$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/f9d7ec0e-905c-3a2e-809d-4b43175685b5.roa File: f9d7ec0e-905c-3a2e-809d-4b43175685b5.roa (raw, json) Hash identifier: jmhXV5hnhywnDSSEFN706fkKeZmjFCxxwKWnJPKWvL8= Subject key identifier: E8:4D:9E:38:45:48:60:74:DD:E1:D6:98:3B:8B:B7:2D:2C:60:C0:54 Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F0ED22E140F062256A4CBC900 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/f9d7ec0e-905c-3a2e-809d-4b43175685b5.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 397468 IP address blocks: 216.83.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2e:14:0f:06:22:56:a4:cb:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=2b5df298-a069-4303-b1d0-06ee865bb3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:76:44:68:93:12:72:48:69:81:5b:da:34: f7:c8:e5:06:5e:6d:37:ea:92:4e:87:be:ab:30:37: 4e:68:ab:7d:a1:1f:a4:e0:1c:1a:08:93:64:38:93: 99:f1:47:8f:cc:c7:35:f4:f1:ea:8e:92:98:29:30: 9e:21:23:f5:e3:4c:b4:00:c2:d9:ff:a4:76:e1:5f: 32:31:c6:2c:c0:f9:d9:d4:94:4c:97:f7:ea:5c:25: 90:57:fb:2e:d3:cc:5e:7a:a4:b6:95:75:08:ae:53: 45:b4:0f:ca:38:a8:18:de:80:f9:3d:da:ba:a4:96: e2:1c:50:2d:cf:8e:e7:9d:89:8b:4e:ba:8f:13:4d: f9:10:09:99:44:08:e4:c5:63:fb:39:8d:10:8c:78: 06:db:b2:aa:ff:eb:68:e1:78:5e:05:bf:d9:66:21: 3b:24:2e:90:1c:0a:95:70:b5:de:28:82:e2:54:4a: 56:72:b6:06:e8:e6:c3:a6:89:62:e3:0c:a9:39:35: 67:ab:1f:a2:aa:8c:2a:00:c0:53:14:df:81:52:f5: 66:65:2e:b4:43:54:48:7d:21:cc:87:d0:2b:d4:07: 2a:5a:3c:02:19:59:28:b8:e1:69:97:b3:89:bf:c7: 04:7d:42:40:62:66:55:50:0c:a0:83:96:ff:4a:7e: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4D:9E:38:45:48:60:74:DD:E1:D6:98:3B:8B:B7:2D:2C:60:C0:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/f9d7ec0e-905c-3a2e-809d-4b43175685b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 216.83.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:93:84:11:93:a1:21:a1:91:a1:f1:31:d4:2d:b7:67:69:b5: dc:02:fc:81:19:33:8f:c3:ee:ae:a1:0f:8e:75:a9:04:04:62: f6:dd:cc:7b:80:1d:f0:1f:f2:59:2b:cb:ae:5d:d3:50:86:d7: 98:6a:22:11:95:99:8a:7a:fe:4b:c9:e7:ac:9e:48:9f:8b:d8: 50:56:74:98:00:a1:e2:ae:a1:96:c1:85:9c:b2:17:ba:01:fe: de:ae:fe:a4:42:77:b2:cc:01:2f:57:03:91:a2:53:4a:78:09: d5:68:57:62:77:95:83:27:94:07:77:7c:cb:a4:6f:75:93:1e: bc:00:bb:e1:54:69:4d:6e:a2:6e:88:4f:7e:80:a9:ad:f2:b6: 0c:61:38:3d:55:e4:ed:49:95:8b:42:64:d3:29:11:23:f0:1b: 03:c4:1a:30:9f:19:49:ed:f2:f0:1a:78:93:ed:d9:24:9e:3a: 4e:33:55:c6:b3:23:76:9f:c2:f7:37:29:9b:a6:7d:86:25:ab: 4a:23:3f:2e:8b:a8:80:47:79:79:96:fa:ce:99:26:e5:d1:8b: 69:33:81:31:7d:1f:d2:dd:29:95:d4:62:39:de:89:b5:90:c8: af:85:7b:59:c5:df:37:e8:ce:d0:1e:d2:ac:c0:18:35:15:1c: 8d:93:9a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0i4UDwYiVqTLyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MmI1ZGYyOTgtYTA2OS00MzAzLWIxZDAtMDZlZTg2NWJiM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4Z2RGiTEnJIaYFb2jT3yOUGXm036pJOh76r MDdOaKt9oR+k4BwaCJNkOJOZ8UePzMc19PHqjpKYKTCeISP140y0AMLZ/6R24V8y McYswPnZ1JRMl/fqXCWQV/su08xeeqS2lXUIrlNFtA/KOKgY3oD5Pdq6pJbiHFAt z47nnYmLTrqPE035EAmZRAjkxWP7OY0QjHgG27Kq/+to4XheBb/ZZiE7JC6QHAqV cLXeKILiVEpWcrYG6ObDpoli4wypOTVnqx+iqowqAMBTFN+BUvVmZS60Q1RIfSHM h9Ar1AcqWjwCGVkouOFpl7OJv8cEfUJAYmZVUAygg5b/Sn5wewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhNnjhFSGB03eHWmDuLty0sYMBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvZjlkN2VjMGUtOTA1Yy0z YTJlLTgwOWQtNGI0MzE3NTY4NWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ThBGToSGhkaHxMdQtt2dptdwC/IEZM4/D7q6hD451qQQEYvbdzHuA HfAf8lkry65d01CG15hqIhGVmYp6/kvJ56yeSJ+L2FBWdJgAoeKuoZbBhZyyF7oB /t6u/qRCd7LMAS9XA5GiU0p4CdVoV2J3lYMnlAd3fMukb3WTHrwAu+FUaU1uom6I T36Aqa3ytgxhOD1V5O1JlYtCZNMpESPwGwPEGjCfGUnt8vAaeJPt2SSeOk4zVcaz I3afwvc3KZumfYYlq0ojPy6LqIBHeXmW+s6ZJuXRi2kzgTF9H9LdKZXUYjneibWQ yK+Fe1nF3zfoztAe0qzAGDUVHI2TmpQ= -----END CERTIFICATE-----Generated at Sat Sep 5 08:40:47 2026 by rpki-client