$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa File: d8996fb7-cb02-3778-aba5-3987918169be.roa (raw, json) Hash identifier: OXES+mJcsVOdRKE14WWGqHlKRps0a8MWOKhCNhqjZoU= Subject key identifier: AA:A5:91:87:C1:A1:63:20:4E:8E:53:50:E9:00:2E:33:F1:AA:F0:C6 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4974860448F8314A00335500 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395075 IP address blocks: 216.113.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:86:04:48:f8:31:4a:00:33:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4fc1d463-ec7a-451b-8b37-0ff94e3843ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:e2:61:9e:a2:32:4d:30:e2:47:39:ec:e6: 61:4c:7b:4f:ed:6e:92:59:3f:82:84:10:4b:de:f7: 43:31:15:e9:29:a1:87:a9:b7:a4:e0:c1:cd:0b:aa: 8d:14:19:51:fa:40:54:8f:ef:06:d3:d4:8d:68:8f: 9a:58:19:40:dd:d4:cc:83:8c:e9:2c:0f:59:7b:74: ed:96:be:25:15:4e:00:a2:49:7a:0e:6b:02:39:36: a7:a2:47:44:c5:ac:be:92:8f:29:04:71:0b:9d:b9: a6:7e:83:07:42:3e:a1:a1:87:1c:d0:ce:d4:cb:c6: b8:f7:05:9f:72:7b:5e:45:e8:13:5f:94:13:0b:31: 0a:62:1d:b9:a7:d1:e8:87:13:cb:e1:b1:4b:19:9b: d3:e7:72:51:59:db:1e:e8:a0:91:0c:53:c3:bb:90: 21:9e:9e:3a:88:09:ec:d4:0c:46:58:d7:c7:d5:57: 42:c4:13:b1:36:2d:ec:65:e9:1d:7a:b2:6f:68:97: 74:ed:65:67:23:4c:01:ce:f0:b8:36:69:65:28:e2: 96:5f:e4:3e:04:eb:11:88:02:3c:29:7f:d3:a5:67: e5:07:96:1e:5f:87:fc:04:29:94:b7:b1:d8:53:35: c7:1d:94:b1:8e:23:df:7c:ad:95:3b:22:4e:e8:cd: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A5:91:87:C1:A1:63:20:4E:8E:53:50:E9:00:2E:33:F1:AA:F0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 216.113.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:fc:8e:ae:21:17:1a:80:b3:b0:9b:b4:17:74:06:6f:01:d9: 71:bc:88:bf:ae:db:bb:4e:45:d0:cf:88:2a:02:99:83:2b:c1: 64:4f:ee:90:12:e2:2c:bb:d3:e1:f8:9c:8b:0d:54:e4:68:f7: ec:45:a7:48:0f:2f:10:d9:81:00:23:90:a4:e7:36:bd:a9:b1: 21:bd:fd:83:ec:1c:f8:1b:06:5c:c6:52:49:83:c2:17:8e:77: a2:9b:6f:a4:1f:3c:bc:a1:1e:9a:3e:02:f1:76:60:8e:02:b7: 2b:b1:b0:33:4b:fb:d1:54:87:cb:e1:02:17:fe:d9:aa:a1:63: d7:76:c8:28:ef:10:75:c4:d3:54:12:9d:03:d4:f2:aa:8f:5c: 76:90:04:e7:4b:38:b9:17:a9:a8:43:f0:99:52:5a:9c:c9:5f: 1a:3e:c3:02:d5:81:a6:b8:e8:dd:14:08:ce:01:41:97:41:3a: ad:37:62:f4:09:f6:e4:9c:20:2a:1b:73:a8:13:d9:8b:58:7a: 7a:27:b1:eb:9f:2a:ad:fe:55:8b:93:0b:fa:cb:0e:93:4c:52: f8:02:c2:91:d6:71:7c:18:9c:9d:0c:78:5f:bd:2a:53:c3:68: 20:38:67:c1:c8:62:6b:ee:ba:3a:f1:4a:bc:bf:31:69:fb:b1: 3f:c1:9e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIYESPgxSgAzVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGZjMWQ0NjMtZWM3YS00NTFiLThiMzctMGZmOTRlMzg0M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGXiYZ6iMk0w4kc57OZhTHtP7W6SWT+ChBBL 3vdDMRXpKaGHqbek4MHNC6qNFBlR+kBUj+8G09SNaI+aWBlA3dTMg4zpLA9Ze3Tt lr4lFU4Aokl6DmsCOTanokdExay+ko8pBHELnbmmfoMHQj6hoYcc0M7Uy8a49wWf cnteRegTX5QTCzEKYh25p9HohxPL4bFLGZvT53JRWdse6KCRDFPDu5Ahnp46iAns 1AxGWNfH1VdCxBOxNi3sZekderJvaJd07WVnI0wBzvC4NmllKOKWX+Q+BOsRiAI8 KX/TpWflB5YeX4f8BCmUt7HYUzXHHZSxjiPffK2VOyJO6M25mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqlkYfBoWMgTo5TUOkALjPxqvDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZDg5OTZmYjctY2IwMi0z Nzc4LWFiYTUtMzk4NzkxODE2OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb8jq4hFxqAs7CbtBd0Bm8B2XG8iL+u27tORdDPiCoCmYMrwWRP7pAS 4iy70+H4nIsNVORo9+xFp0gPLxDZgQAjkKTnNr2psSG9/YPsHPgbBlzGUkmDwheO d6Kbb6QfPLyhHpo+AvF2YI4CtyuxsDNL+9FUh8vhAhf+2aqhY9d2yCjvEHXE01QS nQPU8qqPXHaQBOdLOLkXqahD8JlSWpzJXxo+wwLVgaa46N0UCM4BQZdBOq03YvQJ 9uScICobc6gT2YtYenonseufKq3+VYuTC/rLDpNMUvgCwpHWcXwYnJ0MeF+9KlPD aCA4Z8HIYmvuujrxSry/MWn7sT/Bnq0= -----END CERTIFICATE-----Generated at Sat Sep 26 05:43:51 2026 by rpki-client