$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f48123af-1cf7-3f6e-9472-5b8310578326.roa File: f48123af-1cf7-3f6e-9472-5b8310578326.roa (raw, json) Hash identifier: L+ytwxOe5f3+xlrD9ZrsIjngL5RtALi/nCz8PvKTIf8= Subject key identifier: 63:25:84:17:51:C5:8F:DB:17:86:4C:F7:88:E7:CE:E5:82:B9:E9:1F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F9D3318C8BA84D26D797AA200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f48123af-1cf7-3f6e-9472-5b8310578326.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 401506 IP address blocks: 216.66.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:18:c8:ba:84:d2:6d:79:7a:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=c3e8bbf1-2ffb-47b5-a19a-dd17849772e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:69:14:f8:a0:3e:5a:f6:91:ce:b9:f9:2b: 79:28:12:3f:ea:45:60:04:ae:88:67:53:0f:f4:a8: e0:9d:ef:aa:4f:e7:ac:03:0d:2f:1d:41:d4:6a:72: 5a:3b:1d:68:fe:42:54:e3:e5:96:ea:09:06:92:f4: 34:e7:0c:6f:3e:24:c1:c3:d5:f6:b3:98:34:ff:6c: 9f:be:ac:3e:46:4c:15:9e:47:b5:d6:6f:3a:10:5b: bc:ea:a1:4d:50:11:b6:a9:9d:5f:b8:52:c4:2c:c1: ef:0d:05:ab:9d:39:bb:72:6c:ac:7a:56:6b:84:c3: a9:c4:ed:3d:03:28:2b:a7:d8:87:ad:92:b1:1c:25: d8:c1:19:b1:ec:ef:f7:78:4c:69:0d:b8:34:d8:5b: 2f:ee:48:c1:93:4d:60:d9:58:9c:c1:d0:25:36:69: d3:a6:7a:e7:97:d6:30:76:0d:de:a0:09:1f:bd:f4: 2e:ed:4c:12:f9:b7:bc:22:fb:a8:e4:a2:6e:85:ec: 76:ff:5a:a8:9e:c3:76:86:50:1d:6a:d0:f8:ae:63: 0f:17:b4:9a:11:9a:a4:dc:b3:ce:29:58:1f:75:2e: b2:8c:7d:28:5f:62:e6:f0:ce:58:9f:9b:0c:7d:26: be:56:fa:38:86:2e:17:c3:cc:c4:6f:0f:5c:df:dc: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:84:17:51:C5:8F:DB:17:86:4C:F7:88:E7:CE:E5:82:B9:E9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f48123af-1cf7-3f6e-9472-5b8310578326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2c:f9:26:b7:fa:67:50:4a:b5:ab:e8:b0:55:4e:50:fc:a3: cb:1a:91:cd:ac:6a:fa:bd:1b:eb:85:ea:71:d6:86:97:2a:49: 93:17:2d:56:bb:8d:30:f7:15:f4:d6:0f:11:a3:8f:88:ad:91: be:dc:5c:e7:6b:40:cf:44:3a:d6:59:d6:de:d7:cd:db:44:2e: be:d0:d9:e8:dd:af:52:00:a6:35:ee:24:4b:26:74:34:cc:88: e5:0b:8d:b4:a0:ea:f6:ad:a5:da:58:95:b1:f7:65:25:a5:63: 2b:83:dc:9f:66:1e:db:74:0a:6d:b4:9e:ea:4a:36:1e:d0:ee: f7:1c:5e:42:c0:c0:c8:74:f9:4f:6e:e3:56:a4:65:7b:94:e6: 8a:f1:59:74:d9:e6:38:e9:b7:68:b8:c2:93:87:9a:ee:85:27: e1:04:a0:53:d0:6c:cb:05:fa:64:3d:ba:0d:68:51:15:32:14: 8c:54:8b:70:6a:42:84:00:d6:58:dc:48:53:89:d9:73:17:34: f7:b2:a5:84:6b:03:a6:e4:26:17:c9:30:86:a6:7b:81:f6:3b: fe:bd:82:31:82:92:28:d3:84:7a:07:8f:31:ff:70:f0:9d:3a: df:2e:12:71:e3:c6:04:30:ad:ee:c7:bf:85:81:e5:dc:b7:5c: ed:fd:40:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxjIuoTSbXl6ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk YzNlOGJiZjEtMmZmYi00N2I1LWExOWEtZGQxNzg0OTc3MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywBpFPigPlr2kc65+St5KBI/6kVgBK6IZ1MP 9Kjgne+qT+esAw0vHUHUanJaOx1o/kJU4+WW6gkGkvQ05wxvPiTBw9X2s5g0/2yf vqw+RkwVnke11m86EFu86qFNUBG2qZ1fuFLELMHvDQWrnTm7cmyselZrhMOpxO09 Aygrp9iHrZKxHCXYwRmx7O/3eExpDbg02Fsv7kjBk01g2VicwdAlNmnTpnrnl9Yw dg3eoAkfvfQu7UwS+be8Ivuo5KJuhex2/1qonsN2hlAdatD4rmMPF7SaEZqk3LPO KVgfdS6yjH0oX2Lm8M5Yn5sMfSa+Vvo4hi4Xw8zEbw9c39y/eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMlhBdRxY/bF4ZM94jnzuWCuekfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjQ4MTIzYWYtMWNmNy0z ZjZlLTk0NzItNWI4MzEwNTc4MzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQs+Sa3+mdQSrWr6LBVTlD8o8sakc2savq9G+uF6nHWhpcqSZMXLVa7 jTD3FfTWDxGjj4itkb7cXOdrQM9EOtZZ1t7XzdtELr7Q2ejdr1IApjXuJEsmdDTM iOULjbSg6vatpdpYlbH3ZSWlYyuD3J9mHtt0Cm20nupKNh7Q7vccXkLAwMh0+U9u 41akZXuU5orxWXTZ5jjpt2i4wpOHmu6FJ+EEoFPQbMsF+mQ9ug1oURUyFIxUi3Bq QoQA1ljcSFOJ2XMXNPeypYRrA6bkJhfJMIame4H2O/69gjGCkijThHoHjzH/cPCd Ot8uEnHjxgQwre7Hv4WB5dy3XO39QEc= -----END CERTIFICATE-----Generated at Sat Oct 31 12:31:47 2026 by rpki-client