$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa File: 3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa (raw, json) Hash identifier: g6vnlYDoCaAVQ98k0R6TvOhjTcpyJVpFLmCivu9rhks= Subject key identifier: 41:19:A3:5E:71:EC:FD:75:53:CD:4B:45:6F:C5:E2:55:00:DF:A7:57 Certificate issuer: /CN=2321434f-c7f3-488c-af62-bfe847e2e8ad Certificate serial: 010D0C9F4328584F23C25082700989083B13F1C0 Authority key identifier: D5:67:C5:39:EC:DB:2F:19:90:CB:27:A9:D7:35:5C:34:94:5A:01:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 395855 IP address blocks: 185.169.108.0/24 maxlen: 24 185.169.109.0/24 maxlen: 24 185.169.110.0/24 maxlen: 24 185.169.111.0/24 maxlen: 24 185.171.208.0/22 maxlen: 22 185.171.208.0/24 maxlen: 24 185.171.209.0/24 maxlen: 24 185.171.210.0/24 maxlen: 24 185.171.211.0/24 maxlen: 24 216.230.176.0/23 maxlen: 23 216.230.176.0/24 maxlen: 24 216.230.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:50:82:70:09:89:08:3b:13:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2321434f-c7f3-488c-af62-bfe847e2e8ad Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=af89c7cf-2cb9-4cbb-b66a-c1941acd9b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:c0:9b:da:13:5b:ab:cd:74:33:e8:ff:69: f3:70:45:71:5c:df:7a:6d:c4:0c:25:45:9d:3b:79: a8:d3:46:d9:ef:b4:e9:bb:e0:78:b9:68:83:1b:14: be:85:51:73:d1:35:93:56:aa:7c:f0:2d:e7:a1:dc: 9c:94:d8:74:a7:76:0a:64:a3:1c:56:b3:f8:34:84: ed:8d:40:e4:21:35:62:89:25:ae:1b:b2:70:f4:61: 7a:fa:52:50:df:3f:58:fd:e8:d3:dd:e9:a8:9f:49: 70:28:f1:92:a0:e0:24:ed:5f:23:a9:b6:d4:60:9f: c2:4f:5c:02:c0:0e:e8:2f:75:94:49:c4:7a:0a:6b: e1:ae:f5:79:95:bf:ce:76:34:29:1e:b7:b3:f1:39: 16:07:00:74:ac:e4:f2:88:1f:5f:eb:f7:85:01:46: 00:4f:ab:3a:e2:6b:ab:dd:e6:77:9b:33:b5:02:de: 05:b0:5a:45:f9:ce:98:b8:0a:07:73:14:59:82:f9: 5b:ee:62:bf:a3:20:b1:52:09:ac:84:8d:58:35:4f: b5:9f:b3:13:93:7a:58:15:6a:aa:a9:71:c3:7d:b6: c1:5e:b2:81:f0:67:58:b1:24:e8:41:d0:9a:3a:dc: 54:86:41:68:a5:c5:d6:17:4b:79:45:5f:57:18:b0: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:A3:5E:71:EC:FD:75:53:CD:4B:45:6F:C5:E2:55:00:DF:A7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.crl X509v3 Authority Key Identifier: keyid:D5:67:C5:39:EC:DB:2F:19:90:CB:27:A9:D7:35:5C:34:94:5A:01:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer sbgp-ipAddrBlock: critical IPv4: 185.169.108.0/22 185.171.208.0/22 216.230.176.0-216.230.178.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:b7:a2:8d:98:e2:be:9d:5c:fd:0d:ae:1f:9a:2c:b9:a9:86: b6:5b:45:c2:0a:bf:2f:cf:75:cc:4f:e0:f0:57:db:9d:af:fb: 61:47:13:d7:be:7f:5f:55:b3:cf:a1:3a:bd:15:39:43:6a:4a: 83:a3:60:d6:9e:9c:80:b1:d9:01:ee:1f:77:57:fb:59:d2:18: b6:5b:3d:b7:8d:3e:f9:e0:c8:7f:7c:15:75:c2:fc:22:5c:b8: f8:2c:ce:2b:ac:0b:6f:52:3f:99:e9:54:e4:94:2f:90:9c:d3: fc:9a:5d:60:40:fc:57:ef:36:a9:a3:57:2a:bd:3f:20:a0:37: b1:de:e5:15:fa:59:cb:7d:18:3a:a8:6d:b9:d1:84:02:19:00: cc:1b:73:04:3c:2f:eb:85:1e:1e:83:83:cb:b9:b6:ef:f1:dd: 3e:e4:62:67:8e:b1:fc:02:85:4e:8a:da:9f:7a:75:c9:f8:2c: 3d:2f:89:36:24:6a:8b:f4:65:54:f2:ec:be:db:a6:f4:7c:6f: fe:f8:c7:8a:eb:16:cd:fa:ae:c8:c0:f4:86:63:b8:15:fe:7c: f7:db:bb:25:f1:1b:50:4b:b6:39:87:34:0d:e8:01:c5:be:ef: 74:8e:49:c6:71:8b:16:a1:a9:30:69:ca:7e:b5:cf:75:25:bf: 0f:12:3b:fe -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE8jwlCCcAmJCDsT8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMyMTQzNGYtYzdmMy00ODhjLWFmNjItYmZlODQ3ZTJl OGFkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YWY4OWM3Y2YtMmNiOS00Y2JiLWI2NmEtYzE5NDFhY2Q5YjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE7Am9oTW6vNdDPo/2nzcEVxXN96bcQMJUWd O3mo00bZ77Tpu+B4uWiDGxS+hVFz0TWTVqp88C3nodyclNh0p3YKZKMcVrP4NITt jUDkITViiSWuG7Jw9GF6+lJQ3z9Y/ejT3emon0lwKPGSoOAk7V8jqbbUYJ/CT1wC wA7oL3WUScR6CmvhrvV5lb/OdjQpHrez8TkWBwB0rOTyiB9f6/eFAUYAT6s64mur 3eZ3mzO1At4FsFpF+c6YuAoHcxRZgvlb7mK/oyCxUgmshI1YNU+1n7MTk3pYFWqq qXHDfbbBXrKB8GdYsSToQdCaOtxUhkFopcXWF0t5RV9XGLDRpQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFEEZo15x7P11U81LRW/F4lUA36dXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMzIx NDM0Zi1jN2YzLTQ4OGMtYWY2Mi1iZmU4NDdlMmU4YWQvM2FmZjQ0NmMtY2E5ZC0z NWU3LWJmZjctZDc0ODFkZTBjYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjMyMTQzNGYtYzdmMy00ODhjLWFm NjItYmZlODQ3ZTJlOGFkLzIzMjE0MzRmLWM3ZjMtNDg4Yy1hZjYyLWJmZTg0N2Uy ZThhZC5jcmwwHwYDVR0jBBgwFoAU1WfFOezbLxmQyyep1zVcNJRaAQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMzIxNDM0Zi1jN2YzLTQ4OGMtYWY2Mi1iZmU4 NDdlMmU4YWQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCualsAwQC uavQMAwDBATY5rADBADY5rIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAybeijZjivp1c/Q2uH5osuamGtltF wgq/L891zE/g8Ffbna/7YUcT175/X1Wzz6E6vRU5Q2pKg6Ng1p6cgLHZAe4fd1f7 WdIYtls9t40++eDIf3wVdcL8Ily4+CzOK6wLb1I/melU5JQvkJzT/JpdYED8V+82 qaNXKr0/IKA3sd7lFfpZy30YOqhtudGEAhkAzBtzBDwv64UeHoODy7m27/HdPuRi Z46x/AKFToran3p1yfgsPS+JNiRqi/RlVPLsvtum9Hxv/vjHiusWzfquyMD0hmO4 Ff5899u7JfEbUEu2OYc0DegBxb7vdI5JxnGLFqGpMGnKfrXPdSW/DxI7/g== -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:45 2026 by rpki-client