$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa File: 70158a40-1c67-3cb3-a454-85f651195ef6.roa (raw, json) Hash identifier: AdtxJwRXIO5C2ppAyI6LyvMco75/FQ0OGaigAStKEs4= Subject key identifier: 2D:B8:99:D6:67:58:8E:9B:CE:8B:C3:AE:D6:20:A1:4E:C6:E9:58:75 Certificate issuer: /CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Certificate serial: 010D0C9F4328584F58CD508E1EC7103FCA3F3E40 Authority key identifier: 92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 397423 IP address blocks: 216.239.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:50:8e:1e:c7:10:3f:ca:3f:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=9112b534-0858-43bb-9561-09d4f24c5259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:70:08:43:80:53:af:6a:ed:05:d6:df:c8: 83:62:52:c3:5b:4f:48:f1:7e:7b:e1:38:4d:d6:40: af:31:2e:31:6a:d0:36:cf:c5:a7:e0:53:9a:bd:40: 74:03:2d:37:00:dd:15:21:d3:32:29:ce:c5:f8:a0: 77:b0:a3:41:b9:6d:f2:4c:5a:50:32:97:8f:ac:e7: a0:03:52:f5:65:6e:3d:ac:c6:78:51:e5:f8:5f:40: 01:08:99:17:2f:ea:91:d0:ea:69:dd:a2:ca:67:9f: 20:09:c2:7f:20:54:1b:be:22:fd:ac:b7:76:33:8b: bb:a8:fe:69:4f:4e:80:70:c7:c9:9f:af:6f:94:de: 54:65:b6:7e:94:24:38:e8:6d:15:a8:68:8b:0f:36: 73:d8:04:e1:94:40:54:79:52:59:9e:a3:88:74:4c: ec:b1:15:bc:89:ad:c6:29:52:91:2b:43:9b:93:39: b4:86:19:15:9c:34:34:19:0e:a2:c7:97:bc:01:cd: 57:29:33:bf:3e:19:61:81:a2:13:c6:09:2e:ca:ce: 26:d3:ec:af:6b:9a:c7:a6:f3:98:71:7f:38:7e:8e: 03:3f:8f:df:b1:b5:4d:45:1a:7e:0a:a3:21:89:30: 18:a6:42:4c:9b:0b:4b:4d:b5:f0:9e:cf:bd:93:6b: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B8:99:D6:67:58:8E:9B:CE:8B:C3:AE:D6:20:A1:4E:C6:E9:58:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl X509v3 Authority Key Identifier: keyid:92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer sbgp-ipAddrBlock: critical IPv4: 216.239.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:02:6d:f1:de:72:41:28:bc:25:8c:a9:e4:32:48:7b:15:8b: 66:c6:9d:57:67:ec:44:33:91:c6:89:fe:b2:08:80:f5:a1:b4: 68:bc:cb:b8:14:34:64:71:e7:eb:66:fd:d2:b8:42:62:a9:64: b6:df:18:a3:1b:b6:50:ea:01:57:6b:29:5c:28:b4:d5:4f:c7: f7:8c:22:58:1a:bb:fe:04:01:f1:84:c0:01:43:b9:4f:14:75: 1e:98:87:f3:05:a8:04:d8:ac:93:d4:34:29:25:07:51:42:69: 33:f8:06:03:e1:1f:8c:03:47:ef:42:b0:da:5f:a3:1c:82:f8: 47:bc:4b:9f:a0:5b:69:e4:0f:9a:07:c4:4c:96:e4:27:19:53: 88:14:cc:1c:75:a0:6e:f6:74:de:1b:61:8b:9b:8b:44:d9:a1: 1e:92:d9:04:98:94:72:8d:9e:5c:9b:fd:58:be:c5:69:44:5c: 68:77:82:90:b6:38:a2:94:6e:33:cb:d1:dc:88:c2:41:be:d1: 25:f1:f5:a3:bf:8d:f1:f0:be:72:2a:ea:d5:8a:0c:08:75:fd: 2f:35:44:fc:fb:19:d5:87:31:f2:92:f3:59:c2:3c:85:eb:8b: ec:1a:ea:53:fd:7c:08:e9:b6:79:ad:33:c0:0b:b0:88:6e:a3: 4b:9b:c3:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVCOHscQP8o/PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3ZDRhODQtOWYwZS00NDA4LTgyZTctODFjMDliN2M1 OTJkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk OTExMmI1MzQtMDg1OC00M2JiLTk1NjEtMDlkNGYyNGM1MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzalwCEOAU69q7QXW38iDYlLDW09I8X574ThN 1kCvMS4xatA2z8Wn4FOavUB0Ay03AN0VIdMyKc7F+KB3sKNBuW3yTFpQMpePrOeg A1L1ZW49rMZ4UeX4X0ABCJkXL+qR0Opp3aLKZ58gCcJ/IFQbviL9rLd2M4u7qP5p T06AcMfJn69vlN5UZbZ+lCQ46G0VqGiLDzZz2AThlEBUeVJZnqOIdEzssRW8ia3G KVKRK0Obkzm0hhkVnDQ0GQ6ix5e8Ac1XKTO/PhlhgaITxgkuys4m0+yva5rHpvOY cX84fo4DP4/fsbVNRRp+CqMhiTAYpkJMmwtLTbXwns+9k2sihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC24mdZnWI6bzovDrtYgoU7G6Vh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdk NGE4NC05ZjBlLTQ0MDgtODJlNy04MWMwOWI3YzU5MmQvNzAxNThhNDAtMWM2Ny0z Y2IzLWE0NTQtODVmNjUxMTk1ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDY3ZDRhODQtOWYwZS00NDA4LTgy ZTctODFjMDliN2M1OTJkL2Q2N2Q0YTg0LTlmMGUtNDQwOC04MmU3LTgxYzA5Yjdj NTkyZC5jcmwwHwYDVR0jBBgwFoAUkvPQda9kMHx7T+8z7DqBfVdKjWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdkNGE4NC05ZjBlLTQ0MDgtODJlNy04MWMw OWI3YzU5MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADACbfHeckEovCWMqeQySHsVi2bGnVdn7EQzkcaJ/rIIgPWhtGi8y7gU NGRx5+tm/dK4QmKpZLbfGKMbtlDqAVdrKVwotNVPx/eMIlgau/4EAfGEwAFDuU8U dR6Yh/MFqATYrJPUNCklB1FCaTP4BgPhH4wDR+9CsNpfoxyC+Ee8S5+gW2nkD5oH xEyW5CcZU4gUzBx1oG72dN4bYYubi0TZoR6S2QSYlHKNnlyb/Vi+xWlEXGh3gpC2 OKKUbjPL0dyIwkG+0SXx9aO/jfHwvnIq6tWKDAh1/S81RPz7GdWHMfKS81nCPIXr i+wa6lP9fAjptnmtM8ALsIhuo0ubwzE= -----END CERTIFICATE-----Generated at Tue Oct 6 20:29:05 2026 by rpki-client