$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa File: cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa (raw, json) Hash identifier: s43+VMmA7AKuGx3GCwu1r3GTY+KZbG+3jyK8eBZTmQ4= Subject key identifier: FD:B6:F7:7F:D2:56:0F:34:48:A1:77:6C:CB:04:7E:2A:BE:15:7E:E5 Certificate issuer: /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Certificate serial: 010D0C9F4328584F5E62E1AB6BBAC32E1877CE40 Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 216.57.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e1:ab:6b:ba:c3:2e:18:77:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=d19ebaab-2c16-459d-adc8-da5897b84500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:fd:7c:b6:8a:0b:18:3e:56:04:52:86:cf: 12:47:7a:24:70:b4:fa:e1:e3:75:89:60:0b:90:3c: 63:94:75:5a:db:18:7a:7b:b8:d8:47:ca:f7:5a:f9: 2a:7a:c6:d7:ca:58:6d:c9:e2:6a:a2:bd:6c:11:43: fa:1f:df:1a:57:eb:74:44:2f:ce:44:3c:e2:c4:94: a9:59:a0:5a:49:dd:7d:43:3c:02:85:d6:17:12:ce: 5f:22:4f:f7:96:f7:41:43:f8:17:81:8c:b6:49:07: cb:26:d6:6a:6e:6a:72:e8:8b:fd:09:cb:32:0b:f8: be:f0:95:b6:b5:dc:76:37:d0:6d:78:ba:48:95:14: 10:e1:55:c7:d0:01:25:da:66:45:77:61:ec:90:b8: 31:ff:0c:91:b2:9a:ac:89:01:22:37:f5:13:89:70: 3b:04:98:9c:35:fe:0e:b4:f6:61:e0:b0:32:56:56: 62:d6:a3:aa:71:55:e9:13:d3:3e:2e:46:db:bf:29: 7d:66:a3:92:0a:5d:e1:27:e4:6c:bb:5a:b1:79:92: 5d:fa:33:a4:e3:db:ff:f0:5b:d3:eb:04:4b:02:0e: 32:76:7e:f4:11:3a:de:7b:76:98:e2:d6:6d:4a:fc: 49:b0:3c:a2:65:ea:b1:79:b9:8e:aa:76:4a:d9:12: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B6:F7:7F:D2:56:0F:34:48:A1:77:6C:CB:04:7E:2A:BE:15:7E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl X509v3 Authority Key Identifier: keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer sbgp-ipAddrBlock: critical IPv4: 216.57.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:17:c7:bf:aa:5a:85:44:56:0a:cf:be:23:91:42:21:a3:82: 38:02:d5:9d:dc:a9:ed:f7:d4:71:be:ce:b5:12:f1:15:53:ac: a5:c2:f7:7b:8d:db:76:77:88:13:50:84:5a:82:35:19:3e:70: ce:a1:74:07:f2:2b:4f:88:f5:cc:01:0b:ce:51:cb:a9:19:d5: 23:11:b1:03:14:20:bb:48:9b:64:e8:d7:08:7d:4b:1d:98:bc: bb:b9:71:0e:68:f1:f4:67:83:c8:ea:b4:0d:6a:61:57:e5:53: 93:7c:91:46:3c:ed:f0:69:29:8a:88:bf:5f:84:0b:ef:1d:cb: bb:12:31:e1:fd:d9:7f:bc:b4:81:25:d4:1d:24:ee:23:fa:08: c2:34:61:19:b8:8e:5c:58:f2:35:42:82:c3:3f:21:38:1c:fa: 3d:6e:ac:0b:dc:ed:c8:cb:64:03:0c:7f:10:8d:d0:c8:0b:20: 6a:93:b0:48:7a:44:35:4a:4c:ad:86:49:09:b9:c9:6b:f4:a0: fd:01:a2:57:71:20:69:c5:56:54:6d:e4:f2:94:32:80:fc:86: 03:61:8f:79:a0:62:5d:a0:8e:f9:b5:81:92:b1:59:f5:d2:d3: 31:04:18:3e:a5:ba:b0:ab:ec:3a:aa:8e:97:ad:e3:84:7e:52: 8b:18:d3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuGra7rDLhh3zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA1NjcwN2QtODM4YS00YjhiLWJkOGUtOGE4NzRlYTA2 ODRkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDE5ZWJhYWItMmMxNi00NTlkLWFkYzgtZGE1ODk3Yjg0NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolz9fLaKCxg+VgRShs8SR3okcLT64eN1iWAL kDxjlHVa2xh6e7jYR8r3WvkqesbXylhtyeJqor1sEUP6H98aV+t0RC/ORDzixJSp WaBaSd19QzwChdYXEs5fIk/3lvdBQ/gXgYy2SQfLJtZqbmpy6Iv9CcsyC/i+8JW2 tdx2N9BteLpIlRQQ4VXH0AEl2mZFd2HskLgx/wyRspqsiQEiN/UTiXA7BJicNf4O tPZh4LAyVlZi1qOqcVXpE9M+Lkbbvyl9ZqOSCl3hJ+Rsu1qxeZJd+jOk49v/8FvT 6wRLAg4ydn70ETree3aY4tZtSvxJsDyiZeqxebmOqnZK2RLycQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2293/SVg80SKF3bMsEfiq+FX7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2 NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3NGVhMDY4NGQvY2FlOWU4YTUtMmZlNS0z NTI1LWJlMDAtZDg1ZThiYTZiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA1NjcwN2QtODM4YS00YjhiLWJk OGUtOGE4NzRlYTA2ODRkL2UwNTY3MDdkLTgzOGEtNGI4Yi1iZDhlLThhODc0ZWEw Njg0ZC5jcmwwHwYDVR0jBBgwFoAUIXMnzKdXCq+bU/ZHofTuozYyHHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3 NGVhMDY4NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkXx7+qWoVEVgrPviORQiGjgjgC1Z3cqe331HG+zrUS8RVTrKXC93uN 23Z3iBNQhFqCNRk+cM6hdAfyK0+I9cwBC85Ry6kZ1SMRsQMUILtIm2To1wh9Sx2Y vLu5cQ5o8fRng8jqtA1qYVflU5N8kUY87fBpKYqIv1+EC+8dy7sSMeH92X+8tIEl 1B0k7iP6CMI0YRm4jlxY8jVCgsM/ITgc+j1urAvc7cjLZAMMfxCN0MgLIGqTsEh6 RDVKTK2GSQm5yWv0oP0BoldxIGnFVlRt5PKUMoD8hgNhj3mgYl2gjvm1gZKxWfXS 0zEEGD6lurCr7Dqqjpet44R+UosY0+4= -----END CERTIFICATE-----Generated at Tue Oct 6 04:02:51 2026 by rpki-client