$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa File: b168ffdf-f7ea-3494-af80-713656ce5e8d.roa (raw, json) Hash identifier: 2Qw9+D472abkXige8zCpup3LRreLi9RZb+EJLGZce6Q= Subject key identifier: FB:24:12:B0:7D:53:2F:89:29:FB:31:F4:3F:AB:82:FE:7A:0C:1B:21 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584F1897AE4EB659920D5AD99DC0 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 399575 IP address blocks: 216.205.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:ae:4e:b6:59:92:0d:5a:d9:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=c83c27d4-e614-4a7e-a22d-c862faf18ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:fe:21:ff:c3:13:28:37:b9:d9:f7:d8:bd: 88:55:02:e1:e7:d1:9b:63:c6:8e:31:c5:4f:57:80: 82:46:b3:c7:75:79:14:a9:78:98:9b:e3:cc:53:cf: ca:d8:9b:b7:2f:85:e7:ca:80:ed:16:a5:32:e7:42: 4d:02:1f:a7:f1:e5:7a:4c:27:3b:17:45:60:3f:a7: 8f:92:ba:19:36:74:e6:df:21:89:4d:7e:7f:ae:41: fe:c7:c6:5d:69:52:e6:95:88:39:80:83:62:7f:2e: c8:6d:39:6b:8e:72:d8:7b:0f:69:b0:20:25:c3:73: d1:f4:3f:12:6d:24:fb:75:50:54:e5:57:fc:47:ae: 4e:29:f8:d9:6e:e6:31:c3:0a:a9:15:aa:f9:2c:fa: b5:16:76:db:ad:17:9a:16:60:63:cb:94:13:72:35: b8:c9:88:87:70:63:7a:9a:7d:8d:30:a4:14:9f:c8: 32:71:bb:45:de:16:96:1c:c6:12:80:19:35:08:7e: f2:04:be:b2:d2:7d:13:c3:57:04:a4:c1:a4:d2:07: 6e:d5:a5:dd:d2:30:12:5f:4c:86:0c:7e:b6:b1:e6: ce:83:a7:44:cf:65:a7:de:a9:f2:59:82:f2:1a:ec: 5c:a7:fd:aa:9f:05:3e:dc:d4:a4:96:ea:fb:f3:ad: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:24:12:B0:7D:53:2F:89:29:FB:31:F4:3F:AB:82:FE:7A:0C:1B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ba:43:71:14:0f:ba:57:2c:b1:f4:50:28:be:0f:08:13:10: ec:77:7d:e5:ad:40:87:e5:62:80:a3:3a:b0:46:48:c8:a8:28: b7:ce:2a:40:ad:f1:0d:34:87:0b:b0:c6:89:77:28:e1:2c:d2: d5:47:45:d0:02:ed:cd:8a:73:15:62:68:8a:35:70:31:db:7c: 91:dd:70:50:39:f0:e9:be:bb:04:d9:08:99:6c:55:5a:f1:9f: 4f:e9:e4:1d:da:46:be:bb:16:65:1a:24:57:3a:3f:ff:9d:05: 88:7f:71:b3:34:50:a7:96:2f:bc:de:aa:c8:b4:f0:39:43:ed: 8b:36:fa:dc:23:6e:bc:1a:b6:14:82:41:01:11:67:2b:59:92: 12:c0:0c:20:c1:38:a3:81:8d:19:11:10:ec:a4:cd:e2:6e:cf: 96:29:1a:ce:33:9c:e3:75:c1:8c:ba:b8:7c:3e:82:f1:7f:1f: 29:a0:3d:0a:d6:98:26:6a:e6:04:f6:4b:69:4a:ba:e0:9b:d8: b8:3b:6d:8b:29:63:3a:6c:e9:e7:d0:d3:e7:4c:cd:08:46:22: e5:f4:0c:66:07:30:c8:dc:6a:0a:39:25:ce:1e:af:43:b5:85: e4:23:0a:82:c7:48:cf:f0:b1:f3:31:b0:97:dd:3e:20:dc:58: b5:f1:31:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl65OtlmSDVrZncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YzgzYzI3ZDQtZTYxNC00YTdlLWEyMmQtYzg2MmZhZjE4ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcT+If/DEyg3udn32L2IVQLh59GbY8aOMcVP V4CCRrPHdXkUqXiYm+PMU8/K2Ju3L4XnyoDtFqUy50JNAh+n8eV6TCc7F0VgP6eP kroZNnTm3yGJTX5/rkH+x8ZdaVLmlYg5gINify7IbTlrjnLYew9psCAlw3PR9D8S bST7dVBU5Vf8R65OKfjZbuYxwwqpFar5LPq1FnbbrReaFmBjy5QTcjW4yYiHcGN6 mn2NMKQUn8gycbtF3haWHMYSgBk1CH7yBL6y0n0Tw1cEpMGk0gdu1aXd0jASX0yG DH62sebOg6dEz2Wn3qnyWYLyGuxcp/2qnwU+3NSklur7862fDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPskErB9Uy+JKfsx9D+rgv56DBshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYjE2OGZmZGYtZjdlYS0z NDk0LWFmODAtNzEzNjU2Y2U1ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2M1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq6Q3EUD7pXLLH0UCi+DwgTEOx3feWtQIflYoCjOrBGSMioKLfOKkCt 8Q00hwuwxol3KOEs0tVHRdAC7c2KcxViaIo1cDHbfJHdcFA58Om+uwTZCJlsVVrx n0/p5B3aRr67FmUaJFc6P/+dBYh/cbM0UKeWL7zeqsi08DlD7Ys2+twjbrwathSC QQERZytZkhLADCDBOKOBjRkREOykzeJuz5YpGs4znON1wYy6uHw+gvF/HymgPQrW mCZq5gT2S2lKuuCb2Lg7bYspYzps6efQ0+dMzQhGIuX0DGYHMMjcago5Jc4er0O1 heQjCoLHSM/wsfMxsJfdPiDcWLXxMZc= -----END CERTIFICATE-----Generated at Sun Sep 13 12:57:48 2026 by rpki-client