$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa File: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json) Hash identifier: a1uEzClCyH0ZwkfgGSNplwUJSDdy6leMo2IgdAVLztE= Subject key identifier: DF:C8:15:3F:60:4D:27:47:F8:C5:B9:87:D1:D3:F3:8A:EC:D2:4D:37 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584F4112B2B17A2A15A3F4D6E6C0 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 32058 IP address blocks: 216.147.192.0/20 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b2:b1:7a:2a:15:a3:f4:d6:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e76b5e74-37de-4a34-a4ab-aa87572b0183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:20:44:45:d4:12:38:fa:71:02:76:27:50: f4:b9:82:4e:d5:6c:41:c3:ca:07:5d:4b:6b:14:33: ea:f6:96:33:e8:68:32:2a:14:9a:6d:1a:c2:83:57: 51:67:c4:f5:81:3f:17:16:72:7f:fc:21:db:46:b3: 29:9d:92:2e:17:0d:1d:f7:9b:10:af:ad:da:1c:bf: ce:47:20:9c:b6:ab:2b:aa:fc:c7:41:13:17:b5:59: cf:98:5c:3a:58:7b:96:09:ee:e3:11:51:25:77:7e: 63:a0:12:f6:ce:d0:0f:98:9d:9b:b4:9b:c4:03:4a: b9:75:7a:e6:1f:f9:f4:cd:40:30:ef:7a:64:17:b4: 3c:df:63:e3:df:72:30:1c:ee:1b:5a:a3:e0:86:6e: 83:be:99:c9:e7:00:4b:99:c3:cc:29:34:16:47:8a: 0d:b0:bc:fa:dd:c1:e2:4f:d2:6f:0e:ba:34:ed:01: 4e:e5:92:8e:c9:84:09:ff:5a:be:8f:81:57:75:1b: b6:ef:5b:a7:d2:6e:61:ae:fa:33:b6:ab:57:79:ab: 7f:80:30:d3:c1:21:a9:73:21:d9:b4:92:95:75:74: bc:8f:0a:1f:48:bf:20:f3:87:53:d8:90:86:4b:32: 56:a0:3b:e5:0d:64:38:0b:2c:2e:62:c2:0d:c2:f7: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C8:15:3F:60:4D:27:47:F8:C5:B9:87:D1:D3:F3:8A:EC:D2:4D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 216.147.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c2:3a:0e:b5:33:99:89:d7:27:32:33:af:d0:cb:e1:ce:a9: fb:42:50:d3:37:15:44:2a:95:a7:ee:0c:9b:bb:68:8a:e1:e9: f4:84:93:ee:80:2d:b6:9b:f1:c9:fe:f0:5e:f5:f5:c1:0a:e0: b2:e9:b6:3f:a2:b4:f4:d5:3b:84:e9:0d:73:39:6b:07:ef:01: 95:cb:e4:84:d7:89:0b:b8:84:ad:3a:d2:ce:6a:6c:e3:1f:3d: 9e:8c:1d:d7:40:eb:75:20:92:99:5c:2e:92:e3:46:d9:4b:24: 68:51:1e:eb:32:fb:be:c6:b1:e1:74:a3:77:49:3b:b7:4a:bd: e3:79:18:80:fa:01:b3:30:a5:d6:ca:c2:90:fd:b6:b9:0e:d6: 7d:f0:49:49:4e:ec:91:4e:fa:2a:b6:f5:b7:90:5c:59:13:0f: 4c:44:a2:e1:23:5c:b1:a1:23:45:43:9f:a8:32:8b:c8:f0:51: 8c:8d:f5:a4:13:b9:5b:b3:c6:ae:90:6f:91:28:8a:8a:f3:cc: 57:f4:14:a4:53:e3:b3:77:b7:60:eb:8c:33:e0:df:e8:c7:0d: fa:0a:28:76:dd:2f:bb:a9:99:22:80:17:6c:a8:34:8f:29:9a: 2a:3d:51:96:3a:07:d5:d4:ea:66:8a:4c:90:6e:f1:a1:ab:36: 1e:5c:24:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErKxeioVo/TW5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTc2YjVlNzQtMzdkZS00YTM0LWE0YWItYWE4NzU3MmIwMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA080gREXUEjj6cQJ2J1D0uYJO1WxBw8oHXUtr FDPq9pYz6GgyKhSabRrCg1dRZ8T1gT8XFnJ//CHbRrMpnZIuFw0d95sQr63aHL/O RyCctqsrqvzHQRMXtVnPmFw6WHuWCe7jEVEld35joBL2ztAPmJ2btJvEA0q5dXrm H/n0zUAw73pkF7Q832Pj33IwHO4bWqPghm6DvpnJ5wBLmcPMKTQWR4oNsLz63cHi T9JvDro07QFO5ZKOyYQJ/1q+j4FXdRu271un0m5hrvoztqtXeat/gDDTwSGpcyHZ tJKVdXS8jwofSL8g84dT2JCGSzJWoDvlDWQ4CywuYsINwvekvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/IFT9gTSdH+MW5h9HT84rs0k03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDI0MDhjNWYtZDIyNS0z MmY0LTlmNmMtODI2ODZjOWZhNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnCOg61M5mJ1ycyM6/Qy+HOqftCUNM3FUQqlafuDJu7aIrh6fSEk+6A Lbab8cn+8F719cEK4LLptj+itPTVO4TpDXM5awfvAZXL5ITXiQu4hK060s5qbOMf PZ6MHddA63UgkplcLpLjRtlLJGhRHusy+77GseF0o3dJO7dKveN5GID6AbMwpdbK wpD9trkO1n3wSUlO7JFO+iq29beQXFkTD0xEouEjXLGhI0VDn6gyi8jwUYyN9aQT uVuzxq6Qb5EoiorzzFf0FKRT47N3t2DrjDPg3+jHDfoKKHbdL7upmSKAF2yoNI8p mio9UZY6B9XU6maKTJBu8aGrNh5cJHI= -----END CERTIFICATE-----Generated at Tue Sep 29 17:53:17 2026 by rpki-client