$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/faff8491-fac8-323c-b5dc-2d6c6b1ebdb2.roa File: faff8491-fac8-323c-b5dc-2d6c6b1ebdb2.roa (raw, json) Hash identifier: XjtSNOrbcn5pYrJ+bPEbrnpVJ+AJlLG0w+nnHohWmtM= Subject key identifier: B8:8A:95:B1:DC:18:92:A9:9B:35:E8:78:93:4D:E1:E2:60:3A:96:78 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F2957A7F3997AFB143F206D70 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/faff8491-fac8-323c-b5dc-2d6c6b1ebdb2.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 13737 IP address blocks: 216.131.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:a7:f3:99:7a:fb:14:3f:20:6d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=eba920f9-6de2-45d8-8421-e8578328d7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:e9:a7:4a:de:98:e1:d6:23:ee:2b:5e:2c: ab:48:50:c5:ee:b2:81:8a:b4:68:19:4e:d9:91:6b: a5:dd:e5:a5:5e:43:7d:8b:5f:e2:0a:96:7f:f1:d3: c6:5e:38:cd:a7:8c:76:73:f8:35:91:4c:a3:04:9b: 46:ec:93:fb:30:81:28:99:c0:6f:47:6b:0e:f2:6d: 9c:98:f6:a4:fa:25:ee:2c:35:6b:0d:78:68:61:a6: 7f:c5:9f:7b:78:db:92:1c:4c:bc:c9:6e:72:d0:cd: 42:38:ef:1d:1e:b4:cd:a1:10:6c:f3:58:fa:7a:b6: 91:c0:8f:f1:ae:11:1f:2f:96:81:71:d4:0a:13:14: ea:13:81:ae:bc:a6:4f:a9:6b:0c:3e:d0:4f:92:dc: 7c:61:11:3b:f8:98:c7:98:8c:9d:8d:0e:e5:b6:1f: c8:1a:94:ec:5a:76:23:d5:35:39:a8:88:65:d8:4d: dd:7b:4a:6a:a6:52:ba:05:b0:a9:da:6f:3b:cc:7c: e0:ca:e8:18:26:e1:1d:f1:5d:47:bb:7a:f6:0b:ff: 10:cd:10:fc:57:05:e4:ee:e7:21:ee:85:9a:8d:5a: bf:f2:4e:29:70:92:9d:a0:a0:8f:7c:3e:b4:d3:5a: 90:c7:43:b2:63:bd:37:8f:31:6c:1f:fb:e4:b1:c9: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:95:B1:DC:18:92:A9:9B:35:E8:78:93:4D:E1:E2:60:3A:96:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/faff8491-fac8-323c-b5dc-2d6c6b1ebdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:89:ed:81:de:e9:4d:d1:43:7b:a7:3b:a0:5c:c4:e0:12:84: 04:b4:8f:a7:d2:4c:fa:e9:0b:db:f0:26:44:ed:8c:0b:5b:9d: 3a:bd:d5:fd:f7:e8:6d:73:76:c9:6a:15:ca:18:d1:e3:8c:2e: 4e:52:cc:8b:8f:59:63:f7:37:b0:54:77:d6:79:46:de:7b:c8: 5c:09:d4:7d:b5:57:d5:4a:12:bc:f1:97:6e:b8:7d:55:7b:ff: fc:73:7f:14:9b:06:e5:d4:f2:a0:b1:88:ac:c2:99:d7:0d:ef: 2a:a0:87:ae:34:04:d4:f2:45:61:0e:55:b9:94:3c:7d:99:60: c7:60:15:d8:27:54:04:de:bb:e5:f6:88:52:72:5a:2d:e3:63: ef:99:ee:7a:05:81:9c:80:1a:8f:db:6d:22:e1:04:8d:92:32: 1f:b7:a8:d6:30:f6:54:a2:26:0a:4c:df:fa:fe:eb:fb:ba:8e: 30:33:07:ea:3f:ee:9e:6b:68:e9:aa:01:c9:ce:7e:9a:32:f4: f4:ed:e3:ce:73:20:84:72:07:00:14:4b:b4:9a:13:cd:a5:88: 3d:68:a3:90:0a:e9:38:3e:b0:6c:29:fd:e3:1f:09:5b:cb:0f: 8c:94:0e:36:e4:7a:7f:2a:2c:6a:97:5f:ff:2e:3d:94:e2:84: 06:cb:21:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6fzmXr7FD8gbXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZWJhOTIwZjktNmRlMi00NWQ4LTg0MjEtZTg1NzgzMjhkN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtobpp0remOHWI+4rXiyrSFDF7rKBirRoGU7Z kWul3eWlXkN9i1/iCpZ/8dPGXjjNp4x2c/g1kUyjBJtG7JP7MIEomcBvR2sO8m2c mPak+iXuLDVrDXhoYaZ/xZ97eNuSHEy8yW5y0M1COO8dHrTNoRBs81j6eraRwI/x rhEfL5aBcdQKExTqE4GuvKZPqWsMPtBPktx8YRE7+JjHmIydjQ7lth/IGpTsWnYj 1TU5qIhl2E3de0pqplK6BbCp2m87zHzgyugYJuEd8V1Hu3r2C/8QzRD8VwXk7uch 7oWajVq/8k4pcJKdoKCPfD6001qQx0OyY703jzFsH/vkscn2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiKlbHcGJKpmzXoeJNN4eJgOpZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZmFmZjg0OTEtZmFjOC0z MjNjLWI1ZGMtMmQ2YzZiMWViZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+J7YHe6U3RQ3unO6BcxOAShAS0j6fSTPrpC9vwJkTtjAtbnTq91f33 6G1zdslqFcoY0eOMLk5SzIuPWWP3N7BUd9Z5Rt57yFwJ1H21V9VKErzxl264fVV7 //xzfxSbBuXU8qCxiKzCmdcN7yqgh640BNTyRWEOVbmUPH2ZYMdgFdgnVATeu+X2 iFJyWi3jY++Z7noFgZyAGo/bbSLhBI2SMh+3qNYw9lSiJgpM3/r+6/u6jjAzB+o/ 7p5raOmqAcnOfpoy9PTt485zIIRyBwAUS7SaE82liD1oo5AK6Tg+sGwp/eMfCVvL D4yUDjbken8qLGqXX/8uPZTihAbLIa8= -----END CERTIFICATE-----Generated at Mon Sep 28 09:47:29 2026 by rpki-client