$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b02cf817-d09f-370d-b002-c1dd89b8ef31.roa File: b02cf817-d09f-370d-b002-c1dd89b8ef31.roa (raw, json) Hash identifier: 8hs0GTzHNCvp1Ot/+rQXCHIIcDnaRy2ck/NLupRbLIA= Subject key identifier: BD:8E:5B:C4:63:EF:02:41:06:01:AA:46:20:E8:B2:4D:AA:29:2F:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F268CFE8777221D22DF5CFEE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b02cf817-d09f-370d-b002-c1dd89b8ef31.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 5650 IP address blocks: 87.87.128.0/21 maxlen: 24 87.87.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8c:fe:87:77:22:1d:22:df:5c:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=09afa2a6-70e1-4489-b853-421d66369250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:0d:d9:04:bd:4d:37:20:9a:af:55:90:a4: be:2c:ef:45:bd:a9:a8:b6:4d:2b:c4:f4:be:c8:35: d8:c9:8e:c0:11:c9:f5:6c:04:c1:d8:f2:d1:0a:8b: d3:91:6f:9b:d2:59:0a:3e:6c:ae:f6:71:8a:64:61: 3c:f7:2f:a9:56:ba:ba:b9:80:a0:cf:a7:86:06:23: 79:61:3c:9f:37:75:77:e0:e1:78:c3:96:ab:2c:b6: 20:61:47:2b:37:b8:4e:b3:71:a0:61:45:ba:86:82: ab:ca:f7:9a:55:f1:d8:02:49:4c:8e:d0:9f:3d:25: 39:47:b0:b9:2a:f1:76:6e:69:83:b3:9b:ea:16:2b: c8:8b:b7:d0:f9:e4:50:53:30:f7:af:26:98:fb:e5: c2:df:4c:04:18:8f:c1:f4:bb:89:0e:cd:ec:e7:03: be:3a:e3:6c:86:95:dd:b6:c0:b8:4e:ba:94:4d:5d: 31:53:6f:45:2e:9e:44:30:ec:46:74:7f:21:dc:3e: 38:97:dd:66:78:1c:be:14:4e:36:f8:9c:72:75:0f: 56:ab:e9:f3:62:d4:74:8a:08:e3:d7:bd:ba:83:7f: 83:c3:f7:dd:4d:77:6b:09:7f:57:7b:ef:ea:2f:00: 0e:df:d0:df:c1:e4:e0:e4:6b:31:88:91:9a:7f:cf: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8E:5B:C4:63:EF:02:41:06:01:AA:46:20:E8:B2:4D:AA:29:2F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b02cf817-d09f-370d-b002-c1dd89b8ef31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 87.87.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:db:0f:5d:47:b6:03:33:fa:b1:32:65:f5:7e:3b:69:f6:2e: 02:96:dc:16:72:49:47:5e:79:98:23:90:e3:00:2c:1d:fe:61: 57:0a:26:1d:72:f0:d4:45:d4:f3:ed:85:e8:ec:9f:31:1c:9f: 25:07:e8:e0:13:f5:54:c0:e7:b2:76:10:cf:7c:08:09:c7:b7: 35:1f:1a:82:a2:f5:36:42:1a:ef:06:bd:32:2d:84:64:45:dd: 2d:4f:c6:ea:35:7d:d7:d7:c2:cc:16:22:37:ac:17:df:a2:6d: 6b:f4:79:63:e1:96:ee:67:28:b0:b5:80:1b:e5:a3:f2:87:57: a8:e2:44:de:93:d5:f1:3a:fc:42:1f:6e:37:40:12:4f:44:8b: 93:12:da:0a:11:af:25:d9:f2:3d:45:02:87:b3:8b:78:b3:70: 08:63:e7:55:30:4d:6d:cc:48:83:54:23:bb:6a:c4:82:7b:ff: 51:37:d9:10:fc:4d:b3:5b:ad:4c:9b:75:1d:3c:c7:d7:4f:f0: ff:bf:40:07:0d:c3:31:92:4e:bf:5e:80:e8:75:bf:b9:84:67: 72:6d:86:f7:10:ec:3a:63:61:f5:1a:87:b1:41:46:f7:f0:70: cd:f7:af:73:b0:b5:a7:18:24:05:3a:f8:73:50:64:37:dc:1f: f3:db:0b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjP6HdyIdIt9c/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk MDlhZmEyYTYtNzBlMS00NDg5LWI4NTMtNDIxZDY2MzY5MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz8N2QS9TTcgmq9VkKS+LO9Fvamotk0rxPS+ yDXYyY7AEcn1bATB2PLRCovTkW+b0lkKPmyu9nGKZGE89y+pVrq6uYCgz6eGBiN5 YTyfN3V34OF4w5arLLYgYUcrN7hOs3GgYUW6hoKryveaVfHYAklMjtCfPSU5R7C5 KvF2bmmDs5vqFivIi7fQ+eRQUzD3ryaY++XC30wEGI/B9LuJDs3s5wO+OuNshpXd tsC4TrqUTV0xU29FLp5EMOxGdH8h3D44l91meBy+FE42+JxydQ9Wq+nzYtR0igjj 1726g3+Dw/fdTXdrCX9Xe+/qLwAO39DfweTg5GsxiJGaf88xFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2OW8Rj7wJBBgGqRiDosk2qKS9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjAyY2Y4MTctZDA5Zi0z NzBkLWIwMDItYzFkZDg5YjhlZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEV1eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTbD11HtgMz+rEyZfV+O2n2LgKW3BZySUdeeZgjkOMALB3+YVcKJh1y 8NRF1PPthejsnzEcnyUH6OAT9VTA57J2EM98CAnHtzUfGoKi9TZCGu8GvTIthGRF 3S1Pxuo1fdfXwswWIjesF9+ibWv0eWPhlu5nKLC1gBvlo/KHV6jiRN6T1fE6/EIf bjdAEk9Ei5MS2goRryXZ8j1FAoezi3izcAhj51UwTW3MSINUI7tqxIJ7/1E32RD8 TbNbrUybdR08x9dP8P+/QAcNwzGSTr9egOh1v7mEZ3JthvcQ7DpjYfUah7FBRvfw cM33r3OwtacYJAU6+HNQZDfcH/PbC1U= -----END CERTIFICATE-----Generated at Tue Sep 22 20:48:11 2026 by rpki-client