$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/af6e1c06-e0dd-30a7-b762-34073540394a.roa File: af6e1c06-e0dd-30a7-b762-34073540394a.roa (raw, json) Hash identifier: 7Iqo+gdWMKAk3e8rJI0dKckzwPf6k55QSJaO4FZxHMc= Subject key identifier: FA:F4:28:47:CF:7B:AB:2E:1D:7E:9E:AA:25:F5:A6:AA:E4:B2:91:E5 Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584F480D64D1BC2E151129436400 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/af6e1c06-e0dd-30a7-b762-34073540394a.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16524 IP address blocks: 72.11.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:64:d1:bc:2e:15:11:29:43:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=005e1f98-8bbf-4438-a994-1033764fdc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:f4:b1:51:72:69:ac:36:f9:45:a6:a2:71: 8c:57:91:ec:04:8f:41:97:bb:12:73:8c:bd:5b:57: 65:fc:5f:7a:32:1c:4a:8e:32:82:1a:23:b4:bb:15: f0:d8:9d:7c:5d:f7:66:21:85:aa:31:5c:1a:90:f9: 64:ea:7f:fd:e8:02:bb:cd:0a:3a:80:c4:ee:ca:e5: 4a:be:25:74:59:2e:bd:82:26:8b:d5:b3:fe:b4:24: b4:7a:db:fd:e3:9a:32:c7:d9:ed:e8:b6:98:49:9c: 28:de:5a:1e:38:82:b4:eb:60:0a:c8:8c:a9:23:69: a9:85:2e:e1:dc:71:9a:b5:37:b7:ff:05:3d:1a:f3: 51:47:ff:55:06:25:b8:f0:3c:af:de:e8:19:02:01: 4d:c9:2a:f8:7d:35:5b:b4:55:29:dc:31:4f:40:95: 9c:07:12:9b:99:52:87:2d:2b:ca:90:44:ae:db:dc: 0c:3d:16:f0:5e:4d:68:e8:83:00:41:bc:5a:ed:ea: c3:9b:d9:fc:fe:e5:5b:db:c9:d7:7b:77:d1:76:18: db:63:db:35:2e:4b:2e:a9:d4:5c:6a:79:65:ae:c1: f0:9c:b3:57:d4:4e:aa:ce:d1:54:f6:6e:93:02:47: 36:37:ef:98:de:91:9a:4e:8a:d2:4a:a3:3f:88:48: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:28:47:CF:7B:AB:2E:1D:7E:9E:AA:25:F5:A6:AA:E4:B2:91:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/af6e1c06-e0dd-30a7-b762-34073540394a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:de:f4:77:d3:08:4a:b9:4a:64:5e:47:17:af:72:11:e5:c1: e5:9a:85:85:98:33:73:01:28:4b:ec:10:42:16:eb:ee:30:42: 16:fe:ae:7d:2f:66:a9:4d:42:d3:95:d9:78:16:30:55:5e:20: e3:ed:02:97:aa:96:a4:77:48:cc:e8:fc:5d:e2:2a:16:f1:ac: 91:2c:27:fd:34:4f:8c:d8:3d:f2:28:0c:ae:3d:c4:7d:c9:aa: 78:4e:c4:09:ea:37:fc:78:59:fd:64:95:ae:80:21:84:01:e9: 37:cb:08:d3:45:b5:6f:98:84:e9:5f:fe:5b:36:e0:08:7c:b5: 22:39:2b:88:b4:d8:37:da:1f:50:2d:5d:9e:ab:83:8d:63:c1: cc:d7:49:58:be:51:b9:83:49:e3:fb:44:4a:5a:4e:d3:f3:f8: e4:a5:1d:5b:05:6f:c6:93:34:ad:40:a3:80:fe:d2:e1:97:40: d0:1d:50:ff:6b:79:31:80:ed:df:b1:8d:58:32:bd:f2:fa:4e: b2:ee:e2:32:13:ce:67:23:fc:cf:d9:95:da:67:aa:0f:c4:23: d8:df:83:bf:f5:10:f4:36:a6:e9:36:06:a3:9c:5d:45:5e:ce: e4:a4:2c:98:36:08:1b:f1:19:38:11:7f:29:88:ff:1c:6e:40: 93:60:57:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWTRvC4VESlDZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDA1ZTFmOTgtOGJiZi00NDM4LWE5OTQtMTAzMzc2NGZkYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNz0sVFyaaw2+UWmonGMV5HsBI9Bl7sSc4y9 W1dl/F96MhxKjjKCGiO0uxXw2J18XfdmIYWqMVwakPlk6n/96AK7zQo6gMTuyuVK viV0WS69giaL1bP+tCS0etv945oyx9nt6LaYSZwo3loeOIK062AKyIypI2mphS7h 3HGatTe3/wU9GvNRR/9VBiW48Dyv3ugZAgFNySr4fTVbtFUp3DFPQJWcBxKbmVKH LSvKkESu29wMPRbwXk1o6IMAQbxa7erDm9n8/uVb28nXe3fRdhjbY9s1LksuqdRc anllrsHwnLNX1E6qztFU9m6TAkc2N++Y3pGaTorSSqM/iEhAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr0KEfPe6suHX6eqiX1pqrkspHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvYWY2ZTFjMDYtZTBkZC0z MGE3LWI3NjItMzQwNzM1NDAzOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbe9HfTCEq5SmReRxevchHlweWahYWYM3MBKEvsEEIW6+4wQhb+rn0v ZqlNQtOV2XgWMFVeIOPtApeqlqR3SMzo/F3iKhbxrJEsJ/00T4zYPfIoDK49xH3J qnhOxAnqN/x4Wf1kla6AIYQB6TfLCNNFtW+YhOlf/ls24Ah8tSI5K4i02DfaH1At XZ6rg41jwczXSVi+UbmDSeP7REpaTtPz+OSlHVsFb8aTNK1Ao4D+0uGXQNAdUP9r eTGA7d+xjVgyvfL6TrLu4jITzmcj/M/Zldpnqg/EI9jfg7/1EPQ2puk2BqOcXUVe zuSkLJg2CBvxGTgRfymI/xxuQJNgV+s= -----END CERTIFICATE-----Generated at Mon Sep 28 21:59:37 2026 by rpki-client