$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae60f6d4-1e1e-3976-add1-896836401671.roa File: ae60f6d4-1e1e-3976-add1-896836401671.roa (raw, json) Hash identifier: rLr95y28gLMjZjOlFA8mbQBu9UcCK8V/ZqJzbuXr9sg= Subject key identifier: BE:21:D2:AB:D0:9B:BF:AE:48:1D:EC:7E:C3:40:4F:FA:CF:69:44:16 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584FAC8DE5864541B13DDB40C800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae60f6d4-1e1e-3976-add1-896836401671.roa Signing time: Fri 30 Oct 2026 13:00:12 +0000 ROA not before: Fri 30 Oct 2026 13:00:12 +0000 ROA not after: Thu 28 Jan 2027 14:00:12 +0000 asID: 979 IP address blocks: 216.167.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:8d:e5:86:45:41:b1:3d:db:40:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 30 13:00:12 2026 GMT Not After : Jan 28 14:00:12 2027 GMT Subject: CN=ae23e8f9-fdc4-44b9-9b94-4f2b1eafe5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:a0:b2:5b:d6:8a:41:82:15:b1:39:04:56: 39:44:80:2d:1b:47:7b:80:ca:3b:d5:3e:e4:e1:08: cc:5d:d5:f1:61:1c:5d:a2:37:54:af:83:7d:17:73: 74:a9:83:2b:2f:81:9c:6e:43:65:a9:28:46:e0:09: 67:5f:40:38:c7:22:0e:c9:88:3c:0c:b8:ec:e7:84: ba:cd:26:3f:b0:2d:be:09:30:7e:cd:ce:99:e1:ad: db:d9:a1:75:7e:1c:06:77:48:93:89:73:f1:5c:4f: ef:df:76:44:cb:ba:b3:31:53:65:54:93:0f:7b:80: 92:7e:aa:97:c4:ec:c7:6e:6f:e6:6e:ba:68:06:a7: f0:72:c0:5a:9a:b8:80:84:38:f6:0d:85:d0:26:f3: a5:e6:ec:aa:c2:12:26:ff:53:fe:1a:df:cd:52:c3: 8e:a8:94:84:fe:fc:6a:10:74:78:29:fc:db:62:86: 3a:7b:94:13:ae:26:ca:39:d9:d6:e3:1b:7d:e4:e5: 53:93:4b:56:ac:af:d9:79:5b:72:84:c2:56:52:15: 08:b9:1f:9e:b4:8d:27:e1:9d:bb:74:21:92:db:f5: c4:46:e4:70:12:67:9f:a8:1a:4f:55:dc:9d:37:f0: dc:4a:55:d0:79:23:cb:8a:8c:67:09:f9:0f:29:d3: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:21:D2:AB:D0:9B:BF:AE:48:1D:EC:7E:C3:40:4F:FA:CF:69:44:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae60f6d4-1e1e-3976-add1-896836401671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 216.167.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c3:f5:94:84:3f:35:aa:0a:e4:8e:0a:94:42:a5:73:1a:3f: 93:cd:dd:75:20:ea:ce:d8:22:b8:0a:03:14:33:66:fe:f6:19: ad:fa:92:af:bf:d5:0e:93:68:29:e5:31:02:f2:fa:93:a7:9f: bc:90:60:da:92:72:a3:e2:f6:62:2f:1e:1f:4b:f4:7d:f0:f3: 89:7e:33:2e:1c:4a:17:7b:83:d0:ee:97:2d:2b:d4:e8:06:54: c6:c5:57:6f:6f:7b:7c:eb:fb:8e:54:4a:69:78:c0:61:3e:48: 18:7c:ea:76:78:83:8b:60:2b:0a:ed:4a:ad:71:e5:f0:fc:4c: b3:0d:33:2d:42:e6:f1:a9:8a:b1:f6:3b:10:71:e5:79:58:01: e6:ea:9c:78:33:12:07:c8:a3:3e:bd:a2:1b:97:65:c8:e2:38: fa:5c:e0:54:70:6c:7c:0c:09:78:3a:09:86:c7:c1:5b:c6:4c: 90:9d:36:71:33:ef:61:d7:50:2e:25:57:8b:d6:97:16:03:a0: 8f:d5:bf:33:79:bb:64:f3:7d:3d:06:4a:1e:2f:e2:4d:11:e4: fa:ed:bb:a1:c0:d8:07:c7:c7:d4:b4:25:9b:17:9d:bf:9a:15: f3:78:c5:11:53:fa:f1:fd:c8:32:8b:98:01:d9:94:e0:1c:7a: f0:b9:29:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+sjeWGRUGxPdtAyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAzMDEzMDAxMloXDTI3MDEyODE0MDAxMlowLzEtMCsGA1UEAxMk YWUyM2U4ZjktZmRjNC00NGI5LTliOTQtNGYyYjFlYWZlNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA6gslvWikGCFbE5BFY5RIAtG0d7gMo71T7k 4QjMXdXxYRxdojdUr4N9F3N0qYMrL4GcbkNlqShG4AlnX0A4xyIOyYg8DLjs54S6 zSY/sC2+CTB+zc6Z4a3b2aF1fhwGd0iTiXPxXE/v33ZEy7qzMVNlVJMPe4CSfqqX xOzHbm/mbrpoBqfwcsBamriAhDj2DYXQJvOl5uyqwhIm/1P+Gt/NUsOOqJSE/vxq EHR4KfzbYoY6e5QTribKOdnW4xt95OVTk0tWrK/ZeVtyhMJWUhUIuR+etI0n4Z27 dCGS2/XERuRwEmefqBpPVdydN/DcSlXQeSPLioxnCfkPKdNMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4h0qvQm7+uSB3sfsNAT/rPaUQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWU2MGY2ZDQtMWUxZS0z OTc2LWFkZDEtODk2ODM2NDAxNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2KcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLD9ZSEPzWqCuSOCpRCpXMaP5PN3XUg6s7YIrgKAxQzZv72Ga36kq+/ 1Q6TaCnlMQLy+pOnn7yQYNqScqPi9mIvHh9L9H3w84l+My4cShd7g9Duly0r1OgG VMbFV29ve3zr+45USml4wGE+SBh86nZ4g4tgKwrtSq1x5fD8TLMNMy1C5vGpirH2 OxBx5XlYAebqnHgzEgfIoz69ohuXZcjiOPpc4FRwbHwMCXg6CYbHwVvGTJCdNnEz 72HXUC4lV4vWlxYDoI/VvzN5u2TzfT0GSh4v4k0R5Prtu6HA2AfHx9S0JZsXnb+a FfN4xRFT+vH9yDKLmAHZlOAcevC5KR4= -----END CERTIFICATE-----Generated at Wed Nov 4 00:23:15 2026 by rpki-client