$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa File: da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa (raw, json) Hash identifier: 1J/Yw36mI+1fUf+rMhipGQnvLudmV71EpuGk+9P53KY= Subject key identifier: A0:7A:DB:34:B7:D7:E4:B5:FB:8B:26:08:EC:86:40:7D:11:E9:C0:BD Certificate issuer: /CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Certificate serial: 010D0C9F4328584F4976B7FDCA3C3C61DD694C80 Authority key identifier: E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398406 IP address blocks: 216.250.226.0/23 maxlen: 23 216.250.226.0/24 maxlen: 24 216.250.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:b7:fd:ca:3c:3c:61:dd:69:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e5e4de3-d452-49bb-92df-b4d730255310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:47:9a:1e:87:0a:a1:fe:5c:8b:f3:89:d9: e1:4a:ef:a5:bf:75:41:5f:0f:5e:fc:66:d6:2a:90: ba:31:b3:b4:90:11:99:5f:90:d7:c1:61:bc:be:35: 46:bc:e6:16:07:31:69:1c:97:68:f1:55:42:fc:30: 8b:c4:99:72:1c:56:86:20:04:31:c6:65:c9:64:37: d7:da:17:45:1a:7a:9d:c1:2f:df:50:3f:05:75:d2: 99:e1:5c:d8:c9:c5:76:7f:fa:f4:12:fd:fb:18:3d: bd:89:1c:66:15:58:b7:dc:ac:0c:83:6b:e2:fd:f0: 08:b0:4c:0c:1f:f8:0e:b4:e6:63:72:0e:36:c6:4c: db:78:0f:ca:71:ad:77:06:9b:df:a3:0a:56:30:e1: cc:22:00:88:ed:c1:a8:74:97:7e:ec:2c:64:e9:5d: a7:8e:6d:dd:3b:91:08:95:2c:43:df:9b:ef:f6:72: 87:20:d7:7c:22:7b:2c:ad:a7:59:dd:a6:ed:7d:7b: ed:4b:20:b7:5e:4f:2b:06:dc:17:c1:56:b0:5a:0f: 05:e9:2f:b5:54:8c:e8:f5:b1:0f:02:00:a3:e4:c1: 01:08:85:9f:91:83:df:96:f8:c7:06:4f:ad:aa:19: 92:49:6a:f0:f5:12:97:1e:2e:bc:83:48:61:2c:73: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7A:DB:34:B7:D7:E4:B5:FB:8B:26:08:EC:86:40:7D:11:E9:C0:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl X509v3 Authority Key Identifier: keyid:E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer sbgp-ipAddrBlock: critical IPv4: 216.250.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1e:e6:37:29:73:b8:45:67:90:f7:24:b9:47:50:44:ab:4e: 22:b2:24:57:12:12:d6:0b:7c:76:fd:df:cd:a3:bf:eb:00:ff: f2:1c:c4:ba:ff:81:b9:5a:bc:31:42:27:e1:30:33:40:a0:2d: 64:06:ae:16:8b:17:a0:6e:ed:a6:d5:c5:83:8f:c4:04:1b:84: 18:6c:02:05:7b:f5:d4:9f:cd:dd:78:1a:39:f5:70:5e:ae:02: 0b:ac:1f:ad:b9:1f:64:0f:31:4a:16:03:97:6b:fb:7c:d9:ad: 4f:03:77:73:5e:cc:e6:cb:d2:c5:15:90:6a:cf:0c:d3:3f:4d: 4a:0c:48:58:55:9c:ec:8a:7d:68:7b:71:e1:bd:91:33:45:e7: 83:5e:91:27:49:ed:fe:a1:ad:ed:ca:0a:6e:42:62:ff:41:17: 6b:2a:c0:bd:3a:97:e6:0a:6a:36:aa:8d:64:f0:bd:03:9d:39: d9:4e:b6:85:30:6b:91:6d:31:d3:e4:d3:d1:a9:d5:bf:26:c4: 22:3d:12:5e:45:b6:6a:be:74:1b:95:f0:62:f9:52:01:e0:bf: 55:bc:08:90:c7:b0:ff:31:6f:bf:1e:8e:25:d7:b6:08:00:b8: 99:02:f8:77:d5:37:50:14:53:0a:59:48:d5:b9:3e:e4:a9:16: 4d:25:2c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdrf9yjw8Yd1pTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MGJkYjYtOTc3Ni00ZDM5LThmMjgtYjRhMjI1ZWIy MDYwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU1ZTRkZTMtZDQ1Mi00OWJiLTkyZGYtYjRkNzMwMjU1MzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxdHmh6HCqH+XIvzidnhSu+lv3VBXw9e/GbW KpC6MbO0kBGZX5DXwWG8vjVGvOYWBzFpHJdo8VVC/DCLxJlyHFaGIAQxxmXJZDfX 2hdFGnqdwS/fUD8FddKZ4VzYycV2f/r0Ev37GD29iRxmFVi33KwMg2vi/fAIsEwM H/gOtOZjcg42xkzbeA/Kca13BpvfowpWMOHMIgCI7cGodJd+7Cxk6V2njm3dO5EI lSxD35vv9nKHINd8InssradZ3abtfXvtSyC3Xk8rBtwXwVawWg8F6S+1VIzo9bEP AgCj5MEBCIWfkYPflvjHBk+tqhmSSWrw9RKXHi68g0hhLHN5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB62zS31+S1+4smCOyGQH0R6cC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcw YmRiNi05Nzc2LTRkMzktOGYyOC1iNGEyMjVlYjIwNjAvZGE4YTRiZjYtZDNjOS0z YWQzLWE4MjUtMDUxOWE4MTMzMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2I3MGJkYjYtOTc3Ni00ZDM5LThm MjgtYjRhMjI1ZWIyMDYwLzNiNzBiZGI2LTk3NzYtNGQzOS04ZjI4LWI0YTIyNWVi MjA2MC5jcmwwHwYDVR0jBBgwFoAU5iaudjw7kU4+HUadu60y/bMIPnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcwYmRiNi05Nzc2LTRkMzktOGYyOC1iNGEy MjVlYjIwNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4e5jcpc7hFZ5D3JLlHUESrTiKyJFcSEtYLfHb9382jv+sA//IcxLr/ gblavDFCJ+EwM0CgLWQGrhaLF6Bu7abVxYOPxAQbhBhsAgV79dSfzd14Gjn1cF6u AgusH625H2QPMUoWA5dr+3zZrU8Dd3NezObL0sUVkGrPDNM/TUoMSFhVnOyKfWh7 ceG9kTNF54NekSdJ7f6hre3KCm5CYv9BF2sqwL06l+YKajaqjWTwvQOdOdlOtoUw a5FtMdPk09Gp1b8mxCI9El5Ftmq+dBuV8GL5UgHgv1W8CJDHsP8xb78ejiXXtggA uJkC+HfVN1AUUwpZSNW5PuSpFk0lLGw= -----END CERTIFICATE-----Generated at Fri Sep 25 21:05:04 2026 by rpki-client