$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa File: b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json) Hash identifier: BhVnKTUP3L2HpM4z9jnRanvmrMMSNkIRRlyBw8vV+LU= Subject key identifier: 4A:C8:A1:36:E8:AE:05:44:5D:95:7C:8A:57:6C:52:F8:E4:C8:C8:C1 Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Certificate serial: 010D0C9F4328584F024223EC702C81718E16F780 Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 142.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:23:ec:70:2c:81:71:8e:16:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=4e777fe3-6598-4f23-af75-55e6018867d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:d5:c9:5c:5d:f8:22:e8:08:a7:e6:05:01: 2c:97:08:c7:b8:09:bc:ac:d8:2a:df:1c:e4:dc:1b: ea:3f:63:27:4d:8c:45:c5:db:96:ca:c2:fa:38:24: f0:ea:79:b1:6d:76:51:f8:65:bb:50:a8:7a:3b:23: 0b:82:c3:88:e4:bf:8e:26:d2:ec:6b:9f:50:42:42: dd:b6:e5:1a:c1:c2:36:6e:69:41:fa:71:f7:a8:b5: 5b:49:28:12:2f:ee:0f:cc:a2:01:2d:1d:a7:25:86: 07:19:26:0f:5c:a3:b4:f9:2c:e7:55:71:b4:a0:98: 62:d7:a7:8d:57:f2:21:7b:0a:9a:34:40:17:f1:cf: e1:42:31:c1:99:b7:3a:87:a2:76:56:39:ae:80:01: 28:0f:4a:24:cd:ad:ef:7b:55:5e:93:b1:4d:bf:ed: 0d:ca:be:05:9b:6f:02:56:79:7d:7b:f2:39:c6:b1: 13:58:73:c5:a4:af:69:5f:22:fd:82:c1:3c:aa:ac: 01:a7:ac:33:76:7b:0f:b8:57:34:26:f1:11:1a:86: bd:07:0c:d5:b7:b8:1d:5c:1f:e0:79:6e:4e:ac:49: 6a:98:a5:e7:f1:a6:48:e0:0f:51:6a:4e:97:35:c2: b4:a3:4a:0e:4c:ab:5c:1b:18:bb:d3:01:ca:6e:f3: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:A1:36:E8:AE:05:44:5D:95:7C:8A:57:6C:52:F8:E4:C8:C8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl X509v3 Authority Key Identifier: keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer sbgp-ipAddrBlock: critical IPv4: 142.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:15:77:24:52:98:fe:58:5c:03:1e:30:b2:7a:3c:4c:49: 37:f5:d6:a8:41:28:3c:51:25:b7:f8:e8:6f:4c:04:e3:49:58: a8:f7:38:bc:1f:62:2f:bc:0e:ea:86:21:2f:48:8a:74:41:83: d1:b0:b5:01:1c:bd:84:47:03:85:9c:20:5e:dd:01:31:50:c0: 0c:49:6d:11:cb:b1:e1:1b:f6:c9:18:e7:c4:bf:69:5b:94:c0: ac:14:33:42:71:e4:5a:d0:37:63:64:7c:7d:d7:24:61:15:9f: 3e:4d:b4:43:91:e2:b9:5c:69:d9:0c:47:28:09:64:2e:24:aa: 26:8d:06:da:25:35:94:46:81:13:49:39:06:27:1f:83:00:b0: bb:a6:69:8f:93:e3:7d:ef:27:d9:67:dc:1e:33:9c:15:4c:b9: 4e:16:f6:65:cc:20:1f:82:90:85:49:cc:b5:46:43:0b:fb:ea: 0c:fb:0f:7c:16:b6:a5:21:94:2a:8a:1d:46:50:55:b7:2c:df: 3a:4e:bb:16:74:01:22:ab:5d:94:a7:b5:d5:90:21:13:c0:0c: e8:67:17:99:bb:ed:cf:32:5a:29:1d:17:05:87:5d:10:cd:82: 69:4f:95:ac:fe:31:ce:38:3d:47:fa:52:9d:2b:f5:af:1c:83: b7:4d:0e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiPscCyBcY4W94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk ZDQ2MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NGU3NzdmZTMtNjU5OC00ZjIzLWFmNzUtNTVlNjAxODg2N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2//VyVxd+CLoCKfmBQEslwjHuAm8rNgq3xzk 3BvqP2MnTYxFxduWysL6OCTw6nmxbXZR+GW7UKh6OyMLgsOI5L+OJtLsa59QQkLd tuUawcI2bmlB+nH3qLVbSSgSL+4PzKIBLR2nJYYHGSYPXKO0+SznVXG0oJhi16eN V/IhewqaNEAX8c/hQjHBmbc6h6J2VjmugAEoD0okza3ve1Vek7FNv+0Nyr4Fm28C Vnl9e/I5xrETWHPFpK9pXyL9gsE8qqwBp6wzdnsPuFc0JvERGoa9BwzVt7gdXB/g eW5OrElqmKXn8aZI4A9Rak6XNcK0o0oOTKtcGxi70wHKbvPH3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErIoTborgVEXZV8ildsUvjkyMjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvYjE2OGE3ZDktZmVlNC0z ZjE3LTk4NmItNmJiN2JiZmM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0 ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy/FXckUpj+WFwDHjCyejxMSTf11qhBKDxRJbf46G9MBONJWKj3OLwf Yi+8DuqGIS9IinRBg9GwtQEcvYRHA4WcIF7dATFQwAxJbRHLseEb9skY58S/aVuU wKwUM0Jx5FrQN2NkfH3XJGEVnz5NtEOR4rlcadkMRygJZC4kqiaNBtolNZRGgRNJ OQYnH4MAsLumaY+T433vJ9ln3B4znBVMuU4W9mXMIB+CkIVJzLVGQwv76gz7D3wW tqUhlCqKHUZQVbcs3zpOuxZ0ASKrXZSntdWQIRPADOhnF5m77c8yWikdFwWHXRDN gmlPlaz+Mc44PUf6Up0r9a8cg7dNDr8= -----END CERTIFICATE-----Generated at Sun Sep 27 10:24:27 2026 by rpki-client