$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa File: 34d3497e-f5b7-366d-a095-53a322d49a0c.roa (raw, json) Hash identifier: OCKa7pX4nZmqJ1Tg3ZOkNsel1KNKLJHYeGEKMCbwXcU= Subject key identifier: C3:69:28:75:F2:40:7B:4A:95:E4:58:F4:D1:CE:03:45:22:F8:A6:A9 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584F4976AA2DA5E2B829ACC44C00 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30039 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:aa:2d:a5:e2:b8:29:ac:c4:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ac9bbb6-406a-435f-8714-0a661b80d1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:fd:cf:b8:31:8e:42:d7:f1:0e:e2:23:3a: 7f:c3:9b:96:02:54:6e:0b:5f:67:bd:12:4f:99:b0: b6:52:18:4d:af:ad:ea:98:70:ea:49:ca:22:e1:cb: 3e:91:2c:d6:2a:eb:c7:bd:e0:20:5f:d2:16:51:88: 08:c6:4b:5f:09:b9:41:d7:d8:a5:cb:6c:68:44:e5: d3:81:95:b5:14:0e:4c:be:0f:13:52:11:06:41:30: a8:86:30:1f:40:82:a3:f4:c4:25:0c:0f:1d:02:3d: e5:00:ac:75:17:9a:f5:9b:39:d2:8b:40:7e:6b:0e: 1a:4b:03:e6:9d:15:25:65:b4:fe:62:21:9c:c0:77: 44:d4:25:45:33:3f:c8:3a:f6:fb:59:79:33:2a:37: bc:b9:3a:96:1c:70:66:62:4a:78:c8:cc:04:84:b9: bb:85:2e:43:c9:91:4a:ff:63:79:ae:f8:fc:02:41: ce:7f:b3:d2:33:ec:56:14:f1:87:2b:fd:e4:a9:3d: d1:81:7f:cc:6f:32:0f:e1:3d:33:58:b2:bd:c8:63: cd:88:b2:e6:ca:31:11:9d:08:b5:22:41:e1:64:72: 06:b9:9e:30:08:56:e5:99:10:f1:9b:9c:4b:ce:80: 82:4e:84:50:04:4c:da:17:c0:de:95:48:4b:a6:eb: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:28:75:F2:40:7B:4A:95:E4:58:F4:D1:CE:03:45:22:F8:A6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7a:28:96:6b:66:90:68:6f:ff:48:7b:2a:a1:a3:ae:74:60: 24:1d:5f:e2:ed:4d:95:b0:99:4e:1d:a3:6a:ce:09:13:ae:b7: 01:80:70:81:0b:9b:5b:6c:cf:c3:99:5e:1e:19:b3:7e:13:f1: 06:e4:70:35:43:5e:61:3d:50:77:5b:dc:f2:ee:4e:3a:8f:d6: 6c:85:e0:d5:17:d3:61:ed:3a:e5:33:e8:09:e6:b9:61:fa:27: 6a:a6:56:0b:7d:84:d5:11:44:fb:80:b3:f4:d0:8e:36:68:4f: e2:27:b7:67:df:49:29:08:a7:56:b5:be:d3:91:19:e1:cd:8b: d1:46:d4:16:ad:ec:02:4c:b1:31:31:10:cd:9b:bf:7e:2c:1e: 7d:8f:88:46:cc:42:40:0d:d5:91:be:2f:1f:a5:ea:f4:fe:a0: bc:54:34:cc:fa:d6:c0:49:b3:e9:cf:f9:93:17:c8:46:e2:94: 16:3e:30:b1:7f:9e:38:f3:45:64:3e:e3:fb:09:5f:df:d6:1e: 53:ad:5a:de:69:65:25:d6:5d:45:71:61:ab:1b:99:b9:17:69: fe:7f:91:97:c7:4b:27:99:a1:54:66:b0:62:f9:91:59:7e:14: c1:71:c2:14:8c:5f:06:9a:6e:30:bf:9a:69:75:0c:d6:c8:e6: 1f:cf:0f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdqotpeK4KazETAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFjOWJiYjYtNDA2YS00MzVmLTg3MTQtMGE2NjFiODBkMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq79z7gxjkLX8Q7iIzp/w5uWAlRuC19nvRJP mbC2UhhNr63qmHDqScoi4cs+kSzWKuvHveAgX9IWUYgIxktfCblB19ily2xoROXT gZW1FA5Mvg8TUhEGQTCohjAfQIKj9MQlDA8dAj3lAKx1F5r1mznSi0B+aw4aSwPm nRUlZbT+YiGcwHdE1CVFMz/IOvb7WXkzKje8uTqWHHBmYkp4yMwEhLm7hS5DyZFK /2N5rvj8AkHOf7PSM+xWFPGHK/3kqT3RgX/MbzIP4T0zWLK9yGPNiLLmyjERnQi1 IkHhZHIGuZ4wCFblmRDxm5xLzoCCToRQBEzaF8DelUhLpuv85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNpKHXyQHtKleRY9NHOA0Ui+KapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvMzRkMzQ5N2UtZjViNy0z NjZkLWEwOTUtNTNhMzIyZDQ5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF6KJZrZpBob/9Ieyqho650YCQdX+LtTZWwmU4do2rOCROutwGAcIEL m1tsz8OZXh4Zs34T8QbkcDVDXmE9UHdb3PLuTjqP1myF4NUX02HtOuUz6AnmuWH6 J2qmVgt9hNURRPuAs/TQjjZoT+Int2ffSSkIp1a1vtORGeHNi9FG1Bat7AJMsTEx EM2bv34sHn2PiEbMQkAN1ZG+Lx+l6vT+oLxUNMz61sBJs+nP+ZMXyEbilBY+MLF/ njjzRWQ+4/sJX9/WHlOtWt5pZSXWXUVxYasbmbkXaf5/kZfHSyeZoVRmsGL5kVl+ FMFxwhSMXwaabjC/mml1DNbI5h/PD1o= -----END CERTIFICATE-----Generated at Mon Oct 12 02:18:21 2026 by rpki-client