$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa File: 881df3b0-d59c-3718-811f-893797c3ad58.roa (raw, json) Hash identifier: l+FIANRVf+gm4TlJKVDkUE1nap2yIcD+QWbik1DoQbE= Subject key identifier: B5:C0:D8:4F:EB:08:7C:33:61:83:16:21:93:6E:2A:DD:4D:62:CC:E6 Certificate issuer: /CN=a79b85c1-9b95-4c95-b08d-220eb047aedf Certificate serial: 010D0C9F4328584F4973CEFAB04942C4D5647F00 Authority key identifier: 94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 216.220.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ce:fa:b0:49:42:c4:d5:64:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79b85c1-9b95-4c95-b08d-220eb047aedf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=878be568-ffb6-435d-8bef-d62eee373058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6f:8c:ca:59:dc:e6:7d:6b:0f:9c:6a:37:6a: 50:a1:9a:68:05:13:55:21:b5:57:6a:dc:72:d6:10: 4a:0b:d9:89:f7:b6:ee:9d:dc:2d:82:aa:21:fd:0b: d9:69:e4:d7:2e:e5:5a:a9:e4:ac:11:b0:b8:32:90: 13:4b:24:ca:eb:77:56:29:0e:67:85:c0:09:26:8d: d0:12:b2:4d:3d:9d:e4:93:5a:c9:4d:30:36:6d:1c: c6:8c:7c:33:e1:27:dd:99:76:fb:61:8a:48:5e:de: e6:9a:74:d0:74:d9:b0:09:2d:e6:04:8c:51:16:b4: d6:62:25:4d:55:1f:89:9c:4b:f3:f9:45:a1:9f:52: ca:4e:41:fc:66:64:2d:e7:1f:17:4d:fd:70:26:2e: 1d:f1:bd:67:f7:00:55:c3:27:22:14:a3:e6:88:a9: 38:31:42:bd:df:1b:83:3e:5d:ac:a8:df:c0:72:37: 75:39:dc:85:c4:6c:d8:49:9e:62:44:1d:23:af:cd: d3:26:4b:11:ce:be:f6:46:65:75:cd:26:e9:73:8f: b0:17:1a:05:ce:cc:05:11:e1:b7:8c:50:17:e9:41: 3d:ed:4f:2a:fb:75:94:28:01:3c:0a:b8:16:2e:d4: 44:cd:d4:a1:59:78:ad:aa:15:ff:ba:b5:d8:b3:b3: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C0:D8:4F:EB:08:7C:33:61:83:16:21:93:6E:2A:DD:4D:62:CC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl X509v3 Authority Key Identifier: keyid:94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer sbgp-ipAddrBlock: critical IPv4: 216.220.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e7:54:a2:b3:2c:1f:4f:7c:53:7a:fc:b8:fb:41:61:7a:be: 78:a3:ae:30:18:95:56:fb:c9:e0:f6:72:35:4a:1e:29:29:db: 1d:bd:48:91:2e:bd:76:22:f8:a0:32:14:ca:56:f7:b5:68:11: 68:4f:4c:01:e7:cf:df:75:0f:26:99:b5:cd:78:8d:cf:c7:b1: 6e:ae:87:2c:4b:b4:e7:44:2d:87:76:d9:6a:7a:9a:aa:4b:f8: d2:f0:3b:fb:d0:85:09:26:07:7c:c4:36:b0:c7:36:62:ea:2d: 8a:7d:e4:74:57:4b:34:2b:24:c7:c1:68:3f:6a:79:7b:aa:a2: eb:fe:76:0d:94:d9:ed:56:3d:ca:9e:5f:cd:e1:74:5c:9c:fc: e3:a8:a7:b0:23:99:f5:4e:50:ab:ac:93:13:4e:38:63:2a:7a: 33:58:04:88:c1:2f:63:b9:c8:07:b2:f8:0f:97:ef:f5:76:cd: a3:a2:84:49:e0:08:ab:78:7f:04:2a:8f:a7:e7:fc:c7:f2:e4: 1b:44:0d:7b:0f:ab:11:28:a5:8a:c4:18:8f:98:15:0b:e5:c0: c4:9a:51:a6:8c:87:db:b0:1d:0f:9c:8a:f3:6f:d8:cf:f5:f8: 7d:aa:53:20:96:d0:3c:32:04:45:5b:e5:b1:6f:3f:0f:29:fd: 8d:bd:a1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc876sElCxNVkfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc5Yjg1YzEtOWI5NS00Yzk1LWIwOGQtMjIwZWIwNDdh ZWRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODc4YmU1NjgtZmZiNi00MzVkLThiZWYtZDYyZWVlMzczMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W+Mylnc5n1rD5xqN2pQoZpoBRNVIbVXatxy 1hBKC9mJ97bundwtgqoh/QvZaeTXLuVaqeSsEbC4MpATSyTK63dWKQ5nhcAJJo3Q ErJNPZ3kk1rJTTA2bRzGjHwz4SfdmXb7YYpIXt7mmnTQdNmwCS3mBIxRFrTWYiVN VR+JnEvz+UWhn1LKTkH8ZmQt5x8XTf1wJi4d8b1n9wBVwyciFKPmiKk4MUK93xuD Pl2sqN/Acjd1OdyFxGzYSZ5iRB0jr83TJksRzr72RmV1zSbpc4+wFxoFzswFEeG3 jFAX6UE97U8q+3WUKAE8CrgWLtREzdShWXitqhX/urXYs7Mc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXA2E/rCHwzYYMWIZNuKt1NYszmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzli ODVjMS05Yjk1LTRjOTUtYjA4ZC0yMjBlYjA0N2FlZGYvODgxZGYzYjAtZDU5Yy0z NzE4LTgxMWYtODkzNzk3YzNhZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc5Yjg1YzEtOWI5NS00Yzk1LWIw OGQtMjIwZWIwNDdhZWRmL2E3OWI4NWMxLTliOTUtNGM5NS1iMDhkLTIyMGViMDQ3 YWVkZi5jcmwwHwYDVR0jBBgwFoAUlNMFOObFh7YEazHhhQiQew4HS6MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzliODVjMS05Yjk1LTRjOTUtYjA4ZC0yMjBl YjA0N2FlZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPnVKKzLB9PfFN6/Lj7QWF6vnijrjAYlVb7yeD2cjVKHikp2x29SJEu vXYi+KAyFMpW97VoEWhPTAHnz991DyaZtc14jc/HsW6uhyxLtOdELYd22Wp6mqpL +NLwO/vQhQkmB3zENrDHNmLqLYp95HRXSzQrJMfBaD9qeXuqouv+dg2U2e1WPcqe X83hdFyc/OOop7AjmfVOUKuskxNOOGMqejNYBIjBL2O5yAey+A+X7/V2zaOihEng CKt4fwQqj6fn/Mfy5BtEDXsPqxEopYrEGI+YFQvlwMSaUaaMh9uwHQ+civNv2M/1 +H2qUyCW0DwyBEVb5bFvPw8p/Y29oVs= -----END CERTIFICATE-----Generated at Sat Sep 26 11:05:25 2026 by rpki-client