$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: ov6GAcGLxpX45Z+FZfGj2C6fWB3L/vu2DwyWMCFzdfM= Subject key identifier: 12:1F:47:44:65:72:B0:30:FF:AE:8D:DC:71:72:4E:8A:72:C5:92:72 Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584F374D1CE7B1B0C9EB8B3CBE80 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1c:e7:b1:b0:c9:eb:8b:3c:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=c6de1703-ff61-4bcc-96d9-572f415ad19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:60:f4:4b:0c:54:41:c0:0b:ad:1d:f9:57: 28:0a:00:e0:29:89:66:81:1c:d4:28:ca:d2:52:2a: 08:dd:90:47:7c:d8:f9:f9:f5:b4:f8:26:61:8c:33: 05:db:11:2c:cc:15:fe:c7:20:b5:be:64:9a:26:b4: d2:7d:af:05:1e:67:be:f6:21:b6:ce:8b:48:c3:2f: 62:f9:d7:38:64:9e:9e:16:c6:8c:7c:57:32:96:4f: 1b:49:2c:f4:0f:4c:66:46:b8:56:86:15:57:0d:74: 37:a4:93:22:fc:b8:d0:d7:40:01:8d:b1:6f:77:18: 6d:57:bf:22:1d:d6:04:b9:86:43:f4:05:73:6b:42: 96:91:ec:1f:b1:7c:6d:c1:bd:45:4d:cc:2e:16:90: ec:89:15:9a:ed:01:d0:1d:53:45:a7:97:c9:4c:06: 9d:3b:d6:fe:a9:cc:8e:aa:92:29:2e:bd:e5:ce:da: ba:d8:ea:bf:6a:23:93:f1:61:3a:c5:00:31:8f:b8: a3:84:5c:e2:dd:37:1c:de:30:7b:ee:88:b9:af:3c: 83:6f:ab:ec:60:3f:45:fb:bf:6d:cc:25:65:77:87: 1b:53:fd:c0:46:38:38:92:24:93:84:11:87:b2:72: 5b:46:88:e3:8f:3d:dc:ed:1d:ea:ae:3c:cd:9d:04: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:47:44:65:72:B0:30:FF:AE:8D:DC:71:72:4E:8A:72:C5:92:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fe:50:35:62:45:c8:5f:f0:9b:26:70:53:08:e7:e9:22:8d: dd:a6:92:14:39:7a:09:81:f3:22:00:29:46:80:10:e9:8b:cc: f2:92:7f:8e:2e:54:da:5f:89:59:24:f6:80:46:b8:f1:1d:cc: 9a:18:6b:d3:72:a9:80:fd:52:9f:14:53:70:23:05:96:e5:48: 86:a3:6d:fa:07:54:7b:19:de:c2:82:c0:84:02:9c:8d:90:91: 49:00:fc:ad:67:a9:c2:d1:f6:de:c4:71:e9:8d:78:3e:21:1b: 99:03:cb:a0:03:cf:6c:8a:bf:02:aa:ee:58:8c:f5:56:f4:a4: 22:0b:24:e3:93:b4:20:4c:88:74:83:c4:ec:a7:67:e2:7f:d9: d8:32:fc:37:ed:29:e9:8a:75:ca:88:13:77:53:28:f7:d4:bd: fc:e3:7c:5a:2c:6d:cf:e2:8b:62:ab:eb:b7:44:23:37:53:a2: f7:1b:86:2a:71:5d:25:d5:c6:88:58:01:b3:4d:d7:b2:e8:5f: 50:81:66:e1:35:2b:5f:ed:86:c5:cf:8e:f6:3e:2e:91:02:25: 31:f9:d7:af:6d:33:dd:ec:8c:0b:69:06:78:ae:aa:b6:f9:c2: a0:f4:db:c9:10:cb:2a:ae:37:78:73:e7:c1:70:35:ef:36:55: 19:b7:1d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRznsbDJ64s8voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YzZkZTE3MDMtZmY2MS00YmNjLTk2ZDktNTcyZjQxNWFkMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubVg9EsMVEHAC60d+VcoCgDgKYlmgRzUKMrS UioI3ZBHfNj5+fW0+CZhjDMF2xEszBX+xyC1vmSaJrTSfa8FHme+9iG2zotIwy9i +dc4ZJ6eFsaMfFcylk8bSSz0D0xmRrhWhhVXDXQ3pJMi/LjQ10ABjbFvdxhtV78i HdYEuYZD9AVza0KWkewfsXxtwb1FTcwuFpDsiRWa7QHQHVNFp5fJTAadO9b+qcyO qpIpLr3lztq62Oq/aiOT8WE6xQAxj7ijhFzi3Tcc3jB77oi5rzyDb6vsYD9F+79t zCVld4cbU/3ARjg4kiSThBGHsnJbRojjjz3c7R3qrjzNnQRzZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIfR0RlcrAw/66N3HFyTopyxZJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT+UDViRchf8JsmcFMI5+kijd2mkhQ5egmB8yIAKUaAEOmLzPKSf44u VNpfiVkk9oBGuPEdzJoYa9NyqYD9Up8UU3AjBZblSIajbfoHVHsZ3sKCwIQCnI2Q kUkA/K1nqcLR9t7EcemNeD4hG5kDy6ADz2yKvwKq7liM9Vb0pCILJOOTtCBMiHSD xOynZ+J/2dgy/DftKemKdcqIE3dTKPfUvfzjfFosbc/ii2Kr67dEIzdTovcbhipx XSXVxohYAbNN17LoX1CBZuE1K1/thsXPjvY+LpECJTH5169tM93sjAtpBniuqrb5 wqD028kQyyquN3hz58FwNe82VRm3Ha4= -----END CERTIFICATE-----Generated at Tue Sep 29 02:42:06 2026 by rpki-client