$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/4ae0785c-3690-342a-a73e-9e18f7c0a97a.roa File: 4ae0785c-3690-342a-a73e-9e18f7c0a97a.roa (raw, json) Hash identifier: CNOJhI37ierKimLryPBi18FDzxSfXs9DGQ1Ns/+rl/k= Subject key identifier: 1B:49:A6:A5:56:F9:69:F4:51:5C:54:09:93:36:90:9C:1A:D6:BD:F8 Certificate issuer: /CN=6e020922-17bf-485e-a6af-97b5658f90b9 Certificate serial: 010D0C9F4328584F1B6242A382C77B502FD087C0 Authority key identifier: D5:E9:31:AF:7F:66:22:E3:31:41:DE:1F:52:1D:CF:61:1B:CF:3B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/4ae0785c-3690-342a-a73e-9e18f7c0a97a.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 216.250.2.0/24 maxlen: 24 216.250.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/6e020922-17bf-485e-a6af-97b5658f90b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/6e020922-17bf-485e-a6af-97b5658f90b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:42:a3:82:c7:7b:50:2f:d0:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e020922-17bf-485e-a6af-97b5658f90b9 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=5a4072a1-4de7-420d-a126-a881b64458d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:8f:fa:0e:84:e4:8b:1a:19:e1:57:8a:b9: ec:f5:3b:3e:de:6f:d2:ce:95:90:48:6c:b4:90:29: e0:30:ee:20:7c:e7:72:46:f9:e8:c3:37:1f:99:6c: 27:55:fc:0f:a0:70:9f:e6:e3:97:e4:d6:8f:3e:9c: e3:b2:e2:fc:57:f1:06:e7:e7:48:38:cb:f2:d8:83: f6:95:7a:3c:e6:bd:e8:70:e2:4c:c6:c8:29:86:7e: 59:e4:7d:9a:9f:de:6f:4b:1b:e1:ac:fc:ca:59:74: f9:17:ef:b5:db:7c:ec:41:15:6c:b0:8a:b9:a2:6b: 64:8e:2e:87:a1:71:56:30:48:1d:41:11:f4:78:5c: 73:4a:5a:79:86:8d:b7:8c:d8:82:04:14:50:9e:51: f6:91:6f:ff:e9:37:44:e8:04:09:1d:51:6e:c5:a2: d9:ac:34:75:d7:a2:c7:bf:2e:0b:42:5f:bc:9c:f4: 6d:7a:a2:ff:96:f0:fd:3e:38:23:db:bb:f3:e6:a3: 4a:fe:51:f8:c5:8e:a0:3b:aa:ea:da:ee:fd:f1:53: 55:16:48:71:89:ce:5d:5f:81:f2:5b:7b:26:54:b5: 93:32:34:4e:de:81:36:bd:fc:79:83:c1:72:ac:19: 9b:ec:9a:3d:06:12:4c:59:ab:f4:f9:5f:30:da:37: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:49:A6:A5:56:F9:69:F4:51:5C:54:09:93:36:90:9C:1A:D6:BD:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/4ae0785c-3690-342a-a73e-9e18f7c0a97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9/6e020922-17bf-485e-a6af-97b5658f90b9.crl X509v3 Authority Key Identifier: keyid:D5:E9:31:AF:7F:66:22:E3:31:41:DE:1F:52:1D:CF:61:1B:CF:3B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6e020922-17bf-485e-a6af-97b5658f90b9.cer sbgp-ipAddrBlock: critical IPv4: 216.250.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6e:35:ce:da:96:ca:95:18:c8:5b:d8:a4:83:00:8e:d5:f7: d3:34:54:09:74:80:3d:b4:9e:59:3a:f9:d9:dc:4c:96:be:eb: 35:ac:b2:77:88:5d:b5:29:3e:8d:cf:4c:36:d5:8a:e9:8f:63: 08:38:4a:19:97:a2:99:dd:84:72:59:df:f8:44:fd:e0:35:c7: fd:63:35:ec:b9:d9:e7:2c:b1:49:e9:9f:a0:55:0f:af:25:91: d6:8d:62:1b:0d:90:c9:c4:ea:c0:6a:06:76:7c:b0:95:72:c3: 44:7e:48:e4:85:ab:64:bb:e4:ef:4e:84:50:6c:12:f9:80:23: 88:a3:1f:c7:2e:30:7f:af:ac:1a:95:be:3f:88:9d:2f:ec:0f: e1:79:ca:b5:b0:ac:87:bb:15:c8:08:22:cb:81:14:9a:15:7b: a3:6f:36:dd:01:71:4e:c9:10:26:3b:1a:c5:06:4c:6b:8f:53: b1:29:29:a3:ad:3e:92:24:a4:ee:10:2b:8b:5f:99:99:2e:be: f2:f5:95:b1:79:62:76:f9:f2:82:54:a0:c3:3a:ad:a1:8d:c2: 2f:71:06:dc:7c:3d:99:73:b6:96:f9:a7:22:68:ff:5b:b3:c4: 53:4d:b4:e6:5d:87:47:48:65:6a:cf:0c:aa:f3:34:7b:09:d9: 9c:e2:c9:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkKjgsd7UC/Qh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmUwMjA5MjItMTdiZi00ODVlLWE2YWYtOTdiNTY1OGY5 MGI5MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NWE0MDcyYTEtNGRlNy00MjBkLWExMjYtYTg4MWI2NDQ1OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLmP+g6E5IsaGeFXirns9Ts+3m/SzpWQSGy0 kCngMO4gfOdyRvnowzcfmWwnVfwPoHCf5uOX5NaPPpzjsuL8V/EG5+dIOMvy2IP2 lXo85r3ocOJMxsgphn5Z5H2an95vSxvhrPzKWXT5F++123zsQRVssIq5omtkji6H oXFWMEgdQRH0eFxzSlp5ho23jNiCBBRQnlH2kW//6TdE6AQJHVFuxaLZrDR116LH vy4LQl+8nPRteqL/lvD9Pjgj27vz5qNK/lH4xY6gO6rq2u798VNVFkhxic5dX4Hy W3smVLWTMjRO3oE2vfx5g8FyrBmb7Jo9BhJMWav0+V8w2jfMlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtJpqVW+Wn0UVxUCZM2kJwa1r34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82ZTAy MDkyMi0xN2JmLTQ4NWUtYTZhZi05N2I1NjU4ZjkwYjkvNGFlMDc4NWMtMzY5MC0z NDJhLWE3M2UtOWUxOGY3YzBhOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmUwMjA5MjItMTdiZi00ODVlLWE2 YWYtOTdiNTY1OGY5MGI5LzZlMDIwOTIyLTE3YmYtNDg1ZS1hNmFmLTk3YjU2NThm OTBiOS5jcmwwHwYDVR0jBBgwFoAU1ekxr39mIuMxQd4fUh3PYRvPO2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82ZTAyMDkyMi0xN2JmLTQ4NWUtYTZhZi05N2I1 NjU4ZjkwYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxuNc7alsqVGMhb2KSDAI7V99M0VAl0gD20nlk6+dncTJa+6zWssneI XbUpPo3PTDbViumPYwg4ShmXopndhHJZ3/hE/eA1x/1jNey52ecssUnpn6BVD68l kdaNYhsNkMnE6sBqBnZ8sJVyw0R+SOSFq2S75O9OhFBsEvmAI4ijH8cuMH+vrBqV vj+InS/sD+F5yrWwrIe7FcgIIsuBFJoVe6NvNt0BcU7JECY7GsUGTGuPU7EpKaOt PpIkpO4QK4tfmZkuvvL1lbF5Ynb58oJUoMM6raGNwi9xBtx8PZlztpb5pyJo/1uz xFNNtOZdh0dIZWrPDKrzNHsJ2Zziycc= -----END CERTIFICATE-----Generated at Tue Sep 29 10:55:26 2026 by rpki-client