$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa File: a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa (raw, json) Hash identifier: jD86R0jSQ8SEcBKwWvqqf4dLJ2tHGPUR9HjN9eD4qSI= Subject key identifier: 1E:2E:49:86:CB:ED:58:80:D5:1B:95:D8:0C:F6:34:40:2C:04:F7:12 Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F4328584F480D43DC73D6E5FB20267240 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16787 IP address blocks: 192.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:43:dc:73:d6:e5:fb:20:26:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=466f7994-c465-4406-a271-e000209894f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:f4:bc:cd:a7:4e:4c:f2:ec:66:fa:bf:83: 64:30:ae:75:44:b0:d1:86:35:cb:8a:4f:76:8d:ad: 9d:86:30:d2:89:ea:ec:be:f2:ac:3c:cb:a2:0e:70: ae:08:5f:d2:4c:2a:45:23:e5:a3:0f:97:67:34:bb: ba:cc:3f:fc:b0:1f:d1:49:dc:f0:6e:29:32:59:bc: f4:bf:dc:01:12:6a:69:2f:21:85:ec:b2:21:b3:e9: 8c:7a:d6:59:9b:84:11:f9:4b:9d:d6:b4:bc:e5:df: 3e:2a:8e:ba:06:00:3a:73:7f:24:1d:9e:2d:50:78: 49:6b:0f:30:ae:14:61:1b:2e:a2:e9:5e:00:ee:4b: bb:6c:9e:f5:fd:12:82:d7:87:11:41:db:48:cb:52: 31:37:ed:a8:8d:af:45:5b:b5:f8:c0:01:2d:f3:fc: 6f:72:cd:d5:79:b2:dc:ae:54:5e:a4:06:45:32:8c: ad:ce:e6:3a:70:9b:9a:97:2b:2c:3c:17:8b:68:04: d2:62:a0:23:cf:7f:34:32:e9:31:9f:01:41:56:9a: 9f:85:87:67:38:33:93:c1:29:6f:96:6a:94:21:d7: 1f:d1:d1:bd:24:39:05:d9:1c:d8:cb:bc:91:80:0c: 44:64:9c:99:92:25:06:9c:2c:b9:ae:00:10:a7:ef: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2E:49:86:CB:ED:58:80:D5:1B:95:D8:0C:F6:34:40:2C:04:F7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv4: 192.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:40:4d:4f:e1:c7:b1:df:fa:50:68:51:d3:c3:e7:99:c9:bf: 9d:a3:6b:4d:d7:ff:ca:eb:23:02:2e:34:58:5b:1e:5d:62:59: 38:d0:30:69:d9:36:82:ca:25:e0:f7:3a:9d:5d:cc:a8:7a:bd: 0d:9a:9c:61:ad:65:80:02:6b:f3:71:b8:11:7c:29:22:55:f3: ed:ee:c8:38:e5:4d:6f:97:8f:ed:81:7d:a6:1f:32:df:84:57: 00:a0:d7:3f:90:18:57:be:fb:55:25:5f:2c:f1:a1:ee:76:b1: e7:32:dd:cb:ce:5b:6b:ac:21:a1:15:2f:f0:22:b3:94:05:2d: fa:3a:89:1a:65:88:dc:8d:49:9d:66:2c:3d:ad:33:66:50:30: 6b:08:f3:fc:9c:b5:21:9c:2e:2a:b6:3c:ee:55:b5:4a:cd:f0: 00:a7:28:7e:48:e2:ca:b5:e3:35:1b:73:69:0f:96:6b:f1:0e: 66:a2:ce:f7:71:c4:28:ad:39:07:18:6c:e9:a1:73:f7:bd:3d: 6a:0d:c2:4c:3e:5a:a0:b4:c8:bb:19:2b:d7:ab:8d:04:c9:92: b2:6c:9d:6a:24:c1:7c:43:d0:28:d6:0f:43:5a:58:b6:e3:97: cc:93:58:b7:af:fa:6e:c0:1d:b2:be:3a:7b:bf:b5:d0:c7:45: 9e:57:96:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUPcc9bl+yAmckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NDY2Zjc5OTQtYzQ2NS00NDA2LWEyNzEtZTAwMDIwOTg5NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidn0vM2nTkzy7Gb6v4NkMK51RLDRhjXLik92 ja2dhjDSiersvvKsPMuiDnCuCF/STCpFI+WjD5dnNLu6zD/8sB/RSdzwbikyWbz0 v9wBEmppLyGF7LIhs+mMetZZm4QR+Uud1rS85d8+Ko66BgA6c38kHZ4tUHhJaw8w rhRhGy6i6V4A7ku7bJ71/RKC14cRQdtIy1IxN+2oja9FW7X4wAEt8/xvcs3VebLc rlRepAZFMoytzuY6cJualyssPBeLaATSYqAjz380MukxnwFBVpqfhYdnODOTwSlv lmqUIdcf0dG9JDkF2RzYy7yRgAxEZJyZkiUGnCy5rgAQp+9Q8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4uSYbL7ViA1RuV2Az2NEAsBPcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvYTBlZjFhMTMtNDlkOS0z NDM5LTg3OGUtZDk4ZjUxZjFjMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFATU/hx7Hf+lBoUdPD55nJv52ja03X/8rrIwIuNFhbHl1iWTjQMGnZ NoLKJeD3Op1dzKh6vQ2anGGtZYACa/NxuBF8KSJV8+3uyDjlTW+Xj+2BfaYfMt+E VwCg1z+QGFe++1UlXyzxoe52secy3cvOW2usIaEVL/Ais5QFLfo6iRpliNyNSZ1m LD2tM2ZQMGsI8/yctSGcLiq2PO5VtUrN8ACnKH5I4sq14zUbc2kPlmvxDmaizvdx xCitOQcYbOmhc/e9PWoNwkw+WqC0yLsZK9erjQTJkrJsnWokwXxD0CjWD0NaWLbj l8yTWLev+m7AHbK+Onu/tdDHRZ5XlgY= -----END CERTIFICATE-----Generated at Sat Sep 26 13:04:49 2026 by rpki-client