$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa File: 154594e0-ee8d-31de-8d13-6d107201791f.roa (raw, json) Hash identifier: 1vFxJZMCsPBmDJ9IA63e7gJ+6wUXYAqM/W5HqPVZM1c= Subject key identifier: 35:5C:34:92:4F:44:50:C2:AD:F0:5E:59:77:68:05:AF:13:F1:39:90 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584F2D87C35DC044ED5BB62CBB80 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 393885 IP address blocks: 64.71.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c3:5d:c0:44:ed:5b:b6:2c:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=a55edc59-45ea-46f5-bb0d-8d7711ad8cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:b0:7d:b4:80:5f:f1:6b:cc:4d:44:93:01: fd:b0:9c:62:8a:ee:7f:a2:fb:a1:5d:5e:98:c9:b5: 48:95:28:7c:f4:14:96:06:30:70:76:bb:ae:5b:45: 0a:73:c6:80:91:7c:68:b1:1f:f1:63:04:42:9e:49: cd:a8:bc:fa:9e:ec:e0:a5:b1:72:7a:a9:91:69:3e: c5:33:d9:c2:b6:19:a7:69:5d:6a:11:29:37:e3:50: 73:f5:dd:c4:91:c6:c1:82:c1:3e:98:ac:5e:dd:6b: 59:67:cf:21:5f:3b:3c:b4:04:11:75:fa:38:16:f0: c4:3a:ce:69:ab:ec:9d:69:ef:78:56:4d:86:a7:62: 06:78:be:87:1a:28:c8:e6:56:f7:4c:b9:1c:fd:8e: fa:34:ad:53:1b:4d:f2:95:ca:c2:e5:ad:02:07:93: e3:50:a8:46:94:d9:76:6a:ce:83:ba:9d:cf:83:8d: d9:ce:f0:44:03:7a:f7:97:bd:51:30:88:4c:e4:f7: 9f:4f:63:14:37:ab:ff:5a:eb:69:69:64:d4:a4:9f: 58:91:d5:03:30:2c:4a:82:8c:c6:07:ee:ba:b4:00: 07:ca:c9:66:0a:8e:a8:ae:29:bf:22:d6:54:d8:ab: fd:e5:cc:f2:da:68:6a:5c:df:25:8e:ef:12:e3:e7: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:34:92:4F:44:50:C2:AD:F0:5E:59:77:68:05:AF:13:F1:39:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:83:1d:09:c6:ae:17:69:56:44:08:ef:38:4b:4e:73:fc:8f: da:93:3a:fb:91:17:f4:b8:54:45:de:6c:39:9e:4a:ec:47:f0: 54:30:9e:aa:92:1e:c6:35:d8:83:dd:ab:de:eb:29:8f:30:71: 01:a9:60:53:02:bd:12:67:36:9b:c7:ff:e8:3a:ca:3f:e5:03: 0e:c0:81:af:b7:fb:b5:30:c2:cc:3b:7c:d7:ce:e5:a7:4e:b1: a2:53:dc:71:4c:03:9b:28:55:aa:10:83:04:55:08:d2:12:4c: c2:fa:51:d8:76:19:c1:ab:b1:db:98:9a:38:dd:77:31:e4:2a: 48:77:b3:af:0e:f0:67:94:53:67:8d:05:1a:4c:af:2b:4e:89: a2:b1:9c:a2:cd:25:92:2b:0b:eb:90:42:c9:ff:ce:5f:9c:01: 5b:be:02:63:8e:3a:0e:28:88:50:e3:34:5f:21:2d:3f:2b:a3: 6a:e2:33:ec:b1:de:83:59:10:0e:0e:e3:6c:02:2f:8f:d5:2b: d6:6f:11:2c:79:6e:d3:30:e2:3c:01:f4:50:a6:0a:47:e9:6c: 3f:ef:2d:a5:02:ca:c6:23:b3:7b:07:2c:3e:e0:93:38:d5:cc: fd:30:34:dc:af:d9:e0:98:c7:4a:b4:f7:c7:e1:ca:51:eb:c0: 1f:86:28:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8NdwETtW7Ysu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk YTU1ZWRjNTktNDVlYS00NmY1LWJiMGQtOGQ3NzExYWQ4Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAuwfbSAX/FrzE1EkwH9sJxiiu5/ovuhXV6Y ybVIlSh89BSWBjBwdruuW0UKc8aAkXxosR/xYwRCnknNqLz6nuzgpbFyeqmRaT7F M9nCthmnaV1qESk341Bz9d3EkcbBgsE+mKxe3WtZZ88hXzs8tAQRdfo4FvDEOs5p q+ydae94Vk2Gp2IGeL6HGijI5lb3TLkc/Y76NK1TG03ylcrC5a0CB5PjUKhGlNl2 as6Dup3Pg43ZzvBEA3r3l71RMIhM5PefT2MUN6v/WutpaWTUpJ9YkdUDMCxKgozG B+66tAAHyslmCo6orim/ItZU2Kv95czy2mhqXN8lju8S4+f8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVcNJJPRFDCrfBeWXdoBa8T8TmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTU0NTk0ZTAtZWU4ZC0z MWRlLThkMTMtNmQxMDcyMDE3OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGDHQnGrhdpVkQI7zhLTnP8j9qTOvuRF/S4VEXebDmeSuxH8FQwnqqS HsY12IPdq97rKY8wcQGpYFMCvRJnNpvH/+g6yj/lAw7Aga+3+7Uwwsw7fNfO5adO saJT3HFMA5soVaoQgwRVCNISTML6Udh2GcGrsduYmjjddzHkKkh3s68O8GeUU2eN BRpMrytOiaKxnKLNJZIrC+uQQsn/zl+cAVu+AmOOOg4oiFDjNF8hLT8ro2riM+yx 3oNZEA4O42wCL4/VK9ZvESx5btMw4jwB9FCmCkfpbD/vLaUCysYjs3sHLD7gkzjV zP0wNNyv2eCYx0q098fhylHrwB+GKH0= -----END CERTIFICATE-----Generated at Tue Sep 22 14:22:58 2026 by rpki-client