$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/95092963-ff18-3c86-93d2-f41123684ed2.roa File: 95092963-ff18-3c86-93d2-f41123684ed2.roa (raw, json) Hash identifier: aP4mU0k2rb1yf1kwi4ak72w3V1NoiqV1rCsEs/SXzcM= Subject key identifier: 0A:91:AD:D0:F4:7F:E2:98:67:20:80:72:7B:7B:66:44:1B:3A:88:58 Certificate issuer: /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Certificate serial: 010D0C9F4328584F78E8354401C2CA82D9745100 Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/95092963-ff18-3c86-93d2-f41123684ed2.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 53922 IP address blocks: 216.38.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:35:44:01:c2:ca:82:d9:74:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=0fb75dfb-8e36-4578-b9aa-f18f1d423185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:dc:41:89:e9:41:48:85:b8:4a:0d:48:66: 6f:19:70:67:97:15:39:34:c9:f0:b2:e3:a3:fa:87: 29:10:ac:03:a2:4d:67:f5:74:90:9a:e8:f1:e0:6c: df:72:96:f8:14:3e:f5:84:20:d2:a1:dd:3f:9d:d4: 28:8a:a5:b3:2f:f0:78:48:ca:2d:d8:8c:65:d3:7b: 82:b4:af:7c:09:ea:ad:b3:68:3b:ab:63:91:19:a7: fc:4f:4d:95:90:c5:bb:51:c2:f4:c6:35:86:88:66: ed:67:2c:6c:3a:09:8b:48:a9:da:6c:20:5e:00:ba: b0:33:d5:35:1a:f2:28:ee:af:ac:09:3c:b4:7f:5f: 56:ae:b9:50:5c:8e:10:26:17:d9:20:f6:17:ba:16: 97:c9:78:1b:9d:c2:b6:95:01:48:e1:59:d6:4e:7c: 47:cc:30:fa:a0:4e:2d:8f:2b:c4:e5:3f:34:35:f8: f4:43:95:f0:fb:55:9a:35:47:77:f3:3d:5e:f4:1d: 43:b2:6a:ba:00:c9:cc:7f:b4:77:5a:9c:8d:38:63: 06:35:98:38:b9:a3:c1:7a:da:fc:0c:0e:3f:15:49: 9d:54:a1:6b:c5:5f:b6:cc:b7:2d:73:b9:43:5e:f3: a7:ff:c9:d3:fe:9f:a6:77:68:d6:44:e9:92:32:83: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:AD:D0:F4:7F:E2:98:67:20:80:72:7B:7B:66:44:1B:3A:88:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/95092963-ff18-3c86-93d2-f41123684ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl X509v3 Authority Key Identifier: keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer sbgp-ipAddrBlock: critical IPv4: 216.38.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:dd:6e:9f:d8:5a:53:e6:85:b9:48:3a:10:c3:b6:b7:c5:a1: 6b:57:13:77:7b:bb:55:a8:6f:1b:90:c8:0c:6a:54:39:c5:0d: 31:9b:f1:1f:f9:e3:47:36:d1:7e:45:3b:33:f0:5b:17:6c:a2: 82:da:97:90:33:1b:6f:e6:c7:87:bc:e5:73:fa:67:c6:a0:c9: 38:46:18:72:69:e3:bd:fb:5c:4d:84:40:37:17:d6:ea:a6:9c: 48:29:a0:0e:27:f7:ce:4f:31:24:30:0a:41:2a:5f:4a:ec:8e: d6:5e:a9:bf:05:ea:50:ef:64:e2:91:69:7a:f3:95:99:6f:cf: ac:fd:7d:3c:72:b6:16:2b:38:a1:57:a8:00:c3:63:d1:c5:3f: 04:c5:dd:f1:dd:3b:07:91:11:eb:2a:e2:fb:76:e1:19:34:29: 52:8a:16:e0:e7:23:4c:18:bf:3c:82:76:8e:94:0a:dc:f5:fb: 02:36:79:27:10:8e:fb:ad:47:7f:3b:9d:5d:7a:bb:78:30:6c: 94:0c:a0:1b:b0:ba:0a:c8:31:e2:39:4d:91:b0:99:20:7d:16: 22:93:d0:40:40:a0:25:fe:18:3e:4a:84:7d:78:ed:97:b5:98: ae:c4:e8:83:0f:42:53:b7:e9:6c:0d:ac:23:dd:5b:ae:0e:a8: ee:68:be:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DVEAcLKgtl0UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi MDQ5MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk MGZiNzVkZmItOGUzNi00NTc4LWI5YWEtZjE4ZjFkNDIzMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+PcQYnpQUiFuEoNSGZvGXBnlxU5NMnwsuOj +ocpEKwDok1n9XSQmujx4Gzfcpb4FD71hCDSod0/ndQoiqWzL/B4SMot2Ixl03uC tK98Ceqts2g7q2ORGaf8T02VkMW7UcL0xjWGiGbtZyxsOgmLSKnabCBeALqwM9U1 GvIo7q+sCTy0f19WrrlQXI4QJhfZIPYXuhaXyXgbncK2lQFI4VnWTnxHzDD6oE4t jyvE5T80Nfj0Q5Xw+1WaNUd38z1e9B1Dsmq6AMnMf7R3WpyNOGMGNZg4uaPBetr8 DA4/FUmdVKFrxV+2zLctc7lDXvOn/8nT/p+md2jWROmSMoMsmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqRrdD0f+KYZyCAcnt7ZkQbOohYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvOTUwOTI5NjMtZmYxOC0z Yzg2LTkzZDItZjQxMTIzNjg0ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPdbp/YWlPmhblIOhDDtrfFoWtXE3d7u1WobxuQyAxqVDnFDTGb8R/5 40c20X5FOzPwWxdsooLal5AzG2/mx4e85XP6Z8agyThGGHJp4737XE2EQDcX1uqm nEgpoA4n985PMSQwCkEqX0rsjtZeqb8F6lDvZOKRaXrzlZlvz6z9fTxythYrOKFX qADDY9HFPwTF3fHdOweREesq4vt24Rk0KVKKFuDnI0wYvzyCdo6UCtz1+wI2eScQ jvutR387nV16u3gwbJQMoBuwugrIMeI5TZGwmSB9FiKT0EBAoCX+GD5KhH147Ze1 mK7E6IMPQlO36WwNrCPdW64OqO5ovgo= -----END CERTIFICATE-----Generated at Mon Nov 2 21:54:46 2026 by rpki-client