$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/646f45c1-ebde-3512-8f02-fa14d3761299.roa File: 646f45c1-ebde-3512-8f02-fa14d3761299.roa (raw, json) Hash identifier: LNiA+BysXLGh0acxcG6McKhJ+OwsY1Uc6T+QQOStBw0= Subject key identifier: 83:A8:F8:B2:DF:76:FF:41:52:C7:EF:9C:88:2C:D4:C9:BB:AB:57:9E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F8F3DA8A933CF478D6996CAC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/646f45c1-ebde-3512-8f02-fa14d3761299.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 6312 IP address blocks: 216.106.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a8:a9:33:cf:47:8d:69:96:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=9adb423a-31f6-4a55-867d-0e7b041162c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:eb:62:d5:73:f8:39:2d:0a:f7:18:e6:34: ed:8f:91:ab:3f:3e:bc:5f:0a:83:78:dd:db:59:bc: 78:3c:c4:d5:4d:88:57:2e:7e:48:a6:0e:83:f3:12: bc:8b:43:f4:47:0a:89:a0:0a:c8:db:f8:01:e4:46: bb:40:49:0a:fc:ba:cb:04:26:1b:79:c0:d4:f0:fd: 8d:d5:9f:ae:59:cb:a9:db:c6:78:9c:de:b9:f3:1e: 50:f5:b2:ba:ed:34:ee:41:ee:eb:ac:e2:1a:de:15: 85:0d:de:3d:3d:3c:83:8c:6e:2a:3b:7a:7c:3e:6d: 84:57:ce:2d:f1:3d:35:cf:05:e2:20:2b:04:6c:23: 22:66:3c:2b:8c:9b:aa:f4:2c:ac:f5:c2:de:d0:26: 12:e7:3f:73:6d:2d:4e:c9:97:70:0f:21:a9:da:27: 6f:35:95:eb:b4:47:6f:a2:7b:9b:29:1c:3a:5a:69: ac:69:c2:99:af:24:6a:f7:6d:bc:79:df:5c:79:d2: 77:73:b8:6f:a1:52:92:69:a8:93:96:bf:16:03:26: 02:10:ee:cc:16:50:a0:36:68:d1:0e:f9:4a:3f:26: d7:7f:1a:bc:e0:0d:8d:54:11:a2:e8:2a:59:10:c0: 50:78:91:ec:87:f6:d3:bd:39:03:b5:6e:92:2d:d2: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A8:F8:B2:DF:76:FF:41:52:C7:EF:9C:88:2C:D4:C9:BB:AB:57:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/646f45c1-ebde-3512-8f02-fa14d3761299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e5:f9:38:b4:9f:6b:d9:51:c0:46:84:2d:19:69:67:16:ca: ad:99:f8:8b:0a:ab:fa:93:34:3e:49:0c:ef:ff:02:c8:8d:16: 05:86:89:77:75:d0:fe:f6:57:ed:9f:48:ed:0d:f0:9d:55:2f: 97:9c:7c:fb:3e:fc:cb:a6:88:92:1b:15:6a:18:6e:88:56:a9: aa:a0:63:59:9d:7d:91:45:0d:b8:ec:c9:1e:a8:8d:ea:71:49: bc:d2:93:b5:6c:af:1f:4d:b3:4f:6c:5a:df:7c:64:27:a6:ad: 6b:30:69:41:db:1e:d6:e6:28:d5:4b:d9:f3:e4:02:01:40:f5: ef:54:e5:27:3d:c2:75:a0:3d:c8:ff:32:a7:e4:27:01:c6:25: 08:47:a6:e9:a7:4c:c5:db:ec:4a:eb:ec:de:15:20:18:9c:a1: 7e:be:9b:37:b8:25:22:ce:dd:25:49:f6:8a:01:b3:16:38:a3: 89:1b:61:81:d3:31:20:47:a4:4b:83:af:98:06:ee:98:e2:14: 66:38:65:8f:ab:e7:57:49:10:e3:f9:15:e3:ec:6a:4c:0b:f3: 9a:f7:66:ad:41:7a:90:2a:3c:75:70:30:40:1b:64:22:fc:4e: 72:1b:3f:13:d1:67:29:e3:a7:fb:1b:0a:c2:2c:1b:be:d9:3f: 1c:6a:bf:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPaipM89HjWmWysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk OWFkYjQyM2EtMzFmNi00YTU1LTg2N2QtMGU3YjA0MTE2MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD7rYtVz+DktCvcY5jTtj5GrPz68XwqDeN3b Wbx4PMTVTYhXLn5Ipg6D8xK8i0P0RwqJoArI2/gB5Ea7QEkK/LrLBCYbecDU8P2N 1Z+uWcup28Z4nN658x5Q9bK67TTuQe7rrOIa3hWFDd49PTyDjG4qO3p8Pm2EV84t 8T01zwXiICsEbCMiZjwrjJuq9Cys9cLe0CYS5z9zbS1OyZdwDyGp2idvNZXrtEdv onubKRw6WmmsacKZryRq9228ed9cedJ3c7hvoVKSaaiTlr8WAyYCEO7MFlCgNmjR DvlKPybXfxq84A2NVBGi6CpZEMBQeJHsh/bTvTkDtW6SLdJsoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOo+LLfdv9BUsfvnIgs1Mm7q1eeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNjQ2ZjQ1YzEtZWJkZS0z NTEyLThmMDItZmExNGQzNzYxMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrl+Ti0n2vZUcBGhC0ZaWcWyq2Z+IsKq/qTND5JDO//AsiNFgWGiXd1 0P72V+2fSO0N8J1VL5ecfPs+/MumiJIbFWoYbohWqaqgY1mdfZFFDbjsyR6ojepx SbzSk7Vsrx9Ns09sWt98ZCemrWswaUHbHtbmKNVL2fPkAgFA9e9U5Sc9wnWgPcj/ MqfkJwHGJQhHpumnTMXb7Err7N4VIBicoX6+mze4JSLO3SVJ9ooBsxY4o4kbYYHT MSBHpEuDr5gG7pjiFGY4ZY+r51dJEOP5FePsakwL85r3Zq1BepAqPHVwMEAbZCL8 TnIbPxPRZynjp/sbCsIsG77ZPxxqv5E= -----END CERTIFICATE-----Generated at Mon Oct 26 20:28:25 2026 by rpki-client