$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa File: 280c97c7-56b8-3514-9a4a-9008c60ea148.roa (raw, json) Hash identifier: VzCWD28N5fbahz1B45k6kKSZOfkBFRCrR6YWQFz5FcQ= Subject key identifier: 90:F3:92:0D:5C:50:17:88:79:DC:3A:F7:B4:A9:1F:91:0F:5B:6B:8A Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584F6292DD37FAEC7E70C1B65F70 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 165.1.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:dd:37:fa:ec:7e:70:c1:b6:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4a1605cf-29b1-45b2-b114-3cc92ca93ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:68:53:77:2b:13:17:e1:9b:0a:59:4a:4f: 66:77:ec:1b:ba:8b:b4:f7:43:0f:ca:b6:37:08:6c: ab:46:3d:a8:fe:50:be:d2:9c:a4:59:08:ac:79:b5: a7:82:ba:9d:38:d5:63:cb:a7:ca:72:7f:13:c0:ad: 38:e6:d7:76:dd:76:97:ea:1c:6f:82:88:42:e0:44: 39:cb:92:3f:64:db:38:be:f1:d8:1d:41:87:4f:94: 73:3b:75:9c:ee:87:f6:b0:6b:0d:19:15:a1:15:66: 33:e9:f3:7d:69:63:6e:3f:07:08:d8:ed:72:2a:ff: 33:c2:f2:69:1b:7c:41:2f:5b:d8:02:59:f3:1f:b8: 2f:72:22:9b:2c:ae:53:f8:d1:d3:32:4a:d4:4e:b2: f0:d4:70:73:e1:db:f1:2f:4e:54:46:6b:3f:a4:03: 63:28:a4:ba:fe:63:84:40:8b:1e:51:50:98:4e:f0: 0a:63:57:61:97:bc:f8:99:0e:ae:1e:9c:5b:da:8b: b7:1a:13:13:f2:92:b6:31:18:36:81:6e:72:39:f4: 19:86:41:19:91:dc:b8:73:97:f0:da:66:ba:1c:7e: 85:68:b6:bc:92:39:03:b8:08:b9:7c:a0:a7:61:e3: 70:d4:e2:ca:df:97:fd:8c:c5:99:36:ac:ca:75:cc: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:92:0D:5C:50:17:88:79:DC:3A:F7:B4:A9:1F:91:0F:5B:6B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d2:2c:da:eb:51:b6:d8:d8:86:5b:40:c6:27:60:2a:d1:df: 53:14:f2:91:b0:11:a9:36:dd:b9:4b:24:dd:c2:3f:ae:4f:dc: 5d:23:1f:01:7c:10:a7:73:b5:da:1e:8f:9c:35:9e:1d:4e:fd: d8:84:0c:1f:7e:e6:a4:bd:89:96:7b:3a:96:2c:a3:5e:58:33: 07:f7:19:68:cb:98:33:f9:81:e1:3c:9f:99:d8:43:5c:35:af: 03:74:5f:f3:76:78:5f:90:56:2e:7f:ad:da:9a:91:76:4f:23: 06:2d:04:e4:13:45:05:c2:ab:bb:1c:06:4a:ab:1a:9d:6b:4d: 0a:89:83:18:e8:b7:aa:d8:b9:0e:31:56:33:b3:4c:e8:2e:fe: 18:80:9c:da:0b:4d:e6:da:aa:8d:c1:cf:ee:8f:7c:94:cb:cd: d8:e0:a8:c3:92:ab:46:d5:6d:73:01:4e:3f:f3:cf:e4:06:96: f7:e8:3d:df:aa:dc:86:80:cc:2d:11:5d:9c:1b:a5:87:40:72: 0f:e2:7f:b3:bf:e3:0e:d1:bd:33:68:8d:5a:b4:4e:ba:f3:e7: 5b:3c:1c:67:b2:5b:6f:99:9c:6c:d0:e1:27:33:89:5b:d0:9d: ce:e7:8a:10:ad:c6:54:4d:c4:7a:67:54:e7:9e:45:da:e5:80: c5:b1:e6:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikt03+ux+cMG2X3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGExNjA1Y2YtMjliMS00NWIyLWIxMTQtM2NjOTJjYTkzZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh5oU3crExfhmwpZSk9md+wbuou090MPyrY3 CGyrRj2o/lC+0pykWQisebWngrqdONVjy6fKcn8TwK045td23XaX6hxvgohC4EQ5 y5I/ZNs4vvHYHUGHT5RzO3Wc7of2sGsNGRWhFWYz6fN9aWNuPwcI2O1yKv8zwvJp G3xBL1vYAlnzH7gvciKbLK5T+NHTMkrUTrLw1HBz4dvxL05URms/pANjKKS6/mOE QIseUVCYTvAKY1dhl7z4mQ6uHpxb2ou3GhMT8pK2MRg2gW5yOfQZhkEZkdy4c5fw 2ma6HH6FaLa8kjkDuAi5fKCnYeNw1OLK35f9jMWZNqzKdczQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDzkg1cUBeIedw697SpH5EPW2uKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMjgwYzk3YzctNTZiOC0z NTE0LTlhNGEtOTAwOGM2MGVhMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7SLNrrUbbY2IZbQMYnYCrR31MU8pGwEak23blLJN3CP65P3F0jHwF8 EKdztdoej5w1nh1O/diEDB9+5qS9iZZ7OpYso15YMwf3GWjLmDP5geE8n5nYQ1w1 rwN0X/N2eF+QVi5/rdqakXZPIwYtBOQTRQXCq7scBkqrGp1rTQqJgxjot6rYuQ4x VjOzTOgu/hiAnNoLTebaqo3Bz+6PfJTLzdjgqMOSq0bVbXMBTj/zz+QGlvfoPd+q 3IaAzC0RXZwbpYdAcg/if7O/4w7RvTNojVq0Trrz51s8HGeyW2+ZnGzQ4ScziVvQ nc7nihCtxlRNxHpnVOeeRdrlgMWx5vs= -----END CERTIFICATE-----Generated at Tue Oct 6 18:38:53 2026 by rpki-client