$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa File: d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa (raw, json) Hash identifier: UbT9uu6uGPvlDi/Ywtz2pYgW5H2vLvU3Te6vyA1EKzw= Subject key identifier: 4A:E2:41:C8:EC:75:8F:DD:49:F6:63:67:6E:30:E7:2F:6D:B5:79:7E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F119D0A0F685D18E42CEB7600 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 13576 IP address blocks: 216.249.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0a:0f:68:5d:18:e4:2c:eb:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4c0cf5cb-471d-496a-8762-2dccaf8b6ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:97:b4:d5:43:99:d7:4a:82:eb:a3:3a:e7: 17:54:73:d3:78:71:88:22:69:7f:f9:94:b7:17:bf: 20:be:f1:1b:7d:31:a7:4d:6f:c9:8a:0b:c1:5b:a2: 95:2f:39:39:81:bc:9a:e5:4d:1b:5b:65:07:3d:db: 7d:22:6f:b1:45:40:8c:bb:76:3b:75:0e:08:74:66: e7:49:cd:74:79:a9:b9:4e:91:15:fa:88:1a:66:8d: a7:7f:09:76:ac:7c:14:a7:b5:62:b1:97:bf:29:c3: 61:40:2a:4c:c7:d9:78:06:8e:d6:78:3d:0e:ca:03: 71:d0:aa:d3:9c:ee:59:cb:53:d4:cd:90:bd:3f:be: 6b:18:4f:8a:76:33:3c:f6:c7:da:43:7b:d1:b5:ef: 37:6c:db:a8:ed:ed:fb:78:92:64:02:b7:2f:b5:42: f1:b3:cc:4c:78:94:c0:42:b5:cc:2d:a4:19:97:5e: d8:ee:68:34:f6:e8:97:44:97:5e:f1:22:e9:60:a8: 5c:44:73:ea:b4:95:6e:f5:87:91:ca:75:42:00:52: e1:1b:ac:24:24:67:76:27:8c:11:e1:37:18:04:c4: f5:0a:16:f7:2a:5d:7a:1f:9a:ad:a3:2a:6a:f0:ba: 3e:39:f9:1f:05:f7:7d:12:ee:6f:80:27:5f:8f:8a: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E2:41:C8:EC:75:8F:DD:49:F6:63:67:6E:30:E7:2F:6D:B5:79:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:58:21:6b:3d:89:ab:46:4a:de:13:65:6a:a6:8a:8c:cf:28: 83:36:30:a0:f2:d9:9d:a7:5f:4d:9a:8f:1d:02:e2:3e:b7:cf: 18:d6:48:63:2d:e7:0f:1a:ff:58:f5:67:47:be:3e:58:05:a1: cb:78:a5:68:af:76:dd:d3:f0:46:00:7d:05:49:f2:ea:61:90: 8c:16:55:17:83:81:b2:87:f7:c1:1d:cd:ab:25:68:15:7d:a9: 9a:2d:17:2b:06:60:19:30:e4:e1:fb:38:ef:91:56:c9:d2:7c: 3d:27:3f:32:a7:4d:c8:fb:1c:51:8b:69:9a:91:89:37:ae:e1: 8b:0f:e1:5c:7b:e3:a0:0f:0c:a8:b8:a2:85:b9:d6:0a:e1:74: e1:00:7b:9b:95:81:36:ee:2a:07:b6:ab:8c:c6:46:02:4b:50: 40:12:a2:03:b6:0c:da:cb:86:92:72:42:47:84:f8:2f:e3:a2: 92:71:98:bf:14:4a:46:db:c1:b3:27:79:ce:50:c7:9b:96:e9: 98:02:9a:3a:0a:92:3b:ad:d0:54:4b:56:10:0e:b0:d9:b4:c8: 73:8f:de:1c:7f:ff:e6:21:22:cc:1d:08:0c:6a:24:5a:9c:4a: 1b:dd:87:30:42:0f:20:9a:c3:9c:79:7b:b0:b8:ba:e7:d7:f8: dc:89:a9:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQoPaF0Y5CzrdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGMwY2Y1Y2ItNDcxZC00OTZhLTg3NjItMmRjY2FmOGI2ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbGXtNVDmddKguujOucXVHPTeHGIIml/+ZS3 F78gvvEbfTGnTW/JigvBW6KVLzk5gbya5U0bW2UHPdt9Im+xRUCMu3Y7dQ4IdGbn Sc10eam5TpEV+ogaZo2nfwl2rHwUp7VisZe/KcNhQCpMx9l4Bo7WeD0OygNx0KrT nO5Zy1PUzZC9P75rGE+KdjM89sfaQ3vRte83bNuo7e37eJJkArcvtULxs8xMeJTA QrXMLaQZl17Y7mg09uiXRJde8SLpYKhcRHPqtJVu9YeRynVCAFLhG6wkJGd2J4wR 4TcYBMT1Chb3Kl16H5qtoypq8Lo+OfkfBfd9Eu5vgCdfj4oZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEriQcjsdY/dSfZjZ24w5y9ttXl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDcwNDIwZTktYzJlNi0z MjI1LTljZjEtZTI2OGIxZTI5Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANxYIWs9iatGSt4TZWqmiozPKIM2MKDy2Z2nX02ajx0C4j63zxjWSGMt 5w8a/1j1Z0e+PlgFoct4pWivdt3T8EYAfQVJ8uphkIwWVReDgbKH98EdzaslaBV9 qZotFysGYBkw5OH7OO+RVsnSfD0nPzKnTcj7HFGLaZqRiTeu4YsP4Vx746APDKi4 ooW51grhdOEAe5uVgTbuKge2q4zGRgJLUEASogO2DNrLhpJyQkeE+C/jopJxmL8U SkbbwbMnec5Qx5uW6ZgCmjoKkjut0FRLVhAOsNm0yHOP3hx//+YhIswdCAxqJFqc ShvdhzBCDyCaw5x5e7C4uufX+NyJqXA= -----END CERTIFICATE-----Generated at Sat Sep 5 05:09:58 2026 by rpki-client