$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/fdfe96b5-c85f-32ff-b835-44a36e0457ae.roa File: fdfe96b5-c85f-32ff-b835-44a36e0457ae.roa (raw, json) Hash identifier: 2laW+MEn0/ztIHO2yQQIyDAaLfY8/tL4iAdWMhZ92l4= Subject key identifier: 0B:BE:A8:76:74:3E:57:FE:F0:FB:B6:52:81:BD:07:C0:17:C5:30:C4 Certificate issuer: /CN=8ced82ce-8cf1-4562-b4ac-b572b7c8639a Certificate serial: 010D0C9F4328584FA2C3EB7234795902D94E3A80 Authority key identifier: FB:8A:7B:15:D1:BC:E3:EF:45:2E:64:D2:8E:22:2D:2A:38:AE:C4:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/fdfe96b5-c85f-32ff-b835-44a36e0457ae.roa Signing time: Tue 27 Oct 2026 00:51:09 +0000 ROA not before: Tue 27 Oct 2026 00:51:09 +0000 ROA not after: Mon 25 Jan 2027 01:51:09 +0000 asID: 209242 IP address blocks: 216.120.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c3:eb:72:34:79:59:02:d9:4e:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ced82ce-8cf1-4562-b4ac-b572b7c8639a Validity Not Before: Oct 27 00:51:09 2026 GMT Not After : Jan 25 01:51:09 2027 GMT Subject: CN=cea9baea-22c4-418e-b164-2b17711a26e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:48:de:6c:77:bc:9e:d9:1c:05:20:a6:55: fd:6a:f6:d1:b3:c5:ef:06:72:c5:42:55:bc:a4:ca: 62:a9:3b:80:4e:6f:11:27:1b:df:80:57:fb:46:c7: 78:2f:55:2e:d7:67:1d:00:2a:4d:e6:45:fe:17:32: dc:16:5e:e1:22:f4:2b:4e:3d:83:48:b6:b3:a6:1e: 52:94:5d:77:7f:24:72:f2:1d:c6:97:ef:7c:ca:18: ed:05:62:69:f6:97:cd:47:e2:6f:f8:1c:83:9b:a0: 90:f2:0f:44:9c:99:c3:84:5c:db:f7:ab:13:9c:4b: 02:94:1b:55:f5:dd:ef:f8:03:33:65:dc:5f:61:53: 6b:ca:fe:2a:20:e6:56:83:ca:4c:38:ba:98:c2:86: 0d:dc:d2:f2:3c:62:84:94:4c:cf:16:f4:e8:2f:7d: 73:fa:61:f5:b6:68:a9:16:82:d9:1b:ca:ba:90:26: f9:42:3f:db:84:81:6a:7b:8b:1b:53:bc:65:27:3a: 23:a5:33:3b:ca:8b:b4:96:c7:fc:95:3b:2a:41:96: 47:d0:a1:94:a4:d4:22:78:ae:ce:70:c5:cb:bd:b7: 3b:00:53:a9:62:ca:8f:a6:6e:77:ad:3d:4f:ad:59: 3d:94:25:c2:27:57:00:a5:b5:fa:f7:d0:ad:f7:65: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:A8:76:74:3E:57:FE:F0:FB:B6:52:81:BD:07:C0:17:C5:30:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/fdfe96b5-c85f-32ff-b835-44a36e0457ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.crl X509v3 Authority Key Identifier: keyid:FB:8A:7B:15:D1:BC:E3:EF:45:2E:64:D2:8E:22:2D:2A:38:AE:C4:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.cer sbgp-ipAddrBlock: critical IPv4: 216.120.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b2:d6:52:61:5b:e3:b0:ec:ed:65:8f:b1:c8:c0:ef:7a:3c: 04:23:27:a9:ad:35:5b:b2:ab:c8:98:25:53:1c:f3:7d:d8:d6: fe:92:05:9c:54:9a:bc:f8:2b:78:bd:4c:05:fd:c2:75:9d:df: f3:1e:95:1b:9a:bb:2e:01:1a:db:8c:58:18:5d:b6:95:02:c9: 7c:49:93:9d:bc:4d:cd:22:cc:40:b6:8b:43:59:12:9f:a1:06: 29:8a:81:34:2b:d5:e5:b8:3d:0d:7d:08:64:f7:ef:a4:23:94: 95:22:19:49:7f:58:d0:1f:93:1a:80:a3:79:3e:c4:61:fb:64: 85:1b:5a:33:92:75:a0:bc:1b:75:4a:fd:df:a5:0c:37:2b:3b: ff:dd:39:1f:8a:4e:a2:b7:33:25:4b:b4:b7:bc:bf:15:f6:a8: 99:65:b3:69:7c:50:41:18:ad:1c:b3:2b:0b:54:7e:84:0e:47: b7:40:57:1e:55:5d:e7:4e:f3:35:4b:66:44:f1:9c:63:27:7f: 5e:58:fc:fb:eb:68:87:03:70:df:2f:fa:32:6d:5a:16:bd:75: cd:2a:d8:51:f2:96:5b:fb:98:89:ec:af:cb:ea:66:f1:78:ba: 90:be:b1:74:c2:dd:dd:63:8f:a5:c9:b6:87:de:b3:ce:c2:86: 5e:4e:b6:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iw+tyNHlZAtlOOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlZDgyY2UtOGNmMS00NTYyLWI0YWMtYjU3MmI3Yzg2 MzlhMB4XDTI2MTAyNzAwNTEwOVoXDTI3MDEyNTAxNTEwOVowLzEtMCsGA1UEAxMk Y2VhOWJhZWEtMjJjNC00MThlLWIxNjQtMmIxNzcxMWEyNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIZI3mx3vJ7ZHAUgplX9avbRs8XvBnLFQlW8 pMpiqTuATm8RJxvfgFf7Rsd4L1Uu12cdACpN5kX+FzLcFl7hIvQrTj2DSLazph5S lF13fyRy8h3Gl+98yhjtBWJp9pfNR+Jv+ByDm6CQ8g9EnJnDhFzb96sTnEsClBtV 9d3v+AMzZdxfYVNryv4qIOZWg8pMOLqYwoYN3NLyPGKElEzPFvToL31z+mH1tmip FoLZG8q6kCb5Qj/bhIFqe4sbU7xlJzojpTM7you0lsf8lTsqQZZH0KGUpNQieK7O cMXLvbc7AFOpYsqPpm53rT1PrVk9lCXCJ1cApbX699Ct92VUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu+qHZ0Plf+8Pu2UoG9B8AXxTDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84Y2Vk ODJjZS04Y2YxLTQ1NjItYjRhYy1iNTcyYjdjODYzOWEvZmRmZTk2YjUtYzg1Zi0z MmZmLWI4MzUtNDRhMzZlMDQ1N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOGNlZDgyY2UtOGNmMS00NTYyLWI0 YWMtYjU3MmI3Yzg2MzlhLzhjZWQ4MmNlLThjZjEtNDU2Mi1iNGFjLWI1NzJiN2M4 NjM5YS5jcmwwHwYDVR0jBBgwFoAU+4p7FdG84+9FLmTSjiItKjiuxAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84Y2VkODJjZS04Y2YxLTQ1NjItYjRhYy1iNTcy YjdjODYzOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKy1lJhW+Ow7O1lj7HIwO96PAQjJ6mtNVuyq8iYJVMc833Y1v6SBZxU mrz4K3i9TAX9wnWd3/MelRuauy4BGtuMWBhdtpUCyXxJk528Tc0izEC2i0NZEp+h BimKgTQr1eW4PQ19CGT376QjlJUiGUl/WNAfkxqAo3k+xGH7ZIUbWjOSdaC8G3VK /d+lDDcrO//dOR+KTqK3MyVLtLe8vxX2qJlls2l8UEEYrRyzKwtUfoQOR7dAVx5V XedO8zVLZkTxnGMnf15Y/PvraIcDcN8v+jJtWha9dc0q2FHyllv7mInsr8vqZvF4 upC+sXTC3d1jj6XJtofes87Chl5OtlA= -----END CERTIFICATE-----Generated at Sun Nov 1 17:32:08 2026 by rpki-client