$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa File: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (raw, json) Hash identifier: gCvoosqtB8mR+ZVYs6gI7nxvWqXfVMOCYnWdN4lBhVM= Subject key identifier: DF:5D:7C:97:18:6F:F9:91:1E:2C:A1:47:89:31:0E:FE:9E:8F:EA:A4 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584F655D81B73DC10ABBB9997780 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 46687 IP address blocks: 207.68.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:81:b7:3d:c1:0a:bb:b9:99:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=31aa407b-cc77-469c-b0d3-dbc9e8c40a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:69:dc:03:16:16:36:9f:ff:f0:32:8d:0c: c4:fa:bf:b3:05:1c:7b:c9:fa:db:1e:61:e9:3f:61: 35:88:b1:6f:72:38:7b:48:a7:4c:65:8b:fd:12:b7: 15:bd:10:41:47:a7:b1:c2:16:a4:d2:71:14:ad:c6: 39:dd:d4:8a:55:dc:fd:03:80:50:1f:4f:1f:42:7c: 6c:4b:7a:10:4e:dd:ae:dd:66:a3:54:24:d6:8a:d5: 4c:17:38:f5:1e:bd:0b:22:b4:8c:68:2e:d5:9d:55: 38:4b:46:51:ee:fb:57:fd:5a:67:bd:7d:69:14:05: 02:69:ab:6b:b3:25:86:2a:db:84:04:9a:92:2d:7b: ba:5d:3b:ff:63:8a:c4:80:82:01:75:a8:18:57:97: 2e:4f:0f:4f:59:d3:88:b9:5d:e1:e6:e1:77:64:dc: f7:2d:e6:e3:34:b6:4a:6f:1a:17:10:de:53:3b:f0: 47:04:fc:8d:7a:41:85:3e:30:b5:5d:cb:dc:ce:c9: fa:ad:71:ab:58:42:a3:e6:6c:a0:21:cf:ca:64:b3: 2e:2a:68:d2:fd:ba:79:74:5d:d6:38:af:75:d1:d1: 41:3f:8b:8c:ee:00:63:21:e5:ce:02:ea:20:d3:9f: c1:be:2f:56:6c:70:f1:ca:3b:4e:33:a5:eb:0d:82: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5D:7C:97:18:6F:F9:91:1E:2C:A1:47:89:31:0E:FE:9E:8F:EA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 207.68.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:22:65:eb:4f:00:c9:3a:6a:3c:6b:ef:49:9d:9a:96:6b:59: 09:cc:d5:41:00:eb:3e:9e:9f:55:a7:85:0e:fa:d6:36:05:a0: 11:f5:1b:30:51:5d:68:aa:0a:13:43:cc:37:ed:02:d3:da:f0: 8c:79:20:13:7a:54:f3:02:f7:c8:f9:4f:fd:8d:a8:5b:16:8d: 03:e3:ef:96:38:09:11:ba:70:53:a7:5c:c0:e4:c2:d2:42:fe: e5:e1:ec:b3:ce:dc:e1:48:d2:f2:9d:5f:fb:56:77:53:aa:b4: ee:7c:6b:9f:6b:12:fc:55:7f:40:86:07:f2:fe:56:9c:ba:80: 10:a2:46:23:e3:1f:2a:9c:ee:cf:e4:54:f6:c6:eb:1d:9c:cb: 9e:68:1d:23:78:f0:ed:d4:11:f5:46:85:8a:bb:10:c1:25:9e: 2d:b3:5e:49:04:80:c6:81:37:4b:6e:9d:65:2a:5e:3b:a4:47: 04:c5:cf:9f:df:44:4d:1a:fb:46:59:64:06:a4:f6:cc:06:0c: 76:82:fa:a9:c3:79:44:8d:24:59:91:7d:12:9e:0e:f1:98:9a: ec:4b:2c:b9:af:bf:30:08:06:16:44:62:1b:15:96:f3:5f:f7: 01:cd:f5:f2:b7:79:d8:30:de:0b:55:58:8e:38:99:48:f6:5e: b1:64:c2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYG3PcEKu7mZd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MzFhYTQwN2ItY2M3Ny00NjljLWIwZDMtZGJjOWU4YzQwYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYVp3AMWFjaf//AyjQzE+r+zBRx7yfrbHmHp P2E1iLFvcjh7SKdMZYv9ErcVvRBBR6exwhak0nEUrcY53dSKVdz9A4BQH08fQnxs S3oQTt2u3WajVCTWitVMFzj1Hr0LIrSMaC7VnVU4S0ZR7vtX/VpnvX1pFAUCaatr syWGKtuEBJqSLXu6XTv/Y4rEgIIBdagYV5cuTw9PWdOIuV3h5uF3ZNz3LebjNLZK bxoXEN5TO/BHBPyNekGFPjC1Xcvczsn6rXGrWEKj5mygIc/KZLMuKmjS/bp5dF3W OK910dFBP4uM7gBjIeXOAuog05/Bvi9WbHDxyjtOM6XrDYLGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9dfJcYb/mRHiyhR4kxDv6ej+qkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvM2I3MGVmNDktNjFlOC0z YzFkLWEzM2EtNTFkMTk0YWNmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkiZetPAMk6ajxr70mdmpZrWQnM1UEA6z6en1WnhQ761jYFoBH1GzBR XWiqChNDzDftAtPa8Ix5IBN6VPMC98j5T/2NqFsWjQPj75Y4CRG6cFOnXMDkwtJC /uXh7LPO3OFI0vKdX/tWd1OqtO58a59rEvxVf0CGB/L+Vpy6gBCiRiPjHyqc7s/k VPbG6x2cy55oHSN48O3UEfVGhYq7EMElni2zXkkEgMaBN0tunWUqXjukRwTFz5/f RE0a+0ZZZAak9swGDHaC+qnDeUSNJFmRfRKeDvGYmuxLLLmvvzAIBhZEYhsVlvNf 9wHN9fK3edgw3gtVWI44mUj2XrFkwvI= -----END CERTIFICATE-----Generated at Thu Oct 15 15:25:58 2026 by rpki-client