$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa File: 10fd6d49-c41d-308c-b462-641fc6080542.roa (raw, json) Hash identifier: 9OnmQmm5htW5va7f6X+pjHUUSDIvV65U6mV4MyOFFjI= Subject key identifier: 80:14:4A:87:7D:D8:4F:E2:FD:36:45:C5:04:22:87:76:BC:E2:8F:6A Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584F480D6356CA308F8EA1B2AB40 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16524 IP address blocks: 72.11.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:63:56:ca:30:8f:8e:a1:b2:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=9cc50385-d58a-4001-af90-6ac3398123ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9b:d1:96:58:c5:d3:93:6b:27:3c:3b:5c:9c: 9d:13:15:3b:67:f5:82:45:c0:d2:d6:34:be:ac:3f: 0f:a6:ca:20:cc:7a:3b:57:bb:d0:1c:4f:97:f5:8b: af:f8:c1:28:06:da:9a:36:8d:20:8f:aa:e4:6d:2e: 81:47:9a:7e:12:6a:96:5b:db:0a:30:52:e1:15:52: 29:73:37:32:a4:7b:36:a6:e4:00:39:18:fa:a4:56: 26:fc:47:5e:30:3d:91:42:a3:aa:a9:46:10:6c:82: 73:f3:fa:1d:fb:27:bd:55:f1:3f:da:ad:1d:f2:01: d8:cb:81:55:37:cd:bf:a1:b2:ca:60:4e:cc:e6:3a: 28:7f:1a:57:c3:78:4c:95:d3:04:46:0c:34:ba:af: 25:78:f4:d4:4f:30:46:23:d0:26:db:7c:4d:d0:88: 13:41:5f:34:99:6b:48:fd:6b:df:47:b9:71:35:61: ba:1b:75:bd:c7:fe:05:d7:24:8b:de:27:c8:2a:fb: 4a:44:e1:38:19:f7:4e:86:a3:a5:bd:1d:29:1d:44: dc:28:2b:9c:7f:53:f8:83:56:f4:9d:5a:a8:db:2a: ec:21:e7:f6:62:a1:8f:6f:0d:06:af:36:f3:72:cd: ca:20:09:62:35:b8:3d:e9:39:38:65:0f:3a:4a:95: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:4A:87:7D:D8:4F:E2:FD:36:45:C5:04:22:87:76:BC:E2:8F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:81:43:ed:b5:35:99:86:1c:a5:0c:1a:16:b4:4c:2d:1e:2c: 62:ab:e8:a9:f0:0a:72:e7:6d:d1:65:1c:46:98:a2:d1:82:e1: 45:54:3f:e7:4b:85:aa:cf:5f:3b:69:b4:d5:e5:d1:17:4c:5e: ab:64:5f:80:16:b6:85:b7:49:46:21:35:48:ed:8e:2f:b4:0c: 7b:25:07:3f:22:1a:97:54:24:03:bb:cb:cb:b3:b5:95:10:e2: be:e3:51:76:11:be:10:79:76:93:05:43:04:59:49:0f:f8:1e: 9d:62:ec:4a:c1:6b:b9:55:13:eb:77:ca:e8:cd:dc:e9:22:33: 3d:2a:e5:d9:70:ce:9a:6b:55:74:b0:69:23:66:02:81:9c:cc: b3:d7:ea:65:b9:78:fc:a0:cf:ea:7d:a1:11:d5:81:3c:3f:2f: 50:61:ba:69:3d:cf:a0:d4:06:8e:cb:b6:61:17:aa:84:07:f1: 28:c6:da:30:14:37:8a:23:7e:9b:6c:1b:f6:c8:8c:f5:c8:53: fc:97:d9:60:16:a5:ed:dd:1e:83:5a:eb:fb:a9:86:20:66:6a: 11:d7:b2:58:90:35:36:71:5a:b2:a3:d8:f2:4c:95:67:b8:17: 2b:99:3d:99:20:c3:7b:22:d8:b4:8d:aa:25:cc:78:3a:c8:80: ba:da:68:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWNWyjCPjqGyq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk OWNjNTAzODUtZDU4YS00MDAxLWFmOTAtNmFjMzM5ODEyM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJvRlljF05NrJzw7XJydExU7Z/WCRcDS1jS+ rD8PpsogzHo7V7vQHE+X9Yuv+MEoBtqaNo0gj6rkbS6BR5p+EmqWW9sKMFLhFVIp czcypHs2puQAORj6pFYm/EdeMD2RQqOqqUYQbIJz8/od+ye9VfE/2q0d8gHYy4FV N82/obLKYE7M5joofxpXw3hMldMERgw0uq8lePTUTzBGI9Am23xN0IgTQV80mWtI /WvfR7lxNWG6G3W9x/4F1ySL3ifIKvtKROE4GfdOhqOlvR0pHUTcKCucf1P4g1b0 nVqo2yrsIef2YqGPbw0Grzbzcs3KIAliNbg96Tk4ZQ86SpWu6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAUSod92E/i/TZFxQQih3a84o9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvMTBmZDZkNDktYzQxZC0z MDhjLWI0NjItNjQxZmM2MDgwNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWBQ+21NZmGHKUMGha0TC0eLGKr6KnwCnLnbdFlHEaYotGC4UVUP+dL harPXztptNXl0RdMXqtkX4AWtoW3SUYhNUjtji+0DHslBz8iGpdUJAO7y8uztZUQ 4r7jUXYRvhB5dpMFQwRZSQ/4Hp1i7ErBa7lVE+t3yujN3OkiMz0q5dlwzpprVXSw aSNmAoGczLPX6mW5ePygz+p9oRHVgTw/L1Bhumk9z6DUBo7LtmEXqoQH8SjG2jAU N4ojfptsG/bIjPXIU/yX2WAWpe3dHoNa6/uphiBmahHXsliQNTZxWrKj2PJMlWe4 FyuZPZkgw3si2LSNqiXMeDrIgLraaOg= -----END CERTIFICATE-----Generated at Sat Oct 3 12:11:39 2026 by rpki-client