$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/94e4c016-f6a1-33f7-8637-be95e2c43703.roa File: 94e4c016-f6a1-33f7-8637-be95e2c43703.roa (raw, json) Hash identifier: gNKLLb95rRHhAWo/m5/ym7ynZPpTNX9l2OMHZ8Fj3eg= Subject key identifier: 92:62:41:03:1C:A9:AF:BE:C2:40:D3:5D:21:EF:DF:14:ED:68:72:17 Certificate issuer: /CN=9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d Certificate serial: 010D0C9F4328584F8359BDF4D257EACD94A373C0 Authority key identifier: 13:50:B9:A1:1C:E1:3C:58:B0:D8:3D:F0:77:18:FC:6B:79:01:DC:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/94e4c016-f6a1-33f7-8637-be95e2c43703.roa Signing time: Thu 15 Oct 2026 18:47:10 +0000 ROA not before: Thu 15 Oct 2026 18:47:10 +0000 ROA not after: Wed 13 Jan 2027 19:47:10 +0000 asID: 30662 IP address blocks: 69.48.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:59:bd:f4:d2:57:ea:cd:94:a3:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d Validity Not Before: Oct 15 18:47:10 2026 GMT Not After : Jan 13 19:47:10 2027 GMT Subject: CN=4d3744a5-e032-400c-9951-ff0f0d476e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a2:86:3d:1a:67:fc:fc:15:9f:52:2f:22:0a: 42:22:96:d4:ec:8e:93:4d:e2:f6:e7:ca:b2:67:18: 91:21:b2:a4:e3:7c:cc:ab:a2:cd:04:0f:38:c0:2e: 6e:85:5e:a1:98:a8:ad:89:7e:6f:02:33:de:d3:0d: fc:dc:37:d0:aa:9c:b6:58:52:03:92:b9:e0:f7:f9: 5d:73:cf:47:dc:a1:36:15:09:4d:de:c9:4b:d0:d7: b1:13:48:ce:6d:d6:20:ee:51:98:50:c4:ef:4b:29: 73:db:e4:56:83:6c:f6:f3:81:a6:f2:52:b7:31:a4: c9:90:d4:cf:61:d3:63:16:be:88:ad:14:81:09:63: b8:af:c6:3d:cd:ca:55:5a:52:e0:c9:ec:f1:ea:74: 6a:4a:b8:3f:81:ff:c2:64:38:25:43:c0:59:48:35: 0f:97:20:27:88:2f:64:41:1f:41:86:a0:81:fa:70: c1:82:d6:6c:d3:0c:fb:0a:74:ee:26:ab:1f:06:c8: ad:7c:36:bc:0c:9e:64:fe:68:2f:53:e2:9f:8e:1c: 84:50:a7:49:21:01:b9:46:f4:81:4c:11:44:61:10: 89:a8:44:50:db:79:71:1f:a4:57:ac:0d:3d:4f:43: 6b:be:69:80:48:d7:f9:d8:8e:5f:9d:be:ca:d3:1f: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:62:41:03:1C:A9:AF:BE:C2:40:D3:5D:21:EF:DF:14:ED:68:72:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/94e4c016-f6a1-33f7-8637-be95e2c43703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.crl X509v3 Authority Key Identifier: keyid:13:50:B9:A1:1C:E1:3C:58:B0:D8:3D:F0:77:18:FC:6B:79:01:DC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer sbgp-ipAddrBlock: critical IPv4: 69.48.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1d:0a:c6:af:b4:bc:af:80:e1:90:7f:af:80:cb:40:ac:62: 9a:a5:52:21:79:8c:c8:16:df:d6:f6:1c:68:7e:11:77:bd:ff: 62:0b:ca:2b:c1:d4:06:f3:d7:0b:a6:53:39:33:b7:be:65:ff: 15:d9:aa:fa:90:29:bf:d5:b7:e5:13:12:ce:61:50:66:73:8f: 76:6d:c5:46:38:08:6d:b5:cb:31:49:da:68:fd:ea:d5:cf:e6: 3d:81:7d:9a:eb:0b:a0:2b:73:03:38:40:e8:89:f2:55:ec:44: 4e:76:ae:b7:90:64:02:c8:c1:d4:24:f9:2a:37:65:96:99:8b: 41:4f:07:72:72:8b:68:77:6a:b6:dd:ac:8e:d7:27:7f:5e:b1: 61:73:92:09:e4:5c:f2:d9:8f:06:90:81:74:6e:3d:0d:d9:5a: c0:6a:9a:9b:38:a6:6c:b3:a5:94:dd:4d:c3:38:10:48:89:25: 71:ef:ae:1d:c7:83:43:11:62:5c:50:2a:dc:f0:d9:dc:ac:af: 72:2a:b8:41:3d:4f:dd:b8:50:d4:16:70:99:10:5c:af:ce:43: 65:61:95:b2:05:4e:b6:b8:df:22:81:55:4c:ba:2d:5b:cf:26: e1:86:8a:35:ac:83:1f:fd:f6:36:a1:0b:1e:52:73:41:10:37: 09:8c:ea:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+DWb300lfqzZSjc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NWZiZmQtMWQ0Mi00ZDdjLWI0ZDItNGExMmI5N2Jm NTFkMB4XDTI2MTAxNTE4NDcxMFoXDTI3MDExMzE5NDcxMFowLzEtMCsGA1UEAxMk NGQzNzQ0YTUtZTAzMi00MDBjLTk5NTEtZmYwZjBkNDc2ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aKGPRpn/PwVn1IvIgpCIpbU7I6TTeL258qy ZxiRIbKk43zMq6LNBA84wC5uhV6hmKitiX5vAjPe0w383DfQqpy2WFIDkrng9/ld c89H3KE2FQlN3slL0NexE0jObdYg7lGYUMTvSylz2+RWg2z284Gm8lK3MaTJkNTP YdNjFr6IrRSBCWO4r8Y9zcpVWlLgyezx6nRqSrg/gf/CZDglQ8BZSDUPlyAniC9k QR9BhqCB+nDBgtZs0wz7CnTuJqsfBsitfDa8DJ5k/mgvU+KfjhyEUKdJIQG5RvSB TBFEYRCJqERQ23lxH6RXrA09T0NrvmmASNf52I5fnb7K0x8zfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJiQQMcqa++wkDTXSHv3xTtaHIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85Yzg1 ZmJmZC0xZDQyLTRkN2MtYjRkMi00YTEyYjk3YmY1MWQvOTRlNGMwMTYtZjZhMS0z M2Y3LTg2MzctYmU5NWUyYzQzNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOWM4NWZiZmQtMWQ0Mi00ZDdjLWI0 ZDItNGExMmI5N2JmNTFkLzljODVmYmZkLTFkNDItNGQ3Yy1iNGQyLTRhMTJiOTdi ZjUxZC5jcmwwHwYDVR0jBBgwFoAUE1C5oRzhPFiw2D3wdxj8a3kB3LAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85Yzg1ZmJmZC0xZDQyLTRkN2MtYjRkMi00YTEy Yjk3YmY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTDSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcdCsavtLyvgOGQf6+Ay0CsYpqlUiF5jMgW39b2HGh+EXe9/2ILyivB 1Abz1wumUzkzt75l/xXZqvqQKb/Vt+UTEs5hUGZzj3ZtxUY4CG21yzFJ2mj96tXP 5j2BfZrrC6ArcwM4QOiJ8lXsRE52rreQZALIwdQk+So3ZZaZi0FPB3Jyi2h3arbd rI7XJ39esWFzkgnkXPLZjwaQgXRuPQ3ZWsBqmps4pmyzpZTdTcM4EEiJJXHvrh3H g0MRYlxQKtzw2dysr3IquEE9T924UNQWcJkQXK/OQ2VhlbIFTra43yKBVUy6LVvP JuGGijWsgx/99jahCx5Sc0EQNwmM6rM= -----END CERTIFICATE-----Generated at Wed Nov 4 14:28:58 2026 by rpki-client