$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa File: 3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa (raw, json) Hash identifier: Vrbpr2f+D+WHhgr+2fS7WQFJUTIG6tV3H8aHwPVCZz8= Subject key identifier: A6:13:87:4D:FC:50:AC:B5:3F:C0:33:5A:B8:35:23:9C:19:6A:1C:7F Certificate issuer: /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920 Certificate serial: 010D0C9F4328584F119CF7702AAA78E167377B00 Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 18780 IP address blocks: 216.71.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f7:70:2a:aa:78:e1:67:37:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c49427f6-f95b-45a5-9cbb-0e94efcf2a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:b9:e5:d5:e5:16:05:e4:ee:c9:a9:c2:4b: 71:b8:21:b3:1e:75:b2:24:00:23:74:46:46:f6:f3: c5:09:5a:a7:02:e8:a0:3c:f5:cb:fc:d0:b3:03:f4: 91:35:99:ce:50:1b:48:29:13:a6:c1:0a:c7:0a:d3: 6c:84:72:1c:1f:65:98:21:e6:42:2d:b9:75:07:0b: 62:de:de:8c:91:b4:cd:6e:8d:4b:53:66:30:82:44: 06:b4:cd:c2:7e:89:61:a4:2a:bd:dc:32:ee:64:d9: ab:82:70:3d:e2:e3:60:21:d2:20:63:fc:32:72:f6: 10:f2:3c:f0:67:59:b2:67:a0:8d:95:2a:70:2b:84: 2b:e0:30:0f:b2:4b:2b:33:e7:56:f5:1f:7f:24:27: 8a:a1:68:53:e0:8a:47:75:e5:21:ef:d7:fb:7f:de: af:4f:1a:fd:fc:5f:d3:e8:27:57:cd:cc:a6:30:d7: 21:d4:22:ad:93:0b:01:8a:dc:a0:08:b4:b0:6e:10: 60:75:9c:ef:c9:9c:4d:72:2e:c9:4d:b1:78:3a:5b: f6:05:8b:54:18:8b:1d:6f:7e:51:ee:a8:dd:2f:ed: 58:58:59:4f:ed:ac:3b:af:a3:bc:f3:dc:74:83:2a: 54:d6:9e:70:39:1f:c3:ab:0c:5b:91:a4:d0:99:fd: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:13:87:4D:FC:50:AC:B5:3F:C0:33:5A:B8:35:23:9C:19:6A:1C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl X509v3 Authority Key Identifier: keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer sbgp-ipAddrBlock: critical IPv4: 216.71.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0d:74:68:72:c7:c4:ae:25:b6:ce:50:f8:ab:cd:06:83:b8: 65:a7:e1:20:cf:fd:f6:b9:8c:cc:dc:23:ab:56:42:27:c3:2b: 53:72:ff:a6:7c:41:62:89:df:75:eb:af:51:7f:2f:74:bb:ae: d4:db:cd:32:3e:a7:c6:1a:dd:30:1c:35:c2:44:a6:0a:6d:8f: 2c:ff:b0:2b:0b:2d:22:8a:44:b9:b3:bb:a4:21:bd:26:da:5b: 3d:97:48:4b:6e:f4:d9:13:a3:f3:55:8e:80:42:8b:d6:0a:bd: 16:bd:a7:a3:35:bd:9b:d2:36:d4:c8:ad:76:21:1d:d2:a5:47: 1e:0e:df:39:4d:fc:4c:0c:cd:f2:11:de:7c:38:c0:25:36:a7: f2:b3:ee:21:e4:38:bd:c3:67:b7:c3:01:aa:72:d0:a7:21:b6: c2:e7:c3:16:d3:4b:84:ac:78:33:f9:f6:ca:1c:38:60:bf:b4: fd:1a:71:ac:69:54:9b:04:ae:2c:d3:30:74:b8:7e:c6:b1:0d: 86:3d:35:18:4c:6b:cb:b8:4b:73:99:31:a4:e6:4e:df:c0:25: f3:73:c0:bb:b3:b4:ba:3e:01:c1:80:3d:5b:bb:46:e5:68:0a: a7:68:f3:98:c9:b9:9f:d8:6b:42:bf:73:10:11:4d:4f:63:29: fe:e9:34:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPdwKqp44Wc3ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjZWZmYTQtMTUxMy00NTJlLTkxYjgtOGQwYTBiNTFm OTIwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzQ5NDI3ZjYtZjk1Yi00NWE1LTljYmItMGU5NGVmY2YyYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQe55dXlFgXk7smpwktxuCGzHnWyJAAjdEZG 9vPFCVqnAuigPPXL/NCzA/SRNZnOUBtIKROmwQrHCtNshHIcH2WYIeZCLbl1Bwti 3t6MkbTNbo1LU2YwgkQGtM3CfolhpCq93DLuZNmrgnA94uNgIdIgY/wycvYQ8jzw Z1myZ6CNlSpwK4Qr4DAPsksrM+dW9R9/JCeKoWhT4IpHdeUh79f7f96vTxr9/F/T 6CdXzcymMNch1CKtkwsBitygCLSwbhBgdZzvyZxNci7JTbF4Olv2BYtUGIsdb35R 7qjdL+1YWFlP7aw7r6O889x0gypU1p5wOR/DqwxbkaTQmf35fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYTh038UKy1P8AzWrg1I5wZahx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNl ZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBhMGI1MWY5MjAvM2NiZTc4NGItYTRmZC0z ZWM1LWJjY2EtMjAzNzcwNmVhZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWVjZWZmYTQtMTUxMy00NTJlLTkx YjgtOGQwYTBiNTFmOTIwLzFlY2VmZmE0LTE1MTMtNDUyZS05MWI4LThkMGEwYjUx ZjkyMC5jcmwwHwYDVR0jBBgwFoAUzk8tSTH2YFFhfyV/MTIcHpbLfA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNlZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBh MGI1MWY5MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2EfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMNdGhyx8SuJbbOUPirzQaDuGWn4SDP/fa5jMzcI6tWQifDK1Ny/6Z8 QWKJ33Xrr1F/L3S7rtTbzTI+p8Ya3TAcNcJEpgptjyz/sCsLLSKKRLmzu6QhvSba Wz2XSEtu9NkTo/NVjoBCi9YKvRa9p6M1vZvSNtTIrXYhHdKlRx4O3zlN/EwMzfIR 3nw4wCU2p/Kz7iHkOL3DZ7fDAapy0KchtsLnwxbTS4SseDP59socOGC/tP0acaxp VJsErizTMHS4fsaxDYY9NRhMa8u4S3OZMaTmTt/AJfNzwLuztLo+AcGAPVu7RuVo Cqdo85jJuZ/Ya0K/cxARTU9jKf7pNDk= -----END CERTIFICATE-----Generated at Sun Sep 27 02:35:27 2026 by rpki-client