$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/d2e2299c-c2c4-3fa6-9840-bb7e25529f6a.roa File: d2e2299c-c2c4-3fa6-9840-bb7e25529f6a.roa (raw, json) Hash identifier: HKbB2ZusXJCXPbtCkfLtNaRIL+yeuPQnOElVLr304YA= Subject key identifier: C3:0D:B3:B2:1C:84:FF:DF:E7:45:48:70:D7:14:89:04:AC:EC:FF:FA Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Certificate serial: 010D0C9F4328584F4973172AAC2F4AC5571DA690 Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/d2e2299c-c2c4-3fa6-9840-bb7e25529f6a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22351 IP address blocks: 216.250.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:17:2a:ac:2f:4a:c5:57:1d:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3293c927-7922-481d-af9a-1e5039319b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:9e:6b:d3:24:4d:fe:c2:09:31:66:40:87: e1:85:71:02:4e:3b:f2:e7:ca:f2:95:19:80:9f:5d: 8c:88:ca:e9:10:ea:43:b5:53:0d:ed:ed:91:90:f2: e5:bb:0c:4e:4e:6f:04:dc:11:de:28:c8:d0:f6:71: 27:f7:bc:85:0a:81:b5:82:0a:c3:b0:a3:4c:10:4c: ec:2f:f0:5e:22:b0:8d:1e:41:3d:b5:8b:03:09:e3: 82:3e:fb:02:90:c1:5f:66:32:8d:3c:15:3a:f6:0e: 8a:88:4f:73:2d:d4:66:df:68:be:64:67:3a:3a:d8: 89:74:f0:93:52:e1:d8:6b:88:e0:a3:e2:be:b5:5b: 90:d8:ce:1e:e9:7b:35:a9:04:be:ee:31:4a:ad:4d: 90:79:61:5f:3c:49:dd:eb:4e:d9:70:6f:c3:f7:83: ab:db:a1:f4:82:4b:e1:ba:9b:e4:a7:2f:54:f3:2b: 5b:81:05:d3:ab:1e:fc:e6:b0:fc:7b:bf:71:00:ca: 4a:c6:08:2e:f4:0a:a3:ce:75:2b:aa:e5:f2:ae:3a: 8f:c8:a0:5b:5c:47:01:ad:e9:42:c8:7b:65:e0:bc: 55:74:55:f6:c0:e8:81:eb:7d:a7:2e:b4:89:2b:ae: af:ae:79:e3:d4:a4:c9:07:bf:3a:32:ab:83:a4:5e: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0D:B3:B2:1C:84:FF:DF:E7:45:48:70:D7:14:89:04:AC:EC:FF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/d2e2299c-c2c4-3fa6-9840-bb7e25529f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl X509v3 Authority Key Identifier: keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer sbgp-ipAddrBlock: critical IPv4: 216.250.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:49:db:f9:ff:6a:8d:38:2f:78:0d:1c:99:c2:3f:d0:6a:f1: 0f:e4:ad:27:c0:85:42:c4:73:e9:16:2c:f1:e1:3e:fd:13:3b: c8:70:10:4d:08:8b:5e:cf:af:14:95:d8:00:d5:12:9f:bf:e2: 46:c5:b9:02:39:02:ce:8f:45:2f:ad:89:c4:cd:bc:14:23:88: 81:0e:8a:12:74:a5:7f:74:cf:08:08:b4:7c:f6:e7:d3:32:99: cc:8c:2a:29:b2:b5:85:a3:c4:26:c2:40:2b:94:e7:fd:4e:5e: f4:37:84:3a:c3:01:30:a4:b7:43:e1:32:70:82:16:9f:51:8c: 32:99:1c:02:2d:43:58:21:48:e1:9c:cd:c9:88:bd:81:46:41: 3f:29:51:55:1f:0f:e9:f2:d1:23:20:94:47:e8:c7:28:bc:68: e2:31:53:bb:52:17:cb:8d:5d:d1:0f:9e:48:62:8f:ea:1d:a3: 05:af:64:4a:84:41:c5:b3:f7:8c:5f:8e:fd:44:6a:f4:5e:d4: 6f:47:af:88:67:7d:b0:34:71:dd:54:59:4b:1e:35:c2:9b:0d: b5:02:72:bf:62:f7:87:b1:ed:db:ac:a5:12:32:77:f2:ef:7c: 86:da:37:32:c1:c1:ec:c4:28:9e:03:3a:d3:d3:5f:9b:38:0f: 8e:64:8b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxcqrC9KxVcdppAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh YTQ0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI5M2M5MjctNzkyMi00ODFkLWFmOWEtMWU1MDM5MzE5YjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdKea9MkTf7CCTFmQIfhhXECTjvy58rylRmA n12MiMrpEOpDtVMN7e2RkPLluwxOTm8E3BHeKMjQ9nEn97yFCoG1ggrDsKNMEEzs L/BeIrCNHkE9tYsDCeOCPvsCkMFfZjKNPBU69g6KiE9zLdRm32i+ZGc6OtiJdPCT UuHYa4jgo+K+tVuQ2M4e6Xs1qQS+7jFKrU2QeWFfPEnd607ZcG/D94Or26H0gkvh upvkpy9U8ytbgQXTqx785rD8e79xAMpKxggu9AqjznUrquXyrjqPyKBbXEcBrelC yHtl4LxVdFX2wOiB632nLrSJK66vrnnj1KTJB786MquDpF5gLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMNs7IchP/f50VIcNcUiQSs7P/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvZDJlMjI5OWMtYzJjNC0z ZmE2LTk4NDAtYmI3ZTI1NTI5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4 YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PrGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBJ2/n/ao04L3gNHJnCP9Bq8Q/krSfAhULEc+kWLPHhPv0TO8hwEE0I i17PrxSV2ADVEp+/4kbFuQI5As6PRS+ticTNvBQjiIEOihJ0pX90zwgItHz259My mcyMKimytYWjxCbCQCuU5/1OXvQ3hDrDATCkt0PhMnCCFp9RjDKZHAItQ1ghSOGc zcmIvYFGQT8pUVUfD+ny0SMglEfoxyi8aOIxU7tSF8uNXdEPnkhij+odowWvZEqE QcWz94xfjv1EavRe1G9Hr4hnfbA0cd1UWUseNcKbDbUCcr9i94ex7duspRIyd/Lv fIbaNzLBwezEKJ4DOtPTX5s4D45kiyk= -----END CERTIFICATE-----Generated at Mon Sep 28 10:51:15 2026 by rpki-client