$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/0ce42f36-b2f6-3d4a-8d30-074c9149694e.roa File: 0ce42f36-b2f6-3d4a-8d30-074c9149694e.roa (raw, json) Hash identifier: 9DdPdlEieYQcHmJCgbQ9rENnCMz+DTcp+B6yhDHJ4PQ= Subject key identifier: F0:92:78:93:E6:83:37:FD:DD:2F:7F:35:6F:5F:33:1B:15:A9:D6:07 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584F97E09FAA7D9569C81687C740 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/0ce42f36-b2f6-3d4a-8d30-074c9149694e.roa Signing time: Fri 23 Oct 2026 03:15:06 +0000 ROA not before: Fri 23 Oct 2026 03:15:06 +0000 ROA not after: Thu 21 Jan 2027 04:15:06 +0000 asID: 11696 IP address blocks: 216.230.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:e0:9f:aa:7d:95:69:c8:16:87:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 23 03:15:06 2026 GMT Not After : Jan 21 04:15:06 2027 GMT Subject: CN=8b83f408-a6ca-45ab-9026-01435efb9396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:52:24:35:bd:c6:11:0d:4a:a7:6a:19:8d: b1:cd:8e:26:a5:c9:63:a3:a9:9a:2e:0c:49:4c:26: c3:10:4a:0b:e3:28:1e:e3:be:bc:e9:a0:d1:62:0b: 17:59:e4:d4:71:a7:0a:58:c5:19:71:7b:b4:e1:a0: 20:24:f9:06:5a:1f:1f:ac:74:0c:b6:1d:e1:03:4c: c9:43:13:c7:75:cc:ff:51:6f:de:e1:4f:9a:15:23: 60:9b:cb:d5:44:95:09:0c:82:6c:df:3a:6b:3c:9b: 44:61:57:9e:9b:24:cf:25:33:ba:52:03:4d:4c:ec: 12:e7:36:d0:fc:95:14:79:40:38:5f:67:9d:dd:7f: 12:a3:96:0e:8d:02:e5:57:a8:8d:2d:53:1b:5f:73: 9a:cf:e8:b0:36:c2:5a:03:45:0e:49:9e:af:d1:6a: 15:d2:fa:57:5b:b6:2a:c1:ff:eb:e2:ef:d8:c1:ff: b3:82:d9:72:f9:22:23:a8:24:3c:70:c5:43:a9:46: 7b:51:9b:55:76:fe:26:b9:e4:6e:89:d7:2f:e0:59: c2:cc:a7:64:7c:2a:9e:dc:7e:c4:9a:d3:68:b2:fc: da:70:72:cc:ff:74:2a:39:99:a4:c3:78:b0:6b:32: c2:99:b8:1e:75:57:6d:60:79:db:94:d1:3b:0a:d0: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:92:78:93:E6:83:37:FD:DD:2F:7F:35:6F:5F:33:1B:15:A9:D6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/0ce42f36-b2f6-3d4a-8d30-074c9149694e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 216.230.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:4e:e5:a8:01:c2:10:97:6c:74:c9:52:85:00:cb:cd:b6: d2:8f:f3:ae:2f:21:d2:08:13:0c:50:f0:49:15:62:b0:ef:1f: 74:33:6b:d0:d3:7b:df:f5:65:7c:b4:76:65:1e:1a:8a:01:3d: 53:8c:1c:eb:00:b9:07:0a:57:b7:0d:d6:9e:55:b5:04:63:1f: f4:43:96:d3:79:cf:71:9b:46:42:e1:bd:2a:cb:bf:7b:b8:6b: dd:f0:dd:e5:29:3d:8c:7b:c8:71:57:fc:b4:86:4d:0e:00:03: 0d:da:87:27:e3:e0:85:9c:ec:2f:9c:3a:7c:bf:a9:8c:3a:32: 31:84:fe:44:22:70:c4:54:10:59:98:db:b7:63:47:ef:bc:5a: ed:d0:73:fa:7e:c5:40:d2:a8:fa:07:a4:c0:b6:57:ff:a6:30: 9c:a7:a0:13:db:15:a0:ab:f4:52:d8:34:82:46:1d:19:40:93: 84:6b:a0:6b:30:4c:bb:10:17:63:3e:c1:35:ca:c4:49:88:78: 3f:53:73:0d:2a:45:2d:ba:13:05:69:7f:63:b1:01:4e:b8:94: 66:aa:22:9c:2b:11:d5:1a:f6:66:4c:df:f3:e8:15:43:fd:b7: 4b:c1:9f:77:f9:b2:a5:25:65:25:ca:af:5e:8f:24:cf:0b:38: 0a:8c:95:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+X4J+qfZVpyBaHx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyMzAzMTUwNloXDTI3MDEyMTA0MTUwNlowLzEtMCsGA1UEAxMk OGI4M2Y0MDgtYTZjYS00NWFiLTkwMjYtMDE0MzVlZmI5Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4tSJDW9xhENSqdqGY2xzY4mpcljo6maLgxJ TCbDEEoL4yge47686aDRYgsXWeTUcacKWMUZcXu04aAgJPkGWh8frHQMth3hA0zJ QxPHdcz/UW/e4U+aFSNgm8vVRJUJDIJs3zprPJtEYVeemyTPJTO6UgNNTOwS5zbQ /JUUeUA4X2ed3X8So5YOjQLlV6iNLVMbX3Oaz+iwNsJaA0UOSZ6v0WoV0vpXW7Yq wf/r4u/Ywf+zgtly+SIjqCQ8cMVDqUZ7UZtVdv4mueRuidcv4FnCzKdkfCqe3H7E mtNosvzacHLM/3QqOZmkw3iwazLCmbgedVdtYHnblNE7CtD9gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCSeJPmgzf93S9/NW9fMxsVqdYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvMGNlNDJmMzYtYjJmNi0z ZDRhLThkMzAtMDc0YzkxNDk2OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8rTuWoAcIQl2x0yVKFAMvNttKP864vIdIIEwxQ8EkVYrDvH3Qza9DT e9/1ZXy0dmUeGooBPVOMHOsAuQcKV7cN1p5VtQRjH/RDltN5z3GbRkLhvSrLv3u4 a93w3eUpPYx7yHFX/LSGTQ4AAw3ahyfj4IWc7C+cOny/qYw6MjGE/kQicMRUEFmY 27djR++8Wu3Qc/p+xUDSqPoHpMC2V/+mMJynoBPbFaCr9FLYNIJGHRlAk4RroGsw TLsQF2M+wTXKxEmIeD9Tcw0qRS26EwVpf2OxAU64lGaqIpwrEdUa9mZM3/PoFUP9 t0vBn3f5sqUlZSXKr16PJM8LOAqMlXc= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:08 2026 by rpki-client