$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa File: 08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa (raw, json) Hash identifier: kIKbE0oa269kVxA3CkkV+h3N9ctRYWxOBl2wy1Hi30o= Subject key identifier: 2B:71:36:7E:99:77:1E:D0:FB:BB:A1:D7:DE:B1:D5:EF:D5:73:55:5E Certificate issuer: /CN=299720ca-d74f-4266-9723-557a6914c4f4 Certificate serial: 010D0C9F4328584FA2C8797C82178D6D9AF76880 Authority key identifier: 30:57:ED:C3:EE:2A:4D:30:6C:08:48:32:8C:F2:1F:B3:94:33:CA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 4213 IP address blocks: 216.71.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:79:7c:82:17:8d:6d:9a:f7:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=299720ca-d74f-4266-9723-557a6914c4f4 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=37059b27-8a4c-4516-8c2d-f2ddb1b457df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:9d:21:1d:3c:3f:7b:96:ee:04:96:f9:82: e0:12:bc:fc:4a:e7:b4:dc:9f:77:88:fe:af:6b:eb: 22:70:66:af:54:ca:d8:b2:ec:64:b8:0f:bc:21:07: 27:07:94:cf:59:66:66:37:7f:74:96:61:43:2f:26: d1:ec:9f:a9:f7:0a:f4:d9:b5:3c:48:5a:ac:0e:a6: c0:ef:b1:3b:1e:45:67:cd:ca:ba:e6:15:f1:f6:86: e1:54:3a:6c:33:5a:94:0f:dd:b4:87:c7:d9:98:40: ab:80:56:16:90:bc:c4:c2:49:e0:1a:ac:3a:43:b3: 15:2e:ff:2d:e8:e6:23:bb:ae:88:a6:3f:bb:b2:a4: 3b:73:f4:14:bb:f2:d4:85:1c:4d:e3:78:3a:45:be: a0:13:95:65:ec:64:4a:3f:75:53:ee:fe:e8:aa:7d: 0c:18:06:00:1a:44:05:ef:42:3f:ce:43:b5:e8:6b: 1c:78:24:a6:54:18:60:7a:e2:d6:e1:f0:aa:e0:5c: 50:2b:3a:29:89:cb:45:f3:37:0c:56:d5:65:7d:f3: 7f:c4:99:31:17:74:05:ad:29:37:1a:d8:75:60:1c: 31:4e:22:b6:78:45:ff:b7:68:94:32:82:c6:9b:29: ea:c7:5f:79:6e:91:3d:72:3a:37:e0:7f:64:c9:41: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:71:36:7E:99:77:1E:D0:FB:BB:A1:D7:DE:B1:D5:EF:D5:73:55:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.crl X509v3 Authority Key Identifier: keyid:30:57:ED:C3:EE:2A:4D:30:6C:08:48:32:8C:F2:1F:B3:94:33:CA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer sbgp-ipAddrBlock: critical IPv4: 216.71.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:bd:d6:07:ef:66:a0:c4:a0:53:97:54:b7:3f:b0:81:83:c9: d5:9b:af:11:e1:3c:f6:62:6f:7b:7a:62:9d:bd:e1:a8:71:ad: 0f:3a:80:9f:ed:af:23:fa:02:52:2b:c9:9b:19:d2:5f:62:25: 7c:41:3c:30:f0:83:36:5e:85:e6:cd:3b:80:f3:e8:6c:58:3f: 97:70:6c:05:e2:d5:60:44:28:a3:b2:fa:65:ed:20:dc:09:3f: e4:df:af:e6:0f:0a:10:f8:50:1d:21:bb:61:82:70:c1:02:52: 9a:4e:9c:d7:65:a1:ee:25:f6:33:6a:14:e0:d7:3e:2c:85:d8: e1:fa:48:25:19:e7:94:95:8b:3f:e7:7c:87:ca:c2:b0:39:f1: 2e:08:2f:ac:94:c2:d2:ef:16:91:a8:3b:2f:01:e0:ea:ec:b0: cf:75:34:da:fc:ec:2b:bc:47:1e:05:39:a5:3f:26:61:21:e0: 8e:0f:c1:2d:60:12:3d:13:ad:f4:61:c3:d7:dc:3d:dd:f1:0e: 87:0a:11:bf:a9:5c:20:c7:25:28:46:58:5d:b5:b9:8b:a0:64: 99:08:cb:b6:90:c8:73:14:9c:36:12:28:84:f2:1e:1a:3a:24: a4:b4:75:20:6f:f0:3f:6e:39:5d:08:01:ea:bf:2e:d1:c4:55: ff:78:b2:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHl8gheNbZr3aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk5NzIwY2EtZDc0Zi00MjY2LTk3MjMtNTU3YTY5MTRj NGY0MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk MzcwNTliMjctOGE0Yy00NTE2LThjMmQtZjJkZGIxYjQ1N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobidIR08P3uW7gSW+YLgErz8Sue03J93iP6v a+sicGavVMrYsuxkuA+8IQcnB5TPWWZmN390lmFDLybR7J+p9wr02bU8SFqsDqbA 77E7HkVnzcq65hXx9obhVDpsM1qUD920h8fZmECrgFYWkLzEwkngGqw6Q7MVLv8t 6OYju66Ipj+7sqQ7c/QUu/LUhRxN43g6Rb6gE5Vl7GRKP3VT7v7oqn0MGAYAGkQF 70I/zkO16GsceCSmVBhgeuLW4fCq4FxQKzopictF8zcMVtVlffN/xJkxF3QFrSk3 Gth1YBwxTiK2eEX/t2iUMoLGmynqx195bpE9cjo34H9kyUEZjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtxNn6Zdx7Q+7uh196x1e/Vc1VeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yOTk3 MjBjYS1kNzRmLTQyNjYtOTcyMy01NTdhNjkxNGM0ZjQvMDhiNmJkOTUtYzE2ZC0z YTEwLWIyYjctM2RmOGU2YjlkYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjk5NzIwY2EtZDc0Zi00MjY2LTk3 MjMtNTU3YTY5MTRjNGY0LzI5OTcyMGNhLWQ3NGYtNDI2Ni05NzIzLTU1N2E2OTE0 YzRmNC5jcmwwHwYDVR0jBBgwFoAUMFftw+4qTTBsCEgyjPIfs5QzylkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yOTk3MjBjYS1kNzRmLTQyNjYtOTcyMy01NTdh NjkxNGM0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ed2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG691gfvZqDEoFOXVLc/sIGDydWbrxHhPPZib3t6Yp294ahxrQ86gJ/t ryP6AlIryZsZ0l9iJXxBPDDwgzZehebNO4Dz6GxYP5dwbAXi1WBEKKOy+mXtINwJ P+Tfr+YPChD4UB0hu2GCcMECUppOnNdloe4l9jNqFODXPiyF2OH6SCUZ55SViz/n fIfKwrA58S4IL6yUwtLvFpGoOy8B4OrssM91NNr87Cu8Rx4FOaU/JmEh4I4PwS1g Ej0TrfRhw9fcPd3xDocKEb+pXCDHJShGWF21uYugZJkIy7aQyHMUnDYSKITyHho6 JKS0dSBv8D9uOV0IAeq/LtHEVf94snk= -----END CERTIFICATE-----Generated at Wed Oct 28 14:13:56 2026 by rpki-client