44:9d:6f:e6:e7:80:d6:fa:a3:05: 35:d4:ea:2e:6b:e5:20:c6:3f:cd:44:10:9b:7f:b6: c4:21:cb:58:fb:ca:bb:b3:a3:1d:c6:25:a5:af:07: a3:9a:84:10:d5:3c:5f:e7:bd:27:41:eb:fe:02:01: 53:63:e5:2a:01:e7:a6:1b:5e:bc:1c:43:30:8d:bd: d2:44:a8:8a:1f:9f:ae:2f:5d:80:81:2b:79:91:47: 19:ce:eb:13:35:63:d9:72:f0:5d:32:ed:dd:d4:c2: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DB:C9:78:F9:BD:AC:38:49:3C:C1:36:C2:8D:24:D8:5B:37:76:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/f0a6706c-9ec8-33c6-838d-f23f96cae957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl X509v3 Authority Key Identifier: keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer sbgp-ipAddrBlock: critical IPv4: 216.182.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:43:f3:f9:82:cc:cd:5b:c3:60:5e:7f:83:ec:ba:51:fc:63: f8:22:96:3c:e8:72:9e:6f:c7:74:2a:fb:df:42:ba:30:ca:52: b8:e3:6e:7d:e9:45:6e:9a:ad:c8:0d:e5:9c:92:ee:2b:63:60: 78:4c:32:45:f0:1e:b7:d4:5a:8e:d8:1b:66:50:15:22:18:2e: c0:5d:60:c7:45:d9:9c:33:8e:54:2b:8a:2b:dd:53:f9:70:cf: 2f:88:88:41:ff:d7:7c:52:d3:62:7c:bc:50:fb:d3:a4:e5:74: 43:dc:2e:7a:13:ca:00:f3:9d:e4:2f:eb:ae:7e:6c:2c:f8:36: 5f:c7:d3:f1:d4:cf:42:88:e1:40:14:b0:fe:ee:8a:49:7d:8e: 2f:7c:72:d0:cd:aa:45:6d:64:f9:d3:ab:bd:fe:bf:e6:0c:d6: 8e:b8:9a:ce:5d:d8:97:f3:1b:9b:73:ac:a0:bc:0d:86:67:05: e2:17:af:e0:65:d1:62:ad:06:3a:8e:ba:e8:14:10:be:61:e1: b5:e2:7b:17:3e:56:52:8b:ea:5a:27:8c:06:01:ac:12:c1:da: 20:07:b8:f0:cc:cd:33:ab:fe:f7:18:24:be:75:75:84:0b:a3: 1a:74:da:63:25:79:84:02:97:07:db:75:7f:ad:9a:4f:3c:7f: ac:ff:29:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR72svSO0HDUFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3 ZmU0MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk OWYyODBhMTgtZjViMC00MmE3LThjNTgtZTRlYWEyM2FmOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqNV/kcmiZLGKSdjeYaHvH/ObOV2aO9aS8VJ +UXZHMnHawq0LZx//8pGRAGJ2x0UHiYkV9DwvQLs9teppYrd3JW6HOhc0YYb6fQn eQXATWKCMDjX5ioKa0S79pHzcFskb6o4R2pn2YbAzwRC6xOSDWn1AQTzC8GkUOnh IHrjXKre/tE/HgQw0XkIkifayY113Ixhd7Emba+YckSdb+bngNb6owU11Ooua+Ug xj/NRBCbf7bEIctY+8q7s6MdxiWlrwejmoQQ1Txf570nQev+AgFTY+UqAeemG168 HEMwjb3SRKiKH5+uL12AgSt5kUcZzusTNWPZcvBdMu3d1MJqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3byXj5vaw4STzBNsKNJNhbN3Z3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5 NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvZjBhNjcwNmMtOWVjOC0z M2M2LTgzOGQtZjIzZjk2Y2FlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0 N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdD8/mCzM1bw2Bef4PsulH8Y/giljzocp5vx3Qq+99CujDKUrjjbn3p RW6arcgN5ZyS7itjYHhMMkXwHrfUWo7YG2ZQFSIYLsBdYMdF2ZwzjlQriivdU/lw zy+IiEH/13xS02J8vFD706TldEPcLnoTygDzneQv665+bCz4Nl/H0/HUz0KI4UAU sP7uikl9ji98ctDNqkVtZPnTq73+v+YM1o64ms5d2JfzG5tzrKC8DYZnBeIXr+Bl 0WKtBjqOuugUEL5h4bXiexc+VlKL6lonjAYBrBLB2iAHuPDMzTOr/vcYJL51dYQL oxp02mMleYQClwfbdX+tmk88f6z/KVY= -----END CERTIFICATE-----Generated at Tue Sep 22 22:06:46 2026 by rpki-client