$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8/4fc8fb94-f9ed-37c6-adc5-166768a9b7f2.roa File: 4fc8fb94-f9ed-37c6-adc5-166768a9b7f2.roa (raw, json) Hash identifier: hxUo7FOT4DTVgFd+oWoz3SsFEO62V1mGM9u4xL0k9XY= Subject key identifier: EC:F7:1B:08:43:4A:57:DD:11:36:98:91:5B:32:CE:CD:4B:00:9E:25 Certificate issuer: /CN=d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8 Certificate serial: 010D0C9F4328584F4C3D6286B890341FA03A7880 Authority key identifier: C7:A4:F8:62:47:0C:C5:71:DF:F2:AF:AA:CC:5B:56:9D:13:0F:80:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8/4fc8fb94-f9ed-37c6-adc5-166768a9b7f2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 397804 IP address blocks: 91.214.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:62:86:b8:90:34:1f:a0:3a:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f4dac5bb-882e-492e-9a1d-906299558ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:c3:12:5c:77:a0:80:87:b9:a0:15:08:2b: 51:c4:d7:ff:0c:34:01:ae:f2:10:8e:4f:25:6e:f9: 65:63:3a:e3:13:2a:5f:9a:ed:02:33:09:ba:1c:22: 31:d0:bb:f2:02:d4:17:8b:ff:cd:b1:4c:1b:a9:5e: 36:36:7e:43:75:55:32:74:9b:4a:5c:6c:ca:40:89: 27:f3:59:bd:ce:79:17:2e:f0:6e:47:ff:70:ed:9c: 77:3d:fb:22:d6:c7:9e:5e:09:0f:77:db:0b:ca:5f: c9:d3:56:06:29:c7:c3:16:24:04:ee:ec:d1:d0:fa: d9:9f:82:b2:a9:82:81:52:54:f9:3e:48:93:64:16: b4:c6:5e:96:73:3c:8f:c9:5f:91:92:e7:89:32:73: 11:01:8f:67:56:cf:5a:7d:70:9c:2c:9b:ab:07:88: 14:06:a3:ac:43:73:ae:7b:7d:45:9d:bf:98:67:b2: 7a:92:01:94:dc:3d:30:23:00:05:55:52:87:31:af: cf:ed:32:1e:50:69:67:d2:80:8d:79:b6:03:18:b1: e7:fc:ff:fb:f5:d0:e8:90:5a:b0:32:98:f6:b3:dc: e2:13:db:c1:9b:b9:6a:b4:c6:ed:64:13:8c:03:e7: 67:4a:77:4e:e0:b6:a6:0e:9a:fc:af:8f:82:97:99: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F7:1B:08:43:4A:57:DD:11:36:98:91:5B:32:CE:CD:4B:00:9E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8/4fc8fb94-f9ed-37c6-adc5-166768a9b7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8.crl X509v3 Authority Key Identifier: keyid:C7:A4:F8:62:47:0C:C5:71:DF:F2:AF:AA:CC:5B:56:9D:13:0F:80:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a5a6f3-d33d-42ad-89d0-ecdde5bd09e8.cer sbgp-ipAddrBlock: critical IPv4: 91.214.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:82:8b:69:84:42:44:b6:18:2e:bd:56:1f:91:e0:7a:1b:f9: d3:5f:d5:01:4b:0f:0e:7b:ab:a8:f6:cd:bc:d8:b8:19:ea:1d: 05:c4:ef:49:1b:3c:5c:f4:cb:ac:7a:99:58:30:c5:66:7d:72: 56:b8:8f:7f:4e:4e:b3:67:b6:27:69:ee:a4:64:82:17:a4:91: b4:59:a8:27:06:58:b0:2d:f7:07:23:a1:6e:61:22:83:b5:5c: df:0b:d7:2d:a5:fd:1b:da:73:97:bf:61:da:fe:eb:7e:04:b5: 98:b0:e8:e4:ac:9e:8f:36:c5:d4:61:f8:4f:6a:52:56:68:2b: 18:d3:ca:4f:be:10:b6:f9:84:e6:55:f7:ae:c1:ef:76:30:8a: d9:94:8a:12:3f:ef:e8:07:b9:cd:da:31:3b:07:18:aa:bb:47: 5e:6d:5c:67:fa:78:61:43:34:48:0b:60:62:1b:3c:b1:d1:59: 27:19:24:1e:bd:24:49:26:58:de:8c:dd:4b:87:d9:a9:38:8a: 12:fd:f2:e3:d8:a9:4e:b1:80:9c:5a:01:89:84:0d:60:a4:d0: bf:3e:e1:c0:05:b9:c9:14:44:a9:46:2b:fa:31:72:38:ec:38: cc:66:9f:61:15:97:23:ef:c7:14:70:04:da:35:04:c0:0b:71: 01:69:a0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWKGuJA0H6A6eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJhNWE2ZjMtZDMzZC00MmFkLTg5ZDAtZWNkZGU1YmQw OWU4MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjRkYWM1YmItODgyZS00OTJlLTlhMWQtOTA2Mjk5NTU4ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwnDElx3oICHuaAVCCtRxNf/DDQBrvIQjk8l bvllYzrjEypfmu0CMwm6HCIx0LvyAtQXi//NsUwbqV42Nn5DdVUydJtKXGzKQIkn 81m9znkXLvBuR/9w7Zx3Pfsi1seeXgkPd9sLyl/J01YGKcfDFiQE7uzR0PrZn4Ky qYKBUlT5PkiTZBa0xl6WczyPyV+RkueJMnMRAY9nVs9afXCcLJurB4gUBqOsQ3Ou e31Fnb+YZ7J6kgGU3D0wIwAFVVKHMa/P7TIeUGln0oCNebYDGLHn/P/79dDokFqw Mpj2s9ziE9vBm7lqtMbtZBOMA+dnSndO4LamDpr8r4+Cl5kP3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz3GwhDSlfdETaYkVsyzs1LAJ4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kMmE1 YTZmMy1kMzNkLTQyYWQtODlkMC1lY2RkZTViZDA5ZTgvNGZjOGZiOTQtZjllZC0z N2M2LWFkYzUtMTY2NzY4YTliN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZDJhNWE2ZjMtZDMzZC00MmFkLTg5 ZDAtZWNkZGU1YmQwOWU4L2QyYTVhNmYzLWQzM2QtNDJhZC04OWQwLWVjZGRlNWJk MDllOC5jcmwwHwYDVR0jBBgwFoAUx6T4YkcMxXHf8q+qzFtWnRMPgCcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kMmE1YTZmMy1kMzNkLTQyYWQtODlkMC1lY2Rk ZTViZDA5ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9bZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSCi2mEQkS2GC69Vh+R4Hob+dNf1QFLDw57q6j2zbzYuBnqHQXE70kb PFz0y6x6mVgwxWZ9cla4j39OTrNntidp7qRkghekkbRZqCcGWLAt9wcjoW5hIoO1 XN8L1y2l/Rvac5e/Ydr+634EtZiw6OSsno82xdRh+E9qUlZoKxjTyk++ELb5hOZV 967B73YwitmUihI/7+gHuc3aMTsHGKq7R15tXGf6eGFDNEgLYGIbPLHRWScZJB69 JEkmWN6M3UuH2ak4ihL98uPYqU6xgJxaAYmEDWCk0L8+4cAFuckURKlGK/oxcjjs OMxmn2EVlyPvxxRwBNo1BMALcQFpoNE= -----END CERTIFICATE-----Generated at Sat Sep 26 08:45:04 2026 by rpki-client