$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: pcNx5FnkOpoXTFUVmFDeMr7v/JwCsna9W3HTxOflNnY= Subject key identifier: 7E:9C:72:A4:7C:FB:BC:A1:4E:41:53:AF:A7:BA:AC:75:C0:03:F5:E1 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584F4975DD64B160CC3D21C18000 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:dd:64:b1:60:cc:3d:21:c1:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0b385dbf-fe2c-412c-af0b-c35f60aa1bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:9e:23:bd:dd:c4:25:61:57:07:40:a5:7a: 92:85:d9:a5:fb:ae:b8:a7:79:73:92:5f:aa:0f:4a: 06:a1:de:7b:35:fc:a3:d8:b1:a0:4b:93:67:0a:36: ba:f0:e8:d8:f8:19:06:a3:ab:87:c0:98:f2:09:f4: ce:02:a6:05:d5:8d:b5:47:31:41:9e:84:b8:b5:ed: 55:3d:a6:26:47:fb:63:4c:de:8c:38:b5:8f:a5:d9: b8:d8:0a:6e:26:e9:15:43:cf:0a:73:16:9f:26:bd: 11:78:39:cb:54:e5:2a:1a:56:1d:95:56:1a:51:a6: 7d:ff:1f:db:1e:13:7f:ca:19:a3:9a:75:9e:7a:cd: 0b:a4:88:be:34:c0:47:36:99:2b:06:41:2d:8d:cf: 71:83:74:37:c4:30:53:2a:96:c7:f8:5b:19:c7:21: e3:7e:98:42:3b:ac:80:3d:d3:4c:d7:4d:76:49:5d: 62:84:df:57:41:50:a7:9f:63:39:ff:b4:fa:c5:11: 58:3f:82:c2:18:27:9a:bb:70:07:f6:23:6e:cc:34: f1:b9:ea:4a:36:78:b1:1d:86:cf:44:5a:3a:af:e1: 93:a4:0e:c0:f6:6e:1d:6e:c8:56:a5:6d:b2:ab:63: 87:9f:f6:8b:de:e9:11:26:31:75:ec:25:ac:64:31: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:72:A4:7C:FB:BC:A1:4E:41:53:AF:A7:BA:AC:75:C0:03:F5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5f:b8:eb:ae:58:7c:ac:7d:af:bb:5b:e2:01:54:ff:eb:e5: 57:67:9e:60:07:09:84:cd:86:d5:d5:28:d4:06:d7:93:39:cc: e4:21:7f:ae:06:46:27:77:4f:3b:ea:8d:02:e1:84:cd:ca:5b: 7a:c6:e2:63:7c:0c:55:d0:9b:30:4c:ff:63:fe:aa:87:b2:5a: 8b:b1:34:84:95:52:2d:65:36:61:73:6a:4b:c1:a4:8b:89:5f: d6:bb:14:90:f6:da:cd:8f:50:1c:56:18:38:e6:f8:99:de:40: 7a:b3:22:af:7b:99:10:e4:8c:1c:f2:5a:32:18:9f:bf:79:a1: 30:54:4b:1e:ce:7d:ec:b5:7e:3d:8a:27:44:06:4e:ab:ee:66: da:97:27:58:8a:e1:90:4d:01:d6:ed:97:1e:df:5f:2a:2a:a5: a3:3f:65:37:0d:b9:fe:e7:38:ea:1d:14:49:c4:5a:7e:be:af: cc:e8:46:4a:3e:d7:57:29:23:06:79:c2:cc:2b:ac:67:98:f5: 61:88:7a:08:74:11:1c:c0:26:55:f9:ed:17:a1:25:aa:7d:7c: 5b:ea:63:3e:45:7e:33:cb:aa:77:36:8a:ce:97:c0:52:5f:ce: 1b:2c:7b:7a:2a:b0:9e:66:8b:47:15:a2:5b:c1:84:8a:dc:03: 9b:2c:eb:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdd1ksWDMPSHBgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGIzODVkYmYtZmUyYy00MTJjLWFmMGItYzM1ZjYwYWExYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmOeI73dxCVhVwdApXqShdml+664p3lzkl+q D0oGod57Nfyj2LGgS5NnCja68OjY+BkGo6uHwJjyCfTOAqYF1Y21RzFBnoS4te1V PaYmR/tjTN6MOLWPpdm42ApuJukVQ88KcxafJr0ReDnLVOUqGlYdlVYaUaZ9/x/b HhN/yhmjmnWees0LpIi+NMBHNpkrBkEtjc9xg3Q3xDBTKpbH+FsZxyHjfphCO6yA PdNM1012SV1ihN9XQVCnn2M5/7T6xRFYP4LCGCeau3AH9iNuzDTxuepKNnixHYbP RFo6r+GTpA7A9m4dbshWpW2yq2OHn/aL3ukRJjF17CWsZDGOvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6ccqR8+7yhTkFTr6e6rHXAA/XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtfuOuuWHysfa+7W+IBVP/r5VdnnmAHCYTNhtXVKNQG15M5zOQhf64G Rid3TzvqjQLhhM3KW3rG4mN8DFXQmzBM/2P+qoeyWouxNISVUi1lNmFzakvBpIuJ X9a7FJD22s2PUBxWGDjm+JneQHqzIq97mRDkjBzyWjIYn795oTBUSx7Ofey1fj2K J0QGTqvuZtqXJ1iK4ZBNAdbtlx7fXyoqpaM/ZTcNuf7nOOodFEnEWn6+r8zoRko+ 11cpIwZ5wswrrGeY9WGIegh0ERzAJlX57RehJap9fFvqYz5FfjPLqnc2is6XwFJf zhsse3oqsJ5mi0cVolvBhIrcA5ss6/s= -----END CERTIFICATE-----Generated at Fri Sep 25 08:15:21 2026 by rpki-client