$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa File: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (raw, json) Hash identifier: 8IjH1E8wmeEt/GCttm6KnsavhQyMgcWt3smLTHURe8Y= Subject key identifier: 35:E8:B8:B9:08:5A:90:F9:E4:E3:78:54:02:81:5D:53:AC:A1:75:7F Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584F655D81D13ABEA94BDC069380 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 46687 IP address blocks: 216.119.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:81:d1:3a:be:a9:4b:dc:06:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=c2e643b4-7903-48f3-a975-97323cecdcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2c:bc:cb:15:a2:a6:cb:33:0c:6c:3e:f6:f8: 52:3d:8f:b4:91:12:10:fe:e7:71:f0:d2:50:0a:74: 79:00:c0:8d:14:5f:b2:8d:25:5d:c2:5e:63:7f:ff: 3c:30:9b:8b:87:af:25:77:d2:76:54:4a:62:b6:d8: fe:f6:98:f1:b5:d4:01:5e:f8:59:3c:07:79:0e:7b: 70:80:43:3c:25:b5:82:e8:3a:47:d3:5d:e8:20:fa: 21:cf:0c:2e:2d:81:3f:0b:71:28:b5:87:f7:24:a1: 75:69:45:db:1f:12:44:21:80:6b:ef:46:45:74:b6: ab:ef:81:ac:84:29:90:04:be:36:8a:1f:b1:3c:0b: b7:55:8f:86:ce:5a:9c:04:d3:d4:28:12:df:06:12: ce:9c:89:45:26:d7:ee:89:cd:0e:39:8f:09:37:15: 15:38:74:d4:70:6b:e4:dd:98:99:27:d0:7b:08:98: 2a:52:7c:59:6e:22:db:7a:64:67:1a:b1:e2:76:ea: ce:6e:78:53:e8:18:1c:e9:30:49:b2:68:ec:a2:d9: a4:e8:4d:fd:dd:85:3f:6d:bc:9e:e6:b8:55:1a:9e: 3f:31:16:c5:4f:11:98:e4:2f:c3:a8:ca:69:99:ea: ae:e1:61:63:02:30:9c:47:96:bb:fa:cc:44:ee:16: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:B8:B9:08:5A:90:F9:E4:E3:78:54:02:81:5D:53:AC:A1:75:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 216.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:68:4f:50:6f:58:f8:cc:ee:fa:3a:c7:98:78:a1:37:4d:3c: 3b:f3:39:1f:65:6b:e8:21:ff:a4:0e:fe:8a:b5:ad:08:ab:75: 3c:ad:79:12:f3:97:02:2d:7a:c5:09:82:d5:fe:85:e2:f1:72: 06:24:0a:0c:56:31:ce:d4:09:6a:a8:4a:a2:1e:07:ce:fa:24: ca:1a:0a:c3:05:19:94:8b:3b:bd:3f:b6:40:c5:29:c7:88:ae: d1:48:13:54:c0:62:8f:e5:c5:d5:56:85:6d:0a:73:30:02:12: c7:05:06:2f:70:d6:60:9e:0f:5f:67:e4:c7:3b:14:da:4e:6d: 51:70:09:4f:8c:06:46:8d:89:e2:c1:94:04:a3:8d:28:42:5a: ce:f4:a9:9c:1e:95:fb:2b:a5:51:b4:e4:b6:bc:fa:cf:b6:ec: c1:75:ff:37:cb:4d:59:55:ce:b5:a5:29:ff:21:07:6b:81:ea: 57:33:57:5d:38:8a:60:05:ee:7b:1e:9c:d2:e8:32:5d:b1:0d: 43:46:2b:f9:3c:dc:de:52:53:15:34:25:8b:a0:25:53:76:f4: 36:c1:28:e3:c4:81:cb:0c:32:03:6d:22:13:f4:00:0d:65:98: 67:f7:ad:31:f8:ce:3e:68:54:24:18:c3:50:f3:2e:93:ab:4f: 4e:ed:96:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYHROr6pS9wGk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YzJlNjQzYjQtNzkwMy00OGYzLWE5NzUtOTczMjNjZWNkY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSy8yxWipsszDGw+9vhSPY+0kRIQ/udx8NJQ CnR5AMCNFF+yjSVdwl5jf/88MJuLh68ld9J2VEpittj+9pjxtdQBXvhZPAd5Dntw gEM8JbWC6DpH013oIPohzwwuLYE/C3EotYf3JKF1aUXbHxJEIYBr70ZFdLar74Gs hCmQBL42ih+xPAu3VY+GzlqcBNPUKBLfBhLOnIlFJtfuic0OOY8JNxUVOHTUcGvk 3ZiZJ9B7CJgqUnxZbiLbemRnGrHidurObnhT6Bgc6TBJsmjsotmk6E393YU/bbye 5rhVGp4/MRbFTxGY5C/DqMppmequ4WFjAjCcR5a7+sxE7hYe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXouLkIWpD55ON4VAKBXVOsoXV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMDhhZDkyNTItYTQxNC0z Yjg3LTg0ZDktMjU5YjdlNWUyN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5oT1BvWPjM7vo6x5h4oTdNPDvzOR9la+gh/6QO/oq1rQirdTyteRLz lwItesUJgtX+heLxcgYkCgxWMc7UCWqoSqIeB876JMoaCsMFGZSLO70/tkDFKceI rtFIE1TAYo/lxdVWhW0KczACEscFBi9w1mCeD19n5Mc7FNpObVFwCU+MBkaNieLB lASjjShCWs70qZwelfsrpVG05La8+s+27MF1/zfLTVlVzrWlKf8hB2uB6lczV104 imAF7nsenNLoMl2xDUNGK/k83N5SUxU0JYugJVN29DbBKOPEgcsMMgNtIhP0AA1l mGf3rTH4zj5oVCQYw1DzLpOrT07tlqs= -----END CERTIFICATE-----Generated at Thu Oct 15 03:29:58 2026 by rpki-client