$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/48e0623c-9889-3890-8bdc-4e3838833694.roa File: 48e0623c-9889-3890-8bdc-4e3838833694.roa (raw, json) Hash identifier: FsOIRGSaBk6Ic8hiReD6+/Fm+HDB3PMeDEfs3y+cXnE= Subject key identifier: 56:D3:71:6D:E7:3C:58:1E:EC:E7:CA:3E:9F:32:93:31:47:3F:C8:69 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FCED1FB5E7EF9A3562D360 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/48e0623c-9889-3890-8bdc-4e3838833694.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 19802 IP address blocks: 216.238.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:ed:1f:b5:e7:ef:9a:35:62:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=df6d3dcf-a5b3-460b-9ca6-e5e1f654c4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:e6:2d:f3:5b:76:b9:06:6d:41:07:ca:91: b6:bc:40:ba:d1:0d:8b:c6:93:0b:4b:e5:e2:38:5f: 7a:4a:9b:16:49:0d:7f:ad:53:34:64:da:97:da:bf: 23:21:41:ea:a2:56:c5:7f:fa:8b:e7:ab:ab:5d:bd: 0e:58:d5:5a:f6:99:22:5e:d2:61:3a:85:83:e7:fb: 21:df:6d:54:89:e8:dd:0f:5d:7f:fb:01:e8:71:e6: ec:23:50:8f:54:8e:fd:b6:cd:f2:4e:83:20:20:d2: b6:6b:10:50:68:3a:ff:ef:5f:91:cf:3f:27:c1:9b: 82:5f:0f:d2:8b:75:3f:02:c3:62:b6:cd:33:20:82: 09:1d:f0:71:56:06:6d:f3:c4:ca:23:c8:55:f4:a6: 78:74:bb:30:5a:db:1f:4b:26:4f:d9:86:a1:86:b6: b7:85:c1:2a:98:8c:e7:c2:70:f0:25:1c:64:80:52: f9:36:e7:a8:a3:53:a0:3c:1e:2f:6f:0c:52:3f:8b: e2:a3:02:07:86:15:c1:ec:62:2d:ff:b1:45:f2:59: 01:38:77:a6:c2:e0:c0:27:10:09:20:2a:54:6c:e2: 18:85:5b:0c:6e:45:74:f4:ce:cc:2d:7d:5c:02:89: fe:b8:4f:3e:48:f6:5a:26:0a:00:a4:48:22:9c:d2: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D3:71:6D:E7:3C:58:1E:EC:E7:CA:3E:9F:32:93:31:47:3F:C8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/48e0623c-9889-3890-8bdc-4e3838833694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 216.238.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:05:d8:f9:60:2d:fa:dd:a8:d2:78:8d:15:46:0f:d5:f3:6d: 85:ed:e2:25:ba:ed:d5:ed:a7:c7:7c:e3:c5:2d:2b:f9:3c:07: 95:df:02:45:cf:1a:73:24:bc:00:c3:e4:67:64:71:66:be:59: 57:28:3e:a2:0a:5f:d7:46:d4:ba:a6:f2:73:9d:86:91:be:ab: f4:bb:0e:49:56:2e:8c:88:16:34:36:4b:48:9e:e2:5d:64:d9: 7e:06:92:34:e8:13:34:13:98:c0:bd:95:f0:41:22:bb:72:56: 94:3e:32:3a:01:31:b9:6d:c2:f5:98:fb:2a:22:09:6e:c6:2a: 9a:b8:20:bf:e4:9e:47:5f:65:ba:dd:96:36:30:6c:58:a2:3e: d8:39:56:ef:ef:85:67:5a:c0:ea:96:f9:03:e7:24:98:00:e8: 5f:85:ae:45:be:68:b5:ac:e3:89:2c:2e:31:0d:cb:c0:1f:75: 28:28:a3:9d:2c:94:52:6f:b7:cd:e5:6a:e7:47:19:fd:a1:5b: 27:17:12:ba:87:0e:17:01:7b:d1:92:93:b4:e8:7a:e8:35:5f: 4f:68:8e:03:be:44:29:48:57:09:ed:c3:ae:33:39:5e:6f:70: bf:2e:17:c6:80:64:19:eb:d0:9a:d2:aa:51:a3:9d:d5:22:6c: 8a:1a:1e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/O0ftefvmjVi02AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZGY2ZDNkY2YtYTViMy00NjBiLTljYTYtZTVlMWY2NTRjNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApznmLfNbdrkGbUEHypG2vEC60Q2LxpMLS+Xi OF96SpsWSQ1/rVM0ZNqX2r8jIUHqolbFf/qL56urXb0OWNVa9pkiXtJhOoWD5/sh 321UiejdD11/+wHocebsI1CPVI79ts3yToMgINK2axBQaDr/71+Rzz8nwZuCXw/S i3U/AsNits0zIIIJHfBxVgZt88TKI8hV9KZ4dLswWtsfSyZP2Yahhra3hcEqmIzn wnDwJRxkgFL5Nueoo1OgPB4vbwxSP4viowIHhhXB7GIt/7FF8lkBOHemwuDAJxAJ ICpUbOIYhVsMbkV09M7MLX1cAon+uE8+SPZaJgoApEginNI1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbTcW3nPFge7OfKPp8ykzFHP8hpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvNDhlMDYyM2MtOTg4OS0z ODkwLThiZGMtNGUzODM4ODMzNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMF2PlgLfrdqNJ4jRVGD9XzbYXt4iW67dXtp8d848UtK/k8B5XfAkXP GnMkvADD5GdkcWa+WVcoPqIKX9dG1Lqm8nOdhpG+q/S7DklWLoyIFjQ2S0ie4l1k 2X4GkjToEzQTmMC9lfBBIrtyVpQ+MjoBMbltwvWY+yoiCW7GKpq4IL/knkdfZbrd ljYwbFiiPtg5Vu/vhWdawOqW+QPnJJgA6F+FrkW+aLWs44ksLjENy8AfdSgoo50s lFJvt83laudHGf2hWycXErqHDhcBe9GSk7Toeug1X09ojgO+RClIVwntw64zOV5v cL8uF8aAZBnr0JrSqlGjndUibIoaHkw= -----END CERTIFICATE-----Generated at Mon Oct 12 00:58:43 2026 by rpki-client