$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa File: 7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json) Hash identifier: NDKsnK1cGdvCb+pHP6XT329YVTS9N+MBGri8XsT23qo= Subject key identifier: AC:C5:A3:74:67:99:4A:5F:3B:B8:12:17:60:CC:35:E7:15:7E:02:0B Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Certificate serial: 010D0C9F4328584FAB28AD8049F5BFF42D509C80 Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 396982 IP address blocks: 209.240.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:ad:80:49:f5:bf:f4:2d:50:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=b065428e-8458-4ce4-955e-97195dd9c050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:43:56:39:8e:32:2d:0a:7c:bc:d9:e3:f0: c2:77:42:d1:aa:4b:d8:c7:e1:4e:c3:23:32:cc:f5: c4:32:41:bf:3e:ce:bd:24:27:c4:14:b5:df:f2:9c: 5c:65:53:86:b8:29:da:d1:d3:85:91:b4:e3:d3:a4: 79:f2:14:ac:c1:96:eb:8b:49:43:98:07:73:46:74: 50:02:b3:b6:47:8b:34:c8:81:6a:1d:cc:1b:cd:ad: cc:74:ba:6e:bb:cb:39:37:30:fb:a9:14:aa:cb:76: d3:22:d2:13:44:5c:22:25:fa:77:22:6f:18:d4:b6: c4:be:8c:b7:06:cb:54:00:90:8f:a1:a3:bf:bb:86: 92:1c:d1:75:12:6b:bc:23:c7:85:37:1c:c6:e3:0a: dc:45:1d:4d:9c:b1:f4:78:c9:89:cb:43:9a:05:6d: a8:61:ea:6e:31:39:07:da:7e:a4:44:1b:f6:12:1c: 85:9e:e9:64:06:78:59:5a:de:67:c0:92:9d:2f:fd: 15:cb:dc:2d:26:37:b9:2c:d1:dd:a1:8b:55:92:6a: aa:4b:c9:60:31:24:17:3b:87:f7:03:1c:2f:bb:6a: a3:55:fc:60:3b:b8:2d:46:e2:3a:d7:6c:5e:02:0a: a2:49:75:5f:53:04:cb:7c:87:c9:61:3f:df:f1:59: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:A3:74:67:99:4A:5F:3B:B8:12:17:60:CC:35:E7:15:7E:02:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl X509v3 Authority Key Identifier: keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer sbgp-ipAddrBlock: critical IPv4: 209.240.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e4:43:db:e2:89:42:5c:13:8d:12:13:ee:68:fa:d4:3c:94: e3:ad:c3:7a:bc:f6:58:90:12:13:88:ab:25:3d:62:42:8b:64: 78:d6:10:ed:cc:91:c8:7f:3d:51:30:99:2e:15:64:ad:d7:ad: 56:cc:67:de:57:f8:74:46:2c:79:92:4b:73:42:53:c3:d7:bc: ff:17:19:46:1e:32:0b:b0:31:fb:c5:3b:be:57:a8:a3:41:16: 7b:8b:21:a3:cc:b6:c4:da:3b:4b:52:67:17:37:ea:28:45:7a: 33:31:e4:a0:e2:08:42:25:66:78:3e:7b:d0:89:08:9d:d1:f4: d4:f0:f9:a0:e9:67:43:ae:ae:c6:35:4b:0c:df:00:80:bf:4a: f2:31:36:b2:39:f9:46:59:31:86:de:33:83:1f:66:cd:5f:5f: 3e:5f:76:d6:8b:89:f2:6e:b8:69:1c:57:de:8e:01:32:31:9f: fd:f7:02:58:c5:80:39:ad:8d:9a:d8:6f:c7:c2:d0:97:8a:45: e8:3f:02:98:90:d3:ca:14:b7:d2:a9:e5:81:c2:77:41:5c:87: 7a:bd:c7:7d:cd:28:53:7f:34:95:56:de:b7:3d:44:18:3e:22: fc:04:4f:48:93:bd:e0:49:44:75:13:f2:33:60:43:4c:01:a6: 6a:d1:d9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKK2ASfW/9C1QnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JkYzg4MWYtNTRhYy00MGE5LTg5YjMtNTM4M2NmMjQz YmFlMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YjA2NTQyOGUtODQ1OC00Y2U0LTk1NWUtOTcxOTVkZDljMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2FDVjmOMi0KfLzZ4/DCd0LRqkvYx+FOwyMy zPXEMkG/Ps69JCfEFLXf8pxcZVOGuCna0dOFkbTj06R58hSswZbri0lDmAdzRnRQ ArO2R4s0yIFqHcwbza3MdLpuu8s5NzD7qRSqy3bTItITRFwiJfp3Im8Y1LbEvoy3 BstUAJCPoaO/u4aSHNF1Emu8I8eFNxzG4wrcRR1NnLH0eMmJy0OaBW2oYepuMTkH 2n6kRBv2EhyFnulkBnhZWt5nwJKdL/0Vy9wtJje5LNHdoYtVkmqqS8lgMSQXO4f3 Axwvu2qjVfxgO7gtRuI612xeAgqiSXVfUwTLfIfJYT/f8VkweQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzFo3RnmUpfO7gSF2DMNecVfgILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmRj ODgxZi01NGFjLTQwYTktODliMy01MzgzY2YyNDNiYWUvN2YxNjgxOTctM2U4NS0z ZmQ1LWI0OGEtYmFmMWMyMzQ0ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkYzg4MWYtNTRhYy00MGE5LTg5 YjMtNTM4M2NmMjQzYmFlL2NiZGM4ODFmLTU0YWMtNDBhOS04OWIzLTUzODNjZjI0 M2JhZS5jcmwwHwYDVR0jBBgwFoAUC3efBgtCdYQS3txgZnSkOzvFHDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYmRjODgxZi01NGFjLTQwYTktODliMy01Mzgz Y2YyNDNiYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0fAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLkQ9viiUJcE40SE+5o+tQ8lOOtw3q89liQEhOIqyU9YkKLZHjWEO3M kch/PVEwmS4VZK3XrVbMZ95X+HRGLHmSS3NCU8PXvP8XGUYeMguwMfvFO75XqKNB FnuLIaPMtsTaO0tSZxc36ihFejMx5KDiCEIlZng+e9CJCJ3R9NTw+aDpZ0OursY1 SwzfAIC/SvIxNrI5+UZZMYbeM4MfZs1fXz5fdtaLifJuuGkcV96OATIxn/33AljF gDmtjZrYb8fC0JeKReg/ApiQ08oUt9Kp5YHCd0Fch3q9x33NKFN/NJVW3rc9RBg+ IvwET0iTveBJRHUT8jNgQ0wBpmrR2Xc= -----END CERTIFICATE-----Generated at Mon Nov 2 20:14:29 2026 by rpki-client