$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa File: 2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa (raw, json) Hash identifier: t0PZTEhdieuph0egYFoxg6rxuiQMfXkRHFy4HU8OP1s= Subject key identifier: 47:CD:EA:97:96:D8:A5:2C:70:2F:F1:53:14:9B:9F:BE:15:9D:F7:2D Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584F1897AE28C82ADD0A91AA5280 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 399575 IP address blocks: 216.205.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:ae:28:c8:2a:dd:0a:91:aa:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=0ca16bdc-3705-4d46-b389-59b9e25d061f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:3d:1d:f7:3c:4d:e7:5e:e5:1b:9c:d8:c0: 4b:d5:e9:d0:56:42:0b:7f:07:a5:27:3b:65:3a:10: eb:78:61:f2:7c:95:56:03:d9:93:0c:42:22:7e:65: 45:61:a9:17:a0:08:6b:5d:30:f7:fa:df:40:8d:1e: 2d:ac:1b:7b:e2:9d:f1:91:ba:ab:8f:99:6c:e3:f4: b8:c9:8e:c5:28:89:36:3c:69:ae:ba:92:cb:a3:b3: 4b:31:78:9d:25:9b:7e:24:58:e5:dc:0d:15:ef:99: 34:0b:11:bb:a8:00:16:72:6c:d3:38:be:c2:0c:28: ba:1a:dc:1b:fd:e1:97:cf:17:35:16:91:2e:77:af: 83:aa:ab:2f:1f:06:63:82:15:7a:b7:09:cb:49:8b: d8:b5:b8:7d:8f:73:73:31:59:29:f1:63:64:6c:0a: 21:46:3e:51:44:18:5e:d5:7c:c1:47:5f:8f:db:6e: 0d:14:76:8d:01:c2:16:a8:27:e7:4e:7f:1e:69:5c: 16:1f:dc:2c:a4:a5:fe:5b:0d:82:36:fa:8c:d8:a2: 1e:98:8e:2e:0e:be:9b:97:bc:60:f7:73:52:8c:16: 82:bd:bd:13:52:cf:30:6a:35:29:de:1d:31:c4:74: fe:b4:2e:81:0d:27:29:16:70:bf:4f:2a:da:e7:1e: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CD:EA:97:96:D8:A5:2C:70:2F:F1:53:14:9B:9F:BE:15:9D:F7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:82:a9:ae:2a:fe:73:0d:e8:76:8b:3d:61:f3:dc:f7:4a:63: de:65:cb:ac:55:e3:ef:78:53:d1:7e:eb:37:c1:9c:d6:b3:12: a5:1f:98:2f:db:e7:18:3b:f2:34:03:50:9d:4d:d8:f2:53:29: 87:ab:7e:e5:c2:62:61:89:31:df:eb:c7:4d:2c:90:f8:51:ee: 4b:77:e0:8a:51:6f:4c:40:52:7e:63:49:01:2c:ba:89:95:a1: c2:e7:eb:9a:13:0a:f9:59:22:b7:df:f1:54:45:1a:23:20:04: f5:57:d5:ae:82:6f:07:f6:20:65:f9:fe:47:10:0e:40:1f:c7: 93:c4:38:fc:57:1a:8b:09:74:35:00:79:e5:ca:37:8b:93:39: 00:72:de:09:56:9b:75:ab:2e:c2:f2:12:b4:12:8b:d3:43:41: 72:78:00:7b:49:ba:f6:23:1d:a5:93:22:3f:9c:74:91:bc:34: 5a:7d:30:60:28:15:15:36:6f:fa:ba:ca:9f:de:fc:ae:d3:6b: 42:f1:7a:82:90:c4:2d:15:d7:5f:22:32:b5:09:5c:ab:43:59: 14:5e:9c:c3:46:b6:33:60:22:9a:ab:11:15:cd:35:2d:55:2b: 6d:76:be:51:b5:9f:1e:a2:10:c4:c7:9a:ff:9b:8a:b3:33:8f: b2:ce:4b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl64oyCrdCpGqUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MGNhMTZiZGMtMzcwNS00ZDQ2LWIzODktNTliOWUyNWQwNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvls9Hfc8Tede5Ruc2MBL1enQVkILfwelJztl OhDreGHyfJVWA9mTDEIifmVFYakXoAhrXTD3+t9AjR4trBt74p3xkbqrj5ls4/S4 yY7FKIk2PGmuupLLo7NLMXidJZt+JFjl3A0V75k0CxG7qAAWcmzTOL7CDCi6Gtwb /eGXzxc1FpEud6+DqqsvHwZjghV6twnLSYvYtbh9j3NzMVkp8WNkbAohRj5RRBhe 1XzBR1+P224NFHaNAcIWqCfnTn8eaVwWH9wspKX+Ww2CNvqM2KIemI4uDr6bl7xg 93NSjBaCvb0TUs8wajUp3h0xxHT+tC6BDScpFnC/Tyra5x6RPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfN6peW2KUscC/xUxSbn74VnfctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMmNhNDQ0NzYtZWU0Zi0z YzYxLTg3ZjItYmEwNTYzZjc4YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2M1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6Cqa4q/nMN6HaLPWHz3PdKY95ly6xV4+94U9F+6zfBnNazEqUfmC/b 5xg78jQDUJ1N2PJTKYerfuXCYmGJMd/rx00skPhR7kt34IpRb0xAUn5jSQEsuomV ocLn65oTCvlZIrff8VRFGiMgBPVX1a6Cbwf2IGX5/kcQDkAfx5PEOPxXGosJdDUA eeXKN4uTOQBy3glWm3WrLsLyErQSi9NDQXJ4AHtJuvYjHaWTIj+cdJG8NFp9MGAo FRU2b/q6yp/e/K7Ta0LxeoKQxC0V118iMrUJXKtDWRRenMNGtjNgIpqrERXNNS1V K212vlG1nx6iEMTHmv+birMzj7LOSwo= -----END CERTIFICATE-----Generated at Sun Sep 13 12:09:20 2026 by rpki-client