$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9/70a5d025-5912-36ed-b5ef-44908ef85c3a.roa File: 70a5d025-5912-36ed-b5ef-44908ef85c3a.roa (raw, json) Hash identifier: Ihbnp8dfYQkRCdXg06KH7mhdXzMx+XfC9Uen6JW9it8= Subject key identifier: A7:9A:52:E7:C1:A4:4E:7C:78:44:3D:D5:94:24:58:E1:75:79:CB:4A Certificate issuer: /CN=16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9 Certificate serial: 010D0C9F4328584F6F8133F933F2FBF0E2094D80 Authority key identifier: 90:46:2A:44:CE:CC:CA:86:D3:4A:76:5F:26:67:B6:1B:63:B9:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9/70a5d025-5912-36ed-b5ef-44908ef85c3a.roa Signing time: Thu 08 Oct 2026 16:10:30 +0000 ROA not before: Thu 08 Oct 2026 16:10:30 +0000 ROA not after: Wed 06 Jan 2027 17:08:56 +0000 asID: 394984 IP address blocks: 65.18.192.0/24 maxlen: 24 65.18.193.0/24 maxlen: 24 65.18.194.0/24 maxlen: 24 65.18.195.0/24 maxlen: 24 65.18.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:81:33:f9:33:f2:fb:f0:e2:09:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9 Validity Not Before: Oct 8 16:10:30 2026 GMT Not After : Jan 6 17:08:56 2027 GMT Subject: CN=81aa21ff-3b22-4f55-ae3c-2f0069be03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c3:53:a3:86:fa:1d:70:8a:b1:e4:17:12:0e: 02:e2:eb:2c:eb:0e:18:e5:dc:bd:a0:4d:bf:31:79: cc:d1:84:7e:c7:c1:36:ef:03:f1:1a:c8:32:4b:82: 4a:c5:32:31:81:84:dd:74:c6:aa:1a:9b:9c:e5:66: f8:9e:11:63:14:b7:44:97:16:2f:d5:4a:28:4b:71: 06:3f:ac:aa:7a:24:cd:ee:fd:b0:48:b3:8f:a0:dd: 3a:ba:20:bc:16:70:97:fa:70:3d:8e:d7:fb:ea:db: 8a:bb:84:51:9f:8d:be:39:cd:76:35:72:69:32:63: 64:c7:a5:d6:1b:3e:b5:98:66:a1:e3:24:e4:cc:1f: 58:c1:0b:7e:24:d8:94:c9:ed:46:e9:f1:ff:3b:d4: a2:09:df:2e:66:be:f6:ab:ce:c2:61:d9:67:e3:24: 5b:a6:ce:e9:02:33:f7:c6:77:36:f7:d9:57:80:e3: cb:80:ed:29:50:57:58:84:ad:ff:48:bd:93:5c:e7: bf:30:e5:67:88:2b:66:4d:60:ed:66:2e:29:d0:0b: 17:d6:d7:cb:db:65:75:09:c1:2e:82:b3:8a:0f:e8: 27:9b:29:bb:a4:05:6e:77:70:82:72:85:50:ca:d2: 6e:e6:6b:75:f6:47:ce:79:0b:cb:c2:40:96:59:28: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9A:52:E7:C1:A4:4E:7C:78:44:3D:D5:94:24:58:E1:75:79:CB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9/70a5d025-5912-36ed-b5ef-44908ef85c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9.crl X509v3 Authority Key Identifier: keyid:90:46:2A:44:CE:CC:CA:86:D3:4A:76:5F:26:67:B6:1B:63:B9:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/16cf5feb-1aa1-48ea-bb24-ca4ceedca3b9.cer sbgp-ipAddrBlock: critical IPv4: 65.18.192.0-65.18.196.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:60:ec:94:ef:ba:84:42:68:9b:7e:0c:af:e2:ff:24:99:39: 3f:9a:0a:3a:7c:ba:6a:c0:24:70:89:0d:69:b4:03:88:36:65: cd:06:4c:e9:50:bc:5a:ec:44:a8:2e:e1:22:cc:0e:75:f2:6d: 4d:cd:70:d3:ae:a0:13:32:ad:04:59:df:c0:10:53:24:22:dc: 4d:5f:80:b7:a4:86:c8:57:a7:75:d7:d8:09:1c:68:18:60:b7: 1a:db:9a:f6:07:d1:4d:53:a1:35:74:7e:c1:9c:88:ff:63:83: de:38:51:f4:c8:1d:4a:c2:03:10:8f:cf:e9:7e:7c:77:2a:ae: 0b:53:be:d4:c5:77:3a:52:9a:86:cc:2b:ad:f0:87:73:3c:8c: 9c:74:b9:9d:d5:45:90:91:bd:89:ab:44:49:34:2f:b3:8e:dc: b4:5a:06:0d:d8:9f:04:54:18:76:e4:0e:f9:f6:68:5f:cd:82: d5:f0:92:f3:5b:a3:27:aa:41:56:e0:6c:08:8f:6d:41:54:07: 0b:7e:76:0e:2e:d7:9d:4c:bb:c7:74:05:80:a6:db:b9:d1:c8: 6c:a3:28:14:07:73:cc:5b:0e:a2:2d:03:c7:33:0e:b7:67:28: 0f:41:37:95:f5:0d:95:11:14:dc:aa:bb:8f:4d:ef:10:48:5c: ea:83:ed:2d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9vgTP5M/L78OIJTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjZjVmZWItMWFhMS00OGVhLWJiMjQtY2E0Y2VlZGNh M2I5MB4XDTI2MTAwODE2MTAzMFoXDTI3MDEwNjE3MDg1NlowLzEtMCsGA1UEAxMk ODFhYTIxZmYtM2IyMi00ZjU1LWFlM2MtMmYwMDY5YmUwM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcNTo4b6HXCKseQXEg4C4uss6w4Y5dy9oE2/ MXnM0YR+x8E27wPxGsgyS4JKxTIxgYTddMaqGpuc5Wb4nhFjFLdElxYv1UooS3EG P6yqeiTN7v2wSLOPoN06uiC8FnCX+nA9jtf76tuKu4RRn42+Oc12NXJpMmNkx6XW Gz61mGah4yTkzB9YwQt+JNiUye1G6fH/O9SiCd8uZr72q87CYdln4yRbps7pAjP3 xnc299lXgOPLgO0pUFdYhK3/SL2TXOe/MOVniCtmTWDtZi4p0AsX1tfL22V1CcEu grOKD+gnmym7pAVud3CCcoVQytJu5mt19kfOeQvLwkCWWSjLXQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKeaUufBpE58eEQ91ZQkWOF1ectKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xNmNm NWZlYi0xYWExLTQ4ZWEtYmIyNC1jYTRjZWVkY2EzYjkvNzBhNWQwMjUtNTkxMi0z NmVkLWI1ZWYtNDQ5MDhlZjg1YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMTZjZjVmZWItMWFhMS00OGVhLWJi MjQtY2E0Y2VlZGNhM2I5LzE2Y2Y1ZmViLTFhYTEtNDhlYS1iYjI0LWNhNGNlZWRj YTNiOS5jcmwwHwYDVR0jBBgwFoAUkEYqRM7MyobTSnZfJme2G2O5QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xNmNmNWZlYi0xYWExLTQ4ZWEtYmIyNC1jYTRj ZWVkY2EzYjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZBEsAD BABBEsQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPmDslO+6hEJom34Mr+L/JJk5P5oKOny6asAkcIkNabQD iDZlzQZM6VC8WuxEqC7hIswOdfJtTc1w066gEzKtBFnfwBBTJCLcTV+At6SGyFen ddfYCRxoGGC3Gtua9gfRTVOhNXR+wZyI/2OD3jhR9MgdSsIDEI/P6X58dyquC1O+ 1MV3OlKahswrrfCHczyMnHS5ndVFkJG9iatESTQvs47ctFoGDdifBFQYduQO+fZo X82C1fCS81ujJ6pBVuBsCI9tQVQHC352Di7XnUy7x3QFgKbbudHIbKMoFAdzzFsO oi0DxzMOt2coD0E3lfUNlREU3Kq7j03vEEhc6oPtLQ== -----END CERTIFICATE-----Generated at Wed Oct 21 04:51:40 2026 by rpki-client