$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa File: fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa (raw, json) Hash identifier: vik5ekGxSY48S1BSeNJATOrSAJXSyAGB966gEVNNTwQ= Subject key identifier: 00:68:7C:C1:68:17:95:5C:88:1D:A6:F8:3A:E1:86:27:14:AE:BD:F3 Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F4328584F43DD5A4349C9CF23EF27C400 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 400427 IP address blocks: 216.120.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:5a:43:49:c9:cf:23:ef:27:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=992b70a0-32b5-4e70-8dd4-a4e3f78d8870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:5a:84:6e:b4:58:d3:d0:78:0a:5d:1a:7f: 02:ee:7a:9b:5e:12:fd:58:5d:bf:79:b5:d1:ce:26: 43:51:ef:b8:dc:4e:e6:72:3f:37:83:a5:38:b6:bc: e4:b8:bf:ee:d8:b0:94:53:76:12:38:df:4b:02:c3: e4:dd:65:7d:0b:da:3a:06:a4:4e:7e:f5:63:1d:f6: f4:60:b4:40:b4:41:22:0e:25:89:42:24:23:da:32: 2d:41:57:28:6b:7c:e2:10:a2:28:b1:ed:0b:cb:7c: fa:29:69:43:b0:f1:0c:0d:19:71:7b:09:d3:44:24: e6:5b:2e:ad:9e:18:38:fc:1a:2b:cc:a1:ac:81:9b: 08:e4:fe:f2:e6:bb:05:29:d7:03:5b:96:46:f5:37: 9c:76:c6:40:b0:b4:49:b5:a2:36:8e:74:fc:e6:bb: b5:ce:2c:70:d8:a8:1f:2b:f5:aa:2a:60:35:e6:09: 00:e3:4e:3a:b5:dd:33:60:cb:d3:a1:dd:c7:11:b3: 4a:40:73:3c:ce:ac:fa:45:6c:98:4f:55:03:6f:01: 43:1b:74:df:a4:65:ac:26:2b:ac:11:13:d7:76:a9: 47:87:18:4f:c9:c6:17:94:bc:97:fc:69:e8:03:24: fc:3f:23:97:f9:79:d1:65:37:be:bb:50:6b:18:d2: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:68:7C:C1:68:17:95:5C:88:1D:A6:F8:3A:E1:86:27:14:AE:BD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 216.120.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:dd:30:d0:5e:95:c6:c3:1b:28:cb:af:4d:e3:c3:6f:ec:fc: a7:ea:96:fb:ff:4c:05:40:2e:ad:3f:e8:81:ef:a2:82:85:8d: b8:63:3d:b7:49:3e:b7:08:bb:b2:c7:05:55:4f:3c:65:10:2a: cd:c6:03:13:59:36:11:ae:ec:b2:4b:32:68:e7:a1:7b:d0:cc: 41:ed:db:d3:9a:48:53:23:6a:69:b9:51:25:49:ce:8d:3b:ba: 37:0c:c8:54:6e:08:b7:d0:77:63:1c:df:b3:7a:6d:0b:e4:97: 35:e6:fd:e7:43:33:12:2f:7a:96:60:37:aa:f4:dc:f7:0b:5b: b2:ce:78:1c:01:42:89:2a:76:6b:7a:73:b5:3a:24:c3:24:c2: df:99:40:c6:a2:f8:af:65:23:37:67:c0:c5:c5:d7:8c:c7:d7: de:f1:ec:a4:97:a7:af:4c:01:5f:91:78:90:b2:65:d2:93:99: 4f:1f:fa:ea:1b:6d:cb:76:33:ec:97:5c:52:73:7f:5e:f9:9f: bd:c2:2a:35:21:59:5f:4c:e1:0b:c8:15:57:7d:6a:42:b1:80: d8:bf:36:22:28:cb:51:89:17:a1:8c:48:7b:e4:97:43:32:f2: cd:4d:61:5b:35:35:d4:35:dc:a4:29:70:f2:07:b1:7e:9b:95: 42:dd:d2:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VpDScnPI+8nxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk OTkyYjcwYTAtMzJiNS00ZTcwLThkZDQtYTRlM2Y3OGQ4ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh09ahG60WNPQeApdGn8C7nqbXhL9WF2/ebXR ziZDUe+43E7mcj83g6U4trzkuL/u2LCUU3YSON9LAsPk3WV9C9o6BqROfvVjHfb0 YLRAtEEiDiWJQiQj2jItQVcoa3ziEKIose0Ly3z6KWlDsPEMDRlxewnTRCTmWy6t nhg4/BorzKGsgZsI5P7y5rsFKdcDW5ZG9TecdsZAsLRJtaI2jnT85ru1zixw2Kgf K/WqKmA15gkA4046td0zYMvTod3HEbNKQHM8zqz6RWyYT1UDbwFDG3TfpGWsJius ERPXdqlHhxhPycYXlLyX/GnoAyT8PyOX+XnRZTe+u1BrGNJfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABofMFoF5VciB2m+DrhhicUrr3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvZmQ3YjFjMTktMDkzNS0z OGIzLTk0MDAtMzViM2FjOGQ1NzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHdMNBelcbDGyjLr03jw2/s/Kfqlvv/TAVALq0/6IHvooKFjbhjPbdJ PrcIu7LHBVVPPGUQKs3GAxNZNhGu7LJLMmjnoXvQzEHt29OaSFMjamm5USVJzo07 ujcMyFRuCLfQd2Mc37N6bQvklzXm/edDMxIvepZgN6r03PcLW7LOeBwBQokqdmt6 c7U6JMMkwt+ZQMai+K9lIzdnwMXF14zH197x7KSXp69MAV+ReJCyZdKTmU8f+uob bct2M+yXXFJzf175n73CKjUhWV9M4QvIFVd9akKxgNi/NiIoy1GJF6GMSHvkl0My 8s1NYVs1NdQ13KQpcPIHsX6blULd0hs= -----END CERTIFICATE-----Generated at Fri Sep 25 09:25:52 2026 by rpki-client