$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa File: c0ac2f53-beae-3b05-97d0-d26974f3905b.roa (raw, json) Hash identifier: I3tsjyzpSPAAMPHf2pwXr/SddPrUsFuDr7wmpxM3iH8= Subject key identifier: E4:AF:96:D4:4F:8B:7B:E3:4E:18:2D:3B:54:1F:BB:91:C6:39:FE:05 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584F7A4D8F7DF14E10A33259E340 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 16713 IP address blocks: 208.70.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8f:7d:f1:4e:10:a3:32:59:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=af575e6b-abb0-4eab-9e20-abd79710e9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:c6:1f:df:fe:43:cf:a7:94:f5:7f:aa:34: 6b:1e:5b:b4:5b:70:7b:16:a3:11:43:c8:1e:00:75: 7a:83:4e:71:bf:cb:3c:a1:a9:51:c4:aa:dd:e7:71: 3a:13:49:6d:bd:d2:b8:6e:37:ee:2a:38:b7:d5:43: ff:04:97:43:9f:28:9b:44:c5:d9:4c:75:e3:ac:78: b7:2a:c0:05:0f:77:45:a3:71:2f:c1:c1:fd:cb:6d: 20:07:85:47:98:73:61:32:d7:cf:ec:73:b3:0d:53: 84:a3:1f:32:54:5d:e5:23:7f:c7:12:50:f0:cc:d2: 06:a2:47:34:b4:87:c7:bd:da:40:27:f9:31:ae:18: 82:a6:7b:af:fb:da:0b:b3:7d:5d:00:be:fc:25:1f: a1:3b:ed:89:cc:33:47:c7:94:cb:39:f2:7c:7b:57: bf:10:c0:66:cd:bd:05:0b:9c:94:eb:dc:32:0f:e3: ad:7e:db:8a:3c:16:0f:39:0f:46:61:c7:b1:43:82: 7c:c0:ae:34:7f:d3:db:25:c4:aa:b7:f6:d5:3e:61: f7:64:f8:2a:f2:3c:47:0c:ef:f2:c6:b1:96:56:fb: ca:5d:5c:ec:b2:ef:f9:b3:66:b5:0a:e6:40:1b:47: 7d:3c:01:1b:17:3c:49:ae:ee:e8:df:27:3c:f9:e5: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AF:96:D4:4F:8B:7B:E3:4E:18:2D:3B:54:1F:BB:91:C6:39:FE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d4:24:dd:54:2e:76:14:cf:e9:16:54:ca:48:9d:37:c1:e7: 07:f8:73:a9:15:b7:75:3d:4c:18:60:f8:10:fd:66:5c:30:a6: a0:03:54:0d:1f:2a:94:06:25:b5:9f:3c:30:ae:79:f2:86:1f: 58:7c:63:b9:27:2c:9d:27:cb:47:72:b2:3a:8f:35:73:3f:b9: 0b:da:eb:91:cf:0c:64:5e:51:52:94:03:ee:35:84:4c:2f:f1: c1:66:72:d3:c9:f0:ad:8d:af:bd:d7:16:ad:76:06:57:79:fd: bc:35:89:6e:8c:64:1d:4c:db:6d:a2:e0:17:74:8a:f1:d7:e9: b8:c8:71:67:a4:89:c9:ba:f4:db:26:f4:3d:65:8f:0a:23:29: 34:25:2b:d6:8e:44:fa:43:d6:a8:ce:83:f7:cf:58:14:ab:2b: 85:14:d3:5e:5c:24:0e:11:58:34:3e:0b:47:f0:91:94:15:55: 17:24:67:b0:b0:f4:9d:87:03:d2:d1:79:de:ea:df:93:bf:15: 49:3f:22:3d:f2:a0:c2:92:30:05:fb:3b:eb:25:5e:0a:e4:19: 58:51:71:22:49:99:44:4a:f6:96:67:b9:b8:f9:d4:1d:1d:86: 90:60:b6:33:15:e4:25:be:f7:32:40:bd:ae:cb:9d:b1:60:5e: 9c:f2:ae:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TY998U4QozJZ40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YWY1NzVlNmItYWJiMC00ZWFiLTllMjAtYWJkNzk3MTBlOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhXGH9/+Q8+nlPV/qjRrHlu0W3B7FqMRQ8ge AHV6g05xv8s8oalRxKrd53E6E0ltvdK4bjfuKji31UP/BJdDnyibRMXZTHXjrHi3 KsAFD3dFo3EvwcH9y20gB4VHmHNhMtfP7HOzDVOEox8yVF3lI3/HElDwzNIGokc0 tIfHvdpAJ/kxrhiCpnuv+9oLs31dAL78JR+hO+2JzDNHx5TLOfJ8e1e/EMBmzb0F C5yU69wyD+OtftuKPBYPOQ9GYcexQ4J8wK40f9PbJcSqt/bVPmH3ZPgq8jxHDO/y xrGWVvvKXVzssu/5s2a1CuZAG0d9PAEbFzxJru7o3yc8+eU4iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSvltRPi3vjThgtO1Qfu5HGOf4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvYzBhYzJmNTMtYmVhZS0z YjA1LTk3ZDAtZDI2OTc0ZjM5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHUJN1ULnYUz+kWVMpInTfB5wf4c6kVt3U9TBhg+BD9ZlwwpqADVA0f KpQGJbWfPDCuefKGH1h8Y7knLJ0ny0dysjqPNXM/uQva65HPDGReUVKUA+41hEwv 8cFmctPJ8K2Nr73XFq12Bld5/bw1iW6MZB1M222i4Bd0ivHX6bjIcWekicm69Nsm 9D1ljwojKTQlK9aORPpD1qjOg/fPWBSrK4UU015cJA4RWDQ+C0fwkZQVVRckZ7Cw 9J2HA9LRed7q35O/FUk/Ij3yoMKSMAX7O+slXgrkGVhRcSJJmURK9pZnubj51B0d hpBgtjMV5CW+9zJAva7LnbFgXpzyrvc= -----END CERTIFICATE-----Generated at Sat Oct 31 12:28:53 2026 by rpki-client