$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/a822d1f4-2789-3abb-98e9-6dbc7ba75384.roa File: a822d1f4-2789-3abb-98e9-6dbc7ba75384.roa (raw, json) Hash identifier: 90GTzdcZnbQyM4lv+3EMzpcOxstiXuSbYQ1JQOi7RbM= Subject key identifier: 99:C7:50:6B:5C:97:76:3D:C0:9B:00:C9:CD:DE:95:D6:B1:12:C6:EF Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D50DE72361540263BAA0 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/a822d1f4-2789-3abb-98e9-6dbc7ba75384.roa Signing time: Tue 27 Oct 2026 03:10:00 +0000 ROA not before: Tue 27 Oct 2026 03:10:00 +0000 ROA not after: Mon 25 Jan 2027 04:10:00 +0000 asID: 11696 IP address blocks: 216.198.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d5:0d:e7:23:61:54:02:63:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:00 2026 GMT Not After : Jan 25 04:10:00 2027 GMT Subject: CN=9a3033f3-0562-404d-8f76-52c7c3bc472a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:91:80:5b:8c:90:50:d5:53:a2:d9:d0:ba: f8:a1:69:61:ef:c5:3e:a3:4f:98:f1:6b:7d:98:d5: 69:8c:fc:52:31:a7:c2:0c:f9:e0:02:e4:b2:a2:d3: 1e:9e:67:aa:a9:fe:d1:c3:0f:be:d7:8a:09:e6:22: c9:e2:3c:9a:fd:82:86:64:cc:f1:a8:70:16:5e:3e: 6b:22:5d:e9:6a:87:8c:42:2c:cb:56:02:d8:16:d1: a0:a9:6b:d3:b5:5d:d2:08:8d:14:05:39:32:6e:07: 25:a7:d1:f3:bd:4f:38:d1:c2:fa:bf:c5:86:21:69: 28:94:e4:a9:05:17:6c:14:45:6f:9b:34:ec:55:d8: 71:4f:08:7b:98:e8:95:d3:f1:ce:e2:7d:2e:02:8f: 7c:a5:ad:49:d4:db:73:90:17:27:91:55:a8:d2:b4: b6:59:ac:3d:46:54:18:ab:46:d8:4e:cb:44:d5:5c: c0:75:23:a4:57:70:59:0a:da:99:22:80:6f:3b:7a: d4:36:37:2e:d7:c8:d4:77:0c:da:62:c2:6c:88:06: 1e:02:00:9e:cc:00:81:62:ed:80:97:81:df:b5:88: b7:35:08:8d:e4:66:ff:d0:ac:77:d3:a5:48:ce:95: cb:77:e6:4e:44:a1:ab:71:d0:68:6b:ea:7d:fe:2b: 2a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:50:6B:5C:97:76:3D:C0:9B:00:C9:CD:DE:95:D6:B1:12:C6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/a822d1f4-2789-3abb-98e9-6dbc7ba75384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 216.198.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:29:83:17:76:36:e7:73:72:e9:60:40:4b:15:ae:a6:d5:5f: f9:81:3f:4b:38:fd:ac:30:d3:7f:13:15:22:c6:42:a7:53:10: d5:40:80:97:91:6a:3d:01:70:e7:bc:94:ce:f3:d4:64:eb:46: 5a:b9:5b:df:a0:f2:67:04:1c:7b:06:00:ea:d8:51:78:76:35: ad:84:26:ff:b1:0c:af:60:0f:be:b3:76:18:24:7d:bd:29:22: 7b:fe:5c:64:8c:a3:55:df:cb:bc:e7:98:04:db:36:25:14:92: cb:f4:88:59:f3:4e:f9:40:fc:fc:ef:c4:79:22:86:74:8d:90: 7c:d2:14:8e:24:d0:c3:f1:92:3c:91:97:fb:42:9c:90:aa:3f: 88:2e:bc:22:9e:7a:86:dc:ef:39:f4:3f:a0:6f:ee:23:2a:57: 17:0a:0c:2a:07:6c:10:1d:71:5f:f0:aa:c3:cb:01:47:f7:9b: d0:3c:d0:13:c4:90:20:5a:ed:01:fa:fd:6e:e3:e4:df:65:b3: c6:17:71:72:0b:ad:fa:bc:d2:68:d9:8c:6c:5f:1f:02:ae:d6: 5e:7d:ed:be:f3:8c:cf:6b:27:e3:a2:17:e2:ed:be:05:ed:75: 86:46:4c:59:e3:34:c5:aa:98:19:80:4b:9c:07:16:4d:f1:08: b2:c5:89:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNUN5yNhVAJjuqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk OWEzMDMzZjMtMDU2Mi00MDRkLThmNzYtNTJjN2MzYmM0NzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+2RgFuMkFDVU6LZ0Lr4oWlh78U+o0+Y8Wt9 mNVpjPxSMafCDPngAuSyotMenmeqqf7Rww++14oJ5iLJ4jya/YKGZMzxqHAWXj5r Il3paoeMQizLVgLYFtGgqWvTtV3SCI0UBTkybgclp9HzvU840cL6v8WGIWkolOSp BRdsFEVvmzTsVdhxTwh7mOiV0/HO4n0uAo98pa1J1NtzkBcnkVWo0rS2Waw9RlQY q0bYTstE1VzAdSOkV3BZCtqZIoBvO3rUNjcu18jUdwzaYsJsiAYeAgCezACBYu2A l4HftYi3NQiN5Gb/0Kx306VIzpXLd+ZORKGrcdBoa+p9/isq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnHUGtcl3Y9wJsAyc3eldaxEsbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYTgyMmQxZjQtMjc4OS0z YWJiLTk4ZTktNmRiYzdiYTc1Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQpgxd2NudzculgQEsVrqbVX/mBP0s4/aww038TFSLGQqdTENVAgJeR aj0BcOe8lM7z1GTrRlq5W9+g8mcEHHsGAOrYUXh2Na2EJv+xDK9gD76zdhgkfb0p Inv+XGSMo1Xfy7znmATbNiUUksv0iFnzTvlA/PzvxHkihnSNkHzSFI4k0MPxkjyR l/tCnJCqP4guvCKeeobc7zn0P6Bv7iMqVxcKDCoHbBAdcV/wqsPLAUf3m9A80BPE kCBa7QH6/W7j5N9ls8YXcXILrfq80mjZjGxfHwKu1l597b7zjM9rJ+OiF+LtvgXt dYZGTFnjNMWqmBmAS5wHFk3xCLLFiTQ= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:19 2026 by rpki-client