$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa File: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (raw, json) Hash identifier: c6H6GFDgD70uXjKnkmrd7RYVbDiufK+m/X1OCpSBMOI= Subject key identifier: CF:FD:44:4E:5E:81:52:3D:C9:05:01:04:02:F3:4C:04:E9:A5:FA:4A Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584F497662E9C8FE2823B7A99E00 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 216.120.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:62:e9:c8:fe:28:23:b7:a9:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2f91a5dc-7bbe-4c88-8e21-6726b40dfe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:6c:b3:9b:18:ba:fe:07:48:63:8a:85:b3: 72:08:81:2d:cf:ac:ff:1a:9e:c8:a9:64:ef:6f:81: ea:26:ac:20:79:8a:e5:c1:1e:84:f3:43:6e:58:ec: 93:02:7d:5c:0e:17:f4:5f:93:b8:d5:10:d0:a2:20: 90:be:3c:75:c3:5c:48:33:57:a1:c2:0a:66:da:43: 9c:28:8f:18:04:b1:ff:ea:b2:7f:29:94:d9:7e:96: 3a:df:63:18:18:ec:0f:24:54:b0:85:b5:1f:70:03: 36:da:8a:8e:8c:7b:4b:5b:a6:af:7c:78:9a:ac:ba: d0:2e:b2:34:ec:d7:da:85:c1:dc:ca:58:3f:c5:0c: 00:28:7e:f0:a1:e7:2a:47:be:03:4a:8c:63:d1:ae: 18:02:4e:a7:fd:94:fb:0c:6f:07:23:d7:b6:df:20: b4:6d:b8:69:31:38:ff:fa:68:77:86:2c:4b:66:c9: cb:91:be:a6:19:b1:60:86:a2:57:c9:2b:0d:75:2d: 21:8d:1c:40:c8:27:3e:76:33:99:bb:a1:9b:09:b3: 31:00:f1:23:29:85:ef:66:b0:33:06:62:d3:d3:26: 81:e5:e6:d0:30:dd:36:aa:ae:00:9f:6a:87:e7:32: a9:0c:33:cc:91:2a:cf:ae:e1:ee:2f:ae:b2:76:e1: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FD:44:4E:5E:81:52:3D:C9:05:01:04:02:F3:4C:04:E9:A5:FA:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: 216.120.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2d:8d:05:99:b1:24:0d:fe:75:8a:df:85:4d:ef:cb:38:0e: a5:b8:13:d9:e7:f2:03:06:91:61:bf:2b:01:5a:f5:d8:08:31: ac:13:c1:46:58:ca:c6:90:a1:d5:92:3f:49:1f:f8:09:e6:3e: 6f:54:ea:72:2d:7f:b1:a3:01:84:06:71:7b:2e:f6:0e:8f:dc: 90:28:23:c4:91:7f:df:8e:04:46:03:e2:e1:81:9d:d9:c1:2f: 5e:ce:bd:59:8a:54:74:e6:d5:96:11:47:e5:10:c8:34:8e:77: c6:93:e2:49:27:24:6d:78:00:3b:ef:b3:06:17:93:5b:c5:79: 7c:91:ab:96:df:64:88:89:33:f2:af:2f:b1:25:d5:a6:c7:7c: 0f:72:1c:30:57:55:cd:ec:9c:9d:74:e7:62:1f:f2:e0:43:0d: 94:3b:1f:0e:ec:2d:50:4b:ef:0e:62:59:2f:b9:27:73:8b:1f: 44:a6:79:49:8b:f5:b2:32:0b:91:3b:dd:1d:44:71:7e:58:62: a4:e8:71:8f:dd:3e:2f:18:e7:11:c8:b2:89:cc:2a:8d:27:69: a1:ba:a0:d8:40:ee:5e:e8:69:76:ea:ea:6e:7d:4a:d8:e4:47: 27:cd:e9:84:49:d7:a4:b6:22:f9:53:56:b2:e0:61:fa:6b:b4: 8f:d1:cb:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmLpyP4oI7epngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmY5MWE1ZGMtN2JiZS00Yzg4LThlMjEtNjcyNmI0MGRmZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPJss5sYuv4HSGOKhbNyCIEtz6z/Gp7IqWTv b4HqJqwgeYrlwR6E80NuWOyTAn1cDhf0X5O41RDQoiCQvjx1w1xIM1ehwgpm2kOc KI8YBLH/6rJ/KZTZfpY632MYGOwPJFSwhbUfcAM22oqOjHtLW6avfHiarLrQLrI0 7NfahcHcylg/xQwAKH7woecqR74DSoxj0a4YAk6n/ZT7DG8HI9e23yC0bbhpMTj/ +mh3hixLZsnLkb6mGbFghqJXySsNdS0hjRxAyCc+djOZu6GbCbMxAPEjKYXvZrAz BmLT0yaB5ebQMN02qq4An2qH5zKpDDPMkSrPruHuL66yduHBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/9RE5egVI9yQUBBALzTATppfpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvMmU3MmQ1YmUtZjlmMi0z MzM5LWIzM2ItNGMxYmEyZjM1OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4tjQWZsSQN/nWK34VN78s4DqW4E9nn8gMGkWG/KwFa9dgIMawTwUZY ysaQodWSP0kf+AnmPm9U6nItf7GjAYQGcXsu9g6P3JAoI8SRf9+OBEYD4uGBndnB L17OvVmKVHTm1ZYRR+UQyDSOd8aT4kknJG14ADvvswYXk1vFeXyRq5bfZIiJM/Kv L7El1abHfA9yHDBXVc3snJ1052If8uBDDZQ7Hw7sLVBL7w5iWS+5J3OLH0SmeUmL 9bIyC5E73R1EcX5YYqTocY/dPi8Y5xHIsonMKo0naaG6oNhA7l7oaXbq6m59Stjk RyfN6YRJ16S2IvlTVrLgYfprtI/RyxU= -----END CERTIFICATE-----Generated at Tue Sep 29 04:47:08 2026 by rpki-client