$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa File: 25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa (raw, json) Hash identifier: /BODKDdv4fMr5FxX4laNV6OUXhf9B+qpm3KE6pXNRYg= Subject key identifier: D4:39:C6:D2:69:24:29:72:4B:A6:92:95:72:72:49:1F:84:73:73:F5 Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584F1302324BF922ECD74D04FAC0 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 17315 IP address blocks: 216.220.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:32:4b:f9:22:ec:d7:4d:04:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=c1bf3838-8b64-4c41-b142-7ebabed5e6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:8f:41:97:76:44:0c:62:5d:cd:4d:6a:0c: ca:fc:c9:63:8f:c9:91:12:68:8c:f6:d8:01:22:13: a1:37:ab:31:cf:19:42:3f:cb:6c:f4:2f:ce:e3:f7: ee:f8:9f:0c:14:1b:be:e3:b7:3c:a4:04:8c:cd:b1: 82:7c:a5:e1:65:3a:e8:ce:b8:23:1e:27:8a:fe:9d: 27:2f:ed:47:e0:61:c1:f2:a7:c6:26:ee:96:5a:71: 58:da:74:47:60:df:da:da:a3:08:86:cb:22:bc:7f: 71:6b:2f:40:e4:16:3e:92:d9:e7:f3:38:45:6b:b0: 88:45:7e:f4:38:9d:d4:37:a9:63:7f:fe:66:37:be: b8:24:40:25:f1:54:39:41:f6:8d:dd:2a:20:04:68: 24:0b:c0:7e:50:6f:22:f2:b5:cb:d3:46:da:7d:36: 95:bd:7f:db:e9:be:d4:60:fc:dd:7f:66:d0:43:30: d2:f3:b7:b9:db:44:07:2b:ee:59:88:34:2e:2f:34: ab:b7:1e:30:a7:6b:e3:d6:dc:d7:01:61:b9:c7:cc: 94:76:31:42:03:35:2a:4b:3f:d6:76:8f:b7:f7:fd: 23:3d:77:e6:75:25:6d:e1:47:63:e8:16:b4:7f:64: c2:a2:f1:1f:05:a5:0b:c7:97:ba:a3:14:a5:3f:fb: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:C6:D2:69:24:29:72:4B:A6:92:95:72:72:49:1F:84:73:73:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 216.220.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d4:61:05:f2:e3:d4:0a:16:77:c3:e2:4f:f6:34:46:55:5e: 97:96:80:e6:b2:9d:e9:1f:2d:f3:23:33:3b:ac:e4:76:3d:7f: 58:7d:50:67:28:1f:cd:2b:5f:38:de:ca:e1:ae:f1:b3:5f:d7: 71:18:85:63:ac:7a:47:0f:ec:3f:13:8c:7e:d9:c2:e5:36:ea: 3c:86:45:20:41:5f:d7:f1:d7:32:cf:c2:72:fe:4f:85:a5:3b: 76:28:4c:a8:58:5b:78:e7:d8:c5:8d:a5:00:99:cf:7f:65:8a: 26:86:e2:c3:9d:c0:7b:71:aa:6e:a2:7a:a9:a9:ea:7c:d3:dc: a6:d9:89:6a:0a:7c:f1:d3:40:c4:26:5c:f7:b1:e3:bf:59:c6: ce:50:e0:76:3f:89:7a:af:d0:c6:f4:47:95:92:bb:c3:1d:71: 99:9c:44:e8:4a:f2:c4:d0:97:1b:0b:f5:57:0a:ce:a8:46:e5: 1a:c9:66:0d:7b:25:02:ea:23:dc:73:a0:9e:f3:5f:10:fe:8e: f8:a1:f2:5e:ba:2d:43:b8:59:35:0a:a4:41:33:99:87:3e:c2: 22:7f:6f:23:b6:12:09:5a:4e:65:8f:67:aa:fa:2d:d9:1c:51: e0:fc:25:0e:df:91:a6:76:31:5d:2d:4d:60:d6:67:0e:dd:f8: 53:27:37:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjJL+SLs100E+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk YzFiZjM4MzgtOGI2NC00YzQxLWIxNDItN2ViYWJlZDVlNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc2PQZd2RAxiXc1NagzK/Mljj8mREmiM9tgB IhOhN6sxzxlCP8ts9C/O4/fu+J8MFBu+47c8pASMzbGCfKXhZTrozrgjHieK/p0n L+1H4GHB8qfGJu6WWnFY2nRHYN/a2qMIhssivH9xay9A5BY+ktnn8zhFa7CIRX70 OJ3UN6ljf/5mN764JEAl8VQ5QfaN3SogBGgkC8B+UG8i8rXL00bafTaVvX/b6b7U YPzdf2bQQzDS87e520QHK+5ZiDQuLzSrtx4wp2vj1tzXAWG5x8yUdjFCAzUqSz/W do+39/0jPXfmdSVt4Udj6Ba0f2TCovEfBaULx5e6oxSlP/u6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ5xtJpJClyS6aSlXJySR+Ec3P1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvMjVlODViZmQtMDgyMC0z YThkLWEwZDctYjk4NGM3YmJhMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjUYQXy49QKFnfD4k/2NEZVXpeWgOaynekfLfMjMzus5HY9f1h9UGco H80rXzjeyuGu8bNf13EYhWOsekcP7D8TjH7ZwuU26jyGRSBBX9fx1zLPwnL+T4Wl O3YoTKhYW3jn2MWNpQCZz39liiaG4sOdwHtxqm6ieqmp6nzT3KbZiWoKfPHTQMQm XPex479Zxs5Q4HY/iXqv0Mb0R5WSu8MdcZmcROhK8sTQlxsL9VcKzqhG5RrJZg17 JQLqI9xzoJ7zXxD+jvih8l66LUO4WTUKpEEzmYc+wiJ/byO2EglaTmWPZ6r6Ldkc UeD8JQ7fkaZ2MV0tTWDWZw7d+FMnNz0= -----END CERTIFICATE-----Generated at Wed Sep 23 00:54:37 2026 by rpki-client