$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa File: ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa (raw, json) Hash identifier: zqzeTpNhVA8b8VfmzY8YfzRu7Hc3xUGjAnJUgOJhs2A= Subject key identifier: 6D:C5:01:B9:18:72:D6:F3:28:67:6B:10:0C:B5:31:38:B5:BD:F2:51 Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584F480D66F767D7AE043679AC40 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16524 IP address blocks: 72.11.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:66:f7:67:d7:ae:04:36:79:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=b0993140-df69-465f-91e8-d39f5d170556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:14:e9:fc:76:a9:c8:19:d9:a7:18:a3:80: e9:49:6a:a6:81:67:fc:15:62:44:7f:83:2b:a0:47: 9d:3f:e5:1e:e5:e8:db:34:63:ec:38:98:1a:85:26: 90:be:78:69:50:bc:22:cb:7c:81:bd:e3:87:0f:d5: e5:14:35:4b:63:cd:cd:75:60:1e:95:f5:9c:dd:ca: 79:34:31:80:19:8c:77:10:98:0e:71:c9:06:ce:05: 84:94:4e:b4:00:ae:76:08:bc:c7:6a:90:a0:b9:45: c6:ce:bc:2a:46:f0:a8:b9:66:95:a3:d3:c9:82:a8: 11:1b:00:15:a3:6c:f2:da:8c:60:6b:e5:f3:39:41: 8c:6c:29:37:ed:3c:6c:f4:40:79:3c:58:4a:e9:cc: 6b:df:b1:48:a0:78:fa:e9:fd:d5:ef:36:51:a9:f9: 67:d3:f2:ff:3a:16:c0:e3:62:bf:10:de:f1:79:9d: ec:a1:a2:94:45:92:d1:d4:bc:a8:48:63:d9:88:d2: 32:9c:19:6f:a0:6e:c3:9e:51:a7:28:17:2b:0d:00: 10:d7:2e:e6:d5:3a:09:c1:60:e6:a3:88:77:14:64: 34:45:cb:7d:9f:4e:72:0c:9f:3b:bd:02:f3:17:9b: 5c:b1:49:e1:c3:71:f3:37:4b:65:5b:ac:c3:f5:15: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C5:01:B9:18:72:D6:F3:28:67:6B:10:0C:B5:31:38:B5:BD:F2:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e5:13:2b:3a:06:3e:2a:fa:a7:42:26:4e:27:d3:63:71:1e: 00:a0:42:04:a9:08:50:f9:4d:31:07:5a:fd:f0:30:ce:7e:88: 19:4e:ae:69:16:02:22:34:6d:bb:9b:f0:ad:74:56:b2:d8:bb: c4:35:4e:95:97:c1:6b:46:a8:da:dc:0a:5e:37:1f:49:4a:a2: c3:6e:af:48:08:7f:a6:a6:34:e5:94:36:92:ed:d8:42:2b:55: a4:06:69:bd:00:cf:44:29:0b:80:e6:20:64:77:26:02:5e:32: 5c:1f:8f:b1:66:4a:e8:36:5f:93:47:58:b2:38:e2:c6:ad:37: b1:56:98:a6:1b:82:fb:04:d7:38:89:28:9a:2c:d2:42:cb:f6: 9c:26:37:db:76:e8:47:85:19:d7:a1:69:cf:9c:e3:01:f0:92: 48:c7:a8:5c:6f:58:b6:ae:6d:51:0d:ad:3e:17:16:26:f8:d2: fb:5b:c4:7f:9b:98:81:08:19:56:81:7e:ce:dd:ca:d1:ba:fd: e7:12:1a:55:26:d8:93:f6:9f:69:2a:1e:18:54:ff:fc:ef:ca: 70:a2:a4:df:3c:9d:51:59:41:8c:30:4e:a7:53:0a:8e:6f:46: ba:15:a8:95:1b:29:33:f7:ac:28:51:64:c3:e4:c0:12:bb:b5: 19:0a:d2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWb3Z9euBDZ5rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YjA5OTMxNDAtZGY2OS00NjVmLTkxZTgtZDM5ZjVkMTcwNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6AU6fx2qcgZ2acYo4DpSWqmgWf8FWJEf4Mr oEedP+Ue5ejbNGPsOJgahSaQvnhpULwiy3yBveOHD9XlFDVLY83NdWAelfWc3cp5 NDGAGYx3EJgOcckGzgWElE60AK52CLzHapCguUXGzrwqRvCouWaVo9PJgqgRGwAV o2zy2oxga+XzOUGMbCk37Txs9EB5PFhK6cxr37FIoHj66f3V7zZRqfln0/L/OhbA 42K/EN7xeZ3soaKURZLR1LyoSGPZiNIynBlvoG7DnlGnKBcrDQAQ1y7m1ToJwWDm o4h3FGQ0Rct9n05yDJ87vQLzF5tcsUnhw3HzN0tlW6zD9RWA2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3FAbkYctbzKGdrEAy1MTi1vfJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvY2UyNTRkYTQtNDkwZC0z ZWUwLThmNWEtMjYyYmYyYWM2YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHlEys6Bj4q+qdCJk4n02NxHgCgQgSpCFD5TTEHWv3wMM5+iBlOrmkW AiI0bbub8K10VrLYu8Q1TpWXwWtGqNrcCl43H0lKosNur0gIf6amNOWUNpLt2EIr VaQGab0Az0QpC4DmIGR3JgJeMlwfj7FmSug2X5NHWLI44satN7FWmKYbgvsE1ziJ KJos0kLL9pwmN9t26EeFGdehac+c4wHwkkjHqFxvWLaubVENrT4XFib40vtbxH+b mIEIGVaBfs7dytG6/ecSGlUm2JP2n2kqHhhU//zvynCipN88nVFZQYwwTqdTCo5v RroVqJUbKTP3rChRZMPkwBK7tRkK0oQ= -----END CERTIFICATE-----Generated at Mon Sep 28 21:20:29 2026 by rpki-client