$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e6131de-99e0-370a-b7aa-df379955a581.roa File: 4e6131de-99e0-370a-b7aa-df379955a581.roa (raw, json) Hash identifier: 6vtJfS8+t9eyMcXBiCmsZ0WQghhVIxBR3kSLL6/NqtM= Subject key identifier: 1C:50:39:2A:95:FB:06:77:20:65:49:BE:0E:1D:0E:90:19:28:14:15 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F90651688D3AC80985844C100 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e6131de-99e0-370a-b7aa-df379955a581.roa Signing time: Tue 20 Oct 2026 10:55:32 +0000 ROA not before: Tue 20 Oct 2026 10:55:32 +0000 ROA not after: Mon 18 Jan 2027 11:55:32 +0000 asID: 14618 IP address blocks: 216.219.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:65:16:88:d3:ac:80:98:58:44:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 20 10:55:32 2026 GMT Not After : Jan 18 11:55:32 2027 GMT Subject: CN=c24f2769-537d-4374-abda-85d5a633799a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:32:d9:2f:27:4e:29:2d:8f:40:f0:e5:d0:5f: ae:cd:66:b9:b7:60:ae:a8:56:d1:1e:c1:83:f1:23: 3a:33:0b:a0:5a:e3:23:a8:01:97:58:61:31:60:f1: 96:11:99:85:c3:2a:6b:29:af:3f:8b:54:6d:d9:ca: 70:d7:cc:f4:f3:08:54:b7:c2:87:30:11:83:d7:0c: 49:0a:57:e3:30:35:20:7a:6a:f2:b8:ba:7e:4c:a3: 7e:6a:36:97:15:0b:16:fa:96:79:f3:a2:89:04:08: 26:34:8e:ee:43:af:8c:69:e4:61:f5:40:f4:93:1f: 99:06:39:17:e8:58:18:fd:ab:12:66:c1:bb:53:5b: 32:82:43:38:c5:0c:d7:b2:7a:c2:54:3c:dc:8e:d4: 04:10:44:05:7e:e4:5c:c2:55:a3:3e:c4:5c:f3:ec: 8a:9d:94:cd:1a:91:93:23:9a:ad:1b:ed:82:34:73: ec:5f:73:f3:db:ca:b4:ed:53:e5:53:57:f5:2c:71: 1f:3b:38:f2:93:75:01:21:b8:b7:ef:61:29:56:21: 77:b8:27:7c:c5:d8:7b:dc:8f:90:b1:37:16:fa:ec: c6:3c:43:b2:22:ec:5a:21:ab:01:be:5c:02:ad:91: 36:89:37:15:46:9c:fe:78:fb:94:c8:6f:53:eb:b1: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:50:39:2A:95:FB:06:77:20:65:49:BE:0E:1D:0E:90:19:28:14:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e6131de-99e0-370a-b7aa-df379955a581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.219.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:df:9b:55:10:15:63:41:f4:53:1c:5d:8a:52:02:cd:13:92: 83:f9:29:08:0c:f7:61:a1:98:45:6b:1f:ff:99:02:96:91:60: b1:65:58:f7:bc:01:81:dc:84:31:3a:0f:10:fb:71:7f:ba:1e: d1:cf:bd:2f:90:1e:c1:9d:77:ce:2a:55:cb:db:19:d5:b2:a9: cf:03:f7:c0:a6:e7:1d:86:7d:69:04:ba:19:59:85:4b:4c:50: 92:a0:ce:ff:24:0f:93:18:ee:6c:13:65:3b:d1:c9:60:48:5f: 75:90:40:53:6a:1e:ab:6a:b5:1a:1b:18:5a:53:70:5b:60:a9: d4:53:78:2f:6b:59:1b:95:06:ae:72:4e:a4:13:53:4f:81:04: 1a:4a:03:01:45:41:21:81:5e:9b:fb:93:6b:83:c6:b5:ac:2f: 2e:31:66:5a:b6:8f:ff:e7:50:6f:a2:15:51:eb:c2:2e:07:72: 81:42:65:eb:a0:de:6f:ef:41:18:4e:55:f1:56:a3:58:9b:7a: d1:4d:2f:59:0f:c7:47:a4:bb:7d:9a:41:43:53:26:f6:1f:bd: 92:d4:63:ad:36:2f:73:4a:d4:3a:21:9e:3d:03:1c:69:33:62: d5:e7:cd:b6:19:8d:31:20:02:fd:a9:57:18:eb:90:af:07:15: c5:b8:80:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QZRaI06yAmFhEwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MTAyMDEwNTUzMloXDTI3MDExODExNTUzMlowLzEtMCsGA1UEAxMk YzI0ZjI3NjktNTM3ZC00Mzc0LWFiZGEtODVkNWE2MzM3OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTLZLydOKS2PQPDl0F+uzWa5t2CuqFbRHsGD 8SM6MwugWuMjqAGXWGExYPGWEZmFwyprKa8/i1Rt2cpw18z08whUt8KHMBGD1wxJ ClfjMDUgemryuLp+TKN+ajaXFQsW+pZ586KJBAgmNI7uQ6+MaeRh9UD0kx+ZBjkX 6FgY/asSZsG7U1sygkM4xQzXsnrCVDzcjtQEEEQFfuRcwlWjPsRc8+yKnZTNGpGT I5qtG+2CNHPsX3Pz28q07VPlU1f1LHEfOzjyk3UBIbi372EpViF3uCd8xdh73I+Q sTcW+uzGPEOyIuxaIasBvlwCrZE2iTcVRpz+ePuUyG9T67HjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxQOSqV+wZ3IGVJvg4dDpAZKBQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNGU2MTMxZGUtOTllMC0z NzBhLWI3YWEtZGYzNzk5NTVhNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInfm1UQFWNB9FMcXYpSAs0TkoP5KQgM92GhmEVrH/+ZApaRYLFlWPe8 AYHchDE6DxD7cX+6HtHPvS+QHsGdd84qVcvbGdWyqc8D98Cm5x2GfWkEuhlZhUtM UJKgzv8kD5MY7mwTZTvRyWBIX3WQQFNqHqtqtRobGFpTcFtgqdRTeC9rWRuVBq5y TqQTU0+BBBpKAwFFQSGBXpv7k2uDxrWsLy4xZlq2j//nUG+iFVHrwi4HcoFCZeug 3m/vQRhOVfFWo1ibetFNL1kPx0eku32aQUNTJvYfvZLUY602L3NK1Dohnj0DHGkz YtXnzbYZjTEgAv2pVxjrkK8HFcW4gEw= -----END CERTIFICATE-----Generated at Wed Oct 28 11:34:42 2026 by rpki-client