$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa File: 1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa (raw, json) Hash identifier: AOnTvvP0YxVagohGBQmkAqGbyQaqn4r4j+B1CRBhnHI= Subject key identifier: 8C:E3:E6:A2:2D:85:1E:DD:86:47:55:14:63:1E:11:3E:BC:22:5E:A9 Certificate issuer: /CN=ae28425a-59dd-4da2-864c-2b324303abb4 Certificate serial: 010D0C9F4328584F74B8258675D1E8FC88790180 Authority key identifier: 43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 54794 IP address blocks: 216.235.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:25:86:75:d1:e8:fc:88:79:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae28425a-59dd-4da2-864c-2b324303abb4 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=2eee9405-896c-4ca1-a6cd-333880be273e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:91:94:16:75:7e:04:80:75:1b:da:fa:68: 76:ff:8c:22:11:16:6a:48:2c:46:19:14:ef:2a:ff: 61:21:01:33:3e:c8:dd:d7:e4:5d:4d:b8:95:1e:58: cc:47:c0:a2:51:85:51:7d:b1:3b:63:8a:bb:da:ed: 01:45:5b:91:0d:57:a7:5c:7f:d7:36:07:89:c7:43: 82:35:b5:1c:b4:3d:e0:ab:75:55:f7:5d:fe:78:fc: b8:33:9e:dd:b2:33:7d:6f:ff:92:ca:df:da:13:cd: 4b:47:e5:18:c8:26:f6:07:57:1e:40:4e:a5:c1:c5: 62:2f:bb:7e:83:93:f4:6e:10:29:46:11:24:e7:1e: ed:58:5c:96:cf:6d:41:7e:b3:48:f9:28:a4:ba:55: e4:d4:cf:13:4d:7c:5e:be:b7:62:27:d9:d6:ad:03: 76:5e:18:6d:0c:a8:21:9c:ab:ac:1b:e2:70:76:de: e6:b9:23:38:75:fa:36:5a:ec:5a:1b:f2:b3:d4:90: 8a:6e:7d:12:63:56:89:02:ae:f5:96:e1:f4:94:90: de:9a:e9:f1:75:35:bc:2d:2c:77:bc:3c:1f:16:dd: 4b:94:5d:2c:9a:67:74:eb:c9:02:55:1c:3d:f4:5c: 3d:14:54:91:6b:dd:f6:62:82:88:10:9f:e8:f6:72: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:E6:A2:2D:85:1E:DD:86:47:55:14:63:1E:11:3E:BC:22:5E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.crl X509v3 Authority Key Identifier: keyid:43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer sbgp-ipAddrBlock: critical IPv4: 216.235.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:38:98:db:37:cd:49:1f:d2:e9:29:e0:d9:62:af:8b:bc:e8: b0:e6:2d:1f:43:66:38:e0:69:75:26:97:dd:c3:24:3a:61:b5: f9:01:28:56:23:de:28:bb:4a:e1:4f:95:45:8b:7e:8c:ee:a9: f5:97:4d:02:da:48:f0:dd:cc:88:c8:e8:45:bc:cc:7a:b4:ea: e4:58:cd:44:82:17:8f:84:59:96:8a:53:7e:8a:7f:3c:b7:40: f6:4f:43:c5:12:8a:44:2d:84:f0:36:c9:ca:e1:ff:1f:3a:39: 00:b7:9a:bd:68:41:38:84:e6:7c:93:fc:99:74:b6:c7:48:c5: e5:66:ab:14:3b:6a:74:3e:b9:5b:03:1f:5b:15:27:ce:6c:8e: 7f:a3:e2:15:27:3b:8a:d7:f7:e7:2a:75:cb:37:f5:ab:f9:ed: cc:e5:d0:e7:46:fa:67:9e:fe:73:8c:db:d0:11:64:e4:94:f6: ec:77:16:f2:47:bd:66:f2:c2:b1:8f:2e:9d:12:24:f0:4e:ad: 2c:62:77:9b:fd:33:2e:97:85:5e:52:91:42:39:96:09:19:c8: 0b:ce:29:36:ba:2e:91:8e:4d:34:5d:bb:e2:df:5a:34:f9:c7: 34:85:48:c8:c7:09:06:d5:eb:15:ce:a3:05:dd:85:a2:d6:8e: b5:39:d3:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCWGddHo/Ih5AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyODQyNWEtNTlkZC00ZGEyLTg2NGMtMmIzMjQzMDNh YmI0MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk MmVlZTk0MDUtODk2Yy00Y2ExLWE2Y2QtMzMzODgwYmUyNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6mRlBZ1fgSAdRva+mh2/4wiERZqSCxGGRTv Kv9hIQEzPsjd1+RdTbiVHljMR8CiUYVRfbE7Y4q72u0BRVuRDVenXH/XNgeJx0OC NbUctD3gq3VV913+ePy4M57dsjN9b/+Syt/aE81LR+UYyCb2B1ceQE6lwcViL7t+ g5P0bhApRhEk5x7tWFyWz21BfrNI+SikulXk1M8TTXxevrdiJ9nWrQN2XhhtDKgh nKusG+Jwdt7muSM4dfo2WuxaG/Kz1JCKbn0SY1aJAq71luH0lJDemunxdTW8LSx3 vDwfFt1LlF0smmd068kCVRw99Fw9FFSRa932YoKIEJ/o9nILpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzj5qIthR7dhkdVFGMeET68Il6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZTI4 NDI1YS01OWRkLTRkYTItODY0Yy0yYjMyNDMwM2FiYjQvMWEyMjIyYWItZWZkZi0z YjNkLThhZTYtN2QzOThiODQwZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWUyODQyNWEtNTlkZC00ZGEyLTg2 NGMtMmIzMjQzMDNhYmI0L2FlMjg0MjVhLTU5ZGQtNGRhMi04NjRjLTJiMzI0MzAz YWJiNC5jcmwwHwYDVR0jBBgwFoAUQxjDhy+2e6Ae/YiLT7yBBRQ9u58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZTI4NDI1YS01OWRkLTRkYTItODY0Yy0yYjMy NDMwM2FiYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg4mNs3zUkf0ukp4Nlir4u86LDmLR9DZjjgaXUml93DJDphtfkBKFYj 3ii7SuFPlUWLfozuqfWXTQLaSPDdzIjI6EW8zHq06uRYzUSCF4+EWZaKU36Kfzy3 QPZPQ8USikQthPA2ycrh/x86OQC3mr1oQTiE5nyT/Jl0tsdIxeVmqxQ7anQ+uVsD H1sVJ85sjn+j4hUnO4rX9+cqdcs39av57czl0OdG+mee/nOM29ARZOSU9ux3FvJH vWbywrGPLp0SJPBOrSxid5v9My6XhV5SkUI5lgkZyAvOKTa6LpGOTTRdu+LfWjT5 xzSFSMjHCQbV6xXOowXdhaLWjrU50wk= -----END CERTIFICATE-----Generated at Mon Oct 12 19:34:18 2026 by rpki-client