$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa File: c96c620b-bc50-3f60-a167-5552b8cc9d25.roa (raw, json) Hash identifier: D1t8adRiwRmJFaR4wLTndbEWpCRhLrCpCSr2V9Ea6F0= Subject key identifier: C5:9B:7F:CB:1C:96:13:43:92:FC:0C:96:9E:21:85:40:D1:38:ED:D4 Certificate issuer: /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Certificate serial: 010D0C9F4328584FB3A684FE5BFF9744FBDBB400 Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 32121 IP address blocks: 142.152.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:84:fe:5b:ff:97:44:fb:db:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=d71cb97c-b91c-4536-9d8f-12112beec598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:85:84:a9:24:5b:ed:f3:40:46:db:6f:a5: 50:02:03:96:c7:1f:81:bf:f0:a5:a5:23:85:5e:fd: b8:e4:26:cc:10:e9:41:a1:4d:23:93:96:8c:72:4a: 67:1d:4c:e8:cb:95:72:bd:58:9b:10:cf:02:e2:fe: 52:29:35:79:b1:67:a6:37:8f:da:a6:ee:23:bf:3a: cc:ca:c7:d6:d1:db:f3:0c:7f:00:a5:ab:14:21:09: f9:36:a4:94:e6:85:18:68:3a:35:36:7c:c2:5e:71: 14:ae:93:19:f2:16:59:c6:a9:f1:51:85:c3:4a:b6: 3c:95:c9:9c:fd:09:c3:ac:9c:0d:a0:4d:71:04:20: 88:b0:98:c2:d1:b1:07:f7:91:d8:a8:e1:28:9a:f3: 5e:0e:27:b6:74:97:d0:ce:dc:40:e9:10:7f:59:f2: 2b:59:3e:66:e5:26:3c:af:18:a2:61:76:da:c3:0d: 31:08:87:60:78:37:df:54:13:3e:d3:06:bd:2e:6d: ff:0d:53:39:e0:ba:1f:70:c4:9b:3e:46:9b:bb:28: fe:8b:b4:b8:d0:46:be:07:89:03:47:ac:20:e3:6a: e2:0d:bc:30:bf:3c:87:37:c3:41:66:4b:8f:c3:71: 04:5a:29:04:d4:a5:27:1f:78:ef:72:0a:95:66:a0: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9B:7F:CB:1C:96:13:43:92:FC:0C:96:9E:21:85:40:D1:38:ED:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl X509v3 Authority Key Identifier: keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer sbgp-ipAddrBlock: critical IPv4: 142.152.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2c:79:aa:73:d5:e5:88:30:d2:58:ac:fa:63:2d:fb:22:ad: 36:a5:b7:00:12:74:ae:38:cb:8b:b3:b7:49:7d:bd:8c:29:48: 1b:85:66:ec:79:eb:83:c3:8d:ef:98:d5:29:d0:13:64:49:a5: f9:6d:29:38:c2:b4:b6:6a:aa:8e:eb:d1:c0:96:23:78:a1:c0: b8:ee:a2:c8:c5:86:78:2f:94:76:e8:6b:3a:15:90:a6:c3:8a: e5:8b:1a:9f:0f:1b:c3:f3:27:85:54:70:b7:7c:1e:89:49:05: fb:17:76:df:69:0d:ec:9e:85:9d:37:82:62:0e:3c:5e:9a:84: 5c:88:6d:ed:15:75:b4:18:17:64:f2:dd:0d:17:ba:0e:90:21: 64:61:5d:f3:50:cb:48:ba:c7:51:2a:98:e8:12:bb:6e:22:79: b3:f0:8a:da:5c:8f:d0:9a:d4:8d:af:5d:b3:26:85:26:7e:24: 41:6f:14:90:4e:3e:93:10:99:2e:83:25:35:09:eb:26:79:0c: 9e:04:17:51:69:ff:a3:1d:7a:79:4f:6e:44:5d:c9:0b:33:34: e5:5c:fe:f1:08:a7:56:b0:48:09:69:ba:f2:33:ad:c9:6a:9f: 38:8d:be:09:94:fe:ca:b9:35:cb:eb:40:6f:e7:50:82:04:fc: 59:06:3e:16 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+zpoT+W/+XRPvbtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3 ZjRkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZDcxY2I5N2MtYjkxYy00NTM2LTlkOGYtMTIxMTJiZWVjNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyWFhKkkW+3zQEbbb6VQAgOWxx+Bv/ClpSOF Xv245CbMEOlBoU0jk5aMckpnHUzoy5VyvVibEM8C4v5SKTV5sWemN4/apu4jvzrM ysfW0dvzDH8ApasUIQn5NqSU5oUYaDo1NnzCXnEUrpMZ8hZZxqnxUYXDSrY8lcmc /QnDrJwNoE1xBCCIsJjC0bEH95HYqOEomvNeDie2dJfQztxA6RB/WfIrWT5m5SY8 rxiiYXbaww0xCIdgeDffVBM+0wa9Lm3/DVM54LofcMSbPkabuyj+i7S40Ea+B4kD R6wg42riDbwwvzyHN8NBZkuPw3EEWikE1KUnH3jvcgqVZqAC+wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMWbf8sclhNDkvwMlp4hhUDROO3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTZi M2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvYzk2YzYyMGItYmM1MC0z ZjYwLWExNjctNTU1MmI4Y2M5ZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2YjNmOTEtNGQ5ZC00NTIwLThj YTktY2UyNjE2YzM3ZjRkLzcxNmIzZjkxLTRkOWQtNDUyMC04Y2E5LWNlMjYxNmMz N2Y0ZC5jcmwwHwYDVR0jBBgwFoAUIIgDn4hmZ9pBaWSbn0ULX6FbXBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2 MTZjMzdmNGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjpgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADCx5qnPV5Ygw0lis+mMt+yKtNqW3ABJ0rjjLi7O3SX29jClIG4Vm7Hnr g8ON75jVKdATZEml+W0pOMK0tmqqjuvRwJYjeKHAuO6iyMWGeC+UduhrOhWQpsOK 5Ysanw8bw/MnhVRwt3weiUkF+xd232kN7J6FnTeCYg48XpqEXIht7RV1tBgXZPLd DRe6DpAhZGFd81DLSLrHUSqY6BK7biJ5s/CK2lyP0JrUja9dsyaFJn4kQW8UkE4+ kxCZLoMlNQnrJnkMngQXUWn/ox16eU9uRF3JCzM05Vz+8QinVrBICWm68jOtyWqf OI2+CZT+yrk1y+tAb+dQggT8WQY+Fg== -----END CERTIFICATE-----Generated at Wed Nov 4 19:05:51 2026 by rpki-client