$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa File: 9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa (raw, json) Hash identifier: nA7Mg/DTULDnrKY3Y7jd+x8w7peqrZD6DZ81Ooa782M= Subject key identifier: FF:A0:30:14:DC:C2:60:46:9B:6D:D2:0D:31:67:1D:23:B4:3B:EB:93 Certificate issuer: /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Certificate serial: 010D0C9F4328584F78E8331745CD0762B74EAD00 Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 55189 IP address blocks: 216.38.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:33:17:45:cd:07:62:b7:4e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=ed20af15-89d3-4f62-adfc-2b63c98e21a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:56:03:be:02:bc:4c:5b:10:32:e2:5a:09:b4: 88:bb:f2:f9:f6:43:e1:4d:8a:df:2d:6e:42:7a:e8: fa:39:47:af:b8:29:e4:12:cc:c9:9f:45:84:af:6f: 6c:43:f4:4c:d9:16:ad:8a:1e:53:38:ea:89:9b:b3: 98:30:a4:ff:e1:6e:fb:ff:51:72:aa:00:a2:f6:1c: 99:ce:ab:1b:ba:3b:ed:26:6d:49:6a:42:c1:f5:87: fb:88:ef:ad:9e:f9:8f:80:b3:0b:9b:8e:3e:fb:55: d8:28:5e:38:10:d4:f6:31:f8:4b:e6:c3:48:d2:4b: 67:7b:d8:aa:ab:66:bc:8f:95:aa:6c:ef:aa:b7:ac: de:a2:54:42:31:23:54:37:18:93:f7:18:57:d7:d1: e7:a0:ac:b2:58:c1:fc:76:fa:54:3a:2a:6b:6b:68: 13:82:53:72:c1:c6:97:06:ab:b5:35:b0:9b:ae:be: 89:d6:e2:93:45:30:de:98:9b:f1:d7:05:d3:53:47: 6b:9d:b2:35:b0:72:cd:93:56:53:63:b2:47:ca:9e: 22:af:76:cb:16:94:12:2f:54:cf:b5:db:5f:bb:74: 46:45:5a:08:7c:ff:61:ab:8e:da:ae:46:e1:39:a2: c2:8d:3e:8b:7e:bf:ad:68:a1:f1:60:d9:11:47:e2: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:30:14:DC:C2:60:46:9B:6D:D2:0D:31:67:1D:23:B4:3B:EB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9a3111bf-6ba7-3465-91be-f0c4327e7b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl X509v3 Authority Key Identifier: keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer sbgp-ipAddrBlock: critical IPv4: 216.38.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:95:b7:63:b4:c0:66:6d:f0:19:4f:07:4c:01:17:87:9e:22: fb:ca:85:9a:70:ce:1b:28:e8:ac:bf:27:08:49:06:bb:77:c3: 09:d9:88:4f:7f:ad:03:f7:40:ae:1e:3d:24:37:f2:dc:78:ee: 1b:e6:bb:78:af:2f:f9:1c:4c:68:93:e8:b4:14:21:c2:5a:c5: 51:f1:59:44:84:64:fe:22:43:e8:d4:cb:cb:e4:37:e3:83:bd: 2a:ca:35:1b:bd:dc:dd:86:7c:5b:63:b7:b7:76:64:b6:51:00: a1:3b:9a:f5:e2:f7:49:ec:4a:d1:0d:cc:e8:3c:99:ea:de:0e: 76:8e:27:91:c6:32:0c:7a:9b:01:7f:d3:97:70:d1:20:58:a4: ca:24:06:a9:1e:69:eb:55:fe:a8:33:45:af:da:c7:95:4e:76: 4c:71:9e:c5:14:9a:ba:c9:28:32:bf:7a:5b:54:33:ae:92:10: 88:90:6a:72:28:ed:fb:01:b6:07:66:f2:8d:20:a0:3a:49:1a: e1:f9:58:9f:8b:d7:77:a5:96:84:0a:f5:aa:ba:7c:7a:f4:71: 15:0b:dd:46:7f:75:6c:90:3d:59:c1:e8:98:f6:da:2b:7e:f8: 71:55:2b:e4:3b:a8:08:72:e3:e2:bd:ea:cc:98:5e:9b:35:cf: a4:f1:8f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DMXRc0HYrdOrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi MDQ5MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk ZWQyMGFmMTUtODlkMy00ZjYyLWFkZmMtMmI2M2M5OGUyMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41YDvgK8TFsQMuJaCbSIu/L59kPhTYrfLW5C euj6OUevuCnkEszJn0WEr29sQ/RM2Ratih5TOOqJm7OYMKT/4W77/1FyqgCi9hyZ zqsbujvtJm1JakLB9Yf7iO+tnvmPgLMLm44++1XYKF44ENT2MfhL5sNI0ktne9iq q2a8j5WqbO+qt6zeolRCMSNUNxiT9xhX19HnoKyyWMH8dvpUOipra2gTglNywcaX Bqu1NbCbrr6J1uKTRTDemJvx1wXTU0drnbI1sHLNk1ZTY7JHyp4ir3bLFpQSL1TP tdtfu3RGRVoIfP9hq47arkbhOaLCjT6Lfr+taKHxYNkRR+In/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+gMBTcwmBGm23SDTFnHSO0O+uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvOWEzMTExYmYtNmJhNy0z NDY1LTkxYmUtZjBjNDMyN2U3YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWVt2O0wGZt8BlPB0wBF4eeIvvKhZpwzhso6Ky/JwhJBrt3wwnZiE9/ rQP3QK4ePSQ38tx47hvmu3ivL/kcTGiT6LQUIcJaxVHxWUSEZP4iQ+jUy8vkN+OD vSrKNRu93N2GfFtjt7d2ZLZRAKE7mvXi90nsStENzOg8mereDnaOJ5HGMgx6mwF/ 05dw0SBYpMokBqkeaetV/qgzRa/ax5VOdkxxnsUUmrrJKDK/eltUM66SEIiQanIo 7fsBtgdm8o0goDpJGuH5WJ+L13elloQK9aq6fHr0cRUL3UZ/dWyQPVnB6Jj22it+ +HFVK+Q7qAhy4+K96syYXps1z6Txjx0= -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:25 2026 by rpki-client