$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa File: 0253e5ee-877d-38d4-a970-551d593f295d.roa (raw, json) Hash identifier: WrLw4ACauW+zwYNOMLjENrYiOGCTLQcAnz9UjXu0qa8= Subject key identifier: 85:F0:DF:BD:4C:D2:40:6B:8A:5A:5C:3F:F3:77:86:CF:3B:25:A2:FC Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584F1925CA3C25773C55932E5080 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa Signing time: Mon 07 Sep 2026 17:46:48 +0000 ROA not before: Mon 07 Sep 2026 17:46:48 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 6461 IP address blocks: 216.158.207.0/24 maxlen: 24 216.158.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:25:ca:3c:25:77:3c:55:93:2e:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Sep 7 17:46:48 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=c9366022-274f-4711-ae40-9ac2e802db63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:95:3c:af:33:f5:9b:7e:b9:96:8e:8d:d7: e4:d6:d6:cd:30:95:28:fe:d6:cd:85:43:a0:39:51: 06:af:dc:94:44:a7:7f:59:f1:f6:b2:74:66:e0:10: 85:ff:ad:46:a2:bd:69:fa:3a:76:52:64:80:d2:80: 63:ea:15:f6:1c:86:8e:f7:fe:5b:73:88:d5:ec:20: 18:b9:97:fa:e5:bc:a1:1e:32:87:55:1d:14:c2:f6: 14:78:31:3c:78:57:4d:86:af:8e:17:a6:50:e9:56: ba:41:79:3b:22:a4:d9:06:21:01:78:82:69:cf:4e: dd:80:54:45:87:1b:9b:87:7e:46:fd:46:05:49:8d: 75:f9:0a:26:52:0e:72:e1:33:a7:20:97:47:36:0c: 8c:c3:04:7e:46:40:b9:ed:e8:7e:44:08:64:65:8e: fd:b6:66:83:b5:6a:6f:f7:12:ec:dc:53:81:fd:3b: 7a:a8:1c:19:2c:3d:49:97:de:2f:13:3e:50:a7:6f: 61:02:d3:14:81:02:f9:28:5d:4c:02:34:08:f8:3e: c5:78:d3:21:27:10:9d:2d:d9:c6:86:63:3d:6d:e2: 4a:bb:40:f6:6c:e1:fb:0e:99:37:94:82:fb:44:07: 22:ae:24:6a:4d:ac:0a:bf:70:23:f3:c9:13:d8:d7: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:DF:BD:4C:D2:40:6B:8A:5A:5C:3F:F3:77:86:CF:3B:25:A2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.207.0/24 216.158.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2b:cb:c7:57:7a:f0:05:33:78:1d:e0:5f:ca:58:5a:f2:02: 77:fa:49:63:8a:70:54:65:ab:4d:55:8d:26:84:c6:3d:df:58: 02:f4:fe:d5:27:13:82:42:9a:8e:b3:e0:ef:37:65:4a:43:c2: 48:db:5d:f5:c9:af:df:26:33:b6:74:bb:4e:35:03:0c:ba:8e: d5:b3:00:d4:43:7e:fd:7e:b6:94:d2:47:e0:7b:8a:88:ec:d8: 5c:9d:64:62:fe:7b:2f:ad:53:8b:65:1a:64:dc:d2:e2:49:42: 20:c1:6b:c5:b0:23:09:fd:38:83:df:da:a6:25:7d:ca:a3:cd: 70:b1:b3:f8:63:5f:05:e8:bd:a1:b9:97:51:fc:da:44:59:9e: 0e:8e:95:3f:c1:07:50:49:40:34:4d:bd:f3:20:0a:9c:a0:b4: c7:90:d4:18:2f:3d:ef:72:aa:89:a3:9a:29:ce:8f:b2:a5:ba: dd:cc:97:e6:4c:ff:92:03:b5:e5:e6:4d:a5:0b:92:05:3d:7c: 53:21:01:d3:10:a7:a4:0b:22:f0:fe:eb:c3:c8:2e:ff:40:1d: 3f:68:16:02:8d:eb:58:a8:e2:8b:37:53:7b:2f:cd:7b:13:09: 6a:78:ed:a9:28:12:84:0b:c2:13:68:c2:d9:f0:53:6e:75:ba: 96:e8:f3:8f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8ZJco8JXc8VZMuUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDkwNzE3NDY0OFoXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YzkzNjYwMjItMjc0Zi00NzExLWFlNDAtOWFjMmU4MDJkYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwyVPK8z9Zt+uZaOjdfk1tbNMJUo/tbNhUOg OVEGr9yURKd/WfH2snRm4BCF/61Gor1p+jp2UmSA0oBj6hX2HIaO9/5bc4jV7CAY uZf65byhHjKHVR0UwvYUeDE8eFdNhq+OF6ZQ6Va6QXk7IqTZBiEBeIJpz07dgFRF hxubh35G/UYFSY11+QomUg5y4TOnIJdHNgyMwwR+RkC57eh+RAhkZY79tmaDtWpv 9xLs3FOB/Tt6qBwZLD1Jl94vEz5Qp29hAtMUgQL5KF1MAjQI+D7FeNMhJxCdLdnG hmM9beJKu0D2bOH7Dpk3lIL7RAciriRqTawKv3Aj88kT2NfwqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIXw371M0kBrilpcP/N3hs87JaL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMDI1M2U1ZWUtODc3ZC0z OGQ0LWE5NzAtNTUxZDU5M2YyOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2J7PAwQA 2J7cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ0ry8dXevAFM3gd4F/KWFryAnf6SWOKcFRlq01VjSaExj3f WAL0/tUnE4JCmo6z4O83ZUpDwkjbXfXJr98mM7Z0u041Awy6jtWzANRDfv1+tpTS R+B7iojs2FydZGL+ey+tU4tlGmTc0uJJQiDBa8WwIwn9OIPf2qYlfcqjzXCxs/hj XwXovaG5l1H82kRZng6OlT/BB1BJQDRNvfMgCpygtMeQ1BgvPe9yqomjminOj7Kl ut3Ml+ZM/5IDteXmTaULkgU9fFMhAdMQp6QLIvD+68PILv9AHT9oFgKN61io4os3 U3svzXsTCWp47akoEoQLwhNowtnwU251upbo848= -----END CERTIFICATE-----Generated at Tue Sep 22 21:15:01 2026 by rpki-client