$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa File: e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa (raw, json) Hash identifier: maIJlN7VeEvPuG5gyOsb1wv1AOZPrfGL3mfK/OAqy2o= Subject key identifier: C6:F4:AE:18:52:3A:CF:67:44:4C:12:2C:FB:93:B0:5B:95:39:E8:DB Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584F480D6310E124CC51ED837500 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16524 IP address blocks: 72.11.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:63:10:e1:24:cc:51:ed:83:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=062b30bd-5553-4b9f-b295-9798165fb333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:82:e2:3d:30:1b:97:00:5e:10:01:81:36: e1:90:5c:2c:2d:63:d0:a3:71:c3:3d:62:ae:30:44: 44:02:57:ca:57:9c:18:99:48:75:fc:5d:eb:28:c5: fe:f9:c3:3f:e0:0e:8f:8d:74:20:16:90:4e:ee:a2: 56:a3:47:2f:74:eb:7a:6e:dc:2d:b9:1d:b2:30:dc: 04:c3:ff:cf:e1:ad:92:0b:37:0b:61:90:aa:44:07: 75:ad:43:69:10:df:27:19:fa:aa:61:6d:c4:3d:08: b7:fe:e7:37:64:71:1f:7c:f6:39:15:5f:80:21:25: 26:64:cd:c5:76:83:18:d3:e7:bc:f2:bf:8b:45:b3: af:1a:e8:48:5d:09:6b:78:32:4f:b8:46:0b:65:a1: 2c:f4:62:01:f9:63:57:35:18:c2:ae:66:b4:2d:f1: c9:7e:e9:79:09:44:95:90:d1:77:fb:b8:07:82:88: f9:0c:d8:64:31:19:13:9b:f5:0c:ff:f3:1b:23:ad: dc:52:88:47:99:f9:7c:d4:b4:d6:b6:ea:d0:63:67: 25:7b:13:9c:47:46:75:a5:dc:c3:d4:65:0c:62:5f: e8:b8:eb:02:87:e4:74:cf:62:8a:65:a3:2e:97:45: 87:af:4f:58:d2:17:98:f2:ac:21:a9:f7:b9:b8:cb: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:AE:18:52:3A:CF:67:44:4C:12:2C:FB:93:B0:5B:95:39:E8:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bf:b9:48:5d:2d:d6:b4:96:32:85:08:e3:d5:69:08:70:91: 18:41:24:f3:2d:bb:bb:6c:af:1a:99:c4:8d:c1:6f:e8:38:28: fc:0a:0a:75:fa:55:d8:ed:68:b1:69:dc:f2:f1:2b:33:9c:fa: 91:8a:0f:e4:5c:44:20:2c:66:ba:5c:d5:3b:b2:95:a8:f9:4c: 3d:be:6c:f8:6c:b2:d8:56:9b:cd:0a:43:0d:1e:c1:9a:5d:47: 03:52:8b:5e:3b:d7:19:9c:be:41:d9:3a:a7:ad:f0:36:27:2e: 82:b3:f0:25:fd:06:92:8a:76:60:09:10:a2:56:68:0c:95:27: ac:45:f7:2d:ae:37:f3:68:56:f8:49:4b:78:4e:a5:8e:fe:19: c2:c7:5f:47:fd:fd:22:5a:35:75:ab:ff:e5:25:7e:d1:1e:81: fe:1c:d6:bf:fa:84:d9:7d:c0:ca:38:c6:12:37:ce:a8:e3:b0: a1:13:a3:df:62:0d:56:7d:93:b4:4e:fa:9c:ea:86:d4:76:ef: fd:c1:56:64:02:2f:dc:5f:08:7a:51:ff:86:18:24:ba:e5:63: a7:12:8f:b7:40:37:4a:dd:3d:89:de:56:c3:82:e8:04:ad:30: 4e:03:8d:c8:a9:00:ec:91:53:a0:ee:12:d9:fa:4c:00:b9:81: 97:df:65:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWMQ4STMUe2DdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDYyYjMwYmQtNTU1My00YjlmLWIyOTUtOTc5ODE2NWZiMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDyC4j0wG5cAXhABgTbhkFwsLWPQo3HDPWKu MEREAlfKV5wYmUh1/F3rKMX++cM/4A6PjXQgFpBO7qJWo0cvdOt6btwtuR2yMNwE w//P4a2SCzcLYZCqRAd1rUNpEN8nGfqqYW3EPQi3/uc3ZHEffPY5FV+AISUmZM3F doMY0+e88r+LRbOvGuhIXQlreDJPuEYLZaEs9GIB+WNXNRjCrma0LfHJful5CUSV kNF3+7gHgoj5DNhkMRkTm/UM//MbI63cUohHmfl81LTWturQY2clexOcR0Z1pdzD 1GUMYl/ouOsCh+R0z2KKZaMul0WHr09Y0heY8qwhqfe5uMtb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb0rhhSOs9nREwSLPuTsFuVOejbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvZThhMzU5ZTYtYjgzNy0z ZGJmLWIwMGUtM2FhNjRlZTRkNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO/uUhdLda0ljKFCOPVaQhwkRhBJPMtu7tsrxqZxI3Bb+g4KPwKCnX6 VdjtaLFp3PLxKzOc+pGKD+RcRCAsZrpc1Tuylaj5TD2+bPhssthWm80KQw0ewZpd RwNSi1471xmcvkHZOqet8DYnLoKz8CX9BpKKdmAJEKJWaAyVJ6xF9y2uN/NoVvhJ S3hOpY7+GcLHX0f9/SJaNXWr/+UlftEegf4c1r/6hNl9wMo4xhI3zqjjsKETo99i DVZ9k7RO+pzqhtR27/3BVmQCL9xfCHpR/4YYJLrlY6cSj7dAN0rdPYneVsOC6ASt ME4DjcipAOyRU6DuEtn6TAC5gZffZZs= -----END CERTIFICATE-----Generated at Sat Sep 26 14:01:55 2026 by rpki-client