$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/8eb9e6c9-9458-39e1-9f2b-72f78248eb77.roa File: 8eb9e6c9-9458-39e1-9f2b-72f78248eb77.roa (raw, json) Hash identifier: lF/vg/PK4bi7Rs1Hqbz3dmQUjt4AsoO8Qv/T0lJ9erg= Subject key identifier: 9D:5A:73:6A:5A:5A:7B:2A:C6:3B:9A:20:23:4C:30:F7:4B:27:AF:80 Certificate issuer: /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Certificate serial: 010D0C9F4328584F498A257043296476F0243100 Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/8eb9e6c9-9458-39e1-9f2b-72f78248eb77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25710 IP address blocks: 216.169.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:25:70:43:29:64:76:f0:24:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2820d53b-da0f-430b-af01-992b50ed2375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:63:79:81:2f:a1:bd:38:f6:be:9e:d6:7c: 82:e3:ba:01:6b:8d:36:82:12:18:77:d8:e3:1c:93: 5f:f5:6f:04:88:3c:19:80:42:69:af:16:9a:3c:2d: 1d:bd:bc:df:47:c2:64:b8:25:8c:10:f3:d8:ae:a5: 79:01:89:dd:5a:28:67:90:1c:8c:e9:69:f5:13:d2: 54:b1:b1:df:ff:0b:39:1d:0a:fa:73:5e:cd:6f:4b: 85:ad:2d:dc:b1:8b:dc:1d:75:e4:70:a2:f9:b3:51: 04:5a:6f:f2:56:0d:83:02:23:d3:dd:ab:5d:08:d7: 81:89:75:85:37:52:57:ce:3f:09:08:2c:41:c3:d6: fc:45:7b:39:62:ed:74:f5:44:17:36:63:35:83:f2: 99:9b:7f:b7:ac:34:2f:e4:41:29:95:eb:d0:e6:a0: 6f:b8:eb:99:b0:87:db:a4:ea:b7:88:0d:a2:d0:69: 6b:67:5a:6c:0b:a3:61:b1:04:3b:1d:28:48:da:3a: 32:94:15:b7:73:a3:24:b3:eb:11:8d:27:61:47:89: ae:c8:08:ff:4a:37:ea:20:3e:3a:7c:08:be:cc:1a: c1:1b:68:c3:c9:c5:fc:82:96:5c:f1:df:23:72:49: 1f:fa:b7:b2:62:ee:fa:71:9a:0a:2c:9e:f1:aa:67: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:73:6A:5A:5A:7B:2A:C6:3B:9A:20:23:4C:30:F7:4B:27:AF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/8eb9e6c9-9458-39e1-9f2b-72f78248eb77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl X509v3 Authority Key Identifier: keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer sbgp-ipAddrBlock: critical IPv4: 216.169.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e5:0a:f8:32:1a:7e:c7:34:ce:f4:57:e2:9f:ec:83:13:bb: a2:af:79:11:2f:7b:05:b5:62:15:a8:51:b4:ea:32:73:fc:d9: c0:60:6f:ef:26:3d:52:54:c2:d6:63:41:2d:12:12:0a:4d:27: 0b:85:c0:f0:2d:60:90:81:d5:c1:8e:c2:59:f4:23:59:da:4c: 8f:be:77:d3:ba:9d:0d:fc:ce:fe:f9:ca:6a:30:dd:8e:67:3d: 7e:14:92:d2:f0:bc:4b:8d:ee:9a:a1:19:4e:a4:f8:9a:ea:65: fc:d2:ba:18:a1:76:cd:de:24:cb:57:de:65:0b:92:3d:eb:1b: ab:5d:4c:ba:cc:b7:23:c4:63:71:ef:de:a4:32:65:7e:e3:95: 26:96:81:ab:2e:16:2c:b6:6e:6b:f5:df:54:2b:cd:b8:2f:65: da:ef:8e:2a:0b:67:0f:52:1b:b2:89:c9:e8:dc:9c:89:00:16: 1a:89:4e:97:ea:65:17:60:2b:06:20:5c:fc:e0:03:4a:0f:e8: 82:82:0e:6b:2f:a9:8b:63:b4:6a:d4:1f:c2:73:e2:78:93:e5: e1:b7:e6:6c:64:51:ca:eb:aa:8c:0a:f4:fb:5b:08:e2:c7:4a: 0d:36:b5:66:45:e9:66:43:42:c9:2a:76:94:3d:1c:ca:35:12: 62:e9:8b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiiVwQylkdvAkMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy M2I5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjgyMGQ1M2ItZGEwZi00MzBiLWFmMDEtOTkyYjUwZWQyMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g9jeYEvob049r6e1nyC47oBa402ghIYd9jj HJNf9W8EiDwZgEJprxaaPC0dvbzfR8JkuCWMEPPYrqV5AYndWihnkByM6Wn1E9JU sbHf/ws5HQr6c17Nb0uFrS3csYvcHXXkcKL5s1EEWm/yVg2DAiPT3atdCNeBiXWF N1JXzj8JCCxBw9b8RXs5Yu109UQXNmM1g/KZm3+3rDQv5EEplevQ5qBvuOuZsIfb pOq3iA2i0GlrZ1psC6NhsQQ7HShI2joylBW3c6Mks+sRjSdhR4muyAj/SjfqID46 fAi+zBrBG2jDycX8gpZc8d8jckkf+reyYu76cZoKLJ7xqmfFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1ac2paWnsqxjuaICNMMPdLJ6+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvOGViOWU2YzktOTQ1OC0z OWUxLTlmMmItNzJmNzgyNDhlYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5 YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1 MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4 N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTlCvgyGn7HNM70V+Kf7IMTu6KveREvewW1YhWoUbTqMnP82cBgb+8m PVJUwtZjQS0SEgpNJwuFwPAtYJCB1cGOwln0I1naTI++d9O6nQ38zv75ymow3Y5n PX4UktLwvEuN7pqhGU6k+JrqZfzSuhihds3eJMtX3mULkj3rG6tdTLrMtyPEY3Hv 3qQyZX7jlSaWgasuFiy2bmv131QrzbgvZdrvjioLZw9SG7KJyejcnIkAFhqJTpfq ZRdgKwYgXPzgA0oP6IKCDmsvqYtjtGrUH8Jz4niT5eG35mxkUcrrqowK9PtbCOLH Sg02tWZF6WZDQskqdpQ9HMo1EmLpi2w= -----END CERTIFICATE-----Generated at Fri Sep 25 18:16:07 2026 by rpki-client