$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa File: d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa (raw, json) Hash identifier: Z/A81N0LJ5VZejY1A+a8OcMJto4HWPaAUGNvv7OfDTQ= Subject key identifier: B1:2F:51:F2:B2:E2:F0:0B:1F:4F:F2:1E:FF:21:8A:D7:73:B7:CB:A1 Certificate issuer: /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340 Certificate serial: 010D0C9F4328584F4974D1E2AF4D5B32159DCC00 Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32707 IP address blocks: 216.8.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d1:e2:af:4d:5b:32:15:9d:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ebb9c185-fef6-49af-96bf-4c57a108c382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:59:96:29:3c:b3:eb:39:f6:31:fc:04:06: 42:00:64:be:34:f5:51:83:32:cb:c1:3f:8d:3f:aa: 76:03:81:5f:b0:b8:31:c6:61:b7:63:cf:72:37:7b: dd:b1:61:19:8c:47:5f:02:a9:15:52:a5:24:b4:ed: a2:16:2b:4c:02:bf:cf:08:15:e4:16:de:0d:35:7e: 4f:ba:b7:6d:c1:6a:c2:3f:2b:e4:ee:34:ba:1f:30: 59:3a:62:b0:6d:62:f7:61:1e:c6:2a:98:10:56:cd: 7c:76:42:69:0f:87:88:1e:c5:2b:36:4c:eb:ce:7e: d3:c9:98:a4:31:7d:2f:1f:08:a3:81:b1:59:f1:72: ba:cd:24:43:2a:ce:4c:14:99:9f:34:37:c5:65:3c: e7:67:c2:27:65:02:3b:3f:06:cb:f9:22:55:8d:8c: 03:8f:d5:80:ee:39:cd:f5:70:71:9d:6e:71:4f:18: 1d:85:6f:23:21:5e:20:a3:b9:de:68:b7:3a:d5:5e: 9f:ef:34:0e:0a:60:55:cf:c4:76:26:eb:b5:b2:04: 94:61:e4:ae:70:a9:08:6a:b9:08:83:51:f8:27:ff: 59:8e:f1:0c:6f:27:88:94:29:15:db:62:3b:e3:4a: 98:d7:21:d4:28:2a:fd:b4:a1:14:52:10:16:12:82: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:51:F2:B2:E2:F0:0B:1F:4F:F2:1E:FF:21:8A:D7:73:B7:CB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl X509v3 Authority Key Identifier: keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer sbgp-ipAddrBlock: critical IPv4: 216.8.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f2:69:10:08:81:51:01:21:eb:dd:b8:90:85:50:cc:b5:c1: 20:9b:d7:ce:b6:6e:8a:f1:0b:07:3b:b6:12:6b:ef:17:df:36: b6:25:3d:81:00:cb:8f:c3:76:38:24:51:9a:06:f7:51:92:8c: c9:a1:a5:49:ed:0d:11:25:ae:a6:cc:52:94:6d:f9:62:cc:15: 80:e9:d0:43:b0:0f:cc:c6:7f:95:1e:6d:7a:37:bb:26:7c:21: 32:73:73:26:de:a9:04:49:ba:5f:54:91:54:9c:12:d2:0b:c7: 60:bf:10:37:7b:2a:40:5a:9b:6d:ec:ac:86:d5:17:58:3a:89: bf:6f:6b:76:9f:1e:bc:19:89:6f:a0:b3:5d:0f:68:96:b7:cd: 40:99:c7:b1:8f:2e:aa:d6:a0:33:4e:f9:bd:3c:3a:62:d1:78: 2f:74:c9:dd:6d:e5:99:6f:eb:3a:5f:f1:96:40:7c:8c:e3:95: 2b:16:65:39:7d:20:28:21:8b:77:c5:33:55:ec:42:df:ba:ab: 29:32:5f:c7:b5:33:b7:a5:d3:96:e7:51:d7:6c:fd:9d:ee:8a: 9f:bf:4d:00:26:9a:e9:ea:79:52:43:82:be:07:39:52:1b:e5: 8e:86:bb:13:e6:0c:c6:13:8f:2d:e2:cc:19:39:cf:e9:1a:a0: f2:34:e0:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNHir01bMhWdzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBlZDRhZjAtYWQ4NC00NGYxLTg0ZGEtY2Q5YjFjNjY3 MzQwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWJiOWMxODUtZmVmNi00OWFmLTk2YmYtNGM1N2ExMDhjMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBZlik8s+s59jH8BAZCAGS+NPVRgzLLwT+N P6p2A4FfsLgxxmG3Y89yN3vdsWEZjEdfAqkVUqUktO2iFitMAr/PCBXkFt4NNX5P urdtwWrCPyvk7jS6HzBZOmKwbWL3YR7GKpgQVs18dkJpD4eIHsUrNkzrzn7TyZik MX0vHwijgbFZ8XK6zSRDKs5MFJmfNDfFZTznZ8InZQI7PwbL+SJVjYwDj9WA7jnN 9XBxnW5xTxgdhW8jIV4go7neaLc61V6f7zQOCmBVz8R2Juu1sgSUYeSucKkIarkI g1H4J/9ZjvEMbyeIlCkV22I740qY1yHUKCr9tKEUUhAWEoJrFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEvUfKy4vALH0/yHv8hitdzt8uhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVk NGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDliMWM2NjczNDAvZDkxZmI5YWEtY2EzMy0z ZDlhLWE2ZTgtNDJkMWQwZTc0NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzBlZDRhZjAtYWQ4NC00NGYxLTg0 ZGEtY2Q5YjFjNjY3MzQwLzMwZWQ0YWYwLWFkODQtNDRmMS04NGRhLWNkOWIxYzY2 NzM0MC5jcmwwHwYDVR0jBBgwFoAUfDeBNtBgaizY5B3JT+fA2zhddi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVkNGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDli MWM2NjczNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3yaRAIgVEBIevduJCFUMy1wSCb1862borxCwc7thJr7xffNrYlPYEA y4/DdjgkUZoG91GSjMmhpUntDRElrqbMUpRt+WLMFYDp0EOwD8zGf5UebXo3uyZ8 ITJzcybeqQRJul9UkVScEtILx2C/EDd7KkBam23srIbVF1g6ib9va3afHrwZiW+g s10PaJa3zUCZx7GPLqrWoDNO+b08OmLReC90yd1t5Zlv6zpf8ZZAfIzjlSsWZTl9 ICghi3fFM1XsQt+6qykyX8e1M7el05bnUdds/Z3uip+/TQAmmunqeVJDgr4HOVIb 5Y6GuxPmDMYTjy3izBk5z+kaoPI04E0= -----END CERTIFICATE-----Generated at Fri Sep 25 23:37:10 2026 by rpki-client