$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa File: 015ba892-66b8-3dde-9289-c0d40a2a62b7.roa (raw, json) Hash identifier: tKuJyWxgwp1ncBSN3cvMhJSk8B5/msy4eE0klIlIs1I= Subject key identifier: 6B:10:B6:FD:B8:EF:C8:D3:8F:FA:C3:E2:A7:9C:A9:A9:07:4A:BD:2C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F46A7E3CC79E7608B83877200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 216.170.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e3:cc:79:e7:60:8b:83:87:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=0a626cae-a34a-4160-9318-e00ae112e87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:18:d7:42:3f:5b:43:84:3f:55:00:b7:90: 3a:58:aa:04:b0:6c:d8:16:5d:2b:a0:ce:39:3a:b6: 2a:3e:92:76:a0:d6:25:ad:b1:a4:67:8a:34:b8:12: da:1d:5a:9e:77:7f:ac:81:4a:dd:8f:12:a5:e8:7c: ca:fd:21:98:9d:74:f0:1d:19:ff:49:05:19:bb:64: a1:e6:30:51:ac:e4:f0:b3:ef:72:65:6e:6d:1d:9d: a5:9e:54:7e:ce:11:5d:4d:92:6c:38:ac:16:29:de: 33:87:1b:d1:c3:1f:1b:ab:13:b5:0c:f7:e1:cf:d5: 0b:a1:fd:24:6f:5f:cc:f3:7a:07:ca:4c:c2:e1:01: 3f:f1:5f:64:fa:cd:c9:80:7d:42:2e:54:f5:f8:50: 80:fc:3b:0f:bd:9b:41:9d:fb:d2:3c:6f:ee:4c:9a: c8:10:ce:99:59:04:17:da:8c:1c:9e:8e:20:67:51: 78:75:0b:ab:da:47:1a:a5:d9:a6:b6:5f:5a:f1:7d: 75:50:1e:9c:87:67:35:e6:eb:6c:62:1a:79:01:e8: 1d:52:45:b6:3d:16:e4:7b:75:3c:10:4d:d9:43:76: 89:6f:06:cf:c0:dc:35:af:e1:78:d4:97:e4:b4:f3: d6:de:31:3c:09:6d:24:2e:5f:31:2b:2c:32:25:e5: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:10:B6:FD:B8:EF:C8:D3:8F:FA:C3:E2:A7:9C:A9:A9:07:4A:BD:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a5:9c:43:a6:7a:7c:d2:aa:21:33:17:7a:72:28:23:f5:ec: 5d:35:ba:e2:15:7b:9d:37:3f:5d:3b:c3:82:07:28:47:90:e2: 7b:61:c8:b5:a3:c5:1b:cf:18:4a:a6:13:55:09:0d:9f:ad:74: 82:44:dd:51:f7:c4:8a:1a:2c:9c:c4:ed:53:9b:8f:4d:31:d1: b7:b2:77:61:3d:a3:9c:d2:9f:17:f8:fd:ff:52:f5:51:e2:d2: 77:e5:be:1f:cf:74:e5:c8:13:b1:a6:cd:a3:3f:6c:af:69:a4: 02:f3:3a:73:83:17:29:12:cc:40:dd:ae:62:1a:87:34:97:48: 69:2e:13:32:c9:e1:9b:b0:d5:26:1c:1c:fb:76:2d:56:7f:3d: a2:ca:6a:0b:64:2b:47:57:ad:18:12:25:0f:61:b8:16:41:eb: 92:47:44:e6:7a:65:1d:50:d8:d1:87:04:17:49:d2:5b:93:ae: b3:db:c9:aa:39:d0:74:de:b8:73:31:58:ee:8f:f8:21:f7:74: 19:a4:48:d1:36:6d:23:28:d5:c6:bf:95:ae:b3:a5:07:a5:f2: 7e:10:96:04:a8:af:c1:46:19:a6:8a:2d:e0:3c:a7:d2:4f:00: fd:f9:59:47:9e:1b:c4:4b:f5:63:96:6a:6d:75:de:4c:c8:59: 51:85:0b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+PMeedgi4OHcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MGE2MjZjYWUtYTM0YS00MTYwLTkzMTgtZTAwYWUxMTJlODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHQY10I/W0OEP1UAt5A6WKoEsGzYFl0roM45 OrYqPpJ2oNYlrbGkZ4o0uBLaHVqed3+sgUrdjxKl6HzK/SGYnXTwHRn/SQUZu2Sh 5jBRrOTws+9yZW5tHZ2lnlR+zhFdTZJsOKwWKd4zhxvRwx8bqxO1DPfhz9ULof0k b1/M83oHykzC4QE/8V9k+s3JgH1CLlT1+FCA/DsPvZtBnfvSPG/uTJrIEM6ZWQQX 2owcno4gZ1F4dQur2kcapdmmtl9a8X11UB6ch2c15utsYhp5AegdUkW2PRbke3U8 EE3ZQ3aJbwbPwNw1r+F41JfktPPW3jE8CW0kLl8xKywyJeWO2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsQtv2478jTj/rD4qecqakHSr0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDE1YmE4OTItNjZiOC0z ZGRlLTkyODktYzBkNDBhMmE2MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmlnEOmenzSqiEzF3pyKCP17F01uuIVe503P107w4IHKEeQ4nthyLWj xRvPGEqmE1UJDZ+tdIJE3VH3xIoaLJzE7VObj00x0beyd2E9o5zSnxf4/f9S9VHi 0nflvh/PdOXIE7GmzaM/bK9ppALzOnODFykSzEDdrmIahzSXSGkuEzLJ4Zuw1SYc HPt2LVZ/PaLKagtkK0dXrRgSJQ9huBZB65JHROZ6ZR1Q2NGHBBdJ0luTrrPbyao5 0HTeuHMxWO6P+CH3dBmkSNE2bSMo1ca/la6zpQel8n4QlgSor8FGGaaKLeA8p9JP AP35WUeeG8RL9WOWam113kzIWVGFC0s= -----END CERTIFICATE-----Generated at Sat Sep 26 06:57:35 2026 by rpki-client