$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa File: 43efa9da-f2bc-3983-a912-86d2468191e3.roa (raw, json) Hash identifier: 8UpuaGp2Ee+f72NaYpKCXPAtToEZ7fuYhWDOzAegL1k= Subject key identifier: 61:2A:DD:70:8E:74:B4:30:86:29:AE:83:83:19:DC:29:A8:AE:B5:DE Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584EF87CC48C76408195649580E0 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 1239 IP address blocks: 65.181.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c4:8c:76:40:81:95:64:95:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=85ce0791-6000-4dd6-8a36-bfdbdbc6fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:26:a7:be:a0:69:5c:44:75:eb:7a:c9:82: bb:e3:46:46:30:e9:7b:21:7e:58:fe:ae:eb:d5:bf: 39:92:92:ab:60:d8:90:61:b3:cd:0a:3b:a9:8b:92: ca:d9:5b:66:4f:1e:e4:35:3f:3e:b3:00:56:b2:3b: 8e:11:76:90:e1:12:ff:1d:55:a3:a9:cb:71:44:ca: 50:19:10:82:02:1e:99:24:b3:d3:7b:72:0e:81:78: 01:6e:80:af:da:f8:5a:73:5d:be:8c:10:cd:33:d9: 5f:67:94:b4:be:17:da:df:6e:89:c1:ce:7b:f3:d3: ba:5a:42:5a:93:5f:72:f9:24:94:11:d1:f1:3c:68: 83:35:d0:19:bb:38:a2:cb:61:91:55:c0:fc:18:85: 6f:c5:47:96:a4:36:23:63:df:48:04:d9:20:4e:42: 08:3d:d5:dd:74:94:2b:79:ba:49:ea:80:e5:90:fc: 96:e7:46:60:f4:56:16:6f:6d:64:fc:c9:a8:81:31: 85:99:2e:78:33:1b:73:34:df:76:bb:8f:b5:a7:78: 41:af:87:e2:96:46:97:af:aa:f5:8d:58:5a:72:6e: ac:f4:f2:9a:e8:6c:c2:ba:61:27:cd:06:3a:37:97: 83:20:a1:68:2c:31:b6:3e:d4:1b:1e:8b:c9:84:67: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:DD:70:8E:74:B4:30:86:29:AE:83:83:19:DC:29:A8:AE:B5:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ff:85:91:b4:6e:07:b1:a1:27:2c:e3:0e:f2:76:29:b3:72: e2:c3:f2:f2:d0:db:04:09:a4:ca:f1:56:5f:9f:8b:97:06:ef: 54:e4:06:06:a0:26:0f:f5:e5:7b:33:6b:d3:96:77:af:84:01: 57:18:d3:f4:06:f9:91:7c:9e:91:25:ef:cc:3c:30:e5:88:9b: 7c:ad:6f:16:61:00:f6:1c:76:3e:46:20:23:7d:4c:f8:96:d0: cb:6a:77:99:1a:0a:e2:76:43:46:ed:87:71:1b:29:db:c3:9d: 9d:ec:85:a6:9c:2a:a0:6e:9a:28:12:36:da:38:8f:bf:1f:20: d8:4d:ff:c3:c8:06:85:45:31:e5:f8:1b:c7:f6:85:99:a6:16: b8:f5:b9:94:83:1d:af:3e:67:ea:b1:73:06:d0:1b:49:69:3a: e5:00:51:7e:b3:58:ff:49:80:2e:41:83:19:2b:40:bd:3c:95: 21:9d:b2:1a:9d:2c:17:41:85:4b:27:b4:26:a6:a3:bc:80:af: 87:f4:fb:11:f8:3d:74:0c:37:1f:fa:a2:96:98:8d:3d:16:e8: f7:72:6a:ab:95:00:02:12:f0:c9:b9:60:86:a1:51:0b:cc:fd: 8d:d2:b1:bc:94:9d:fd:60:9b:97:c2:b6:dc:e2:7b:f9:11:bf: f8:cf:f9:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMSMdkCBlWSVgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ODVjZTA3OTEtNjAwMC00ZGQ2LThhMzYtYmZkYmRiYzZmYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWUmp76gaVxEdet6yYK740ZGMOl7IX5Y/q7r 1b85kpKrYNiQYbPNCjupi5LK2VtmTx7kNT8+swBWsjuOEXaQ4RL/HVWjqctxRMpQ GRCCAh6ZJLPTe3IOgXgBboCv2vhac12+jBDNM9lfZ5S0vhfa326Jwc5789O6WkJa k19y+SSUEdHxPGiDNdAZuziiy2GRVcD8GIVvxUeWpDYjY99IBNkgTkIIPdXddJQr ebpJ6oDlkPyW50Zg9FYWb21k/MmogTGFmS54MxtzNN92u4+1p3hBr4filkaXr6r1 jVhacm6s9PKa6GzCumEnzQY6N5eDIKFoLDG2PtQbHovJhGdqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEq3XCOdLQwhimug4MZ3CmorrXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNDNlZmE5ZGEtZjJiYy0z OTgzLWE5MTItODZkMjQ2ODE5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQbWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz/hZG0bgexoScs4w7ydimzcuLD8vLQ2wQJpMrxVl+fi5cG71TkBgag Jg/15Xsza9OWd6+EAVcY0/QG+ZF8npEl78w8MOWIm3ytbxZhAPYcdj5GICN9TPiW 0Mtqd5kaCuJ2Q0bth3EbKdvDnZ3shaacKqBumigSNto4j78fINhN/8PIBoVFMeX4 G8f2hZmmFrj1uZSDHa8+Z+qxcwbQG0lpOuUAUX6zWP9JgC5BgxkrQL08lSGdshqd LBdBhUsntCamo7yAr4f0+xH4PXQMNx/6opaYjT0W6PdyaquVAAIS8Mm5YIahUQvM /Y3SsbyUnf1gm5fCttzie/kRv/jP+Uk= -----END CERTIFICATE-----Generated at Sun Sep 20 12:54:15 2026 by rpki-client