$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f1a02eb-227e-3474-9cdf-8829c38ce422.roa File: 2f1a02eb-227e-3474-9cdf-8829c38ce422.roa (raw, json) Hash identifier: 99Vvu1X69C2jT68zjfwCLAdtTtjxmtHxyOf0Pamk2rE= Subject key identifier: 19:1E:9D:66:85:A2:BC:39:E6:84:C2:D9:A0:4F:68:59:BF:8F:00:DC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F979DAEE0F3E77CC663DFBF80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f1a02eb-227e-3474-9cdf-8829c38ce422.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 267833 IP address blocks: 216.28.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:ae:e0:f3:e7:7c:c6:63:df:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=b1b81cb2-0dfa-4a4b-bb4d-1f0f1f6e6e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:e1:86:45:a0:4d:af:04:a8:f0:66:20:7b: e6:4d:e4:1f:07:47:1e:00:dd:43:10:fb:43:b7:94: 40:c1:ca:ea:c9:ad:9f:1a:e5:37:34:6b:1c:05:c8: bb:78:32:2d:8d:9b:4d:19:b7:0c:c1:f6:b8:f8:55: 20:f9:27:07:74:8a:e8:9a:45:fd:7e:24:78:ee:ec: 31:5a:ab:e3:ba:05:e0:af:f6:62:17:97:89:7f:74: d6:f3:48:f1:96:e5:cc:63:f1:f7:dd:8a:b0:c7:91: 5b:88:39:2a:2c:2a:10:12:42:34:12:b1:dc:ed:7a: 02:b0:b7:27:1e:23:33:56:e2:0d:e7:55:92:b2:1e: fe:d1:74:0e:57:d5:e4:72:85:d2:7a:43:26:78:e8: fd:70:8a:72:36:da:01:a4:2c:8a:80:70:ba:ec:3a: e6:c1:70:c5:30:c4:83:f4:f6:ef:56:2d:d5:f5:83: af:fc:0a:37:1e:51:5b:cd:f0:55:46:af:a7:21:f1: 1e:6e:77:4e:a0:36:44:7e:96:9d:9d:56:1d:74:a9: 59:22:af:c5:fe:07:0e:a1:c0:f3:fb:53:72:30:3f: 79:51:ce:d2:63:13:e0:e3:24:17:2d:83:f5:8d:ef: 44:28:4c:ba:12:a1:94:cc:b8:aa:44:cf:75:00:a2: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1E:9D:66:85:A2:BC:39:E6:84:C2:D9:A0:4F:68:59:BF:8F:00:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f1a02eb-227e-3474-9cdf-8829c38ce422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:20:63:92:ef:04:f0:6b:0d:90:61:2c:a2:80:96:90:1d:39: a7:e1:f0:36:5f:95:a1:c5:d6:e9:6c:3c:ee:43:90:21:0e:17: 43:61:c6:16:4c:da:88:bd:f7:54:f2:3c:b7:75:8a:cf:cc:45: 5f:02:2c:fa:57:cb:21:f4:25:ad:2f:7e:67:f4:4a:1c:5b:d5: 73:69:96:5b:c6:a0:f0:f5:3b:ba:cc:83:a8:4c:5a:eb:ca:a4: 17:64:9b:b5:5d:a7:c6:bb:be:87:8d:97:be:35:2a:72:ea:d1: cc:a5:4a:66:c2:07:dc:cc:ed:bd:02:b7:31:19:ba:7e:5c:86: 41:91:0e:79:a0:40:0a:21:ec:43:34:5f:9b:ef:b6:f0:54:37: 44:b5:58:44:dd:69:b8:46:40:d2:52:56:62:9e:c9:0d:60:27: ea:21:ca:79:fa:a4:92:b0:6c:24:19:e3:7d:5a:1d:3e:a7:48: 44:a7:93:f2:f3:04:fd:29:c4:55:94:e3:44:0d:c5:a6:9c:44: e9:bd:35:5f:e6:3c:9f:f8:d8:38:40:21:a7:25:dd:12:7c:d7: 7f:25:ea:fa:9d:8c:1e:09:a6:79:c4:3f:63:f8:2c:b3:36:3e: a0:4d:00:bf:2f:30:a8:64:aa:03:69:20:ef:63:08:22:e5:29: b0:0f:96:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Xna7g8+d8xmPfv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YjFiODFjYjItMGRmYS00YTRiLWJiNGQtMWYwZjFmNmU2ZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYjhhkWgTa8EqPBmIHvmTeQfB0ceAN1DEPtD t5RAwcrqya2fGuU3NGscBci7eDItjZtNGbcMwfa4+FUg+ScHdIromkX9fiR47uwx WqvjugXgr/ZiF5eJf3TW80jxluXMY/H33Yqwx5FbiDkqLCoQEkI0ErHc7XoCsLcn HiMzVuIN51WSsh7+0XQOV9XkcoXSekMmeOj9cIpyNtoBpCyKgHC67DrmwXDFMMSD 9PbvVi3V9YOv/Ao3HlFbzfBVRq+nIfEebndOoDZEfpadnVYddKlZIq/F/gcOocDz +1NyMD95Uc7SYxPg4yQXLYP1je9EKEy6EqGUzLiqRM91AKIDCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkenWaForw55oTC2aBPaFm/jwDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmYxYTAyZWItMjI3ZS0z NDc0LTljZGYtODgyOWMzOGNlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2BzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4gY5LvBPBrDZBhLKKAlpAdOafh8DZflaHF1ulsPO5DkCEOF0NhxhZM 2oi991TyPLd1is/MRV8CLPpXyyH0Ja0vfmf0Shxb1XNpllvGoPD1O7rMg6hMWuvK pBdkm7Vdp8a7voeNl741KnLq0cylSmbCB9zM7b0CtzEZun5chkGRDnmgQAoh7EM0 X5vvtvBUN0S1WETdabhGQNJSVmKeyQ1gJ+ohynn6pJKwbCQZ431aHT6nSESnk/Lz BP0pxFWU40QNxaacROm9NV/mPJ/42DhAIacl3RJ8138l6vqdjB4JpnnEP2P4LLM2 PqBNAL8vMKhkqgNpIO9jCCLlKbAPloQ= -----END CERTIFICATE-----Generated at Tue Oct 27 18:51:49 2026 by rpki-client