$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/bbb36e24-ee38-3054-bd1a-616a0a207e04.roa File: bbb36e24-ee38-3054-bd1a-616a0a207e04.roa (raw, json) Hash identifier: Tb32rYPS2wM095cmYFkhb8ztaUg7GhFyNJkRrUNiM3I= Subject key identifier: 14:2A:DF:9F:0D:A0:25:E3:AE:8B:FB:5C:00:08:F3:56:CD:3F:20:10 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584F97E09FB9AF59DDE98E1E80C0 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/bbb36e24-ee38-3054-bd1a-616a0a207e04.roa Signing time: Fri 23 Oct 2026 03:15:06 +0000 ROA not before: Fri 23 Oct 2026 03:15:06 +0000 ROA not after: Thu 21 Jan 2027 04:15:06 +0000 asID: 11696 IP address blocks: 216.230.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:e0:9f:b9:af:59:dd:e9:8e:1e:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 23 03:15:06 2026 GMT Not After : Jan 21 04:15:06 2027 GMT Subject: CN=78c4e8b4-8b50-48b7-a26f-ff5c2f52ce19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:75:ec:51:0a:50:5e:a2:ac:e6:25:94:0d: 6e:13:6c:dc:ed:fa:44:46:26:30:2f:87:be:d4:1e: 79:b4:3c:e0:a2:2e:ab:6f:32:71:35:fa:6c:82:ee: 70:37:ec:bb:cf:04:ee:6c:3a:99:d5:46:e8:2e:d0: d5:6c:e8:38:92:76:c8:b1:86:3f:a1:77:9d:df:cf: 06:37:ee:f4:64:ae:c9:f4:16:9e:ae:52:3c:92:76: 06:c0:ce:0c:1c:66:5d:d4:ba:ca:57:d2:8b:93:7f: b4:64:b6:cb:43:e5:72:1c:83:ca:7f:1e:92:13:63: 7d:e9:0d:ee:f8:63:bb:d0:21:69:a2:a0:8d:ba:5a: 45:d7:a3:2c:3f:1c:dc:a6:7c:89:1f:f4:4e:f3:0a: ae:38:46:8a:19:62:6d:ff:ee:84:6b:8f:ad:29:67: 40:5a:d7:fc:69:7d:51:e7:15:e3:6e:30:7e:fc:da: d8:b3:22:7e:65:71:d9:09:ee:be:42:ef:44:78:05: 4d:b5:e2:22:3f:b2:a5:2b:54:a1:77:d2:44:46:1b: 17:56:95:8d:10:37:48:8c:54:91:9c:2b:f9:06:07: d0:4e:3e:9a:4e:16:82:61:1c:7e:dd:f3:d9:44:50: 7d:4c:ef:2c:f6:b3:a0:00:97:8e:58:54:79:01:84: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:DF:9F:0D:A0:25:E3:AE:8B:FB:5C:00:08:F3:56:CD:3F:20:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/bbb36e24-ee38-3054-bd1a-616a0a207e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 216.230.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6d:07:70:e9:79:99:ef:9f:9b:d6:35:0d:27:75:71:d7:ae: 6e:b7:8c:ca:1f:f6:24:38:3a:29:b7:3d:aa:c6:5e:95:3f:47: b2:8f:c8:b7:6d:0a:8d:1c:8e:07:ac:b6:c3:13:ad:41:44:35: 99:99:3f:30:e7:58:c1:da:66:5c:53:cb:67:b3:33:64:c5:34: 18:00:25:47:ce:5c:85:37:be:56:37:c0:75:76:a6:d6:c8:31: 86:c5:d6:b5:73:c7:84:ed:54:69:73:c7:e2:ba:0c:99:09:3d: 37:f1:f2:12:70:d7:d7:a4:a7:61:39:24:a9:c3:da:37:18:cb: 9f:4f:59:74:14:c4:3e:b1:9a:6b:96:52:6b:13:41:13:16:e8: d2:5b:e8:e6:f4:b8:e4:bb:4b:9c:6a:ce:86:83:b1:e0:4e:2e: bb:fc:de:3c:ab:1a:ad:73:68:b9:13:02:d6:60:2f:a2:fb:45: 6c:ee:dd:0f:db:8c:cf:f4:84:10:1a:6b:49:84:5e:ba:25:69: 81:d8:06:05:d3:8f:55:44:57:15:40:cf:2e:69:b6:7a:b2:8a: ab:b8:55:31:77:08:e2:a8:11:4c:7f:0b:12:79:85:9c:8b:a2: 63:1f:12:61:26:a2:5b:2c:9a:c3:e4:7e:b6:c9:e8:4b:92:50: a9:27:d5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+X4J+5r1nd6Y4egMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyMzAzMTUwNloXDTI3MDEyMTA0MTUwNlowLzEtMCsGA1UEAxMk NzhjNGU4YjQtOGI1MC00OGI3LWEyNmYtZmY1YzJmNTJjZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZx17FEKUF6irOYllA1uE2zc7fpERiYwL4e+ 1B55tDzgoi6rbzJxNfpsgu5wN+y7zwTubDqZ1UboLtDVbOg4knbIsYY/oXed388G N+70ZK7J9BaerlI8knYGwM4MHGZd1LrKV9KLk3+0ZLbLQ+VyHIPKfx6SE2N96Q3u +GO70CFpoqCNulpF16MsPxzcpnyJH/RO8wquOEaKGWJt/+6Ea4+tKWdAWtf8aX1R 5xXjbjB+/NrYsyJ+ZXHZCe6+Qu9EeAVNteIiP7KlK1Shd9JERhsXVpWNEDdIjFSR nCv5BgfQTj6aThaCYRx+3fPZRFB9TO8s9rOgAJeOWFR5AYTZbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQq358NoCXjrov7XAAI81bNPyAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYmJiMzZlMjQtZWUzOC0z MDU0LWJkMWEtNjE2YTBhMjA3ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERtB3DpeZnvn5vWNQ0ndXHXrm63jMof9iQ4Oim3ParGXpU/R7KPyLdt Co0cjgestsMTrUFENZmZPzDnWMHaZlxTy2ezM2TFNBgAJUfOXIU3vlY3wHV2ptbI MYbF1rVzx4TtVGlzx+K6DJkJPTfx8hJw19ekp2E5JKnD2jcYy59PWXQUxD6xmmuW UmsTQRMW6NJb6Ob0uOS7S5xqzoaDseBOLrv83jyrGq1zaLkTAtZgL6L7RWzu3Q/b jM/0hBAaa0mEXrolaYHYBgXTj1VEVxVAzy5ptnqyiqu4VTF3COKoEUx/CxJ5hZyL omMfEmEmolssmsPkfrbJ6EuSUKkn1aY= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:13 2026 by rpki-client