$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa File: 2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa (raw, json) Hash identifier: 62fOcSlDb/0VL7DdUGn0c6TL2Xk39Uc3G07a8TozwrQ= Subject key identifier: 95:93:B3:18:08:CF:5B:2C:1F:C1:D6:2D:B4:B1:76:19:EC:68:DD:E3 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F4976A6387BF54F82B10E3880 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 216.152.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a6:38:7b:f5:4f:82:b1:0e:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8802c9c-dfae-4b3d-b7f0-ef687ae8fa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:01:ff:ce:64:dc:63:15:f2:44:ba:f1:5b: 1e:b0:4a:45:3c:25:06:f3:c3:4e:a7:ac:f9:73:8a: 96:f9:56:c1:12:8b:10:06:8e:0c:3b:f8:0d:e6:c6: a1:81:cb:73:b1:d6:d6:31:bc:33:e2:de:ab:3f:6c: e2:c4:61:cb:aa:f0:b6:0f:8b:77:89:14:fa:9d:30: 5f:99:9f:a4:6f:d4:6e:66:df:18:75:93:20:38:65: 03:4f:83:0c:e2:59:cc:fc:f7:24:76:cb:1e:59:d4: 7f:be:8c:60:45:2b:a5:c8:47:f8:d9:de:2f:12:b0: 07:49:05:45:9e:ff:84:f9:34:16:3f:1a:d9:35:96: 8e:12:1f:26:b1:b8:d0:dc:35:cc:94:7f:a5:f6:20: 5a:e8:27:2d:2e:f7:14:7f:0f:a2:84:0e:ea:64:95: 5f:e5:97:d3:ec:c3:ce:32:f5:88:cb:be:72:98:70: 2b:10:58:b2:25:26:7f:16:db:38:c6:e7:61:e5:e3: 69:7d:f8:2b:d7:7b:2d:2d:f5:b0:83:4f:6e:b9:54: f8:a2:9c:36:dd:e9:73:b0:1f:41:e3:b1:5a:f2:f4: df:26:9a:fb:40:d4:95:26:3b:74:68:d6:58:22:63: 56:18:c0:25:ec:14:b5:31:bf:b2:98:c4:ab:96:1d: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:93:B3:18:08:CF:5B:2C:1F:C1:D6:2D:B4:B1:76:19:EC:68:DD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 216.152.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:3c:a8:ed:ba:bf:ef:6d:26:e9:31:b4:d1:ec:a8:47:4a: 9b:cc:6a:6f:04:59:ff:98:b6:1f:be:2d:b1:ad:cb:7d:1a:09: 74:e2:44:ca:c4:9a:b2:8a:52:bc:3a:e4:a6:b5:80:ce:ad:84: 65:09:f6:29:29:14:68:a2:da:3b:52:0e:16:b7:38:93:9e:64: 8a:48:4a:a0:5a:88:58:d7:62:05:f1:20:52:b1:18:97:d7:9c: a2:50:39:97:9c:cc:04:fb:08:98:18:71:b0:eb:bf:55:56:66: 61:82:2c:83:1d:0f:fb:8a:57:60:41:45:59:15:2e:32:30:13: d4:4c:f4:5f:89:de:4a:0a:de:56:8d:c9:7d:9c:8f:6c:4f:9c: 60:75:c1:0d:3e:4a:6b:f2:f4:66:43:28:22:06:48:f3:a0:46: fd:c3:74:6e:9e:09:b8:a9:3a:6c:ec:36:86:9b:c9:99:9c:ba: 4b:15:9e:f8:c0:2e:49:06:a2:45:55:f0:7d:1f:a9:2a:30:e1: 87:8e:e9:98:76:95:d0:49:b1:50:3f:37:2a:65:ca:8f:25:7c: 58:5d:a8:54:e5:30:7b:78:fe:cf:72:09:42:4e:7f:0a:df:c8: 66:88:f7:d5:a4:40:55:87:60:74:98:d3:77:d0:28:cf:be:1f: f0:16:ed:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdqY4e/VPgrEOOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDg4MDJjOWMtZGZhZS00YjNkLWI3ZjAtZWY2ODdhZThmYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfEB/85k3GMV8kS68VsesEpFPCUG88NOp6z5 c4qW+VbBEosQBo4MO/gN5sahgctzsdbWMbwz4t6rP2zixGHLqvC2D4t3iRT6nTBf mZ+kb9RuZt8YdZMgOGUDT4MM4lnM/PckdsseWdR/voxgRSulyEf42d4vErAHSQVF nv+E+TQWPxrZNZaOEh8msbjQ3DXMlH+l9iBa6CctLvcUfw+ihA7qZJVf5ZfT7MPO MvWIy75ymHArEFiyJSZ/Fts4xudh5eNpffgr13stLfWwg09uuVT4opw23elzsB9B 47Fa8vTfJpr7QNSVJjt0aNZYImNWGMAl7BS1Mb+ymMSrlh0VPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWTsxgIz1ssH8HWLbSxdhnsaN3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMmQ5Y2Y5NWYtOTJkYi0z ZDNhLThhMDQtYzIzZTkxNWJiMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf1PKjtur/vbSbpMbTR7KhHSpvMam8EWf+Yth++LbGty30aCXTiRMrE mrKKUrw65Ka1gM6thGUJ9ikpFGii2jtSDha3OJOeZIpISqBaiFjXYgXxIFKxGJfX nKJQOZeczAT7CJgYcbDrv1VWZmGCLIMdD/uKV2BBRVkVLjIwE9RM9F+J3koK3laN yX2cj2xPnGB1wQ0+Smvy9GZDKCIGSPOgRv3DdG6eCbipOmzsNoabyZmcuksVnvjA LkkGokVV8H0fqSow4YeO6Zh2ldBJsVA/Nyplyo8lfFhdqFTlMHt4/s9yCUJOfwrf yGaI99WkQFWHYHSY03fQKM++H/AW7Ys= -----END CERTIFICATE-----Generated at Thu Oct 22 08:16:15 2026 by rpki-client