$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa File: c95d2b0f-c456-373f-981b-14f4a65414b4.roa (raw, json) Hash identifier: cJnSSM2q/3eCa7S1O8jH+ckQSX35MxPG+3oLiZ88jBs= Subject key identifier: 10:D7:BE:D1:3C:88:B5:DD:C6:4E:2E:00:09:3C:63:EF:40:EB:E9:F6 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F4328584F4972AE7708ACA37882F95440 Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18540 IP address blocks: 216.230.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ae:77:08:ac:a3:78:82:f9:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b53a237-f4ed-4e57-8757-92abce8f3d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:28:5d:b7:d7:9a:27:08:6d:e8:c9:85:68: 72:a9:d6:d8:08:eb:23:69:cc:87:54:99:a1:79:12: e4:4c:6e:fe:a0:c5:07:fa:a3:d4:85:a1:4d:cb:74: 91:91:f6:fa:62:cb:5b:b3:01:d0:68:71:fa:10:47: a6:36:26:6b:dd:b7:fa:26:30:b9:db:22:98:51:18: ca:bd:f0:89:c9:33:4b:b1:16:52:fb:87:c2:f9:7d: a4:16:d4:9d:04:d5:f2:d3:85:35:5a:45:52:a1:7f: 0d:ef:8e:21:00:e3:c4:57:f2:d3:93:3e:60:fa:25: db:6d:8f:62:6e:70:85:6a:b0:35:67:53:e1:f2:bc: cb:b1:1d:3b:f9:56:e8:7e:d0:d3:01:65:9e:b8:35: 16:c9:ab:eb:30:7a:47:71:b5:de:55:3c:98:f3:b8: c4:29:da:ab:b2:e5:ea:2f:bc:7f:b0:98:84:d5:4f: ff:38:e5:89:f4:4a:10:78:c9:c2:cf:2e:29:e9:74: 0c:bc:c1:e0:39:b0:72:90:a9:98:bf:48:36:60:ab: 7c:b6:7e:a7:5c:c7:b2:9d:09:84:93:8a:86:cb:cf: ae:f0:86:86:50:d4:fb:ec:cf:c7:f1:fb:ca:7b:d0: 5e:64:97:aa:66:11:b2:42:de:29:61:12:95:7c:2d: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D7:BE:D1:3C:88:B5:DD:C6:4E:2E:00:09:3C:63:EF:40:EB:E9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 216.230.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:59:7d:36:fe:ae:68:9b:8a:06:58:69:0b:1f:74:a2:22:c4: c5:1b:f2:86:a5:65:b6:a8:f2:41:91:2e:17:e7:0e:5a:70:a2: 5b:22:8f:c8:4f:58:92:d9:9f:3b:1a:a6:38:9a:f9:20:e2:fd: 62:8b:a1:d1:d8:5f:fb:7f:0c:d7:21:e1:3d:a3:48:9c:d3:c9: e6:e0:11:e2:a0:04:61:0c:44:7f:32:ad:5e:3d:90:27:ea:8f: 0b:1e:14:41:d8:5b:bb:c2:f9:a4:51:51:19:08:f0:35:c0:96: 23:fb:2d:ff:a6:9b:fb:b5:bf:2a:cc:e4:c4:11:d3:c0:b2:8d: 28:1f:30:79:b5:d3:35:a6:37:73:7f:9a:72:2b:d3:5d:4d:2f: 63:ff:d0:f0:63:39:51:26:46:9c:c5:1e:a8:e2:4a:20:5a:15: 06:47:11:c5:79:f0:23:4d:cc:ab:a1:c9:61:ae:a3:17:aa:c8: 30:57:ae:c7:f0:d9:fb:ae:8f:ab:7e:03:21:ac:9b:60:f8:6a: a3:0b:ae:8a:6a:8c:f9:a3:81:68:26:0b:9f:19:96:44:85:2b: 1c:64:4f:ac:c1:e3:da:8c:e4:70:ff:39:4d:df:a6:80:09:f5: 9a:97:b4:48:b5:18:06:da:dc:ce:2a:cd:b2:b1:c0:49:fb:b3: 9a:c6:f5:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcq53CKyjeIL5VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI1M2EyMzctZjRlZC00ZTU3LTg3NTctOTJhYmNlOGYzZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgoXbfXmicIbejJhWhyqdbYCOsjacyHVJmh eRLkTG7+oMUH+qPUhaFNy3SRkfb6YstbswHQaHH6EEemNiZr3bf6JjC52yKYURjK vfCJyTNLsRZS+4fC+X2kFtSdBNXy04U1WkVSoX8N744hAOPEV/LTkz5g+iXbbY9i bnCFarA1Z1Ph8rzLsR07+VboftDTAWWeuDUWyavrMHpHcbXeVTyY87jEKdqrsuXq L7x/sJiE1U//OOWJ9EoQeMnCzy4p6XQMvMHgObBykKmYv0g2YKt8tn6nXMeynQmE k4qGy8+u8IaGUNT77M/H8fvKe9BeZJeqZhGyQt4pYRKVfC147QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDXvtE8iLXdxk4uAAk8Y+9A6+n2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvYzk1ZDJiMGYtYzQ1Ni0z NzNmLTk4MWItMTRmNGE2NTQxNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2OYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpZfTb+rmibigZYaQsfdKIixMUb8oalZbao8kGRLhfnDlpwolsij8hP WJLZnzsapjia+SDi/WKLodHYX/t/DNch4T2jSJzTyebgEeKgBGEMRH8yrV49kCfq jwseFEHYW7vC+aRRURkI8DXAliP7Lf+mm/u1vyrM5MQR08CyjSgfMHm10zWmN3N/ mnIr011NL2P/0PBjOVEmRpzFHqjiSiBaFQZHEcV58CNNzKuhyWGuoxeqyDBXrsfw 2fuuj6t+AyGsm2D4aqMLropqjPmjgWgmC58ZlkSFKxxkT6zB49qM5HD/OU3fpoAJ 9ZqXtEi1GAba3M4qzbKxwEn7s5rG9TI= -----END CERTIFICATE-----Generated at Sun Sep 27 02:57:10 2026 by rpki-client