$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa File: e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa (raw, json) Hash identifier: A0yXNTp+VKFC7iysnVreO1HTw6HB0ocwCiSCafFyQnI= Subject key identifier: E9:3B:33:EB:1B:E4:16:BF:E3:73:3D:DA:60:F7:E3:1F:D3:06:C8:20 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584F3E47E5C477D01D045B6EEF00 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 46457 IP address blocks: 164.116.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e5:c4:77:d0:1d:04:5b:6e:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=8884d68d-07ff-4b85-aa6b-9a56590d1df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:1f:74:1e:0c:f3:dd:01:72:9f:72:2c:6c: 26:f7:0a:82:1a:f9:ec:38:c2:17:0e:62:b8:0f:20: 7c:df:f6:d4:1c:a9:6e:00:49:51:98:b3:50:7a:b1: c9:00:12:00:f4:f0:c0:bf:bd:24:b1:cc:0a:46:cd: 5a:88:22:2c:20:8a:9e:0b:f0:be:f9:d6:23:b5:3f: e6:b1:9b:e5:b1:af:67:55:b2:c9:44:75:6d:80:1b: d6:7a:8d:98:44:b4:f6:ea:e3:47:e7:ca:a0:3f:a0: 4e:21:39:bc:8e:eb:92:5f:a0:2f:c5:03:e0:ab:03: c3:5f:5d:9e:1a:80:9e:e3:da:a7:cb:17:81:71:1f: 0e:c8:75:d6:5e:3f:ff:51:2d:06:ba:00:e9:a0:b0: a6:ce:79:b4:eb:7b:05:0c:5f:ed:cd:40:5b:5f:10: 6a:30:34:70:6d:b1:60:43:80:e4:dc:7e:1d:e5:26: 75:fa:45:60:e2:df:d8:dd:7f:02:fa:38:88:5f:f3: 17:4f:9d:2e:83:8c:d2:f1:4a:3f:2b:e1:9c:12:92: 7c:27:bf:ad:a7:45:3a:75:15:e1:aa:12:38:ed:0a: ef:8e:97:ad:97:5b:3e:c4:ae:54:ac:57:98:bf:d4: ba:0d:53:34:77:a2:15:b6:0f:81:0b:d7:c8:20:6b: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3B:33:EB:1B:E4:16:BF:E3:73:3D:DA:60:F7:E3:1F:D3:06:C8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 164.116.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c8:4a:00:47:26:c1:29:31:b3:79:94:4c:89:c8:23:21:5e: c5:3b:5d:6b:c4:52:66:d8:a4:32:42:d6:1a:23:2c:d8:cc:9c: 1e:b1:3f:bb:09:d5:69:d1:89:83:cd:7a:e1:d9:bb:c1:2b:8d: e0:ee:63:e4:a2:ab:e6:dd:6c:04:19:55:31:cd:f1:ec:7e:bc: 61:0f:96:1c:2d:36:e8:cb:b5:04:68:83:7e:6c:40:60:a8:78: 0e:c7:12:fc:5c:30:e7:89:5f:dd:a2:8c:74:68:29:bf:f3:80: 0b:3b:56:23:29:52:dc:c9:48:dc:82:22:5f:b5:13:b4:29:16: 08:36:b0:63:aa:2f:39:27:f7:40:00:28:cc:52:a8:07:d7:39: 53:02:63:8b:23:ba:dc:c1:e2:b9:af:13:fd:30:63:83:1e:a4: 7a:37:ab:cc:87:8a:13:17:56:0a:ff:3d:d9:b4:5a:b9:88:64: 0e:04:0b:72:ec:1c:96:5d:83:7a:99:54:1c:4c:8d:49:ca:bb: 60:f4:b0:cf:b0:15:c8:ba:ea:28:34:90:47:90:c6:6f:1c:7f: 93:e3:61:9a:67:6f:c0:50:5b:10:d8:3d:df:04:d4:ec:4e:05: 10:9a:07:cd:58:0f:f4:64:01:90:b6:d8:27:85:b7:e8:e6:ae: 3f:59:d9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+XEd9AdBFtu7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ODg4NGQ2OGQtMDdmZi00Yjg1LWFhNmItOWE1NjU5MGQxZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ4fdB4M890Bcp9yLGwm9wqCGvnsOMIXDmK4 DyB83/bUHKluAElRmLNQerHJABIA9PDAv70kscwKRs1aiCIsIIqeC/C++dYjtT/m sZvlsa9nVbLJRHVtgBvWeo2YRLT26uNH58qgP6BOITm8juuSX6AvxQPgqwPDX12e GoCe49qnyxeBcR8OyHXWXj//US0GugDpoLCmznm063sFDF/tzUBbXxBqMDRwbbFg Q4Dk3H4d5SZ1+kVg4t/Y3X8C+jiIX/MXT50ug4zS8Uo/K+GcEpJ8J7+tp0U6dRXh qhI47Qrvjpetl1s+xK5UrFeYv9S6DVM0d6IVtg+BC9fIIGsxTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk7M+sb5Ba/43M92mD34x/TBsggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZTA2NGE5NTQtYmI2Yi0z ODAxLWI2N2MtNTNhM2NlOTljNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpHQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPISgBHJsEpMbN5lEyJyCMhXsU7XWvEUmbYpDJC1hojLNjMnB6xP7sJ 1WnRiYPNeuHZu8ErjeDuY+Siq+bdbAQZVTHN8ex+vGEPlhwtNujLtQRog35sQGCo eA7HEvxcMOeJX92ijHRoKb/zgAs7ViMpUtzJSNyCIl+1E7QpFgg2sGOqLzkn90AA KMxSqAfXOVMCY4sjutzB4rmvE/0wY4MepHo3q8yHihMXVgr/Pdm0WrmIZA4EC3Ls HJZdg3qZVBxMjUnKu2D0sM+wFci66ig0kEeQxm8cf5PjYZpnb8BQWxDYPd8E1OxO BRCaB81YD/RkAZC22CeFt+jmrj9Z2SE= -----END CERTIFICATE-----Generated at Tue Sep 22 12:50:27 2026 by rpki-client