$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8f65345-7c05-38cc-b32c-e9297f3f1777.roa File: f8f65345-7c05-38cc-b32c-e9297f3f1777.roa (raw, json) Hash identifier: mISRmCaQOOgxxqVYC+mx2yh4IW6GiHoVtnbJygv7j1I= Subject key identifier: 03:94:59:16:1A:25:3A:A1:1A:51:AA:91:68:7D:10:E0:E7:58:29:4E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7E7E04A0E7F46E3C78498D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8f65345-7c05-38cc-b32c-e9297f3f1777.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 274603 IP address blocks: 216.28.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:04:a0:e7:f4:6e:3c:78:49:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=010e2de6-66a3-4d07-8a6b-5f67e9f69d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e9:42:93:ed:1d:4a:83:0d:69:b9:31:9f:d1: 81:d9:68:48:20:98:75:19:6b:b3:06:5b:30:e1:ab: 7b:c0:52:ee:b6:fb:a1:19:73:be:c7:4d:1f:49:67: cc:d0:60:09:71:87:f7:3a:77:0a:df:b1:fa:5f:e1: ff:75:78:4c:0a:22:35:67:f1:4b:ae:41:0e:5c:d5: 15:ec:c7:b2:d1:97:0d:87:eb:f7:38:68:5d:87:3a: e7:5c:1b:fe:bf:48:e0:eb:b9:eb:10:c2:ca:4e:4f: 90:ef:55:fc:48:6b:49:db:12:fa:a9:3b:03:ea:ee: d8:32:a4:26:69:45:50:52:67:b5:2d:3d:01:a1:5a: 88:64:8a:c8:6c:c4:1b:f5:99:ca:9c:7e:45:d4:eb: d7:6c:b6:0c:9d:63:b7:ff:ab:06:08:2e:25:25:fa: a8:de:02:2d:cd:b4:cf:25:6f:2b:16:e0:05:a4:7f: 6e:80:59:ee:eb:8e:a1:9a:ca:e6:36:18:e4:d2:2e: cf:e6:87:45:11:ec:d4:03:bf:20:e7:a8:ec:55:6c: 71:46:51:38:48:ba:fc:0d:67:2d:e0:09:0c:44:b0: 02:a1:34:4a:f9:f0:bc:52:7e:e9:8f:02:8f:c0:32: 4c:75:0c:e2:1c:71:fd:26:2b:db:93:67:5d:0f:76: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:94:59:16:1A:25:3A:A1:1A:51:AA:91:68:7D:10:E0:E7:58:29:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8f65345-7c05-38cc-b32c-e9297f3f1777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:71:7d:51:d3:d1:01:e6:dd:c1:82:7f:5e:a8:0d:12:84:0e: e7:6e:e9:9f:33:ae:80:dd:94:78:b4:49:1e:04:03:41:4c:06: 10:ab:43:e8:f5:5e:aa:31:bf:f8:88:06:f8:57:27:0e:f0:62: 05:69:48:e0:e0:12:f5:20:a0:c8:f5:df:c9:b6:45:ea:59:fd: ae:10:ae:08:c3:3d:63:c8:81:c3:77:22:3c:b6:30:3b:3a:c1: 90:34:7b:88:5c:a8:7d:55:f6:ce:2e:c8:98:39:96:1e:81:4c: 26:95:68:cd:8d:1a:97:7f:3e:d6:7d:a0:6d:df:ed:29:97:d0: c6:ba:74:e9:be:df:72:38:fa:8b:42:eb:bc:7e:94:2b:df:0c: 19:1d:c0:a8:64:f9:2f:1e:67:e9:e2:04:2c:9c:f9:33:ed:33: 53:f4:24:d3:8d:9e:20:46:2f:70:0e:74:7c:6e:0d:a4:9c:82: 71:a7:6a:b0:b5:65:2d:4c:59:ef:0b:ae:69:fd:b3:8c:34:58: cd:f9:50:8e:10:dc:f7:b7:8f:2c:22:19:2b:00:53:86:79:9f: f6:f6:0e:77:4f:21:6c:ac:14:3d:1b:34:2c:11:72:8a:53:a3: a1:7e:bc:53:ae:bb:fe:f6:fb:36:f4:bb:1e:c9:fa:62:e4:c4: 9c:a9:ff:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgSg5/RuPHhJjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MDEwZTJkZTYtNjZhMy00ZDA3LThhNmItNWY2N2U5ZjY5ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhulCk+0dSoMNabkxn9GB2WhIIJh1GWuzBlsw 4at7wFLutvuhGXO+x00fSWfM0GAJcYf3OncK37H6X+H/dXhMCiI1Z/FLrkEOXNUV 7Mey0ZcNh+v3OGhdhzrnXBv+v0jg67nrEMLKTk+Q71X8SGtJ2xL6qTsD6u7YMqQm aUVQUme1LT0BoVqIZIrIbMQb9ZnKnH5F1OvXbLYMnWO3/6sGCC4lJfqo3gItzbTP JW8rFuAFpH9ugFnu646hmsrmNhjk0i7P5odFEezUA78g56jsVWxxRlE4SLr8DWct 4AkMRLACoTRK+fC8Un7pjwKPwDJMdQziHHH9Jivbk2ddD3b96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOUWRYaJTqhGlGqkWh9EODnWClOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjhmNjUzNDUtN2MwNS0z OGNjLWIzMmMtZTkyOTdmM2YxNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2BzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhxfVHT0QHm3cGCf16oDRKEDudu6Z8zroDdlHi0SR4EA0FMBhCrQ+j1 Xqoxv/iIBvhXJw7wYgVpSODgEvUgoMj138m2RepZ/a4QrgjDPWPIgcN3Ijy2MDs6 wZA0e4hcqH1V9s4uyJg5lh6BTCaVaM2NGpd/PtZ9oG3f7SmX0Ma6dOm+33I4+otC 67x+lCvfDBkdwKhk+S8eZ+niBCyc+TPtM1P0JNONniBGL3AOdHxuDaScgnGnarC1 ZS1MWe8Lrmn9s4w0WM35UI4Q3Pe3jywiGSsAU4Z5n/b2DndPIWysFD0bNCwRcopT o6F+vFOuu/72+zb0ux7J+mLkxJyp//Q= -----END CERTIFICATE-----Generated at Tue Oct 27 22:47:49 2026 by rpki-client