$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa File: 57de1a6f-2177-3036-8e1c-1f8d76c10484.roa (raw, json) Hash identifier: d0TOJQ710Gc3Wl0h8p6O+DNBcgcrKKjgTmZfZAg/Tzc= Subject key identifier: 37:EE:15:38:B8:F9:F4:E6:DB:2A:D9:84:F3:B5:D6:EB:1A:31:73:65 Certificate issuer: /CN=efead3cb-1d38-407f-ba06-8e276b067238 Certificate serial: 010D0C9F4328584F698D7E06EEE0A727E7347620 Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 216.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7e:06:ee:e0:a7:27:e7:34:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=e04dc670-04aa-4cbc-b5ba-1b0cb8754457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:82:50:df:21:f1:ae:c1:50:3f:88:9d:f6: 5a:17:c6:12:16:c5:5e:ec:b3:77:64:b3:2f:c4:46: 79:30:bf:06:9c:a4:5f:bd:6c:be:ea:09:b0:a8:e6: b7:4d:e3:af:1f:2a:86:af:62:6a:da:0f:8e:57:09: cd:98:45:1c:74:06:22:cb:66:bf:10:f8:fe:92:01: f3:fd:98:f9:6b:9c:97:de:55:c3:ca:8e:dd:61:82: 29:83:d7:d7:b1:fe:bf:72:9a:c6:e2:ee:dd:e8:28: b1:73:e5:4f:e1:74:ed:33:eb:30:10:cb:6b:bd:aa: 99:67:bf:79:ff:e1:3d:d7:5b:8d:dc:63:01:b1:65: be:95:cd:c3:c4:fb:22:b7:f7:b9:3f:08:ac:67:d1: ad:63:52:68:a0:3f:e1:23:1a:e8:10:c5:4b:12:d6: 19:fa:54:41:81:28:96:89:37:31:f4:06:81:cf:b5: a3:de:9c:a2:c1:6f:53:a1:20:71:f1:27:72:f3:db: 18:83:f9:d6:cb:dc:6c:c5:e8:c2:03:e8:80:36:88: b3:0e:34:3a:c1:f3:5f:90:87:93:e6:ba:89:9f:88: 19:6a:01:4f:ba:f0:0c:3b:4b:17:df:90:31:e5:46: 3e:46:5a:cb:7c:31:81:ad:f5:b2:8f:d3:f8:0b:78: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:15:38:B8:F9:F4:E6:DB:2A:D9:84:F3:B5:D6:EB:1A:31:73:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl X509v3 Authority Key Identifier: keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer sbgp-ipAddrBlock: critical IPv4: 216.238.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:04:1f:be:37:b0:d0:90:ea:f2:67:66:08:6f:fb:6d:7f:b1: c3:d6:2b:88:35:8a:7a:9c:e3:e1:f5:e7:87:ff:d8:ce:37:cd: 93:47:28:bf:f4:ba:58:37:58:5b:11:5a:78:9e:a2:da:d5:6e: 63:5e:cb:ec:1a:c9:fe:b3:cc:84:aa:1c:e4:40:95:b6:5d:6a: d9:37:f7:2c:65:ad:f5:42:36:1f:7b:8b:1f:0a:5e:2a:d1:f0: 83:24:59:8b:b3:a4:fb:b8:91:c2:41:36:d8:c2:dd:2a:21:2d: fb:56:ab:e6:bf:01:8a:82:e6:e7:90:dc:46:be:f9:8d:f2:af: cd:04:39:ef:5b:5d:cc:80:b2:3b:15:63:6e:1e:42:5a:34:9b: d6:90:9a:51:0e:61:39:97:96:22:ce:4a:3d:3e:16:93:b4:18: fc:44:cc:18:51:f4:c3:87:65:78:70:fc:28:d0:1f:b1:ce:7c: 34:9b:70:d1:75:fa:0f:a9:ca:dc:69:a8:91:00:5f:df:25:5b: 17:32:a2:52:77:2f:b1:b5:96:6b:7f:d8:2f:ed:43:fc:0f:51: 4a:ed:8d:3a:5a:d2:e6:2c:10:e6:08:04:d4:65:d6:23:5d:27: ab:dd:9d:9f:b1:6f:fa:1f:e6:46:d8:d5:ab:23:85:d5:5e:32: bc:ee:a0:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjX4G7uCnJ+c0diAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3 MjM4MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZTA0ZGM2NzAtMDRhYS00Y2JjLWI1YmEtMWIwY2I4NzU0NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfSCUN8h8a7BUD+InfZaF8YSFsVe7LN3ZLMv xEZ5ML8GnKRfvWy+6gmwqOa3TeOvHyqGr2Jq2g+OVwnNmEUcdAYiy2a/EPj+kgHz /Zj5a5yX3lXDyo7dYYIpg9fXsf6/cprG4u7d6Cixc+VP4XTtM+swEMtrvaqZZ795 /+E911uN3GMBsWW+lc3DxPsit/e5PwisZ9GtY1JooD/hIxroEMVLEtYZ+lRBgSiW iTcx9AaBz7Wj3pyiwW9ToSBx8Sdy89sYg/nWy9xsxejCA+iANoizDjQ6wfNfkIeT 5rqJn4gZagFPuvAMO0sX35Ax5UY+RlrLfDGBrfWyj9P4C3jMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfuFTi4+fTm2yrZhPO11usaMXNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvNTdkZTFhNmYtMjE3Ny0z MDM2LThlMWMtMWY4ZDc2YzEwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2 NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3 NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgEH743sNCQ6vJnZghv+21/scPWK4g1inqc4+H154f/2M43zZNHKL/0 ulg3WFsRWnieotrVbmNey+wayf6zzISqHORAlbZdatk39yxlrfVCNh97ix8KXirR 8IMkWYuzpPu4kcJBNtjC3SohLftWq+a/AYqC5ueQ3Ea++Y3yr80EOe9bXcyAsjsV Y24eQlo0m9aQmlEOYTmXliLOSj0+FpO0GPxEzBhR9MOHZXhw/CjQH7HOfDSbcNF1 +g+pytxpqJEAX98lWxcyolJ3L7G1lmt/2C/tQ/wPUUrtjTpa0uYsEOYIBNRl1iNd J6vdnZ+xb/of5kbY1asjhdVeMrzuoM8= -----END CERTIFICATE-----Generated at Wed Oct 7 06:44:06 2026 by rpki-client