$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fa10e30-925d-3c33-a569-15941454c5d2.roa File: 2fa10e30-925d-3c33-a569-15941454c5d2.roa (raw, json) Hash identifier: QIjZqboVPVyGki9x5+xwN0T9ArrRO+vgXMjC+8pPgxY= Subject key identifier: 96:A6:0C:F6:BE:61:CC:2F:6C:48:7D:10:70:77:9B:8C:81:51:E1:DD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1B868AE6C0277AB81A884380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fa10e30-925d-3c33-a569-15941454c5d2.roa Signing time: Tue 08 Sep 2026 14:13:22 +0000 ROA not before: Tue 08 Sep 2026 14:13:22 +0000 ROA not after: Mon 07 Dec 2026 15:13:22 +0000 asID: 274642 IP address blocks: 216.28.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:86:8a:e6:c0:27:7a:b8:1a:88:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 8 14:13:22 2026 GMT Not After : Dec 7 15:13:22 2026 GMT Subject: CN=541bd7fe-44a2-493f-bba0-26ac6186f6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:80:20:8e:c3:cd:5c:08:39:63:46:64:6f:94: c0:8c:60:23:48:60:7a:2c:b7:54:4f:f4:11:61:e3: 7e:6d:17:ee:54:f1:39:1e:57:61:21:b4:27:da:11: 9f:19:f5:fc:56:f9:5f:25:3c:a3:a0:5a:ca:25:94: 91:9c:52:cf:f9:5c:df:18:a3:d2:13:e1:41:fe:47: f6:07:d1:b7:d2:d0:58:fe:e9:a2:4a:b4:4e:27:42: c1:d8:96:ba:76:76:4d:ce:e0:77:e3:be:be:b0:38: 80:8a:fc:29:2b:3d:ce:43:41:fc:f7:e3:54:dc:41: a5:9f:68:b8:88:ab:d9:a4:de:48:77:bc:71:61:7e: a6:3e:1a:e8:df:71:9d:42:62:20:1c:37:08:68:f1: 9f:98:fb:51:5f:2f:1e:8f:7e:49:45:0b:c3:4e:27: 4b:53:14:9e:11:04:c3:45:fa:95:f2:fe:07:18:05: 53:13:bd:de:94:de:37:19:3a:86:99:c2:e6:24:34: 7d:7a:6c:8b:52:9f:17:3f:fb:0c:87:6e:9c:1f:67: 8f:b5:1a:3b:88:8f:54:3c:88:d1:d8:4e:52:68:a8: 6b:62:d7:e1:9a:4a:79:2e:26:26:b8:72:13:86:ff: b8:8c:c2:62:37:d9:36:90:b3:ce:65:cb:61:5d:b1: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:0C:F6:BE:61:CC:2F:6C:48:7D:10:70:77:9B:8C:81:51:E1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fa10e30-925d-3c33-a569-15941454c5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0b:ab:1d:25:ac:d6:0a:a1:16:78:53:b7:78:41:13:70:e9: f3:73:38:c8:57:fb:15:8f:35:25:e9:1a:21:03:ab:45:14:89: cd:a6:94:63:d9:57:43:69:9c:27:66:4c:58:95:45:7e:14:6e: 2b:0a:5f:93:10:e6:33:e4:ac:90:e6:15:9f:6a:7b:cd:c1:76: 35:65:89:b1:d3:37:43:3b:4c:d5:30:c6:75:2d:9d:53:8b:e8: 07:7a:c7:75:2e:59:c4:db:20:ea:fb:27:4a:8f:aa:4e:b6:15: 67:23:63:30:94:b3:a9:26:f7:f2:7e:79:64:08:92:94:9b:c7: 12:23:78:f2:10:58:a0:36:5b:3a:76:d4:54:55:52:67:53:b8: 8f:1f:89:9e:e1:18:ea:c2:f2:a5:65:ee:46:d3:69:2e:cc:93: b8:92:c4:98:3d:95:0c:c7:a1:1e:c8:77:e8:5b:a8:3b:34:a5: b2:48:84:c0:55:e6:1d:86:a7:a8:76:4e:32:f5:cf:da:c0:73: 4c:b3:3f:63:a8:d5:e6:9a:13:38:61:08:68:43:96:73:a1:d1: 75:81:f8:9d:d7:25:b9:39:fd:64:34:4c:9e:f4:98:5a:29:99: b0:dd:7f:27:a6:ca:14:46:c7:1d:dd:38:39:02:95:58:86:06: eb:17:06:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bhormwCd6uBqIQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwODE0MTMyMloXDTI2MTIwNzE1MTMyMlowLzEtMCsGA1UEAxMk NTQxYmQ3ZmUtNDRhMi00OTNmLWJiYTAtMjZhYzYxODZmNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioAgjsPNXAg5Y0Zkb5TAjGAjSGB6LLdUT/QR YeN+bRfuVPE5HldhIbQn2hGfGfX8VvlfJTyjoFrKJZSRnFLP+VzfGKPSE+FB/kf2 B9G30tBY/umiSrROJ0LB2Ja6dnZNzuB3476+sDiAivwpKz3OQ0H89+NU3EGln2i4 iKvZpN5Id7xxYX6mPhro33GdQmIgHDcIaPGfmPtRXy8ej35JRQvDTidLUxSeEQTD RfqV8v4HGAVTE73elN43GTqGmcLmJDR9emyLUp8XP/sMh26cH2ePtRo7iI9UPIjR 2E5SaKhrYtfhmkp5LiYmuHIThv+4jMJiN9k2kLPOZcthXbGjWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJamDPa+YcwvbEh9EHB3m4yBUeHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmZhMTBlMzAtOTI1ZC0z YzMzLWE1NjktMTU5NDE0NTRjNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYLqx0lrNYKoRZ4U7d4QRNw6fNzOMhX+xWPNSXpGiEDq0UUic2mlGPZ V0NpnCdmTFiVRX4UbisKX5MQ5jPkrJDmFZ9qe83BdjVlibHTN0M7TNUwxnUtnVOL 6Ad6x3UuWcTbIOr7J0qPqk62FWcjYzCUs6km9/J+eWQIkpSbxxIjePIQWKA2Wzp2 1FRVUmdTuI8fiZ7hGOrC8qVl7kbTaS7Mk7iSxJg9lQzHoR7Id+hbqDs0pbJIhMBV 5h2Gp6h2TjL1z9rAc0yzP2Oo1eaaEzhhCGhDlnOh0XWB+J3XJbk5/WQ0TJ70mFop mbDdfyemyhRGxx3dODkClViGBusXBqI= -----END CERTIFICATE-----Generated at Fri Sep 11 13:47:14 2026 by rpki-client