$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa File: 36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa (raw, json) Hash identifier: Co5qLoC/3zKcwefkuCINXnjsmwXNChiLIlgQqzi19Hw= Subject key identifier: AB:7C:04:5C:89:E3:C9:A9:07:2B:A0:38:73:8B:6B:79:15:CD:30:DE Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584F6292CA8BC1B8175A26756200 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 40249 IP address blocks: 216.211.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ca:8b:c1:b8:17:5a:26:75:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=be7d6efc-91f7-4298-90a4-7b920345aca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:aa:08:9e:ad:9a:43:9d:8c:ff:aa:3b:04: 11:10:19:2a:8e:f1:9f:ad:fd:fd:65:76:e4:7d:02: db:49:64:80:bf:62:50:ed:6c:cb:fd:f6:fa:69:32: 6f:2d:7f:6a:c4:85:c3:2e:f0:a9:64:c3:8c:b7:bf: 46:36:6f:e8:0d:d3:8e:06:b1:36:cb:fd:b2:c8:23: 5d:2e:91:12:79:b2:b1:31:30:a3:75:10:b2:24:b7: 29:22:9e:21:9a:77:dc:71:7b:46:d2:5b:d7:ab:c9: c7:11:e8:f5:dc:b8:59:00:47:46:c0:26:b1:76:e9: f7:28:78:8a:4d:4b:0d:50:77:a6:4c:2a:85:cb:4d: b0:f5:e8:d6:aa:55:5c:f9:2d:cf:e6:22:50:9d:ce: 51:74:fa:50:6e:52:bd:a7:85:c4:53:7b:22:eb:c3: 2c:80:eb:60:99:06:9d:b2:bc:8a:22:2e:e4:8e:2d: c3:f5:8c:86:be:9e:a6:7d:31:da:f3:48:29:56:14: e5:ea:06:1a:08:b4:37:c5:b5:1f:22:ea:75:b4:c9: 0a:30:df:25:5d:88:e6:45:e1:f5:4c:ea:29:c7:83: 28:d0:f1:f6:4f:a9:32:18:ea:b6:64:79:ff:79:8a: 87:fd:40:97:e2:3c:a0:6e:c0:48:49:cc:41:13:46: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7C:04:5C:89:E3:C9:A9:07:2B:A0:38:73:8B:6B:79:15:CD:30:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 216.211.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:41:a1:16:cc:14:b0:57:30:e0:10:f1:6f:de:65:12:16:5f: ac:95:62:7a:87:89:27:34:53:21:75:96:44:f6:05:ad:1b:93: d9:77:5d:54:1d:13:20:c2:91:6e:d3:7d:fb:0c:9a:0f:b0:fd: 1b:26:a5:50:10:84:cd:a8:c4:47:13:12:db:8f:80:5c:31:19: 24:a4:46:f3:0c:8d:63:7d:54:84:df:74:68:07:4a:8e:3c:00: 3f:60:f0:72:1f:6a:73:52:ce:c2:68:48:3e:59:13:02:87:4c: 8b:07:d5:3c:a0:f3:40:42:b7:9b:44:93:bd:56:01:d3:66:2e: b0:84:86:82:93:12:c0:8d:b9:21:50:78:a4:e5:66:ed:f3:e7: 22:18:19:9e:23:08:3a:39:80:02:73:44:b3:ca:b4:8e:4d:7b: 05:ea:af:a7:e9:c7:c0:43:a8:81:9b:4c:8c:08:94:b5:89:d7: 08:03:31:50:55:81:15:f9:30:1f:30:fc:f9:b3:f0:66:b2:7e: a4:f8:86:a5:1c:58:85:ca:1d:b1:31:61:18:e8:51:99:de:86: 9a:3c:57:f2:69:af:2e:85:cf:66:a2:53:c3:b3:a4:53:80:48: ce:50:10:19:22:6a:ce:c4:71:6a:50:4a:4d:de:32:c7:87:7f: d0:d8:3f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksqLwbgXWiZ1YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmU3ZDZlZmMtOTFmNy00Mjk4LTkwYTQtN2I5MjAzNDVhY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3yqCJ6tmkOdjP+qOwQREBkqjvGfrf39ZXbk fQLbSWSAv2JQ7WzL/fb6aTJvLX9qxIXDLvCpZMOMt79GNm/oDdOOBrE2y/2yyCNd LpESebKxMTCjdRCyJLcpIp4hmnfccXtG0lvXq8nHEej13LhZAEdGwCaxdun3KHiK TUsNUHemTCqFy02w9ejWqlVc+S3P5iJQnc5RdPpQblK9p4XEU3si68MsgOtgmQad sryKIi7kji3D9YyGvp6mfTHa80gpVhTl6gYaCLQ3xbUfIup1tMkKMN8lXYjmReH1 TOopx4Mo0PH2T6kyGOq2ZHn/eYqH/UCX4jygbsBIScxBE0Z63QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt8BFyJ48mpByugOHOLa3kVzTDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvMzY1MThjZmItNjM2MC0z YjIwLWJhMjYtNTBlZGUyYTJjNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRBoRbMFLBXMOAQ8W/eZRIWX6yVYnqHiSc0UyF1lkT2Ba0bk9l3XVQd EyDCkW7TffsMmg+w/RsmpVAQhM2oxEcTEtuPgFwxGSSkRvMMjWN9VITfdGgHSo48 AD9g8HIfanNSzsJoSD5ZEwKHTIsH1Tyg80BCt5tEk71WAdNmLrCEhoKTEsCNuSFQ eKTlZu3z5yIYGZ4jCDo5gAJzRLPKtI5NewXqr6fpx8BDqIGbTIwIlLWJ1wgDMVBV gRX5MB8w/Pmz8GayfqT4hqUcWIXKHbExYRjoUZnehpo8V/Jpry6Fz2aiU8OzpFOA SM5QEBkias7EcWpQSk3eMseHf9DYPys= -----END CERTIFICATE-----Generated at Tue Oct 6 08:47:16 2026 by rpki-client