$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/43a348bf-5796-3aec-b604-808fadc7f47b.roa File: 43a348bf-5796-3aec-b604-808fadc7f47b.roa (raw, json) Hash identifier: ZLnKE0sdtM9tKeq/tn0ard7USfSK/F2jSFlGv7Je7Ko= Subject key identifier: 81:38:C8:A2:BE:08:21:65:86:66:D9:9B:DF:D8:56:07:1F:52:D1:FA Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Certificate serial: 010D0C9F4328584F5CFD5B500D124BB79A4E2BE0 Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/43a348bf-5796-3aec-b604-808fadc7f47b.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 40933 IP address blocks: 216.220.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:5b:50:0d:12:4b:b7:9a:4e:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=ca5a4100-b1b6-4a9c-9970-481cc49b46cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:10:22:07:64:3b:66:9a:e4:1a:e0:38:4e: fd:6a:52:f5:76:14:4b:85:7c:43:b1:f5:64:da:cc: eb:1d:e3:54:f6:da:4a:ee:5f:1b:ab:f1:a9:9a:6a: 53:a4:8b:a6:81:27:14:c4:be:a0:f8:be:f1:32:c5: f9:89:a8:da:86:60:27:54:4a:36:83:94:0f:7b:6c: 00:18:5e:c0:a5:79:97:e1:60:82:15:42:35:ec:7d: 71:ce:89:fe:7f:30:6b:1c:92:4f:78:2f:43:8f:df: 02:13:2c:dd:dd:df:65:6c:a5:98:f2:59:89:e3:12: 53:95:e2:5e:da:f4:c1:21:70:d6:58:f3:f2:b3:ed: f1:99:01:47:b3:5a:52:92:c1:93:2f:57:0f:26:84: ee:26:c7:ef:8b:0e:fe:4f:16:0f:b1:cc:26:f9:4e: 5b:67:d4:e6:d3:fa:0b:72:dd:4d:52:fa:c0:bc:e7: 91:82:a2:45:7e:75:56:28:dd:04:98:dc:14:56:2f: 6f:22:d6:74:00:5f:15:6d:38:66:2b:9e:f4:12:d8: d6:16:55:2f:66:18:c0:78:ad:60:7e:2a:04:c4:74: 7b:94:5f:0d:f7:02:3e:1c:1c:c7:03:d9:a1:4c:31: 07:ff:cd:e0:14:26:c3:a7:d3:4d:bf:20:1f:52:c5: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:38:C8:A2:BE:08:21:65:86:66:D9:9B:DF:D8:56:07:1F:52:D1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/43a348bf-5796-3aec-b604-808fadc7f47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl X509v3 Authority Key Identifier: keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer sbgp-ipAddrBlock: critical IPv4: 216.220.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cb:1c:ed:af:c1:1b:8c:8e:e6:14:66:15:37:f0:e9:d9:6e: e1:96:75:7e:bf:b8:57:fd:71:71:60:9e:ee:3a:1e:e4:28:41: 45:f5:64:50:42:68:3f:93:02:b4:6c:89:4d:f5:a0:24:84:3b: 35:69:99:f7:b5:dc:82:d9:0c:c8:20:0f:13:05:e2:2e:7a:82: d9:d0:a2:6f:c9:3b:41:2d:9b:39:1b:8d:82:0c:a1:5b:33:d8: 11:bf:11:ec:8a:1e:7d:22:46:55:24:c4:3e:b1:2a:04:45:92: 00:f9:3b:7f:97:b5:0a:c6:ee:34:7b:06:43:dc:1c:8a:76:ba: fc:63:fe:a7:77:64:7c:5f:9c:7a:22:51:ad:d5:40:af:e5:a0: e3:8c:53:3f:1d:a3:0c:98:ca:bc:64:ec:f2:dc:cb:3d:c6:f4: 04:d7:36:29:11:a6:54:f0:9e:b9:16:42:b1:02:b7:b2:fc:b4: f2:c1:67:77:da:56:28:b0:00:92:c2:8d:4b:c0:89:fc:ac:18: 46:7d:82:e7:c3:af:b8:f2:61:e8:28:fb:b3:4a:10:42:72:bd: 45:c4:7d:45:60:5c:3e:3c:fa:42:fd:9b:6f:bf:4a:38:5e:4b: 0d:46:cc:78:5d:fd:aa:f7:cd:f8:15:d6:4f:62:dc:da:5f:5b: 08:e0:d4:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VtQDRJLt5pOK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh ZWNkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2E1YTQxMDAtYjFiNi00YTljLTk5NzAtNDgxY2M0OWI0NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgIQIgdkO2aa5BrgOE79alL1dhRLhXxDsfVk 2szrHeNU9tpK7l8bq/GpmmpTpIumgScUxL6g+L7xMsX5iajahmAnVEo2g5QPe2wA GF7ApXmX4WCCFUI17H1xzon+fzBrHJJPeC9Dj98CEyzd3d9lbKWY8lmJ4xJTleJe 2vTBIXDWWPPys+3xmQFHs1pSksGTL1cPJoTuJsfviw7+TxYPscwm+U5bZ9Tm0/oL ct1NUvrAvOeRgqJFfnVWKN0EmNwUVi9vItZ0AF8VbThmK570EtjWFlUvZhjAeK1g fioExHR7lF8N9wI+HBzHA9mhTDEH/83gFCbDp9NNvyAfUsXnjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE4yKK+CCFlhmbZm9/YVgcfUtH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5 ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvNDNhMzQ4YmYtNTc5Ni0z YWVjLWI2MDQtODA4ZmFkYzdmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1 YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATLHO2vwRuMjuYUZhU38OnZbuGWdX6/uFf9cXFgnu46HuQoQUX1ZFBC aD+TArRsiU31oCSEOzVpmfe13ILZDMggDxMF4i56gtnQom/JO0EtmzkbjYIMoVsz 2BG/EeyKHn0iRlUkxD6xKgRFkgD5O3+XtQrG7jR7BkPcHIp2uvxj/qd3ZHxfnHoi Ua3VQK/loOOMUz8dowyYyrxk7PLcyz3G9ATXNikRplTwnrkWQrECt7L8tPLBZ3fa ViiwAJLCjUvAifysGEZ9gufDr7jyYego+7NKEEJyvUXEfUVgXD48+kL9m2+/Sjhe Sw1GzHhd/ar3zfgV1k9i3NpfWwjg1AY= -----END CERTIFICATE-----Generated at Sun Oct 11 06:24:46 2026 by rpki-client