$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/a3bd5911-4873-3df8-a9dd-d5d734e385e6.roa File: a3bd5911-4873-3df8-a9dd-d5d734e385e6.roa (raw, json) Hash identifier: cJUGHSfgQ7r69KYVC+QP/jYhXmuDDtocCsdP20r38G0= Subject key identifier: 3F:91:6A:FC:EE:03:BB:EA:3A:BE:5B:15:FD:51:D4:53:E2:46:4C:87 Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F53964BF051199FA6CA8DBF00 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/a3bd5911-4873-3df8-a9dd-d5d734e385e6.roa Signing time: Mon 28 Sep 2026 16:10:22 +0000 ROA not before: Mon 28 Sep 2026 16:10:22 +0000 ROA not after: Sun 27 Dec 2026 17:10:22 +0000 asID: 397468 IP address blocks: 216.83.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:96:4b:f0:51:19:9f:a6:ca:8d:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 28 16:10:22 2026 GMT Not After : Dec 27 17:10:22 2026 GMT Subject: CN=2a5d707d-647c-41ee-a767-16209252597b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:2e:2a:9f:17:49:fa:bc:7b:70:87:50:08: 35:18:03:0e:59:8e:9d:4d:b7:bf:eb:a9:be:9e:d5: 3b:ca:ed:e1:88:b4:a9:50:2a:1f:45:ae:7e:f4:0a: 9f:d5:e1:c3:14:eb:b0:c0:85:23:8d:31:9e:40:72: 11:25:87:90:f8:fc:3f:f2:5b:ab:8b:83:56:ab:ca: 96:aa:dc:8f:1f:29:f2:82:dd:a9:45:2e:88:68:c7: 07:21:ec:5c:aa:e3:d6:01:27:8b:4f:7c:36:e1:7f: 84:0a:2b:2a:13:0f:14:1c:31:b8:2f:6b:33:c4:53: 24:79:88:3e:3b:fe:90:0a:d5:8f:d1:ae:ec:f1:48: 0e:8a:00:0c:02:a1:eb:65:54:77:7a:7b:36:9c:d3: 65:cd:1d:8b:db:5d:d1:7f:bf:45:18:9c:f1:a7:33: 72:c8:21:30:c6:13:34:cf:09:0e:28:dc:b8:27:80: a4:6a:02:6a:09:46:c8:56:ba:19:6d:ff:1d:95:5b: 68:91:11:c8:a9:b7:b7:ff:0d:ef:34:4e:9a:a9:80: d1:87:00:08:a7:4f:2e:73:0f:51:60:3b:da:47:8e: 07:83:eb:92:ee:95:78:1d:b7:e1:58:3a:e8:36:bd: f2:08:0f:50:3a:6c:26:dd:f8:e1:b8:09:df:1f:1e: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:91:6A:FC:EE:03:BB:EA:3A:BE:5B:15:FD:51:D4:53:E2:46:4C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/a3bd5911-4873-3df8-a9dd-d5d734e385e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 216.83.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:67:69:a2:0e:79:62:74:fc:80:05:d6:26:6f:23:b0:e3:03: 2c:c1:53:b5:8d:ea:d9:f6:49:52:b2:5c:ad:87:10:77:ef:f3: 1b:1a:a3:16:e4:38:1d:ec:27:49:de:48:12:c2:75:10:ae:ea: d3:cf:81:0a:14:1a:d5:12:43:e2:11:27:b0:09:c3:d4:44:36: 27:da:11:fe:01:91:78:3e:9d:70:bd:70:c0:5f:c2:80:6b:97: a2:03:67:d1:87:d5:f0:fe:31:45:4b:0f:1e:a4:ab:13:75:79: 1c:a2:8f:e0:ad:6c:5f:af:15:95:73:9c:c3:08:c6:eb:28:b0: f2:7b:61:8c:3b:aa:03:38:c4:db:65:1a:47:80:dd:1b:8c:30: 2d:34:57:c3:64:35:e5:d0:29:f7:9d:55:ad:e4:a4:f3:dd:13: d7:1c:a6:b2:f0:a8:0f:28:5e:15:28:28:7e:40:99:b3:23:98: c2:80:e2:52:57:1a:a4:0c:0b:70:02:76:39:02:6a:ea:3a:fe: 33:c9:1b:49:75:d4:fc:c9:a7:af:bc:2b:95:10:2f:79:e2:17: 89:1a:42:3b:cc:75:f6:86:ce:7d:ba:3b:a9:01:56:94:37:ea: 88:55:b9:d2:76:11:96:7f:51:61:be:42:dc:6c:e2:8d:8b:32: 83:68:63:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TlkvwURmfpsqNvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkyODE2MTAyMloXDTI2MTIyNzE3MTAyMlowLzEtMCsGA1UEAxMk MmE1ZDcwN2QtNjQ3Yy00MWVlLWE3NjctMTYyMDkyNTI1OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6QuKp8XSfq8e3CHUAg1GAMOWY6dTbe/66m+ ntU7yu3hiLSpUCofRa5+9Aqf1eHDFOuwwIUjjTGeQHIRJYeQ+Pw/8luri4NWq8qW qtyPHynygt2pRS6IaMcHIexcquPWASeLT3w24X+ECisqEw8UHDG4L2szxFMkeYg+ O/6QCtWP0a7s8UgOigAMAqHrZVR3ens2nNNlzR2L213Rf79FGJzxpzNyyCEwxhM0 zwkOKNy4J4CkagJqCUbIVroZbf8dlVtokRHIqbe3/w3vNE6aqYDRhwAIp08ucw9R YDvaR44Hg+uS7pV4HbfhWDroNr3yCA9QOmwm3fjhuAnfHx4KNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+RavzuA7vqOr5bFf1R1FPiRkyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvYTNiZDU5MTEtNDg3My0z ZGY4LWE5ZGQtZDVkNzM0ZTM4NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1naaIOeWJ0/IAF1iZvI7DjAyzBU7WN6tn2SVKyXK2HEHfv8xsaoxbk OB3sJ0neSBLCdRCu6tPPgQoUGtUSQ+IRJ7AJw9RENifaEf4BkXg+nXC9cMBfwoBr l6IDZ9GH1fD+MUVLDx6kqxN1eRyij+CtbF+vFZVznMMIxusosPJ7YYw7qgM4xNtl GkeA3RuMMC00V8NkNeXQKfedVa3kpPPdE9ccprLwqA8oXhUoKH5AmbMjmMKA4lJX GqQMC3ACdjkCauo6/jPJG0l11PzJp6+8K5UQL3niF4kaQjvMdfaGzn26O6kBVpQ3 6ohVudJ2EZZ/UWG+Qtxs4o2LMoNoY1s= -----END CERTIFICATE-----Generated at Wed Oct 28 03:13:29 2026 by rpki-client