$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa File: 9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa (raw, json) Hash identifier: GGkGg/wF1LpC5IKYxyVc2a9ByGnfShnbl1YzAHYrOR0= Subject key identifier: 67:98:91:49:CB:D2:2B:F1:E4:9A:ED:C0:ED:8C:37:67:7A:E4:7E:A8 Certificate issuer: /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Certificate serial: 010D0C9F4328584ED6FC820A18CF4998353B7680 Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa Signing time: Sat 15 Aug 2026 01:00:12 +0000 ROA not before: Sat 15 Aug 2026 01:00:12 +0000 ROA not after: Fri 13 Nov 2026 02:00:12 +0000 asID: 55189 IP address blocks: 216.38.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:fc:82:0a:18:cf:49:98:35:3b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Validity Not Before: Aug 15 01:00:12 2026 GMT Not After : Nov 13 02:00:12 2026 GMT Subject: CN=368a156c-33b8-498b-813d-0fe95f38aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:d2:50:77:4f:58:17:15:59:af:6c:a9:32: 30:b6:fc:eb:8e:c6:e5:60:41:de:40:73:8b:27:2b: 16:b8:bf:cf:05:b9:14:ad:74:1e:0a:17:9c:c5:c7: 7c:50:d6:8b:b7:38:4b:c2:18:01:ef:cb:04:d6:59: b9:2d:ec:fd:fd:e8:7a:4c:5f:ef:b0:89:9a:a1:0a: 85:fc:b6:0e:c9:98:75:77:a0:7a:13:30:15:52:5f: ba:71:da:9f:7f:04:b6:33:90:cc:b4:db:c3:7b:0e: 51:28:8a:83:cf:0e:3d:b2:ee:7a:c7:e1:0b:1e:7b: d6:bc:6e:46:2a:4c:c2:bc:72:6f:06:e6:13:52:03: ef:8f:a1:38:5a:06:6f:66:d5:1d:0f:47:a5:91:5a: ea:65:0c:bb:cc:bc:f4:80:aa:74:41:e6:0a:d2:bc: 86:ea:91:59:a3:38:24:23:f1:bc:7a:19:f8:dc:b5: b1:4c:02:80:ba:4d:ad:59:9b:2e:11:79:8c:89:e1: 7e:9f:52:ae:9e:7e:0a:71:78:61:40:a7:a3:16:4f: 23:e5:9c:1a:4f:6c:06:9d:ac:5c:0e:70:d1:cb:72: 6e:13:f5:4b:5c:c6:80:de:26:34:19:54:78:4e:9d: 8b:aa:12:81:a4:db:40:54:67:08:3f:e2:b9:6a:48: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:98:91:49:CB:D2:2B:F1:E4:9A:ED:C0:ED:8C:37:67:7A:E4:7E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl X509v3 Authority Key Identifier: keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer sbgp-ipAddrBlock: critical IPv4: 216.38.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3b:bb:85:37:a8:e3:3d:c3:f7:6e:c2:db:a6:33:ba:8e:2a: 5c:94:ba:7d:a2:78:27:67:dc:2a:f1:21:e8:f0:2f:36:ff:be: a2:21:3b:68:b2:52:c6:05:f2:68:ab:92:4e:76:73:53:02:2a: d5:43:cd:26:35:89:bb:01:8d:e4:40:19:bc:4c:ed:53:1c:01: c5:65:c9:70:fd:7a:9c:6c:ed:0e:1e:c6:c1:d6:08:b7:a3:e6: 56:75:8d:14:3c:08:55:5a:2d:dd:83:eb:6f:9b:fb:bf:a2:3d: 95:d4:0f:9f:44:5b:86:73:3f:c7:13:fc:47:5c:95:be:9d:ce: af:cc:73:42:a6:c8:04:30:9c:0d:eb:93:65:66:a4:8f:12:fe: 5c:f3:ff:5c:fd:96:9d:6b:e0:6c:1a:39:90:13:64:4d:15:b9: ca:0f:3e:6f:5c:70:39:f4:34:d2:09:99:e3:fa:70:fb:27:62: 60:32:f9:d1:fb:82:73:04:b8:b7:90:9b:37:c8:ef:09:a0:6d: bc:35:57:98:d3:39:8a:f2:b5:f8:1b:10:1d:be:42:46:cf:d7: 23:68:2e:f5:fd:0d:01:bd:a5:41:dd:5e:da:bc:df:b9:23:8a: 2a:b9:3c:a5:1d:51:ac:c5:18:9f:46:0f:52:04:50:5c:96:46: be:54:d5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7W/IIKGM9JmDU7doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi MDQ5MB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk MzY4YTE1NmMtMzNiOC00OThiLTgxM2QtMGZlOTVmMzhhYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju7SUHdPWBcVWa9sqTIwtvzrjsblYEHeQHOL JysWuL/PBbkUrXQeChecxcd8UNaLtzhLwhgB78sE1lm5Lez9/eh6TF/vsImaoQqF /LYOyZh1d6B6EzAVUl+6cdqffwS2M5DMtNvDew5RKIqDzw49su56x+ELHnvWvG5G KkzCvHJvBuYTUgPvj6E4WgZvZtUdD0elkVrqZQy7zLz0gKp0QeYK0ryG6pFZozgk I/G8ehn43LWxTAKAuk2tWZsuEXmMieF+n1Kunn4KcXhhQKejFk8j5ZwaT2wGnaxc DnDRy3JuE/VLXMaA3iY0GVR4Tp2LqhKBpNtAVGcIP+K5akjD/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeYkUnL0ivx5JrtwO2MN2d65H6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvOWEzMTExYmYtNmJhNy0z NDY1LTkxYmUtZjBjNDMyN2U3YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw7u4U3qOM9w/duwtumM7qOKlyUun2ieCdn3CrxIejwLzb/vqIhO2iy UsYF8mirkk52c1MCKtVDzSY1ibsBjeRAGbxM7VMcAcVlyXD9epxs7Q4exsHWCLej 5lZ1jRQ8CFVaLd2D62+b+7+iPZXUD59EW4ZzP8cT/Edclb6dzq/Mc0KmyAQwnA3r k2VmpI8S/lzz/1z9lp1r4GwaOZATZE0VucoPPm9ccDn0NNIJmeP6cPsnYmAy+dH7 gnMEuLeQmzfI7wmgbbw1V5jTOYrytfgbEB2+QkbP1yNoLvX9DQG9pUHdXtq837kj iiq5PKUdUazFGJ9GD1IEUFyWRr5U1XM= -----END CERTIFICATE-----Generated at Tue Sep 15 17:16:08 2026 by rpki-client