$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/636df60c-b498-3e12-b72a-289d2e38b3df.roa File: 636df60c-b498-3e12-b72a-289d2e38b3df.roa (raw, json) Hash identifier: yPtHx05aAlLNVfRc26mi8y3Pq0apfK3sdl5VXnOZFKA= Subject key identifier: 3B:E5:14:2A:3E:09:C1:D3:A5:DA:DA:AD:15:7F:BD:17:57:18:FF:85 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584F4987730DB912E262456E9C80 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/636df60c-b498-3e12-b72a-289d2e38b3df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393301 IP address blocks: 216.163.96.0/22 maxlen: 24 216.163.100.0/24 maxlen: 24 216.163.103.0/24 maxlen: 24 216.163.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:73:0d:b9:12:e2:62:45:6e:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ba4bbb2-9c2c-422b-a976-92b2d86030de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:c4:35:cc:ee:0a:76:69:55:e8:87:a1:0c: 85:a1:84:11:4f:f5:66:28:40:ea:26:91:83:a5:38: 45:93:f4:6b:ca:2d:25:a0:16:8d:64:39:f8:81:4e: a5:e6:bc:79:6b:c7:36:2c:26:6d:f0:37:64:74:12: 44:b5:fd:b4:89:5b:df:84:42:67:ba:98:63:13:52: fd:f2:b8:43:29:ef:e7:13:50:e7:d8:1e:55:33:9d: e2:09:75:dd:08:92:6e:0a:f8:b8:0d:88:fb:e4:9b: a0:53:74:f7:8d:1c:81:a9:91:53:ed:f0:f9:51:db: 0b:f9:3f:6a:d2:f9:ec:82:0d:62:d6:2b:71:e4:33: 97:54:03:db:71:ee:90:54:52:05:47:5a:c1:00:4b: be:a4:91:34:a5:8c:26:5a:63:8a:75:8d:73:72:88: c1:b6:82:cb:ef:fc:38:fc:09:fc:f8:9c:59:ff:7d: 48:f6:c7:ff:35:3f:c6:d9:b1:d6:6c:0d:e7:a7:fa: f1:86:d5:a3:5c:86:9d:e6:e1:26:8d:a5:35:2b:4d: 6d:3c:fc:89:3a:01:be:00:79:4d:24:8a:ac:3c:a1: 41:c0:fe:c4:d9:cc:19:b2:1c:7a:ef:c6:de:06:7c: cf:15:9c:d8:15:b7:e4:2f:56:90:07:68:da:34:73: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:14:2A:3E:09:C1:D3:A5:DA:DA:AD:15:7F:BD:17:57:18:FF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/636df60c-b498-3e12-b72a-289d2e38b3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 216.163.96.0-216.163.100.255 216.163.103.0-216.163.104.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:48:c6:ea:6f:d4:e2:50:6f:9e:8b:0e:ee:26:c4:8c:f4:66: a7:c4:d4:31:4a:3e:2e:79:8e:e1:83:ba:3d:d5:27:e4:7c:95: e1:ca:e2:69:32:66:5b:91:76:4b:b8:28:cd:a2:50:ef:0e:df: 08:c8:4a:2c:d9:4e:d1:31:2e:82:64:cf:71:c9:4c:80:d8:6d: 4c:54:31:11:4c:66:91:7b:cb:66:e4:97:ea:81:36:29:67:b8: de:a6:68:80:90:59:2d:43:76:e8:6e:e4:b1:7d:62:7f:4a:49: fd:7a:64:5c:39:49:96:9c:bf:ca:bb:ee:4a:d6:bd:2c:a1:9b: d7:59:59:b7:dd:aa:e6:5c:be:ae:fb:84:c1:f4:ac:c2:26:30: 87:6c:a5:18:4c:81:83:7d:40:4b:4f:7f:de:3b:88:ea:e8:04: 2c:39:35:8b:b5:89:9d:c4:59:a3:03:48:cd:f3:73:7e:b5:eb: 99:86:0c:7e:93:87:2c:bc:69:38:07:1c:4a:ee:b7:24:2f:aa: 16:bc:8a:31:e7:88:e8:8e:da:ac:1a:a9:f7:6a:74:92:5c:4b: 12:75:54:ab:22:31:33:5b:f0:52:5c:ba:55:2a:2d:9c:a6:c5: 68:e0:4c:ba:3a:a2:63:b9:ce:29:56:de:12:40:21:74:f7:06: 92:2b:69:f0 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9Jh3MNuRLiYkVunIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmJhNGJiYjItOWMyYy00MjJiLWE5NzYtOTJiMmQ4NjAzMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvENczuCnZpVeiHoQyFoYQRT/VmKEDqJpGD pThFk/Rryi0loBaNZDn4gU6l5rx5a8c2LCZt8DdkdBJEtf20iVvfhEJnuphjE1L9 8rhDKe/nE1Dn2B5VM53iCXXdCJJuCvi4DYj75JugU3T3jRyBqZFT7fD5UdsL+T9q 0vnsgg1i1itx5DOXVAPbce6QVFIFR1rBAEu+pJE0pYwmWmOKdY1zcojBtoLL7/w4 /An8+JxZ/31I9sf/NT/G2bHWbA3np/rxhtWjXIad5uEmjaU1K01tPPyJOgG+AHlN JIqsPKFBwP7E2cwZshx678beBnzPFZzYFbfkL1aQB2jaNHOEuwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDvlFCo+CcHTpdrarRV/vRdXGP+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNjM2ZGY2MGMtYjQ5OC0z ZTEyLWI3MmEtMjg5ZDJlMzhiM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAXYo2AD BADYo2QwDAMEANijZwMEANijaDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGSMbqb9TiUG+eiw7uJsSM9Gan xNQxSj4ueY7hg7o91SfkfJXhyuJpMmZbkXZLuCjNolDvDt8IyEos2U7RMS6CZM9x yUyA2G1MVDERTGaRe8tm5JfqgTYpZ7jepmiAkFktQ3bobuSxfWJ/Skn9emRcOUmW nL/Ku+5K1r0soZvXWVm33armXL6u+4TB9KzCJjCHbKUYTIGDfUBLT3/eO4jq6AQs OTWLtYmdxFmjA0jN83N+teuZhgx+k4csvGk4BxxK7rckL6oWvIox54jojtqsGqn3 anSSXEsSdVSrIjEzW/BSXLpVKi2cpsVo4Ey6OqJjuc4pVt4SQCF09waSK2nw -----END CERTIFICATE-----Generated at Wed Sep 30 19:23:02 2026 by rpki-client