$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa File: b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa (raw, json) Hash identifier: 14pT+ECaGU9htkb3AVfGWApHBVubsbAlJlVpfdaXP9s= Subject key identifier: B1:29:1F:E8:40:05:14:7A:95:E2:41:94:97:60:85:36:EF:F4:86:D3 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584F4973E6F1A10C4E33ADE3C1C8 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23465 IP address blocks: 70.96.220.0/22 maxlen: 22 70.97.86.0/23 maxlen: 23 70.97.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e6:f1:a1:0c:4e:33:ad:e3:c1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df02f942-a6dc-4c22-9885-3bdd2612554a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8d:a1:90:ff:cd:b5:56:02:79:9f:bf:ef:2d: 5f:c2:09:97:9b:a9:b0:07:9a:cb:55:f6:5f:6f:63: 79:07:e6:5a:c2:f2:48:b6:aa:4b:69:6c:3e:28:81: 5c:0d:4a:f4:fa:ac:5b:5a:d1:7f:67:26:14:46:71: 67:7b:13:6c:0d:5a:a6:55:c9:ba:6d:e2:c6:2a:9f: 9d:78:6f:fc:39:1e:8d:6d:bb:86:82:25:d7:04:14: 74:91:f3:6d:95:04:62:b0:c7:6f:b8:11:9a:aa:ac: 65:b5:59:57:a8:12:82:90:76:2c:ca:32:7d:e3:6f: 95:27:78:e5:80:20:ac:93:b4:9d:cd:b8:ee:2e:c9: 22:72:7f:67:88:d5:46:e0:84:01:e5:bc:16:26:3f: b5:8c:5b:de:93:5e:c1:46:15:30:28:01:30:6d:11: 43:96:4a:49:8a:8a:e3:b1:14:28:f9:a9:bf:f8:b2: 37:36:c5:16:a9:3a:6d:1f:45:d4:a2:11:d6:f3:cd: bf:58:d7:2d:3f:4e:0d:d0:f5:1b:c9:64:85:7d:cb: 1b:2f:e2:37:a0:22:b4:52:26:38:2e:d0:bd:cc:0c: e8:81:f9:7b:6d:3c:f1:94:e3:78:cb:f1:aa:c7:4e: fc:a6:8f:27:30:25:e7:3e:cd:45:54:11:cf:09:12: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:29:1F:E8:40:05:14:7A:95:E2:41:94:97:60:85:36:EF:F4:86:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.220.0/22 70.97.86.0/23 70.97.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:ea:4b:35:fd:d7:23:a6:04:c3:fa:70:41:c6:a2:8d:74:b1: 88:49:f4:c3:ac:e4:fe:8b:61:65:e1:0d:28:7b:ea:34:97:b9: 18:08:f3:dc:93:8f:76:81:40:da:8e:15:f0:04:67:35:ce:38: f1:a9:31:94:20:05:49:aa:ba:bf:80:7e:21:65:b6:e0:48:93: b4:c8:1c:45:bb:9c:56:e3:93:a8:6a:66:f1:1f:dc:e6:f8:b5: ab:87:06:3c:b0:a5:15:85:e3:27:13:a5:7e:a9:d9:14:14:72: 3b:bf:8c:c8:33:93:d3:56:09:18:cd:a5:ae:1d:fe:3b:f6:0e: 1a:e1:af:a9:d7:b7:68:06:58:f2:11:f5:c6:c6:31:36:44:6d: 25:aa:69:b5:65:0c:13:42:d4:2e:5d:b2:ed:fa:dc:12:af:42: 17:23:ca:53:86:3f:ed:31:d8:ea:23:9d:72:77:64:73:20:1e: c3:85:e1:d7:79:71:37:00:fd:0e:bf:5d:c5:0f:4d:4b:5b:93: ee:a6:9a:33:21:6d:0b:3f:6c:11:91:8b:89:40:8f:cc:9a:19: 46:69:f3:a6:d1:c5:08:7c:08:fd:28:ee:07:80:c0:d2:35:81: 94:5e:b1:65:a9:d4:46:7d:ed:c2:b7:bc:4b:4a:33:5f:22:1f: 45:bf:f9:d9 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9Jc+bxoQxOM63jwcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGYwMmY5NDItYTZkYy00YzIyLTk4ODUtM2JkZDI2MTI1NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh42hkP/NtVYCeZ+/7y1fwgmXm6mwB5rLVfZf b2N5B+ZawvJItqpLaWw+KIFcDUr0+qxbWtF/ZyYURnFnexNsDVqmVcm6beLGKp+d eG/8OR6NbbuGgiXXBBR0kfNtlQRisMdvuBGaqqxltVlXqBKCkHYsyjJ942+VJ3jl gCCsk7SdzbjuLskicn9niNVG4IQB5bwWJj+1jFvek17BRhUwKAEwbRFDlkpJiorj sRQo+am/+LI3NsUWqTptH0XUohHW882/WNctP04N0PUbyWSFfcsbL+I3oCK0UiY4 LtC9zAzogfl7bTzxlON4y/Gqx078po8nMCXnPs1FVBHPCRJWzwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLEpH+hABRR6leJBlJdghTbv9IbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYjI3OTlhZGEtMWVhZC0z YTlhLTljNTAtYjViMWFhNTdhZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCRmDcAwQB RmFWAwQBRmGGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMHqSzX91yOmBMP6cEHGoo10sYhJ9MOs5P6LYWXh DSh76jSXuRgI89yTj3aBQNqOFfAEZzXOOPGpMZQgBUmqur+AfiFltuBIk7TIHEW7 nFbjk6hqZvEf3Ob4tauHBjywpRWF4ycTpX6p2RQUcju/jMgzk9NWCRjNpa4d/jv2 Dhrhr6nXt2gGWPIR9cbGMTZEbSWqabVlDBNC1C5dsu363BKvQhcjylOGP+0x2Ooj nXJ3ZHMgHsOF4dd5cTcA/Q6/XcUPTUtbk+6mmjMhbQs/bBGRi4lAj8yaGUZp86bR xQh8CP0o7geAwNI1gZResWWp1EZ97cK3vEtKM18iH0W/+dk= -----END CERTIFICATE-----Generated at Sat Oct 10 17:11:20 2026 by rpki-client