$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/432bc577-0693-34ed-9cfe-d6766b5e9d19.roa File: 432bc577-0693-34ed-9cfe-d6766b5e9d19.roa (raw, json) Hash identifier: 8x1x2XzlXNme3ERL7PgXEarcZZh06BMt4Cv8iIEjpC8= Subject key identifier: 97:70:20:D5:A0:CE:20:47:35:71:99:8A:CA:EF:37:C2:42:37:4A:58 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FCFDD9CDF519B41F3CE700 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/432bc577-0693-34ed-9cfe-d6766b5e9d19.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 13536 IP address blocks: 216.114.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fd:d9:cd:f5:19:b4:1f:3c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=b23e5dcf-0bd0-4ce9-aa81-c2bf867d7f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:f1:3c:c5:d8:f5:10:6d:32:65:d3:75:04: d8:6b:8d:24:a7:59:23:46:43:e7:c2:2c:73:be:2e: 65:cc:db:81:dd:27:63:63:45:f7:5d:9a:a9:f3:fb: 74:00:e8:33:e2:4f:8c:4b:74:da:e1:16:34:b6:e5: 52:1c:6a:f8:ef:88:1f:ca:a1:79:ad:81:00:39:e1: ce:25:7d:d6:f3:90:50:d1:d8:b2:dc:16:d9:5e:47: 52:f2:b2:db:d4:ff:c8:73:26:ab:82:1c:af:07:d1: 3a:f7:9e:23:8c:1e:8f:ab:26:95:26:ca:05:88:63: 34:46:df:36:37:3e:14:9b:6f:fb:ea:f0:73:3b:a8: 70:a7:7c:f7:9e:c9:cd:21:c6:7d:34:7a:a3:3c:0a: 4a:22:01:68:8b:02:ae:2b:d5:31:38:08:15:a4:13: ac:6f:aa:0e:58:07:37:08:d9:aa:54:ce:4d:4b:3d: 91:04:21:e1:3a:2f:40:28:45:40:be:fe:0a:c0:d5: be:be:94:4d:a9:eb:d5:27:08:95:20:d9:d0:40:93: f3:a3:53:37:21:29:77:cd:33:20:82:c1:2a:06:3a: 8d:d7:9f:51:3c:d4:9b:bc:53:d2:f2:02:19:06:63: 4b:b6:d3:20:17:8f:08:37:2c:0f:c0:0d:2f:15:54: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:20:D5:A0:CE:20:47:35:71:99:8A:CA:EF:37:C2:42:37:4A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/432bc577-0693-34ed-9cfe-d6766b5e9d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 216.114.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3e:a1:3b:21:74:63:5f:a0:76:3e:9a:81:17:82:36:04:a4: d9:05:ce:b6:c1:78:fe:60:33:56:79:dc:b4:cb:42:e4:07:b1: fd:e7:84:3f:b4:22:77:a0:0c:ff:1a:53:1b:ea:58:2f:c6:e4: ff:d0:7a:3e:43:cf:d2:61:47:69:b9:b3:7d:c3:c7:7d:e1:82: 80:d1:3c:4c:0c:05:ff:09:03:2d:74:d3:10:94:96:50:7e:27: 12:0e:4a:45:49:14:d2:27:42:df:06:d8:cc:bc:78:16:9d:47: 97:58:1b:d0:96:77:e9:17:db:9f:be:a1:08:c6:07:ae:6d:f7: eb:37:43:17:8a:87:2a:a1:21:6b:ef:e4:2e:74:d2:90:74:e8: 21:ca:65:d8:e6:0e:73:4c:23:10:0f:f2:be:77:ca:4a:a8:5d: 06:94:43:df:07:15:d3:a1:1c:e1:2f:71:b6:a6:3f:7c:cd:4b: 6a:22:d2:0a:74:68:78:76:29:58:4a:52:2a:51:40:2c:ff:60: 49:e2:22:4a:64:94:1e:bb:1c:37:74:a6:6c:b3:ba:2b:27:24: 6f:e4:fd:34:07:2e:45:ea:1c:26:68:c4:6c:98:c1:4c:67:4e: 7d:92:64:b9:a6:a7:ec:14:93:e7:3d:04:37:89:5f:8f:c3:b1: 32:23:64:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P3ZzfUZtB885wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YjIzZTVkY2YtMGJkMC00Y2U5LWFhODEtYzJiZjg2N2Q3ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMDxPMXY9RBtMmXTdQTYa40kp1kjRkPnwixz vi5lzNuB3SdjY0X3XZqp8/t0AOgz4k+MS3Ta4RY0tuVSHGr474gfyqF5rYEAOeHO JX3W85BQ0diy3BbZXkdS8rLb1P/IcyarghyvB9E6954jjB6PqyaVJsoFiGM0Rt82 Nz4Um2/76vBzO6hwp3z3nsnNIcZ9NHqjPApKIgFoiwKuK9UxOAgVpBOsb6oOWAc3 CNmqVM5NSz2RBCHhOi9AKEVAvv4KwNW+vpRNqevVJwiVINnQQJPzo1M3ISl3zTMg gsEqBjqN159RPNSbvFPS8gIZBmNLttMgF48INywPwA0vFVSgzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdwINWgziBHNXGZisrvN8JCN0pYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvNDMyYmM1NzctMDY5My0z NGVkLTljZmUtZDY3NjZiNWU5ZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ+oTshdGNfoHY+moEXgjYEpNkFzrbBeP5gM1Z53LTLQuQHsf3nhD+0 InegDP8aUxvqWC/G5P/Qej5Dz9JhR2m5s33Dx33hgoDRPEwMBf8JAy100xCUllB+ JxIOSkVJFNInQt8G2My8eBadR5dYG9CWd+kX25++oQjGB65t9+s3QxeKhyqhIWvv 5C500pB06CHKZdjmDnNMIxAP8r53ykqoXQaUQ98HFdOhHOEvcbamP3zNS2oi0gp0 aHh2KVhKUipRQCz/YEniIkpklB67HDd0pmyzuisnJG/k/TQHLkXqHCZoxGyYwUxn Tn2SZLmmp+wUk+c9BDeJX4/DsTIjZHU= -----END CERTIFICATE-----Generated at Wed Sep 30 16:24:53 2026 by rpki-client