$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa File: 2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa (raw, json) Hash identifier: h2IDpkhXKOVubAUAd0R9iglIMlQI6zrgQWpkq5x5Q3U= Subject key identifier: 2D:39:9C:4C:5B:3F:2B:72:C4:FD:3A:FA:A1:67:B8:4F:23:B9:97:B5 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F49741A6F6651D1FB6658C000 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1a:6f:66:51:d1:fb:66:58:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=47f2ca8e-38ba-4c19-b223-4e6f5a1d7c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:16:51:f4:96:b9:61:95:49:43:f2:c3:b5: ce:95:a6:a2:e4:68:c9:8b:f5:ee:11:bc:41:7f:13: 50:d9:f2:13:d8:9e:06:22:1a:24:ad:2d:72:15:05: 3e:8a:86:d8:c6:74:14:b6:0b:da:e3:ff:c2:7e:cb: d6:3c:e9:b9:16:b8:bc:8c:e6:d8:c5:31:2d:95:fa: d3:10:91:fb:ce:f2:86:04:13:00:d5:a8:0b:63:37: 5a:88:dd:74:ba:f0:b0:07:af:20:94:12:21:e9:42: fe:aa:ca:7d:38:44:dd:cd:43:29:bf:32:eb:88:76: 27:12:ee:89:a4:fe:c5:0d:fe:5c:48:56:ee:24:92: 8a:2a:83:c6:0e:46:e9:4e:7e:a1:76:f4:67:0b:06: 3d:ff:0d:a7:7a:c6:b9:c0:09:6f:59:fa:47:01:da: 04:6f:ad:01:0f:3b:e9:70:c7:15:33:06:54:ff:f3: 83:23:d4:c5:97:d5:f9:57:01:56:cc:df:63:e1:f6: a8:c2:fe:f9:98:5e:6b:3c:bc:de:c4:f3:8a:6a:24: 2e:fd:a8:6a:26:0f:44:4a:9c:8f:ea:4e:2c:02:5b: b6:b8:af:c7:c8:49:bc:58:97:22:63:64:20:07:e6: 99:4e:47:c1:fc:37:a7:e0:83:b1:22:39:47:21:29: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:9C:4C:5B:3F:2B:72:C4:FD:3A:FA:A1:67:B8:4F:23:B9:97:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0b:92:b8:cd:5c:fd:2e:71:cb:1e:e8:71:e0:15:9e:5e:e4: f6:79:8b:60:c4:cc:d9:6c:3a:5f:9e:8f:5f:36:04:01:45:46: db:f5:4b:15:1a:ea:03:f1:74:05:ca:4b:f2:9f:9b:29:38:04: ea:79:ad:dc:a9:c2:9d:ce:f8:b3:49:85:c1:17:ac:55:9a:16: 21:a5:04:93:73:be:25:0c:1d:8b:24:8b:ba:e4:d4:f1:28:60: ca:5e:f1:48:4e:f2:54:25:d5:5e:65:27:9e:5f:8e:00:3c:12: 08:45:9f:6e:ca:b0:56:11:1e:20:03:33:f4:fb:a5:03:71:00: d2:f0:4a:e3:36:b5:33:b4:3b:9f:f4:e8:12:3c:90:ca:b9:b4: 8c:2a:5f:e3:c3:7c:3f:22:57:ea:8d:85:d9:ea:d8:44:02:b6: 25:a1:cc:8d:df:6b:ec:ea:55:b7:2d:7b:88:18:ac:be:56:c0: 23:21:aa:28:a9:73:6f:72:d4:93:7c:66:34:23:2c:4d:ef:6f: af:09:5d:64:8e:6b:0c:c1:03:15:f6:ed:16:24:00:f6:35:34: 59:fd:58:6f:5e:1a:55:1a:98:fe:d8:d0:7e:6e:67:67:87:80: e2:7b:a3:52:83:21:26:91:3f:13:69:7f:ef:f3:67:42:93:e8: d4:a8:c7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBpvZlHR+2ZYwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDdmMmNhOGUtMzhiYS00YzE5LWIyMjMtNGU2ZjVhMWQ3YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/QWUfSWuWGVSUPyw7XOlaai5GjJi/XuEbxB fxNQ2fIT2J4GIhokrS1yFQU+iobYxnQUtgva4//CfsvWPOm5Fri8jObYxTEtlfrT EJH7zvKGBBMA1agLYzdaiN10uvCwB68glBIh6UL+qsp9OETdzUMpvzLriHYnEu6J pP7FDf5cSFbuJJKKKoPGDkbpTn6hdvRnCwY9/w2nesa5wAlvWfpHAdoEb60BDzvp cMcVMwZU//ODI9TFl9X5VwFWzN9j4faowv75mF5rPLzexPOKaiQu/ahqJg9ESpyP 6k4sAlu2uK/HyEm8WJciY2QgB+aZTkfB/Den4IOxIjlHISl0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC05nExbPytyxP06+qFnuE8juZe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMmQwYmU4YTMtOTY0NS0z ZTM2LWEzNjMtOTljNWJjM2ExMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAELkrjNXP0uccse6HHgFZ5e5PZ5i2DEzNlsOl+ej182BAFFRtv1SxUa 6gPxdAXKS/Kfmyk4BOp5rdypwp3O+LNJhcEXrFWaFiGlBJNzviUMHYski7rk1PEo YMpe8UhO8lQl1V5lJ55fjgA8EghFn27KsFYRHiADM/T7pQNxANLwSuM2tTO0O5/0 6BI8kMq5tIwqX+PDfD8iV+qNhdnq2EQCtiWhzI3fa+zqVbcte4gYrL5WwCMhqiip c29y1JN8ZjQjLE3vb68JXWSOawzBAxX27RYkAPY1NFn9WG9eGlUamP7Y0H5uZ2eH gOJ7o1KDISaRPxNpf+/zZ0KT6NSoxyg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:32:08 2026 by rpki-client