$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb/4a357b0f-be9f-354e-9484-4f3f6829fa8c.roa File: 4a357b0f-be9f-354e-9484-4f3f6829fa8c.roa (raw, json) Hash identifier: qEINoFEl5BzCRRcvOKARLgnR0m3yVA0GiwTrZakq1mQ= Subject key identifier: 3C:54:33:11:B0:EF:38:02:76:C5:5D:48:70:B5:AE:19:ED:83:91:3D Certificate issuer: /CN=16a67d0c-614a-4b60-8247-b2ea8d1ebeeb Certificate serial: 010D0C9F4328584FB2DA39041FA2369555A97200 Authority key identifier: 6E:FF:C9:D2:8C:DF:DD:37:88:F3:79:24:AA:68:63:FB:20:9B:FA:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb/4a357b0f-be9f-354e-9484-4f3f6829fa8c.roa Signing time: Sun 01 Nov 2026 19:09:02 +0000 ROA not before: Sun 01 Nov 2026 19:09:02 +0000 ROA not after: Sat 30 Jan 2027 19:09:02 +0000 asID: 16567 IP address blocks: 64.135.144.0/20 maxlen: 20 208.83.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:da:39:04:1f:a2:36:95:55:a9:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a67d0c-614a-4b60-8247-b2ea8d1ebeeb Validity Not Before: Nov 1 19:09:02 2026 GMT Not After : Jan 30 19:09:02 2027 GMT Subject: CN=2d3cc5c9-bff8-442a-9666-6c4fa3836d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:66:d0:12:07:a7:c0:c4:8d:d5:d2:8b:2c: de:f6:6b:bc:1a:e1:bb:ed:3b:7d:0b:83:cd:95:f0: 66:0b:9b:69:5d:c8:35:d9:7d:b6:69:2a:11:0e:f2: eb:08:e4:c1:4f:4b:4a:6d:87:d6:60:8f:b2:e3:24: 38:87:13:3e:dc:ec:cf:f4:64:29:4f:29:57:53:79: 2d:39:6b:1f:fe:f8:0b:1f:c6:9b:58:a5:21:44:31: 1a:fb:d4:3f:08:fa:aa:7b:86:6b:4a:97:24:b7:6d: 9d:2f:20:18:72:5b:f9:03:18:38:db:d4:23:51:49: a1:5e:24:da:f3:15:a5:79:7c:87:96:9d:14:7f:d6: f5:91:99:34:24:1b:45:b6:fa:f8:4a:79:f8:e7:8b: e8:d0:f4:47:fd:e4:74:7f:6b:53:62:7d:14:e1:e0: 3d:b5:6d:73:6f:79:55:e5:1a:50:50:e2:69:a1:0e: b6:c0:07:0f:4a:4a:cb:60:33:1f:bc:be:9d:4e:52: b7:3c:46:c7:ec:f9:56:55:43:17:48:29:8c:32:ab: 64:dd:6a:0f:f8:db:69:c1:1d:3f:4c:92:3f:fb:32: 12:ce:f1:9d:da:05:a8:01:06:23:d9:9c:c2:63:cb: 44:74:73:98:bc:7a:1a:7e:13:f7:69:cb:3e:ca:d9: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:33:11:B0:EF:38:02:76:C5:5D:48:70:B5:AE:19:ED:83:91:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb/4a357b0f-be9f-354e-9484-4f3f6829fa8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb.crl X509v3 Authority Key Identifier: keyid:6E:FF:C9:D2:8C:DF:DD:37:88:F3:79:24:AA:68:63:FB:20:9B:FA:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16a67d0c-614a-4b60-8247-b2ea8d1ebeeb.cer sbgp-ipAddrBlock: critical IPv4: 64.135.144.0/20 208.83.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:42:01:df:d3:2c:96:4e:3f:f8:a3:3c:d0:7c:de:b8:ba:ba: 78:6e:6e:04:99:03:be:19:c4:13:0e:98:f1:a6:d0:f4:76:c9: 58:81:03:96:c9:38:91:0a:c9:e0:71:8b:97:32:8f:ac:61:8c: 51:ee:54:6c:90:ae:c6:e9:35:c8:de:16:20:10:55:3a:78:3f: 00:95:15:58:15:8f:c8:38:7a:43:37:9a:6c:86:e8:c5:1b:4c: 69:e9:12:80:7c:59:ff:9e:6a:92:84:80:6b:33:05:93:92:42: 07:cf:70:33:20:00:ab:75:7b:5f:9d:d8:49:8a:e5:46:07:3b: ef:f0:75:9e:6c:f8:52:11:37:54:de:d8:16:b9:49:4d:36:4f: e9:0c:f2:8a:f6:f0:cd:dd:84:c6:dd:95:f4:6d:42:68:bd:a1: 52:5f:84:ff:a5:37:06:c2:8b:21:28:8a:b9:27:41:7d:8e:c7: c3:32:4a:96:17:57:06:7d:cb:f0:e8:3f:58:0e:a1:46:44:b2: fe:87:a3:a4:0f:7b:c1:c7:a4:89:ef:36:b0:81:94:bc:7b:f0: c6:dc:b2:71:b2:6f:c7:2e:a7:12:71:4d:05:1b:0e:7b:da:cf: 62:fc:98:cb:e5:ed:5b:2a:4f:b0:db:2a:3e:00:3d:9a:f2:b2: 81:38:17:75 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+y2jkEH6I2lVWpcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZhNjdkMGMtNjE0YS00YjYwLTgyNDctYjJlYThkMWVi ZWViMB4XDTI2MTEwMTE5MDkwMloXDTI3MDEzMDE5MDkwMlowLzEtMCsGA1UEAxMk MmQzY2M1YzktYmZmOC00NDJhLTk2NjYtNmM0ZmEzODM2ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiBm0BIHp8DEjdXSiyze9mu8GuG77Tt9C4PN lfBmC5tpXcg12X22aSoRDvLrCOTBT0tKbYfWYI+y4yQ4hxM+3OzP9GQpTylXU3kt OWsf/vgLH8abWKUhRDEa+9Q/CPqqe4ZrSpckt22dLyAYclv5Axg429QjUUmhXiTa 8xWleXyHlp0Uf9b1kZk0JBtFtvr4Snn454vo0PRH/eR0f2tTYn0U4eA9tW1zb3lV 5RpQUOJpoQ62wAcPSkrLYDMfvL6dTlK3PEbH7PlWVUMXSCmMMqtk3WoP+NtpwR0/ TJI/+zISzvGd2gWoAQYj2ZzCY8tEdHOYvHoafhP3acs+ytlYvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDxUMxGw7zgCdsVdSHC1rhntg5E9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8xNmE2 N2QwYy02MTRhLTRiNjAtODI0Ny1iMmVhOGQxZWJlZWIvNGEzNTdiMGYtYmU5Zi0z NTRlLTk0ODQtNGYzZjY4MjlmYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvMTZhNjdkMGMtNjE0YS00YjYwLTgy NDctYjJlYThkMWViZWViLzE2YTY3ZDBjLTYxNGEtNGI2MC04MjQ3LWIyZWE4ZDFl YmVlYi5jcmwwHwYDVR0jBBgwFoAUbv/J0ozf3TeI83kkqmhj+yCb+p0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi8xNmE2N2QwYy02MTRhLTRiNjAtODI0Ny1iMmVh OGQxZWJlZWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQIeQAwQC 0FMIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABdCAd/TLJZOP/ijPNB83ri6unhubgSZA74ZxBMOmPGm0PR2 yViBA5bJOJEKyeBxi5cyj6xhjFHuVGyQrsbpNcjeFiAQVTp4PwCVFVgVj8g4ekM3 mmyG6MUbTGnpEoB8Wf+eapKEgGszBZOSQgfPcDMgAKt1e1+d2EmK5UYHO+/wdZ5s +FIRN1Te2Ba5SU02T+kM8or28M3dhMbdlfRtQmi9oVJfhP+lNwbCiyEoirknQX2O x8MySpYXVwZ9y/DoP1gOoUZEsv6Ho6QPe8HHpInvNrCBlLx78MbcsnGyb8cupxJx TQUbDnvaz2L8mMvl7VsqT7DbKj4APZrysoE4F3U= -----END CERTIFICATE-----Generated at Sun Nov 15 12:07:55 2026 by rpki-client