$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa File: a75e9005-93f7-3801-9334-a4a5f7627a9b.roa (raw, json) Hash identifier: oNz/0B977+RhzzHxF2DlciCiuMvsGtUSqGRbFBFOykQ= Subject key identifier: E3:65:2B:4A:83:FD:5E:0D:A5:5B:43:5B:9B:13:51:5B:E9:E3:5C:7D Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584F3CE2B98411BCA957DECC0A80 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 30669 IP address blocks: 216.220.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b9:84:11:bc:a9:57:de:cc:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=40417018-985f-4015-be19-c4234ca1f14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:40:50:37:57:09:74:80:a4:7e:81:b3:77:37: 7f:77:db:92:75:27:89:ae:ba:99:45:99:51:2b:73: 5c:a3:57:b2:fd:bf:72:30:e8:90:b7:2f:30:0b:b1: 28:30:f5:e7:f0:3d:ca:7b:4d:98:4f:5f:8e:16:e9: 26:c4:7d:be:16:d9:18:ed:2f:fa:f8:34:c5:4e:9a: ae:4a:d9:3d:9f:16:b0:3f:a2:fa:89:bb:00:a6:73: 29:6d:ad:7a:a2:29:65:ba:89:96:57:b1:11:b5:81: 08:36:46:5d:69:4c:44:35:e3:21:17:1e:0c:01:1e: e2:8b:a0:00:ac:c5:c5:2d:b5:b3:9f:31:c8:d1:25: 9d:42:55:d2:ab:ea:a0:80:7e:f4:9b:3f:cb:9c:c2: b4:07:36:32:cb:e7:8a:b2:de:c4:10:68:a3:1f:c4: 42:53:06:cc:39:b0:2e:22:93:05:5d:e3:0e:9a:f9: 55:04:d9:12:28:b0:d7:e4:94:5f:33:05:f9:8e:82: e5:bb:85:d1:f3:f6:3a:64:32:05:33:29:2d:90:21: 57:db:40:df:b6:c6:c5:a7:4d:0e:9a:ad:ab:8a:23: bd:d7:01:31:cc:69:9f:fe:c3:41:e9:e9:f8:d9:09: 86:ad:0b:a6:3b:30:9d:5f:f5:93:34:47:76:20:26: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:2B:4A:83:FD:5E:0D:A5:5B:43:5B:9B:13:51:5B:E9:E3:5C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 216.220.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fc:bc:da:21:4d:56:3c:5e:f2:65:0e:97:b4:70:f5:fb:29: d4:3e:78:de:6d:4c:e9:bd:96:3d:26:ac:38:04:af:7d:7d:ad: b1:2d:b3:01:c9:54:be:ba:35:ce:11:8a:de:bc:31:ea:bc:73: 4d:24:b0:92:ae:52:01:f3:ed:3b:1c:b2:1c:4d:a3:d3:66:0e: ae:68:e0:81:d9:b1:af:dc:91:9b:02:dc:26:7d:49:5d:15:78: 23:ba:3d:ae:da:11:f3:7b:d8:31:d2:63:ec:66:c9:5b:9f:4d: 98:ef:29:e3:d4:a3:12:f8:a6:6c:0d:e3:14:46:9d:ad:7a:2b: 1d:5f:bd:87:e0:44:f0:06:cb:77:81:bf:68:25:2d:3d:73:88: f7:43:55:e3:23:be:31:36:94:f7:47:ee:24:93:cb:69:ea:ce: 9d:38:7b:09:70:95:cb:9d:e1:6d:10:b1:49:e1:3a:34:75:e3: 7c:4c:a5:82:a1:19:9a:4b:1c:c2:bd:90:13:5f:66:91:10:03: 41:2d:64:9f:00:25:66:5e:70:19:0f:4f:81:a6:d2:fc:56:22: 0c:ec:89:ce:18:c8:76:7c:6b:da:7d:b4:5d:21:d3:e9:fe:34: b5:9e:7a:76:ac:56:20:51:be:8c:f6:e1:90:f8:23:6e:a1:ad: 9f:4d:d1:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rmEEbypV97MCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NDA0MTcwMTgtOTg1Zi00MDE1LWJlMTktYzQyMzRjYTFmMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0BQN1cJdICkfoGzdzd/d9uSdSeJrrqZRZlR K3Nco1ey/b9yMOiQty8wC7EoMPXn8D3Ke02YT1+OFukmxH2+FtkY7S/6+DTFTpqu Stk9nxawP6L6ibsApnMpba16oilluomWV7ERtYEINkZdaUxENeMhFx4MAR7ii6AA rMXFLbWznzHI0SWdQlXSq+qggH70mz/LnMK0BzYyy+eKst7EEGijH8RCUwbMObAu IpMFXeMOmvlVBNkSKLDX5JRfMwX5joLlu4XR8/Y6ZDIFMyktkCFX20DftsbFp00O mq2riiO91wExzGmf/sNB6en42QmGrQumOzCdX/WTNEd2ICbWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONlK0qD/V4NpVtDW5sTUVvp41x9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvYTc1ZTkwMDUtOTNmNy0z ODAxLTkzMzQtYTRhNWY3NjI3YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz8vNohTVY8XvJlDpe0cPX7KdQ+eN5tTOm9lj0mrDgEr319rbEtswHJ VL66Nc4Rit68Meq8c00ksJKuUgHz7TscshxNo9NmDq5o4IHZsa/ckZsC3CZ9SV0V eCO6Pa7aEfN72DHSY+xmyVufTZjvKePUoxL4pmwN4xRGna16Kx1fvYfgRPAGy3eB v2glLT1ziPdDVeMjvjE2lPdH7iSTy2nqzp04ewlwlcud4W0QsUnhOjR143xMpYKh GZpLHMK9kBNfZpEQA0EtZJ8AJWZecBkPT4Gm0vxWIgzsic4YyHZ8a9p9tF0h0+n+ NLWeenasViBRvoz24ZD4I26hrZ9N0bQ= -----END CERTIFICATE-----Generated at Tue Sep 22 19:09:52 2026 by rpki-client