$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/d81ac2d9-5a1d-35ae-948d-13e4c66fe060.roa File: d81ac2d9-5a1d-35ae-948d-13e4c66fe060.roa (raw, json) Hash identifier: ln/27SgRYMTIkZwDdKJxCDGLj/T8k2cKiTo2j5UXv9k= Subject key identifier: 34:3F:64:1F:09:1E:E0:FB:BD:27:2C:E1:3E:B2:D2:B1:52:26:C1:79 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D54B28894E93035E1CA0 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/d81ac2d9-5a1d-35ae-948d-13e4c66fe060.roa Signing time: Tue 27 Oct 2026 03:10:01 +0000 ROA not before: Tue 27 Oct 2026 03:10:01 +0000 ROA not after: Mon 25 Jan 2027 04:10:01 +0000 asID: 11696 IP address blocks: 216.230.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d5:4b:28:89:4e:93:03:5e:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:01 2026 GMT Not After : Jan 25 04:10:01 2027 GMT Subject: CN=9168db91-d1c3-44cb-8f53-5125fe2a5092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:7a:24:06:9c:87:b0:4b:66:2a:40:22:7b: e5:3e:d7:30:eb:ba:44:15:9e:00:6e:9e:69:9b:e5: f3:a8:bb:be:a5:54:f3:3e:b5:c0:d2:db:24:d0:b8: 9a:6c:3e:d3:21:da:c2:fe:0d:63:e2:e8:02:c7:61: 71:20:54:24:3f:c2:5c:dd:b8:d6:b2:3c:56:79:eb: 96:48:c8:36:6e:06:8c:d1:61:b9:e6:3b:c6:19:83: 2c:0d:11:e6:0f:59:9f:40:35:07:4b:84:ca:69:ee: 73:48:b2:02:08:78:2e:16:e0:ed:85:aa:d8:2f:07: ef:fd:cb:fb:b5:b2:16:61:38:27:60:ad:14:1f:17: 20:fb:bb:c6:fe:09:89:da:0f:5a:89:51:35:bb:40: 61:42:a6:20:39:e0:34:95:d8:36:93:3a:6b:f6:e7: 53:3b:68:69:7d:ff:43:12:18:06:5e:97:17:1e:b4: 54:40:95:7c:0f:cd:8a:dc:a1:61:7a:59:de:51:a3: 20:15:fc:12:30:88:29:e4:d5:ae:d8:e3:07:fc:11: 06:34:a8:6e:02:40:cb:14:a5:ba:94:87:09:94:d6: 5b:36:6d:fe:37:1c:43:f7:60:d2:b8:d9:26:68:3b: 26:ec:55:23:b1:fe:c1:79:0e:c7:92:8e:96:55:60: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3F:64:1F:09:1E:E0:FB:BD:27:2C:E1:3E:B2:D2:B1:52:26:C1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/d81ac2d9-5a1d-35ae-948d-13e4c66fe060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 216.230.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:36:8e:27:22:e1:84:ea:ee:88:21:a1:94:ce:88:32:db:60: 92:99:fc:9c:c9:31:dd:74:38:0f:12:d7:2b:51:34:c2:6e:e3: 56:62:b2:fb:bc:ab:6d:79:65:90:da:ab:98:dc:3d:77:d2:c4: ea:d8:8c:4e:2c:ce:4c:b5:a3:ca:86:32:c6:58:e1:06:a5:8c: 17:74:46:62:57:fa:1e:d6:93:63:a6:d5:32:9e:93:dc:b8:1c: 00:b5:4b:01:5e:de:65:1c:b3:80:f1:de:c2:ab:56:42:8f:24: 93:57:12:46:dc:aa:2e:02:ab:2e:ec:db:bd:18:1b:2e:00:00: 77:9c:73:99:a9:47:b7:e2:27:3e:ab:fd:53:cd:e9:ee:8c:58: 34:72:5d:77:1d:a4:8d:b5:a1:90:3e:5c:89:55:1d:ee:38:3a: 12:98:2b:6b:eb:23:d0:ac:12:aa:c6:4b:15:3d:bf:df:f0:da: 74:fd:4b:5e:fb:d9:0f:da:fe:20:2d:71:57:bc:e9:31:85:3d: 99:4b:e6:0f:f6:76:f6:fd:2f:75:12:8d:e4:79:aa:54:65:a2: a9:6e:46:41:87:5f:1a:0c:c4:63:76:ee:68:fc:8f:6f:7d:53: b1:bd:08:46:8e:ea:cb:b2:ff:62:e7:5c:3a:57:e6:b4:57:71: 78:f2:d1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNVLKIlOkwNeHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMVoXDTI3MDEyNTA0MTAwMVowLzEtMCsGA1UEAxMk OTE2OGRiOTEtZDFjMy00NGNiLThmNTMtNTEyNWZlMmE1MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6d6JAach7BLZipAInvlPtcw67pEFZ4Abp5p m+XzqLu+pVTzPrXA0tsk0LiabD7TIdrC/g1j4ugCx2FxIFQkP8Jc3bjWsjxWeeuW SMg2bgaM0WG55jvGGYMsDRHmD1mfQDUHS4TKae5zSLICCHguFuDtharYLwfv/cv7 tbIWYTgnYK0UHxcg+7vG/gmJ2g9aiVE1u0BhQqYgOeA0ldg2kzpr9udTO2hpff9D EhgGXpcXHrRUQJV8D82K3KFhelneUaMgFfwSMIgp5NWu2OMH/BEGNKhuAkDLFKW6 lIcJlNZbNm3+NxxD92DSuNkmaDsm7FUjsf7BeQ7Hko6WVWDgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ/ZB8JHuD7vScs4T6y0rFSJsF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvZDgxYWMyZDktNWExZC0z NWFlLTk0OGQtMTNlNGM2NmZlMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo2jici4YTq7oghoZTOiDLbYJKZ/JzJMd10OA8S1ytRNMJu41Zisvu8 q215ZZDaq5jcPXfSxOrYjE4szky1o8qGMsZY4QaljBd0RmJX+h7Wk2Om1TKek9y4 HAC1SwFe3mUcs4Dx3sKrVkKPJJNXEkbcqi4Cqy7s270YGy4AAHecc5mpR7fiJz6r /VPN6e6MWDRyXXcdpI21oZA+XIlVHe44OhKYK2vrI9CsEqrGSxU9v9/w2nT9S177 2Q/a/iAtcVe86TGFPZlL5g/2dvb9L3USjeR5qlRloqluRkGHXxoMxGN27mj8j299 U7G9CEaO6suy/2LnXDpX5rRXcXjy0b0= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:16 2026 by rpki-client