$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa File: cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa (raw, json) Hash identifier: m/j2RPaAQjrf4jkBoB1m/wohXOCIO3iMbfghUta1RXo= Subject key identifier: 7B:BD:41:9D:0C:AF:71:6C:1C:05:44:DF:B4:9C:1C:58:31:7C:41:B8 Certificate issuer: /CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb Certificate serial: 010D0C9F4328584F6F22D28DA7E46E8062B53EC0 Authority key identifier: 45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 8075 IP address blocks: 216.99.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:d2:8d:a7:e4:6e:80:62:b5:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=a4a0b8ac-2eee-485f-a759-4567136aa2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:10:e7:7c:a7:19:41:4d:95:a4:72:74:fa: 62:cd:39:3b:47:5e:2e:0d:41:10:d4:50:ed:e0:62: fd:da:14:cb:ae:b4:58:e3:f7:9e:94:78:c6:72:8a: 71:88:b5:e4:d6:ce:cf:af:be:24:33:9f:50:01:12: 64:b9:48:b1:57:e2:05:c6:99:15:20:2e:bc:99:e1: 24:bd:e4:75:a9:ec:80:35:04:64:07:7d:70:e5:6d: 37:ca:98:2e:f2:90:0f:58:32:f1:79:92:d3:9b:1c: 76:cc:77:f3:9b:18:2f:93:d2:ce:85:2f:d3:3c:1a: 74:b7:6c:4e:fb:c6:67:ef:07:06:bd:18:18:db:29: 61:42:22:fa:f7:00:ed:a4:64:5b:29:81:47:c7:99: 1d:a3:f7:4a:97:b2:55:9a:42:b0:7c:57:d2:bc:38: a3:21:a6:6c:68:f3:f0:8f:53:45:90:ee:38:0f:e9: 97:5c:47:35:23:4a:85:75:4c:9d:6b:13:9e:b8:43: d3:3c:53:da:c4:73:dc:32:8a:81:52:7e:98:cd:7f: 4d:c0:f5:fd:90:ff:e7:f5:1f:b0:06:78:42:1f:0a: 5a:2a:dd:5c:60:15:3b:14:96:c3:27:dd:8a:bc:5a: f1:71:80:da:da:97:d1:94:0d:82:4f:f0:f8:6a:83: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BD:41:9D:0C:AF:71:6C:1C:05:44:DF:B4:9C:1C:58:31:7C:41:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.crl X509v3 Authority Key Identifier: keyid:45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer sbgp-ipAddrBlock: critical IPv4: 216.99.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:23:86:66:72:48:6f:ae:8f:76:7e:c4:e8:b7:41:a3:5f:42: 0b:6e:86:51:a4:88:6e:1d:52:52:57:6d:a9:82:4f:79:d2:8f: f9:98:ad:46:5a:cd:d9:1c:8f:9e:6b:f8:f5:5b:65:17:cd:3f: 6e:29:d1:fe:28:46:8d:36:2d:2b:c7:31:b8:f0:f2:43:3e:e2: 5e:aa:a8:33:59:89:31:78:6d:21:20:eb:4b:71:4e:e5:19:0b: ef:f6:f6:bf:eb:26:4e:07:d4:c3:57:15:c5:b8:83:21:ca:12: 2a:ce:44:e9:a0:52:0c:1c:ad:96:f2:03:50:70:4c:a2:8e:a6: 6c:bf:36:6c:cd:91:60:38:e2:81:fe:5f:c9:c9:28:58:4e:7f: 12:05:79:c9:5a:b0:f3:15:1f:f0:3b:63:56:f1:c8:ac:0a:dd: cc:e8:b0:60:a0:0c:17:99:aa:fd:49:7c:aa:e3:23:e9:12:44: cd:9b:28:37:ca:fc:e6:48:11:fa:63:f3:13:0b:18:e8:13:e6: 28:50:47:d3:34:45:b6:32:1a:ef:22:fa:60:f4:75:8e:9f:a0: a8:17:75:90:37:f3:0c:12:6f:c5:00:17:36:fb:da:39:c7:31: 28:93:53:aa:d1:5d:0e:ec:01:94:65:2a:16:88:94:32:de:49: 3c:4a:c3:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vItKNp+RugGK1PsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmMzFiMTgtYTA0ZC00ZGIzLWEzYTUtYjc2ZWE0ZmU1 NmZiMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YTRhMGI4YWMtMmVlZS00ODVmLWE3NTktNDU2NzEzNmFhMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/YQ53ynGUFNlaRydPpizTk7R14uDUEQ1FDt 4GL92hTLrrRY4/eelHjGcopxiLXk1s7Pr74kM59QARJkuUixV+IFxpkVIC68meEk veR1qeyANQRkB31w5W03ypgu8pAPWDLxeZLTmxx2zHfzmxgvk9LOhS/TPBp0t2xO +8Zn7wcGvRgY2ylhQiL69wDtpGRbKYFHx5kdo/dKl7JVmkKwfFfSvDijIaZsaPPw j1NFkO44D+mXXEc1I0qFdUydaxOeuEPTPFPaxHPcMoqBUn6YzX9NwPX9kP/n9R+w BnhCHwpaKt1cYBU7FJbDJ92KvFrxcYDa2pfRlA2CT/D4aoM5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu9QZ0Mr3FsHAVE37ScHFgxfEG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xM2Yz MWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZlYTRmZTU2ZmIvY2ZmMGQ5NTItNTJlMy0z ZmU1LTllYzEtOWNlNGFiNGUwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMTNmMzFiMTgtYTA0ZC00ZGIzLWEz YTUtYjc2ZWE0ZmU1NmZiLzEzZjMxYjE4LWEwNGQtNGRiMy1hM2E1LWI3NmVhNGZl NTZmYi5jcmwwHwYDVR0jBBgwFoAURXfeRKTjTIqa8i4wy7PTy9Gax8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xM2YzMWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZl YTRmZTU2ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAjhmZySG+uj3Z+xOi3QaNfQgtuhlGkiG4dUlJXbamCT3nSj/mYrUZa zdkcj55r+PVbZRfNP24p0f4oRo02LSvHMbjw8kM+4l6qqDNZiTF4bSEg60txTuUZ C+/29r/rJk4H1MNXFcW4gyHKEirOROmgUgwcrZbyA1BwTKKOpmy/NmzNkWA44oH+ X8nJKFhOfxIFeclasPMVH/A7Y1bxyKwK3czosGCgDBeZqv1JfKrjI+kSRM2bKDfK /OZIEfpj8xMLGOgT5ihQR9M0RbYyGu8i+mD0dY6foKgXdZA38wwSb8UAFzb72jnH MSiTU6rRXQ7sAZRlKhaIlDLeSTxKwy4= -----END CERTIFICATE-----Generated at Wed Oct 21 17:32:45 2026 by rpki-client