$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa File: b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa (raw, json) Hash identifier: SScZXC5LUIr/wn8zEbMPbhezUOirkRRPzarRhrGOe08= Subject key identifier: AD:50:7D:78:9F:8C:C7:A6:A2:15:78:8E:0E:E9:D9:A5:D8:48:81:68 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584FB3A68EF00E8CB715B84FC900 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 1273 IP address blocks: 216.31.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:8e:f0:0e:8c:b7:15:b8:4f:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=cc886c23-0f11-4303-a4de-1b104babf9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:aa:f0:99:2c:67:b5:db:ef:b9:fd:b4:0d: ee:10:35:13:d8:d4:44:21:fd:d3:a1:e6:2f:f6:33: 22:1a:2b:42:de:69:dc:ae:ee:48:69:88:9f:01:1a: 9b:b6:24:3c:4c:bf:7e:57:1d:a3:9d:9e:ea:25:44: f6:6b:f4:f4:f0:5c:54:0b:8f:97:5d:19:03:40:d6: 4a:ac:cb:eb:dd:32:0d:29:a1:32:ae:c0:37:e3:e7: 02:5e:84:58:07:81:85:3e:b6:8b:82:f7:54:70:15: c6:b2:6d:9d:25:00:3d:f3:cd:4d:a5:57:79:db:6d: ec:d8:c0:e2:61:01:e1:bf:f8:ad:52:d2:85:26:2c: d7:f0:e6:ab:76:f9:72:77:63:72:5b:7c:b5:af:64: 05:80:f5:91:a3:13:b2:83:c3:d8:41:f6:e2:f4:eb: 23:7f:bb:63:4b:0d:d5:31:d5:a8:17:48:6b:84:91: 20:fb:3e:0f:ac:a6:47:a4:24:95:e9:d1:cc:e6:cf: 7c:63:d3:dc:5a:61:5d:45:9c:ff:5d:7c:c7:1e:bc: dc:9b:2a:f0:46:d4:09:69:82:de:42:09:a5:2e:08: 00:fb:a1:d1:62:e7:0f:8c:5f:16:d3:9c:19:bf:56: 09:b5:02:43:8e:e5:5e:87:aa:09:df:a3:a1:2c:aa: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:50:7D:78:9F:8C:C7:A6:A2:15:78:8E:0E:E9:D9:A5:D8:48:81:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 216.31.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:96:e7:29:db:9b:85:b8:64:63:2f:d4:41:93:df:8b:ee:ca: 7f:de:1d:17:27:64:35:a4:d4:3c:c2:72:79:fd:46:fd:5c:1b: f2:e0:f1:27:1d:3d:fd:52:e3:5b:c1:9f:3e:86:ad:d8:1e:0d: a4:a3:0c:fb:fb:1d:ea:98:5c:83:66:e7:5f:c0:72:03:4f:bb: 50:0d:13:26:86:32:ea:01:c2:8e:c6:ba:3b:93:58:2d:34:bc: f5:54:b3:26:e7:be:99:51:ce:54:b3:c7:72:3c:a2:75:17:b1: a9:ad:5e:83:d7:aa:23:86:d4:98:90:aa:6e:52:5e:ff:97:9e: 16:3c:b9:35:38:0a:1e:2c:66:f4:78:68:d3:95:bf:aa:2d:6d: ca:84:6a:99:c2:10:06:3b:f3:20:91:2b:55:8b:5e:6d:00:e1: 9a:d2:b3:77:9b:d6:2b:87:7e:36:5f:2d:42:83:82:37:e2:95: 9c:7b:a9:de:02:a6:29:76:12:ec:14:5d:7b:3d:06:54:10:7b: 54:99:9c:10:fa:9e:50:be:d4:4e:cc:65:db:db:2b:f1:fb:42: a8:d1:4a:66:1c:a1:62:32:e2:ea:e7:49:4a:cd:ba:f5:3c:2e: df:9f:75:74:4f:64:00:ef:e6:09:c5:99:82:92:44:e8:b7:91: 49:28:c2:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpo7wDoy3FbhPyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk Y2M4ODZjMjMtMGYxMS00MzAzLWE0ZGUtMWIxMDRiYWJmOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtmq8JksZ7Xb77n9tA3uEDUT2NREIf3ToeYv 9jMiGitC3mncru5IaYifARqbtiQ8TL9+Vx2jnZ7qJUT2a/T08FxUC4+XXRkDQNZK rMvr3TINKaEyrsA34+cCXoRYB4GFPraLgvdUcBXGsm2dJQA9881NpVd5223s2MDi YQHhv/itUtKFJizX8Oardvlyd2NyW3y1r2QFgPWRoxOyg8PYQfbi9Osjf7tjSw3V MdWoF0hrhJEg+z4PrKZHpCSV6dHM5s98Y9PcWmFdRZz/XXzHHrzcmyrwRtQJaYLe QgmlLggA+6HRYucPjF8W05wZv1YJtQJDjuVeh6oJ36OhLKq7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1QfXifjMemohV4jg7p2aXYSIFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvYjgwYWU3ZjItYzU4OC0z Y2EyLWE0YTEtZWJmZmJkZTJhYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2B/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmW5ynbm4W4ZGMv1EGT34vuyn/eHRcnZDWk1DzCcnn9Rv1cG/Lg8Scd Pf1S41vBnz6GrdgeDaSjDPv7HeqYXINm51/AcgNPu1ANEyaGMuoBwo7GujuTWC00 vPVUsybnvplRzlSzx3I8onUXsamtXoPXqiOG1JiQqm5SXv+XnhY8uTU4Ch4sZvR4 aNOVv6otbcqEapnCEAY78yCRK1WLXm0A4ZrSs3eb1iuHfjZfLUKDgjfilZx7qd4C pil2EuwUXXs9BlQQe1SZnBD6nlC+1E7MZdvbK/H7QqjRSmYcoWIy4urnSUrNuvU8 Lt+fdXRPZADv5gnFmYKSROi3kUkowjU= -----END CERTIFICATE-----Generated at Sun Nov 15 14:16:02 2026 by rpki-client