$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json) Hash identifier: OumJShLzDzgGqiVd8cLULMK3lRJfuW4fNLgNXDm38SI= Subject key identifier: 55:A4:9F:2B:29:7D:B4:21:88:0B:EC:67:7F:78:58:50:1C:51:54:22 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584F119D035F6A0066C66FBD57E0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:03:5f:6a:00:66:c6:6f:bd:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=abb8453f-6b93-4306-a649-f993444d0941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:75:9a:0a:4d:88:f4:35:06:4f:51:43:de: 1f:04:c0:0c:c6:78:4d:72:f7:dd:cf:ec:b4:75:0a: 4e:81:f5:69:d2:d4:ad:98:bf:f1:00:d7:66:fd:a5: 9d:1a:a1:f9:6c:12:f0:41:6a:18:0e:61:64:52:bf: c8:91:5f:66:c5:a5:10:3d:40:b8:f0:f9:be:20:ac: 1e:0f:2b:cd:7f:ed:60:0c:bb:62:aa:d9:6e:db:b6: c3:c4:00:60:4c:07:ff:ef:6a:89:ee:f0:c1:8a:90: 50:98:cd:03:42:34:21:5f:22:2b:36:30:ca:3b:29: 9b:2f:d1:98:44:09:61:af:a0:9e:ae:f6:b0:0e:50: 2d:36:3f:f7:fd:c8:cd:5c:04:05:69:7c:68:fc:55: c2:ff:3f:c2:13:90:b9:08:e8:9a:30:21:33:31:9b: 41:9c:c2:96:4f:06:00:fe:39:1d:4d:11:34:49:4e: 50:ca:40:08:97:dc:0a:fd:16:76:48:49:ef:5e:35: aa:b5:bd:64:60:18:7e:11:78:4d:a5:82:9a:13:5a: f3:26:9f:cf:8b:d4:4f:32:83:85:98:25:39:be:c9: 46:b8:d4:ac:54:7e:9f:2c:a9:9b:d1:44:f3:a6:d7: b9:2b:fc:18:27:73:63:6b:d8:43:f4:0c:50:ac:14: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:9F:2B:29:7D:B4:21:88:0B:EC:67:7F:78:58:50:1C:51:54:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:64:60:d8:5b:61:53:53:0b:03:d3:8a:a2:b5:1b:cb:95:3a: ca:39:5d:e8:7e:cd:fc:0b:dd:ae:bc:8b:53:a7:ff:c6:d8:d7: 7e:2a:d5:0f:c2:4e:b9:78:c1:73:35:65:20:75:db:de:3a:13: 2c:6c:9b:aa:d0:9f:57:5a:6b:1d:62:4c:ed:e7:aa:8c:2e:68: 11:8f:7b:63:e7:5b:ba:a2:f8:c6:f8:6c:78:17:a5:71:85:84: 83:ce:fa:d3:0e:1c:19:73:7d:bd:96:81:0e:26:6c:96:30:c7: 92:9d:32:7b:77:44:69:bb:02:db:2e:ee:84:9f:ee:51:83:58: 51:0e:28:6a:73:e2:a0:ad:0b:67:9f:48:ac:7e:53:78:81:0e: 82:54:39:98:48:b1:6c:02:ee:1c:89:f4:9c:31:21:c7:a8:b6: 94:3a:a6:ae:54:ff:93:f0:52:f4:d2:11:26:68:04:59:e4:e5: 92:42:35:03:15:05:d6:4b:f0:d9:6c:6e:e0:d7:b8:e8:16:c8: d1:f0:cd:b4:4e:58:71:32:da:23:47:09:56:dc:d8:ac:f5:5c: 7c:17:29:00:24:f7:90:f6:e9:a3:a8:be:51:5d:2e:07:9f:3d: b6:69:e1:63:42:35:45:b1:9a:4a:f1:25:b4:c9:b1:19:24:07: 00:c0:cb:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQNfagBmxm+9V+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YWJiODQ1M2YtNmI5My00MzA2LWE2NDktZjk5MzQ0NGQwOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpB1mgpNiPQ1Bk9RQ94fBMAMxnhNcvfdz+y0 dQpOgfVp0tStmL/xANdm/aWdGqH5bBLwQWoYDmFkUr/IkV9mxaUQPUC48Pm+IKwe DyvNf+1gDLtiqtlu27bDxABgTAf/72qJ7vDBipBQmM0DQjQhXyIrNjDKOymbL9GY RAlhr6CervawDlAtNj/3/cjNXAQFaXxo/FXC/z/CE5C5COiaMCEzMZtBnMKWTwYA /jkdTRE0SU5QykAIl9wK/RZ2SEnvXjWqtb1kYBh+EXhNpYKaE1rzJp/Pi9RPMoOF mCU5vslGuNSsVH6fLKmb0UTzpte5K/wYJ3Nja9hD9AxQrBQk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWknyspfbQhiAvsZ394WFAcUVQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERkYNhbYVNTCwPTiqK1G8uVOso5Xeh+zfwL3a68i1On/8bY134q1Q/C Trl4wXM1ZSB12946Eyxsm6rQn1daax1iTO3nqowuaBGPe2PnW7qi+Mb4bHgXpXGF hIPO+tMOHBlzfb2WgQ4mbJYwx5KdMnt3RGm7Atsu7oSf7lGDWFEOKGpz4qCtC2ef SKx+U3iBDoJUOZhIsWwC7hyJ9JwxIceotpQ6pq5U/5PwUvTSESZoBFnk5ZJCNQMV BdZL8NlsbuDXuOgWyNHwzbROWHEy2iNHCVbc2Kz1XHwXKQAk95D26aOovlFdLgef PbZp4WNCNUWxmkrxJbTJsRkkBwDAy6c= -----END CERTIFICATE-----Generated at Sun Oct 4 08:07:15 2026 by rpki-client