$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/71fafbd4-78f3-3cc9-a750-1de5de3178c1.roa File: 71fafbd4-78f3-3cc9-a750-1de5de3178c1.roa (raw, json) Hash identifier: UTh2fuHQ6nBz8WuVJjfvcVaEfGOAhkZsIPryEPVmQxs= Subject key identifier: CB:72:64:23:7F:BD:6B:8E:22:D2:2E:28:6E:DE:B1:AD:7A:B5:5C:4F Certificate issuer: /CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Certificate serial: 010D0C9F4328584F7B28B88EAEC90ADB3C694700 Authority key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/71fafbd4-78f3-3cc9-a750-1de5de3178c1.roa Signing time: Mon 12 Oct 2026 20:21:55 +0000 ROA not before: Mon 12 Oct 2026 20:21:55 +0000 ROA not after: Sun 10 Jan 2027 21:21:55 +0000 asID: 19871 IP address blocks: 209.16.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:28:b8:8e:ae:c9:0a:db:3c:69:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Validity Not Before: Oct 12 20:21:55 2026 GMT Not After : Jan 10 21:21:55 2027 GMT Subject: CN=b3c22e7c-1fae-48c5-a566-990c4b6f06d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:46:0e:08:88:78:7d:3b:73:15:c2:0c:03: e6:b9:79:d9:0c:f1:38:d1:36:34:4f:6a:2d:0b:eb: a4:0b:cc:b5:65:3d:34:48:b2:c0:27:52:bb:52:cd: 06:9b:2f:49:63:40:ce:36:dc:3f:73:11:fc:53:1d: 04:17:9c:5b:c2:95:10:04:3f:cf:8c:37:ee:b9:b4: 90:fd:df:b8:98:b7:1d:07:bf:b5:03:4e:4f:bb:7b: e9:49:13:d5:f7:d4:42:63:91:34:48:53:76:60:34: 18:bb:c4:33:88:af:94:1c:a1:13:48:23:4d:8f:af: 02:57:1e:58:b5:25:02:80:e1:79:fb:55:ca:3a:20: ed:41:b2:8d:17:e5:d6:b4:2d:00:29:04:92:5c:43: 4f:f6:ee:e4:b9:e0:75:23:fc:78:7f:ee:84:a9:77: 9a:95:76:e0:ef:6c:68:6b:27:69:a2:bb:12:a3:77: 37:2c:d1:f0:f9:cb:50:cc:fd:35:5b:e9:d9:04:fb: 9d:a8:fe:d1:95:5c:0a:69:9f:78:d4:98:b9:fb:82: 3d:0d:b2:04:8a:88:89:97:14:cf:bf:99:b1:0a:80: 68:47:dd:6c:a6:2b:fb:e5:c9:d8:45:cd:31:d4:b4: 23:1e:f2:7f:7f:68:15:c8:cd:68:4a:1d:f2:6e:62: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:72:64:23:7F:BD:6B:8E:22:D2:2E:28:6E:DE:B1:AD:7A:B5:5C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/71fafbd4-78f3-3cc9-a750-1de5de3178c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl X509v3 Authority Key Identifier: keyid:8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer sbgp-ipAddrBlock: critical IPv4: 209.16.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0e:ec:58:5c:56:db:75:ba:34:1b:00:98:7c:37:83:04:d7: ad:fe:64:87:bc:33:de:ef:c4:d7:a5:85:04:e9:68:b4:cf:69: d5:97:a4:6a:42:f3:26:be:36:80:32:09:af:a7:75:18:1a:08: 06:ed:38:67:5c:de:96:dc:81:84:9f:11:08:f8:af:7d:31:89: 13:8d:9b:9e:4a:65:4c:b7:7e:86:d9:93:09:9f:c7:f7:a0:29: 9e:36:1a:09:f8:37:66:80:fc:b2:b3:2a:d6:2c:a9:5b:78:09: 04:ba:34:1d:3f:6d:48:c4:1e:2c:e9:4f:d3:96:b1:7f:c7:fa: 7e:19:c4:d3:0d:84:20:34:9f:23:34:d4:43:f2:82:38:59:50: 0b:3d:b8:3c:22:67:a4:91:f9:96:27:0d:fe:5c:ff:a4:8e:f0: bc:ca:a1:58:8d:fb:d9:b3:76:5c:76:29:47:67:50:18:5a:79: f8:dd:1a:09:ab:78:26:65:05:24:9b:a3:b9:18:8b:e6:c9:7b: 9b:bc:a6:24:24:0d:b9:b0:98:4e:43:62:93:ce:fc:80:03:b9: 24:09:2a:ba:c8:d5:58:3b:cc:ae:82:da:0a:df:78:82:cf:1c: c0:59:0c:e8:8c:a9:8e:73:1a:20:8e:27:9c:27:2b:54:55:aa: 25:e0:2b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97KLiOrskK2zxpRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM4NmE1ZTEtYmE3My00MDhjLWE3ZTQtZGY4OGUyZjUy NjAzMB4XDTI2MTAxMjIwMjE1NVoXDTI3MDExMDIxMjE1NVowLzEtMCsGA1UEAxMk YjNjMjJlN2MtMWZhZS00OGM1LWE1NjYtOTkwYzRiNmYwNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ixGDgiIeH07cxXCDAPmuXnZDPE40TY0T2ot C+ukC8y1ZT00SLLAJ1K7Us0Gmy9JY0DONtw/cxH8Ux0EF5xbwpUQBD/PjDfuubSQ /d+4mLcdB7+1A05Pu3vpSRPV99RCY5E0SFN2YDQYu8QziK+UHKETSCNNj68CVx5Y tSUCgOF5+1XKOiDtQbKNF+XWtC0AKQSSXENP9u7kueB1I/x4f+6EqXealXbg72xo aydporsSo3c3LNHw+ctQzP01W+nZBPudqP7RlVwKaZ941Ji5+4I9DbIEioiJlxTP v5mxCoBoR91spiv75cnYRc0x1LQjHvJ/f2gVyM1oSh3ybmK3OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtyZCN/vWuOItIuKG7esa16tVxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Mzg2 YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJmNTI2MDMvNzFmYWZiZDQtNzhmMy0z Y2M5LWE3NTAtMWRlNWRlMzE3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzM4NmE1ZTEtYmE3My00MDhjLWE3 ZTQtZGY4OGUyZjUyNjAzLzczODZhNWUxLWJhNzMtNDA4Yy1hN2U0LWRmODhlMmY1 MjYwMy5jcmwwHwYDVR0jBBgwFoAUjvr5BbjeIbDevhsz0RqJYsOQBJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4 ZTJmNTI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0RBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgO7FhcVtt1ujQbAJh8N4ME163+ZIe8M97vxNelhQTpaLTPadWXpGpC 8ya+NoAyCa+ndRgaCAbtOGdc3pbcgYSfEQj4r30xiRONm55KZUy3fobZkwmfx/eg KZ42Ggn4N2aA/LKzKtYsqVt4CQS6NB0/bUjEHizpT9OWsX/H+n4ZxNMNhCA0nyM0 1EPygjhZUAs9uDwiZ6SR+ZYnDf5c/6SO8LzKoViN+9mzdlx2KUdnUBhaefjdGgmr eCZlBSSbo7kYi+bJe5u8piQkDbmwmE5DYpPO/IADuSQJKrrI1Vg7zK6C2grfeILP HMBZDOiMqY5zGiCOJ5wnK1RVqiXgK8c= -----END CERTIFICATE-----Generated at Sun Oct 25 09:13:28 2026 by rpki-client