$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/3953a227-fa2b-37b0-9304-b8ab297f896f.roa File: 3953a227-fa2b-37b0-9304-b8ab297f896f.roa (raw, json) Hash identifier: n3uiJAbg1kVW8Pj5yefDfKEuJ6JRFH0LIkWOokq2Lcg= Subject key identifier: 13:43:A9:0E:2C:A1:65:A3:66:CA:56:FA:C6:06:8E:1B:B5:47:64:AB Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584F498938EACA122A74EDE74A00 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/3953a227-fa2b-37b0-9304-b8ab297f896f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30313 IP address blocks: 152.216.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:38:ea:ca:12:2a:74:ed:e7:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=473ea66a-8ea8-4627-b1f5-d4b61259cd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:b6:f9:3b:3d:a6:07:3f:c0:ea:c4:bd:cc: 88:49:32:72:2f:14:38:32:d1:d9:cb:a9:f4:91:17: 06:65:25:43:6a:5c:86:c4:91:f3:8f:fc:73:4a:09: 9c:1c:46:06:3e:62:73:36:a7:80:60:b5:e5:46:a8: 58:22:34:59:a5:0f:fb:ef:e1:84:44:58:30:31:3e: b5:bf:3c:8d:79:c1:4d:50:90:f7:af:23:f2:1a:24: 27:6b:c1:c8:66:4d:6a:65:1a:38:27:65:fc:8b:b9: 94:01:e3:24:bb:4b:3e:70:be:e5:9a:db:bc:f6:19: d6:66:ae:8e:73:b3:21:c0:b7:16:05:5d:be:98:39: 90:87:48:2a:3d:2e:43:50:33:14:09:3d:41:43:4a: b7:08:69:ae:8b:36:e1:35:d3:da:61:dd:73:0b:cf: 99:20:a0:09:7e:48:ee:54:7b:b1:0f:35:0a:a8:63: 9e:53:74:89:31:f9:a1:e4:fc:13:13:84:8f:0b:b5: 0f:43:bc:af:3c:8b:ca:36:b8:ad:8d:4f:59:c3:64: 96:88:83:47:36:c2:54:63:65:1c:81:7f:43:8d:a0: 0a:45:fa:f1:c4:cd:bd:dd:8c:fc:9f:08:ed:dd:e9: 4d:0b:10:ed:2d:59:f4:36:58:8c:52:01:8d:8d:ef: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:43:A9:0E:2C:A1:65:A3:66:CA:56:FA:C6:06:8E:1B:B5:47:64:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/3953a227-fa2b-37b0-9304-b8ab297f896f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c3:6e:c8:78:2e:fa:f8:e1:cc:14:ea:f8:6d:91:17:ef:9d: d9:06:5a:f9:df:24:67:80:5c:78:77:45:db:e3:56:23:28:b7: 7d:65:23:03:24:53:2e:4a:97:01:e7:00:47:be:84:2a:d6:ab: 4c:65:9e:ae:8a:54:cf:fb:e9:d8:b6:9c:28:89:09:de:17:2c: b8:88:06:b9:1b:4a:b8:ba:4e:f5:dd:49:88:1a:c6:10:a4:ba: 66:11:7f:a7:e9:00:53:c3:f7:89:4f:9e:6d:6a:4b:28:12:0e: 9e:d7:ad:8e:85:29:73:3f:05:29:b3:91:a0:ff:9f:2c:63:03: bf:09:e2:63:53:7f:07:bc:41:81:7b:b5:47:64:c0:1a:81:05: 4f:85:f9:24:3a:7b:c2:a1:c8:1c:6d:17:bf:d4:88:b1:aa:89: bb:d4:4f:4f:55:1c:91:f8:42:92:c2:a2:ee:88:8e:fc:b5:52: 8e:ac:7a:64:5e:f3:05:dc:9e:f7:ec:89:3f:69:fd:3d:e6:95: 2d:6d:59:cd:52:37:79:af:55:66:f1:fb:82:af:1e:15:37:38: 86:11:45:41:de:c2:94:fa:2f:bd:45:00:8f:86:aa:36:f2:07: 70:6d:c8:5f:be:74:4c:9f:46:36:4d:6e:34:10:11:b8:72:02: 05:8d:a9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTjqyhIqdO3nSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDczZWE2NmEtOGVhOC00NjI3LWIxZjUtZDRiNjEyNTljZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX22+Ts9pgc/wOrEvcyISTJyLxQ4MtHZy6n0 kRcGZSVDalyGxJHzj/xzSgmcHEYGPmJzNqeAYLXlRqhYIjRZpQ/77+GERFgwMT61 vzyNecFNUJD3ryPyGiQna8HIZk1qZRo4J2X8i7mUAeMku0s+cL7lmtu89hnWZq6O c7MhwLcWBV2+mDmQh0gqPS5DUDMUCT1BQ0q3CGmuizbhNdPaYd1zC8+ZIKAJfkju VHuxDzUKqGOeU3SJMfmh5PwTE4SPC7UPQ7yvPIvKNritjU9Zw2SWiINHNsJUY2Uc gX9DjaAKRfrxxM293Yz8nwjt3elNCxDtLVn0NliMUgGNje9f9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNDqQ4soWWjZspW+sYGjhu1R2SrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvMzk1M2EyMjctZmEyYi0z N2IwLTkzMDQtYjhhYjI5N2Y4OTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnDbsh4Lvr44cwU6vhtkRfvndkGWvnfJGeAXHh3RdvjViMot31lIwMk Uy5KlwHnAEe+hCrWq0xlnq6KVM/76di2nCiJCd4XLLiIBrkbSri6TvXdSYgaxhCk umYRf6fpAFPD94lPnm1qSygSDp7XrY6FKXM/BSmzkaD/nyxjA78J4mNTfwe8QYF7 tUdkwBqBBU+F+SQ6e8KhyBxtF7/UiLGqibvUT09VHJH4QpLCou6Ijvy1Uo6semRe 8wXcnvfsiT9p/T3mlS1tWc1SN3mvVWbx+4KvHhU3OIYRRUHewpT6L71FAI+Gqjby B3BtyF++dEyfRjZNbjQQEbhyAgWNqR8= -----END CERTIFICATE-----Generated at Sun Sep 27 01:49:38 2026 by rpki-client