$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b0c8e965-4278-395a-93cb-0722059b4c1f.roa File: b0c8e965-4278-395a-93cb-0722059b4c1f.roa (raw, json) Hash identifier: V20M6xh8pSEhpVfq46UxB7lmMhwhy44aUlTYwKu7ONA= Subject key identifier: F1:27:5F:98:68:29:F3:E6:7F:78:B5:DA:CC:25:B4:25:28:69:C7:A4 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D7003B26D6287C547FAE0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b0c8e965-4278-395a-93cb-0722059b4c1f.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 216.6.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:70:03:b2:6d:62:87:c5:47:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=d74189c4-93e6-4e04-98a3-f542ef9d12e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:b4:30:5d:7b:5b:c7:7a:58:06:04:6e:19: ac:a4:b4:26:75:2a:fa:1d:ff:f2:19:91:f6:5e:63: 4b:61:d7:46:03:1e:69:e0:2d:3c:53:35:67:ad:dc: 34:a7:a0:91:9b:62:81:a8:28:51:e1:2d:0f:94:3e: 1d:5c:ce:b6:96:a2:20:39:77:6c:2d:ad:53:69:b4: 5f:73:b9:ae:b2:8d:dc:5e:82:85:66:ab:06:7a:6b: db:35:25:63:54:6f:b7:8c:28:eb:ac:05:25:a5:c3: 72:55:2e:57:d1:92:74:e8:82:7a:d2:67:4e:78:7a: 47:18:93:44:56:04:20:d6:49:60:39:27:c3:79:bd: 05:13:1b:e7:d5:c8:41:33:a2:1f:07:93:6c:d2:c0: 89:8d:77:50:c1:01:a2:27:65:82:d8:c4:d5:47:11: 05:3f:66:9a:84:52:bc:cf:60:cf:66:0b:8e:74:12: 35:1d:8e:e5:5c:83:9d:76:fd:74:57:7d:20:36:03: 84:41:07:2e:d1:2d:cf:80:ce:6d:e2:9a:87:b3:d0: 64:e3:ba:ec:22:eb:26:fd:ff:6b:9b:31:4b:d1:a3: 64:1f:bf:6f:78:86:e5:33:94:f9:f5:09:95:bd:36: 69:4c:89:53:40:2b:e3:eb:1c:ec:02:60:69:21:97: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:27:5F:98:68:29:F3:E6:7F:78:B5:DA:CC:25:B4:25:28:69:C7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b0c8e965-4278-395a-93cb-0722059b4c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 216.6.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:77:c6:1b:e6:52:c4:a9:48:dd:cb:0c:24:51:ac:f0:74:24: 54:5f:19:a4:27:4c:bf:6e:b9:07:11:fa:a5:c5:56:54:11:f9: 31:5a:a0:4f:bc:0e:5c:80:9e:fd:d8:57:17:87:f8:59:be:66: ac:6a:c4:5c:1b:ce:e3:c6:3b:b4:e2:a6:61:e0:13:ff:a1:d0: ac:6d:0d:df:71:db:8a:b8:4f:56:f6:c1:91:83:ca:a8:ef:59: c8:68:d6:3e:4d:4b:74:4f:0c:57:4a:1a:af:11:1b:21:c4:19: 11:a2:b4:67:7b:76:7c:72:63:e9:8d:a2:0a:69:ab:65:d5:35: 91:ed:92:5d:18:81:b6:4a:10:ae:a0:6f:83:ee:2d:3a:37:d0: e4:5d:1f:36:29:25:85:51:a3:90:b6:91:97:1f:a2:29:23:be: 1a:65:34:ed:11:d7:ae:79:70:81:4c:15:f9:52:06:27:3f:11: cf:4f:78:8b:3d:84:a7:7c:8f:13:00:1b:ab:46:90:da:fa:de: 54:05:28:73:fa:fc:b4:85:29:bc:98:e7:29:2e:34:ff:ac:90: f4:2c:17:2e:ab:9c:ae:b1:28:ff:07:86:56:51:10:db:75:aa: 82:1b:d0:b9:a8:02:59:cf:85:09:06:86:6f:21:3d:b1:ae:9d: 94:d5:cd:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXADsm1ih8VH+uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDc0MTg5YzQtOTNlNi00ZTA0LTk4YTMtZjU0MmVmOWQxMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSq0MF17W8d6WAYEbhmspLQmdSr6Hf/yGZH2 XmNLYddGAx5p4C08UzVnrdw0p6CRm2KBqChR4S0PlD4dXM62lqIgOXdsLa1TabRf c7muso3cXoKFZqsGemvbNSVjVG+3jCjrrAUlpcNyVS5X0ZJ06IJ60mdOeHpHGJNE VgQg1klgOSfDeb0FExvn1chBM6IfB5Ns0sCJjXdQwQGiJ2WC2MTVRxEFP2aahFK8 z2DPZguOdBI1HY7lXIOddv10V30gNgOEQQcu0S3PgM5t4pqHs9Bk47rsIusm/f9r mzFL0aNkH79veIblM5T59QmVvTZpTIlTQCvj6xzsAmBpIZenPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEnX5hoKfPmf3i12swltCUoacekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjBjOGU5NjUtNDI3OC0z OTVhLTkzY2ItMDcyMjA1OWI0YzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH53xhvmUsSpSN3LDCRRrPB0JFRfGaQnTL9uuQcR+qXFVlQR+TFaoE+8 DlyAnv3YVxeH+Fm+ZqxqxFwbzuPGO7TipmHgE/+h0KxtDd9x24q4T1b2wZGDyqjv Wcho1j5NS3RPDFdKGq8RGyHEGRGitGd7dnxyY+mNogppq2XVNZHtkl0YgbZKEK6g b4PuLTo30ORdHzYpJYVRo5C2kZcfoikjvhplNO0R1655cIFMFflSBic/Ec9PeIs9 hKd8jxMAG6tGkNr63lQFKHP6/LSFKbyY5ykuNP+skPQsFy6rnK6xKP8HhlZRENt1 qoIb0LmoAlnPhQkGhm8hPbGunZTVzf0= -----END CERTIFICATE-----Generated at Sat Oct 3 19:47:26 2026 by rpki-client