$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/a5187888-0509-301f-92c7-8a4c37bdaa0f.roa File: a5187888-0509-301f-92c7-8a4c37bdaa0f.roa (raw, json) Hash identifier: 2hsh4sOGqLq8KmSpfe9Lzxrv2WcJwMxRfBk66c3SF70= Subject key identifier: 68:30:08:85:F4:CC:95:37:C2:E9:0D:C5:8D:97:C0:49:8F:72:86:95 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA8A8ECC46009FFD8D6F14600 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/a5187888-0509-301f-92c7-8a4c37bdaa0f.roa Signing time: Thu 29 Oct 2026 03:31:37 +0000 ROA not before: Thu 29 Oct 2026 03:31:37 +0000 ROA not after: Wed 27 Jan 2027 04:31:37 +0000 asID: 11696 IP address blocks: 216.246.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:a8:ec:c4:60:09:ff:d8:d6:f1:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 29 03:31:37 2026 GMT Not After : Jan 27 04:31:37 2027 GMT Subject: CN=02f10c7e-b08d-4a8d-8b14-1d7e830fab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:0d:b9:c4:08:ef:9f:50:e1:19:b7:2f:c3: fb:05:6b:03:b8:8a:55:05:70:74:97:ed:a6:a0:86: 2e:ca:08:28:85:c5:66:ed:50:ed:00:53:b3:8b:d8: a2:95:82:06:55:b4:e3:f4:38:f3:90:d3:ae:a8:c9: 9e:f6:8b:fb:06:d9:77:43:12:61:c8:34:ed:22:8c: ba:cb:82:ad:1a:7c:6b:ec:d1:94:f2:9d:5d:4e:bc: 3e:a2:1c:f5:ce:9c:af:ad:67:7a:e3:1a:2c:24:e5: 33:96:2e:ba:d1:2a:ca:0a:63:6c:0d:db:e9:53:6a: bc:56:c8:e6:bf:4e:76:0a:45:c0:05:8f:41:ff:4b: b6:72:96:b2:3f:14:ee:1c:2f:2c:22:bb:50:73:2f: cd:ab:f5:be:37:0d:78:bd:34:16:20:00:1d:1d:c1: c1:88:2a:31:63:e7:f4:05:8c:ec:ef:3f:6e:d0:04: 04:20:0e:e0:60:e7:33:b7:e5:af:64:74:30:8f:6b: 17:33:9a:56:d6:a2:77:92:46:03:d3:ec:bc:93:63: 1f:c9:1a:92:0c:5c:e2:3d:47:9a:f0:e5:24:d5:0a: c2:5d:7c:0f:e8:8d:29:de:48:a5:5e:c5:d9:f0:3d: 1e:7d:ba:38:e6:2e:78:73:3b:ce:6d:9e:c6:13:b1: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:30:08:85:F4:CC:95:37:C2:E9:0D:C5:8D:97:C0:49:8F:72:86:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/a5187888-0509-301f-92c7-8a4c37bdaa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 216.246.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c4:4d:0b:23:d1:c6:e6:87:60:62:cd:7b:c0:fc:32:7a:83: f9:49:89:1b:aa:56:69:6a:c0:ad:f4:c2:0b:1f:b5:89:0c:fd: 25:20:fd:dd:68:b8:0e:0f:cd:a2:8a:29:06:ac:6a:ce:03:b3: 77:f5:c4:d8:30:a4:21:42:7c:dc:f6:18:4c:b4:5a:f3:e3:ff: 69:df:d2:30:51:49:b0:7f:3a:6c:5e:1d:53:5e:b6:02:e5:8f: e9:04:31:5a:82:c2:4d:48:94:5b:de:d5:fb:7d:97:07:3c:71: 4c:a4:7e:9f:ac:11:ea:03:87:88:15:6d:ac:52:c7:53:11:a2: 5c:02:30:27:76:17:f5:2b:b1:76:44:fd:3f:d4:bd:10:c0:71: af:51:0f:8a:9d:17:02:22:d7:08:2c:fa:14:1c:1e:7c:a9:23: 04:8d:b6:10:19:59:52:5d:23:d5:9b:79:48:a3:c2:ee:b9:98: 78:ce:ba:c8:06:35:2e:2e:d9:32:67:40:79:2b:38:ff:45:7e: 15:99:ab:ee:68:24:b7:37:74:1a:e8:87:c9:a0:ae:c3:2f:b4: a9:a6:e1:1a:a4:89:dd:7d:8f:df:0d:49:ae:fc:fb:b4:fc:49: ff:a7:91:ef:df:a5:6b:f5:64:0d:34:0d:4f:57:5d:d2:78:60: bb:06:12:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oqOzEYAn/2NbxRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyOTAzMzEzN1oXDTI3MDEyNzA0MzEzN1owLzEtMCsGA1UEAxMk MDJmMTBjN2UtYjA4ZC00YThkLThiMTQtMWQ3ZTgzMGZhYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0MNucQI759Q4Rm3L8P7BWsDuIpVBXB0l+2m oIYuyggohcVm7VDtAFOzi9iilYIGVbTj9DjzkNOuqMme9ov7Btl3QxJhyDTtIoy6 y4KtGnxr7NGU8p1dTrw+ohz1zpyvrWd64xosJOUzli660SrKCmNsDdvpU2q8Vsjm v052CkXABY9B/0u2cpayPxTuHC8sIrtQcy/Nq/W+Nw14vTQWIAAdHcHBiCoxY+f0 BYzs7z9u0AQEIA7gYOczt+WvZHQwj2sXM5pW1qJ3kkYD0+y8k2MfyRqSDFziPUea 8OUk1QrCXXwP6I0p3kilXsXZ8D0efbo45i54czvObZ7GE7GImwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgwCIX0zJU3wukNxY2XwEmPcoaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYTUxODc4ODgtMDUwOS0z MDFmLTkyYzctOGE0YzM3YmRhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDETQsj0cbmh2BizXvA/DJ6g/lJiRuqVmlqwK30wgsftYkM/SUg/d1o uA4PzaKKKQasas4Ds3f1xNgwpCFCfNz2GEy0WvPj/2nf0jBRSbB/OmxeHVNetgLl j+kEMVqCwk1IlFve1ft9lwc8cUykfp+sEeoDh4gVbaxSx1MRolwCMCd2F/UrsXZE /T/UvRDAca9RD4qdFwIi1wgs+hQcHnypIwSNthAZWVJdI9WbeUijwu65mHjOusgG NS4u2TJnQHkrOP9FfhWZq+5oJLc3dBroh8mgrsMvtKmm4Rqkid19j98NSa78+7T8 Sf+nke/fpWv1ZA00DU9XXdJ4YLsGEnU= -----END CERTIFICATE-----Generated at Sat Oct 31 08:08:01 2026 by rpki-client