$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa File: 328a9f9e-f8c1-360f-88b5-5283333c29d7.roa (raw, json) Hash identifier: Yei8e/OzMHPIFr46WMqNdwIQpxokGfRL7x0RHuq4L6c= Subject key identifier: BB:9B:4E:FC:4F:9E:CE:CA:5F:BF:9D:0F:8C:7E:B5:25:06:00:06:2B Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F4328584F51D2B0214FB5BFD9BD431880 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 46694 IP address blocks: 216.229.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b0:21:4f:b5:bf:d9:bd:43:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=7016352f-f93a-42df-85c8-e9204170bb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:f7:51:7d:69:f9:81:06:fc:0c:ab:bc:17: 5a:79:2a:ea:34:ef:7d:8e:80:25:36:7a:4a:a5:aa: a6:8b:47:15:bf:aa:76:23:95:1c:ec:57:1b:20:cd: 4c:84:d5:86:3b:31:fa:16:3c:8c:55:04:3c:45:39: 88:82:5b:4d:c8:3e:da:8a:b3:48:61:56:5e:df:93: 3c:59:af:34:14:1a:7c:c5:43:98:24:9c:1b:f2:88: 3e:e2:32:42:1e:26:9a:84:7c:ad:9d:56:c1:54:34: 0a:6b:8d:37:75:1d:54:9f:51:7b:96:60:bb:b4:df: 4d:a0:9a:13:ae:9f:18:37:20:ed:63:75:76:4e:12: 0e:79:d8:e1:95:04:40:de:95:96:42:89:ec:1b:e9: c9:e3:75:a0:c3:15:c7:bf:b0:38:ed:35:a4:c7:49: 41:ce:3b:d6:23:9d:97:bd:9b:89:93:99:63:6b:1c: 6b:b3:e3:b3:2e:65:45:92:3f:1b:39:b6:5f:60:80: 5d:34:a9:aa:e7:3c:7c:49:2e:25:5e:0f:4f:5c:6b: 85:31:19:b0:9c:ef:9c:11:20:84:9a:97:d9:2a:a2: f3:8a:aa:1a:e5:89:b8:8f:74:95:fb:b3:f4:58:9c: 82:c1:f5:8e:5a:fc:e7:17:ba:7e:fa:26:bc:49:6a: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9B:4E:FC:4F:9E:CE:CA:5F:BF:9D:0F:8C:7E:B5:25:06:00:06:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8d:8d:35:5f:9f:ac:5d:8a:6e:54:3f:8f:3f:3e:d4:0f:91: 04:50:1e:b0:f6:cc:48:0a:fe:e7:92:6e:f7:6d:88:fe:3c:0f: 65:48:94:0f:17:15:56:f4:17:75:49:23:13:d3:0e:73:60:61: c0:27:eb:ab:c4:83:1a:ac:a1:c0:12:e2:93:6f:74:d4:55:09: 47:aa:ff:25:46:2e:2d:c6:09:b2:13:85:86:42:eb:33:95:b5: 60:7c:17:09:c2:84:d9:7e:3f:7f:8a:63:ba:a1:fd:44:34:cb: dd:c0:3f:54:3a:b0:5e:46:33:d6:8b:c1:33:93:1e:7a:1d:a8: a5:77:84:cd:a3:1b:55:9c:6f:1f:f8:27:08:30:28:3d:2b:10: 4b:bd:92:77:71:70:f6:5f:00:5c:5d:34:03:08:2a:d8:6c:d5: 8e:ad:6f:e9:31:24:e9:f2:6a:e1:85:ec:7d:e0:ce:60:8d:8d: c2:12:0b:aa:3e:b0:3b:ae:f8:77:e5:0b:66:08:bf:f0:29:2c: 8d:e5:26:09:d3:5e:52:c0:5e:e7:f9:4c:f1:52:b6:82:68:56: 35:be:9d:f3:03:05:6e:03:67:b7:1d:00:de:ca:02:0f:c5:7b: 7c:c1:b3:a6:13:cf:ea:4a:d4:0a:2b:bb:ad:a6:f0:d1:f9:06: f4:65:9d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rAhT7W/2b1DGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NzAxNjM1MmYtZjkzYS00MmRmLTg1YzgtZTkyMDQxNzBiYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SH3UX1p+YEG/AyrvBdaeSrqNO99joAlNnpK paqmi0cVv6p2I5Uc7FcbIM1MhNWGOzH6FjyMVQQ8RTmIgltNyD7airNIYVZe35M8 Wa80FBp8xUOYJJwb8og+4jJCHiaahHytnVbBVDQKa403dR1Un1F7lmC7tN9NoJoT rp8YNyDtY3V2ThIOedjhlQRA3pWWQonsG+nJ43WgwxXHv7A47TWkx0lBzjvWI52X vZuJk5ljaxxrs+OzLmVFkj8bObZfYIBdNKmq5zx8SS4lXg9PXGuFMRmwnO+cESCE mpfZKqLziqoa5Ym4j3SV+7P0WJyCwfWOWvznF7p++ia8SWp3UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLubTvxPns7KX7+dD4x+tSUGAAYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvMzI4YTlmOWUtZjhjMS0z NjBmLTg4YjUtNTI4MzMzM2MyOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyNjTVfn6xdim5UP48/PtQPkQRQHrD2zEgK/ueSbvdtiP48D2VIlA8X FVb0F3VJIxPTDnNgYcAn66vEgxqsocAS4pNvdNRVCUeq/yVGLi3GCbIThYZC6zOV tWB8FwnChNl+P3+KY7qh/UQ0y93AP1Q6sF5GM9aLwTOTHnodqKV3hM2jG1Wcbx/4 JwgwKD0rEEu9kndxcPZfAFxdNAMIKths1Y6tb+kxJOnyauGF7H3gzmCNjcISC6o+ sDuu+HflC2YIv/ApLI3lJgnTXlLAXuf5TPFStoJoVjW+nfMDBW4DZ7cdAN7KAg/F e3zBs6YTz+pK1Aoru62m8NH5BvRlnZE= -----END CERTIFICATE-----Generated at Tue Oct 13 19:28:00 2026 by rpki-client