$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa File: 27768a1c-4182-355f-8ed4-0217446693db.roa (raw, json) Hash identifier: UkfE1pCfpwGsyvz8OODnq/KHOzK8UbS+9Jp6n4Ysz2Q= Subject key identifier: E4:30:90:58:97:D8:AF:D6:0F:A4:7A:7A:18:B8:1D:A7:75:AF:3D:10 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584F4975606020F47BEF9C166D80 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63298 IP address blocks: 216.87.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:60:60:20:f4:7b:ef:9c:16:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=12d370d6-223a-490d-97a1-2d942d544a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:22:b6:e5:2e:0a:b7:39:16:f3:7d:7c:9f: f0:28:5c:11:f8:43:6e:d5:05:a5:e1:9c:82:b5:83: d3:36:95:31:f0:d7:db:fe:c3:09:ab:a8:5b:12:b6: 3e:6f:30:8b:ba:c0:03:e3:64:07:89:ab:06:b1:67: c3:e1:ab:81:8d:e6:6d:26:f3:20:a9:65:1e:ae:37: eb:e3:16:44:da:83:1c:25:a5:b1:ae:07:7c:2c:f9: 1a:d8:a4:30:5d:7a:99:36:83:10:71:79:f5:83:bb: bc:8d:31:35:a6:42:a7:9e:9f:d9:79:5c:18:de:2a: 44:0c:f8:9f:0a:2f:a6:13:5a:2c:9a:93:09:d1:e7: a0:93:31:7d:9e:32:c4:b5:bd:0d:96:b2:40:e1:7f: ab:6d:4b:c5:e8:bb:7e:be:e7:2d:0a:30:d0:8f:e9: 97:52:0f:55:39:32:c4:66:b8:b2:08:0d:7a:1a:2f: 2c:eb:fb:6b:20:c0:ec:0a:1d:7a:60:4a:ed:78:06: bb:bd:63:e2:c3:45:7e:e9:40:53:7a:19:62:3c:54: 63:3f:ab:65:53:25:c3:59:2c:18:b1:e3:b5:af:c8: ca:61:ce:01:fc:ca:88:d0:e2:ef:f4:ad:f9:d0:2f: 4a:da:a0:91:5f:b2:0b:00:21:81:10:0c:d5:d8:47: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:90:58:97:D8:AF:D6:0F:A4:7A:7A:18:B8:1D:A7:75:AF:3D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 216.87.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:40:69:25:07:87:20:05:a3:6b:f5:97:4d:53:9a:87:24:8c: 84:ef:a8:f7:36:ed:5c:85:2b:1a:7c:90:c8:ca:65:c8:b4:2d: af:99:c0:71:fd:08:32:f4:89:8c:cb:18:b3:6c:ac:08:ad:cd: cc:3c:a8:70:36:df:90:a1:59:2b:0f:13:42:c7:e1:d6:90:86: db:43:61:75:0a:41:f6:d3:6b:54:ca:20:09:cc:4b:51:b7:e4: fd:7c:37:b2:68:b7:f8:dc:c0:93:79:83:2c:44:8a:60:66:82: 40:7d:cb:94:87:d7:c1:cd:4d:63:fc:1d:3b:28:5d:f6:81:86: 4d:33:15:06:3a:ee:78:b3:18:ca:4b:21:27:9e:b6:90:87:fa: a3:07:ba:dd:91:03:72:20:e1:f0:1d:19:71:6d:8e:5b:d5:ef: d8:c9:ba:80:dc:e6:87:fa:6b:7c:ec:c5:c8:b8:1f:e6:cb:ae: 28:84:7b:01:f7:d3:03:00:f1:0e:fd:d4:9d:75:d5:3a:82:9f: 89:a9:f8:8d:da:43:b6:ae:5e:5c:f1:03:aa:08:e8:3c:ea:e4: f5:77:17:a5:62:ea:71:f2:16:18:24:6b:37:8a:99:fc:53:ee: 2d:6b:5a:1a:bd:c5:b4:24:f4:16:a5:e9:75:c5:01:c0:40:94: e6:9b:c0:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWBgIPR775wWbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTJkMzcwZDYtMjIzYS00OTBkLTk3YTEtMmQ5NDJkNTQ0YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCoituUuCrc5FvN9fJ/wKFwR+ENu1QWl4ZyC tYPTNpUx8Nfb/sMJq6hbErY+bzCLusAD42QHiasGsWfD4auBjeZtJvMgqWUerjfr 4xZE2oMcJaWxrgd8LPka2KQwXXqZNoMQcXn1g7u8jTE1pkKnnp/ZeVwY3ipEDPif Ci+mE1osmpMJ0eegkzF9njLEtb0NlrJA4X+rbUvF6Lt+vuctCjDQj+mXUg9VOTLE ZriyCA16Gi8s6/trIMDsCh16YErteAa7vWPiw0V+6UBTehliPFRjP6tlUyXDWSwY seO1r8jKYc4B/MqI0OLv9K350C9K2qCRX7ILACGBEAzV2Ef+QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQwkFiX2K/WD6R6ehi4Had1rz0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMjc3NjhhMWMtNDE4Mi0z NTVmLThlZDQtMDIxNzQ0NjY5M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChAaSUHhyAFo2v1l01TmockjITvqPc27VyFKxp8kMjKZci0La+ZwHH9 CDL0iYzLGLNsrAitzcw8qHA235ChWSsPE0LH4daQhttDYXUKQfbTa1TKIAnMS1G3 5P18N7Jot/jcwJN5gyxEimBmgkB9y5SH18HNTWP8HTsoXfaBhk0zFQY67nizGMpL ISeetpCH+qMHut2RA3Ig4fAdGXFtjlvV79jJuoDc5of6a3zsxci4H+bLriiEewH3 0wMA8Q791J111TqCn4mp+I3aQ7auXlzxA6oI6Dzq5PV3F6Vi6nHyFhgkazeKmfxT 7i1rWhq9xbQk9Bal6XXFAcBAlOabwJ8= -----END CERTIFICATE-----Generated at Sat Oct 10 14:36:44 2026 by rpki-client