$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa File: 5a606c85-561e-306f-971c-7cb0a887d723.roa (raw, json) Hash identifier: mZEB0PR7hhMv90kcOSWPEnAAybQVm6PX64hGjFLe40U= Subject key identifier: 42:E2:D9:A6:43:A7:28:E0:11:13:3D:48:21:13:5B:8D:CE:DA:B1:DA Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584F4975EBA02854DCB3C4689A00 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5377 IP address blocks: 216.9.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:eb:a0:28:54:dc:b3:c4:68:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b123fc2c-4bb9-4885-85d4-00e5b64f5508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:f3:cb:dc:9d:d1:8a:88:5b:59:0b:e3:db: 6d:51:20:1e:a1:d0:cd:99:da:be:4e:42:a4:68:15: fb:f6:af:33:b3:c5:b3:70:f6:0d:ce:96:c4:f1:78: 32:3f:4d:f9:f3:b7:ac:f8:f7:77:f1:b2:ea:96:2f: 8d:07:28:bc:0a:fa:22:1f:37:d3:68:81:9c:10:3f: 2f:4f:cc:61:a3:5a:7b:9e:70:59:7e:a1:99:f3:ac: 0d:a5:9f:32:d0:4d:f4:3d:f8:f2:a5:b7:21:bd:6a: 6b:53:7e:91:80:fb:de:88:29:c6:41:f0:fc:db:c8: 0c:07:6d:a9:20:bb:49:73:a1:f7:0c:20:f4:77:f1: 64:57:1b:93:0d:b8:c9:97:67:9b:5f:4b:6c:85:9d: a1:16:76:f3:54:ce:1d:93:ea:be:bd:51:41:1c:fa: 08:b7:09:a7:a8:20:28:aa:30:56:65:4b:4c:08:92: e3:66:a5:83:89:05:2e:0d:53:f0:4b:04:89:52:33: 80:24:34:ad:e8:da:e9:4f:ce:27:9b:8c:99:ce:3c: f2:de:10:f0:76:6c:48:35:78:b1:b5:71:7b:6a:df: 9b:c9:e9:09:44:dc:f6:c8:34:82:d3:f8:ed:e4:7f: a9:29:1f:07:e6:52:b6:d2:12:5d:a9:b7:ee:d7:ed: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E2:D9:A6:43:A7:28:E0:11:13:3D:48:21:13:5B:8D:CE:DA:B1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 216.9.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:69:24:37:5f:db:df:90:52:8f:07:d6:cc:31:c0:7a:0b:82: bf:44:a8:48:97:2a:ee:5c:39:18:12:f0:17:69:fb:08:82:12: b6:02:2c:18:72:1a:94:98:cf:98:24:6a:05:42:a7:62:67:2c: 73:23:c3:19:16:52:94:af:11:fd:23:56:03:b8:b4:f5:a9:d3: 50:83:6c:21:6b:c7:ca:de:f6:90:65:43:d9:42:83:c1:ff:08: ed:c2:b0:d3:cc:6d:21:bb:d4:51:95:e6:b3:ab:8f:49:a3:b7: 85:5f:d2:9d:d4:d1:f1:d7:27:e8:8d:90:9b:8b:8a:74:7d:e3: 81:8e:22:d4:55:68:76:3e:4b:c5:fa:f3:d1:05:ea:e5:57:3f: 8c:a8:d8:b5:a5:5c:67:2d:2b:d9:7e:e1:da:bc:49:bc:c2:27: c8:09:1f:be:9f:a3:04:77:60:82:79:86:db:3d:50:f7:42:e8: b3:0b:55:e6:24:22:c0:90:63:0c:9d:e5:2e:73:07:bf:6d:de: 43:e4:2a:8b:fb:d0:e8:3c:00:a8:af:3b:e4:3b:8c:5c:b0:24: 66:a1:42:ac:bf:d1:d7:ed:74:08:44:ca:70:d3:dc:9e:4f:3d: df:c2:42:60:f6:04:94:69:34:74:b2:61:19:a0:5d:6d:ed:a9: 61:66:65:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdeugKFTcs8RomgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjEyM2ZjMmMtNGJiOS00ODg1LTg1ZDQtMDBlNWI2NGY1NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusPzy9yd0YqIW1kL49ttUSAeodDNmdq+TkKk aBX79q8zs8WzcPYNzpbE8XgyP03587es+Pd38bLqli+NByi8CvoiHzfTaIGcED8v T8xho1p7nnBZfqGZ86wNpZ8y0E30PfjypbchvWprU36RgPveiCnGQfD828gMB22p ILtJc6H3DCD0d/FkVxuTDbjJl2ebX0tshZ2hFnbzVM4dk+q+vVFBHPoItwmnqCAo qjBWZUtMCJLjZqWDiQUuDVPwSwSJUjOAJDSt6NrpT84nm4yZzjzy3hDwdmxINXix tXF7at+byekJRNz2yDSC0/jt5H+pKR8H5lK20hJdqbfu1+2tqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELi2aZDpyjgERM9SCETW43O2rHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvNWE2MDZjODUtNTYxZS0z MDZmLTk3MWMtN2NiMGE4ODdkNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZpJDdf29+QUo8H1swxwHoLgr9EqEiXKu5cORgS8Bdp+wiCErYCLBhy GpSYz5gkagVCp2JnLHMjwxkWUpSvEf0jVgO4tPWp01CDbCFrx8re9pBlQ9lCg8H/ CO3CsNPMbSG71FGV5rOrj0mjt4Vf0p3U0fHXJ+iNkJuLinR944GOItRVaHY+S8X6 89EF6uVXP4yo2LWlXGctK9l+4dq8SbzCJ8gJH76fowR3YIJ5hts9UPdC6LMLVeYk IsCQYwyd5S5zB79t3kPkKov70Og8AKivO+Q7jFywJGahQqy/0dftdAhEynDT3J5P Pd/CQmD2BJRpNHSyYRmgXW3tqWFmZVk= -----END CERTIFICATE-----Generated at Sun Sep 27 15:07:20 2026 by rpki-client