$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/8511ef3f-e815-30c8-90cc-c711f5f4bf12.roa File: 8511ef3f-e815-30c8-90cc-c711f5f4bf12.roa (raw, json) Hash identifier: fdrj9zSavNqoixn6NxX7ZT2NAWLi/mKlX5rl80Ps0xg= Subject key identifier: EF:C5:73:A5:DD:85:46:19:46:97:B3:61:0B:47:0E:42:F9:33:02:D9 Certificate issuer: /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340 Certificate serial: 010D0C9F4328584F497466778C5E97A9A5DC1380 Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/8511ef3f-e815-30c8-90cc-c711f5f4bf12.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32707 IP address blocks: 216.8.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:66:77:8c:5e:97:a9:a5:dc:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=40bc3cb6-f4f6-44fe-99fa-fdebdae0a596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:98:d1:2f:fa:c5:48:4c:65:08:56:8c:cb: 73:fe:77:06:db:5f:d9:50:75:90:fc:0d:08:01:5a: 40:9c:6a:79:5d:03:3a:36:3d:a3:0e:dc:a0:dc:e1: 08:c2:df:39:83:1b:cf:d3:73:e5:4c:44:2d:34:11: 94:b6:9b:29:b7:59:0d:dc:f3:f4:b5:5a:db:e1:2d: 27:71:12:fe:dd:a7:e3:2d:1e:36:9a:ec:2c:3a:00: cb:94:c3:9d:cf:1e:68:8a:28:4a:6b:bb:de:e0:37: eb:a9:03:62:55:dc:e5:e7:4e:dd:63:08:d2:5c:61: f4:4a:84:81:1b:06:60:c5:5d:9c:54:37:79:49:61: 77:44:5f:20:d5:55:1f:dd:f9:c8:30:00:3b:97:a1: c0:14:4e:c1:74:d5:30:73:78:7d:7a:ac:68:14:63: a7:de:11:de:d8:85:24:e9:b6:bc:6d:7d:d3:74:40: 74:02:39:dd:75:f3:5f:f9:42:f2:e6:88:76:03:68: 5c:1c:6f:2d:86:6a:8d:68:5a:1b:a4:19:68:1d:e6: 9d:c7:57:1b:b7:d6:52:dc:e1:0b:18:06:f9:06:2a: c7:d5:8c:6d:d0:17:a5:4d:c5:3d:80:1e:d8:d8:ec: 2f:16:ba:21:b8:f8:cf:18:ff:4f:22:a6:08:44:c4: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C5:73:A5:DD:85:46:19:46:97:B3:61:0B:47:0E:42:F9:33:02:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/8511ef3f-e815-30c8-90cc-c711f5f4bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl X509v3 Authority Key Identifier: keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer sbgp-ipAddrBlock: critical IPv4: 216.8.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:00:73:ad:f9:e2:bd:b6:8f:6b:3a:b1:8c:6d:e1:a3:c1:88: c7:af:93:dc:d0:90:53:f7:1e:11:4c:c9:f8:18:14:79:af:93: 31:0d:81:9a:93:d6:da:39:ea:7e:34:22:74:c0:5c:89:85:82: c9:a8:41:7b:2b:9c:76:39:59:16:f7:3e:eb:f5:f8:8c:95:da: 6c:b2:c1:78:42:92:19:8d:7d:64:a6:75:96:e1:1c:1d:98:8d: 47:36:d6:56:e7:6b:81:e3:88:63:bd:0a:5b:0a:8a:a6:54:12: a3:be:01:7f:2d:81:98:6e:cd:26:d4:b6:a1:8e:4e:76:8d:ab: 8e:1b:76:5d:d4:d0:e3:c6:2a:3b:2b:78:22:a2:49:4d:20:35: 06:6e:12:a2:a9:f3:ac:e4:a2:35:04:9e:b9:05:ae:bf:a6:9f: 89:56:2d:41:78:cc:cf:5c:56:c5:a7:84:7b:55:c3:33:60:80: 83:40:71:4c:52:4f:bd:30:7a:c8:22:73:a1:09:14:63:ce:24: b6:25:50:0c:7b:60:21:7b:d3:eb:89:ec:bf:15:d4:5a:6d:34: aa:fe:ec:c3:9d:06:e4:56:94:f7:c1:ef:db:35:39:46:58:46: 8f:a3:4c:91:40:5d:1e:18:2c:20:92:f6:90:6e:32:14:a9:4c: 2f:37:f5:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGZ3jF6XqaXcE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBlZDRhZjAtYWQ4NC00NGYxLTg0ZGEtY2Q5YjFjNjY3 MzQwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDBiYzNjYjYtZjRmNi00NGZlLTk5ZmEtZmRlYmRhZTBhNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6Y0S/6xUhMZQhWjMtz/ncG21/ZUHWQ/A0I AVpAnGp5XQM6Nj2jDtyg3OEIwt85gxvP03PlTEQtNBGUtpspt1kN3PP0tVrb4S0n cRL+3afjLR42muwsOgDLlMOdzx5oiihKa7ve4DfrqQNiVdzl507dYwjSXGH0SoSB GwZgxV2cVDd5SWF3RF8g1VUf3fnIMAA7l6HAFE7BdNUwc3h9eqxoFGOn3hHe2IUk 6ba8bX3TdEB0AjnddfNf+ULy5oh2A2hcHG8thmqNaFobpBloHeadx1cbt9ZS3OEL GAb5BirH1Yxt0BelTcU9gB7Y2OwvFrohuPjPGP9PIqYIRMQ1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/Fc6XdhUYZRpezYQtHDkL5MwLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVk NGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDliMWM2NjczNDAvODUxMWVmM2YtZTgxNS0z MGM4LTkwY2MtYzcxMWY1ZjRiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzBlZDRhZjAtYWQ4NC00NGYxLTg0 ZGEtY2Q5YjFjNjY3MzQwLzMwZWQ0YWYwLWFkODQtNDRmMS04NGRhLWNkOWIxYzY2 NzM0MC5jcmwwHwYDVR0jBBgwFoAUfDeBNtBgaizY5B3JT+fA2zhddi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVkNGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDli MWM2NjczNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2AhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMAc6354r22j2s6sYxt4aPBiMevk9zQkFP3HhFMyfgYFHmvkzENgZqT 1to56n40InTAXImFgsmoQXsrnHY5WRb3Puv1+IyV2myywXhCkhmNfWSmdZbhHB2Y jUc21lbna4HjiGO9ClsKiqZUEqO+AX8tgZhuzSbUtqGOTnaNq44bdl3U0OPGKjsr eCKiSU0gNQZuEqKp86zkojUEnrkFrr+mn4lWLUF4zM9cVsWnhHtVwzNggINAcUxS T70wesgic6EJFGPOJLYlUAx7YCF70+uJ7L8V1FptNKr+7MOdBuRWlPfB79s1OUZY Ro+jTJFAXR4YLCCS9pBuMhSpTC839Yg= -----END CERTIFICATE-----Generated at Tue Oct 13 12:47:37 2026 by rpki-client