$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/576a1979-abdd-3915-bd60-06c74a6f1e3e.roa File: 576a1979-abdd-3915-bd60-06c74a6f1e3e.roa (raw, json) Hash identifier: OzZlG3bPsjVuQ2BEUGEhU30xjzMG+K3fPP3UWLHYf0w= Subject key identifier: 09:69:B1:1E:91:9B:1C:49:92:53:F8:AF:EE:E8:D4:3F:0D:FD:F5:89 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584F220D5A4A905C5107E356A3C0 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/576a1979-abdd-3915-bd60-06c74a6f1e3e.roa Signing time: Thu 10 Sep 2026 22:19:50 +0000 ROA not before: Thu 10 Sep 2026 22:19:50 +0000 ROA not after: Wed 09 Dec 2026 23:19:50 +0000 asID: 399646 IP address blocks: 216.170.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:0d:5a:4a:90:5c:51:07:e3:56:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Sep 10 22:19:50 2026 GMT Not After : Dec 9 23:19:50 2026 GMT Subject: CN=2fc4f029-013c-4b57-ba79-1d7dea94f64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:88:8c:60:46:06:04:9f:9f:82:a5:41:71: 32:b4:54:14:93:b0:64:79:66:93:3d:01:b1:e4:67: ef:d8:d2:e5:ec:fd:34:ae:6a:3c:ac:27:0f:bf:a4: 9f:19:10:84:28:a8:32:5c:4c:f9:24:3e:a8:23:86: 9d:ff:42:0c:44:45:ff:c6:cb:4f:e8:af:bb:d8:67: 80:1d:bc:61:b4:98:0a:56:98:64:ed:7b:1e:8c:7d: 78:f4:8b:cb:d2:0e:45:28:19:23:28:56:ce:e6:84: 40:a9:97:9c:53:7a:06:b6:0d:84:7b:6c:23:7f:70: 9a:f0:07:2e:53:72:e0:76:e9:d5:cf:97:35:74:49: 2f:e1:f2:bc:90:10:7e:88:33:ce:97:30:38:38:89: 40:c1:94:50:ce:42:08:c5:75:e5:7e:6c:b2:c8:f5: ba:b4:8c:ff:14:a4:6d:d0:0c:c3:ad:49:c4:f1:cf: 56:88:d0:f4:42:cb:65:41:79:cd:b4:33:82:c6:bf: eb:be:66:05:e3:61:41:f0:f4:92:3c:75:66:fe:1a: 02:d4:62:d4:5b:c3:d0:1e:72:61:32:c9:ca:be:da: e6:c3:19:2a:8b:4c:16:53:fc:47:55:ec:1c:61:6a: c9:f9:6e:e0:e5:1d:02:05:e5:d2:f2:65:ba:de:10: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:69:B1:1E:91:9B:1C:49:92:53:F8:AF:EE:E8:D4:3F:0D:FD:F5:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/576a1979-abdd-3915-bd60-06c74a6f1e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 216.170.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7b:53:62:3d:62:ff:40:6f:c3:a7:ce:b2:92:a7:79:b8:a0: 4e:68:27:ac:41:fb:94:9d:4c:ab:ae:f5:58:3e:23:1a:65:81: 2d:3f:8b:15:7a:b2:71:ad:18:98:4b:9b:a4:a2:14:76:de:ed: ae:5e:1a:3f:90:27:d2:69:dc:aa:9e:c2:6c:e2:1f:08:2e:a6: 63:df:89:2e:a8:c9:67:62:67:4a:86:95:cf:41:71:c3:23:73: 95:9d:d8:f3:e7:7e:72:d2:c4:01:b6:cb:7f:f7:5a:b6:e1:5f: 9d:06:79:de:4d:27:9f:59:88:9b:43:94:fc:f3:a6:2e:71:83: a5:1d:5f:07:36:3f:eb:19:88:cd:b7:52:e1:f0:c3:15:c5:3d: c6:0e:14:46:12:75:d8:48:29:19:27:93:f7:61:27:9e:a2:1d: af:8c:01:20:fc:0a:07:eb:a6:d9:9f:d7:68:74:3e:54:0f:a4: 7c:94:1b:78:30:e2:a8:b6:14:a4:c1:eb:27:26:91:8c:20:99: 25:c5:2c:14:9d:31:b8:8e:d3:3a:bc:8f:b5:5e:79:19:d4:1c: bb:d3:4f:bd:50:08:36:8d:ac:7d:bd:f6:3e:af:d2:5a:fe:2a: 00:54:52:72:01:7e:c7:cc:1d:2b:ba:8c:e9:b5:3a:05:28:29: 64:c0:a5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iDVpKkFxRB+NWo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI2MDkxMDIyMTk1MFoXDTI2MTIwOTIzMTk1MFowLzEtMCsGA1UEAxMk MmZjNGYwMjktMDEzYy00YjU3LWJhNzktMWQ3ZGVhOTRmNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup2IjGBGBgSfn4KlQXEytFQUk7BkeWaTPQGx 5Gfv2NLl7P00rmo8rCcPv6SfGRCEKKgyXEz5JD6oI4ad/0IMREX/xstP6K+72GeA HbxhtJgKVphk7XsejH149IvL0g5FKBkjKFbO5oRAqZecU3oGtg2Ee2wjf3Ca8Acu U3LgdunVz5c1dEkv4fK8kBB+iDPOlzA4OIlAwZRQzkIIxXXlfmyyyPW6tIz/FKRt 0AzDrUnE8c9WiND0QstlQXnNtDOCxr/rvmYF42FB8PSSPHVm/hoC1GLUW8PQHnJh MsnKvtrmwxkqi0wWU/xHVewcYWrJ+W7g5R0CBeXS8mW63hA3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlpsR6RmxxJklP4r+7o1D8N/fWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvNTc2YTE5NzktYWJkZC0z OTE1LWJkNjAtMDZjNzRhNmYxZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ7U2I9Yv9Ab8OnzrKSp3m4oE5oJ6xB+5SdTKuu9Vg+IxplgS0/ixV6 snGtGJhLm6SiFHbe7a5eGj+QJ9Jp3KqewmziHwgupmPfiS6oyWdiZ0qGlc9BccMj c5Wd2PPnfnLSxAG2y3/3WrbhX50Ged5NJ59ZiJtDlPzzpi5xg6UdXwc2P+sZiM23 UuHwwxXFPcYOFEYSddhIKRknk/dhJ56iHa+MASD8Cgfrptmf12h0PlQPpHyUG3gw 4qi2FKTB6ycmkYwgmSXFLBSdMbiO0zq8j7VeeRnUHLvTT71QCDaNrH299j6v0lr+ KgBUUnIBfsfMHSu6jOm1OgUoKWTApcM= -----END CERTIFICATE-----Generated at Fri Sep 11 09:24:03 2026 by rpki-client