$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa File: 717ad060-be4e-3d4b-8575-7481eb29f59e.roa (raw, json) Hash identifier: ME7B57u6qFv8uCOB1aADlEvMp2l8Cg2L5hrzLMnyf/c= Subject key identifier: 14:3B:F5:36:B7:58:C6:48:11:65:59:50:97:2B:3A:F7:7A:F1:D1:BE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F1B6247FC5BC9CEDD26F9B180 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 13576 IP address blocks: 216.249.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:47:fc:5b:c9:ce:dd:26:f9:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=38aa618a-efc2-462f-a42d-02e68714884c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bc:b8:2c:26:ea:48:05:f2:d9:04:78:b4:7e: 0b:b1:8f:ce:89:be:7e:03:49:c5:8a:1c:64:d4:b9: 1e:a8:7a:85:ec:f8:35:6c:54:bd:3b:3c:83:81:6e: ca:8a:e2:4a:d0:a6:77:e2:34:55:90:ed:f8:f7:6b: ff:c3:08:ad:8b:91:a7:e9:ee:fb:bc:ac:83:2a:c7: c1:0d:72:cd:8d:30:56:28:60:66:1d:0a:f0:e0:55: 25:01:7b:0f:43:48:ec:f9:99:bf:e0:e0:20:1c:a6: 21:7e:49:fa:73:e5:92:15:46:97:63:cf:37:fc:39: 3b:4a:38:78:72:4b:23:05:a8:02:8f:67:de:31:ce: f8:03:a3:5e:b4:d6:e0:8c:b5:fe:6f:e3:43:f4:59: 38:14:ba:66:2a:50:00:d8:93:ce:df:26:6c:42:3a: fa:62:38:4f:8b:ad:1b:6c:85:ef:a6:8c:51:04:53: 54:89:f3:e2:83:b9:ba:6f:b4:61:a9:da:3d:11:67: ae:d0:4f:cf:a4:5c:2d:fe:9a:ff:63:cb:8d:96:9a: f7:57:c8:d8:72:7b:4b:84:44:61:45:19:14:e6:d0: 8f:dd:9e:09:29:d9:e1:75:e1:1a:18:9d:09:2e:c9: d8:17:f2:37:51:1a:3c:e9:7d:33:87:46:f3:74:b0: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3B:F5:36:B7:58:C6:48:11:65:59:50:97:2B:3A:F7:7A:F1:D1:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d6:c9:44:62:d0:f3:23:ca:63:c2:5e:2c:e6:f6:5b:ff:47: 5d:d7:41:7a:c0:8b:81:33:76:38:a6:af:19:5a:e0:74:4a:db: 35:eb:21:38:ca:6e:ff:11:57:1e:b7:cc:a6:98:73:a1:e7:8c: 13:be:48:1a:bc:f9:c1:f7:ae:f6:c0:b6:d3:f5:53:de:41:b9: 63:59:de:16:9c:a7:aa:40:fb:c4:5b:45:cc:52:62:a8:73:bb: cd:51:e3:d8:81:1d:fb:af:50:84:54:74:35:1a:7f:0b:2b:92: 81:79:0e:89:8d:2d:83:ff:51:47:49:3c:c1:49:d7:72:1c:be: 4a:d9:86:82:69:9c:5a:97:b7:a5:ca:ba:ed:3d:9a:42:4e:98: 8e:29:4b:57:bc:94:58:78:42:89:b8:8c:c1:71:9a:3c:80:59: 1f:5c:79:6a:2a:1f:91:f8:4a:c0:65:48:11:3f:e8:a0:6c:70: c4:3b:92:dc:ee:27:b6:0e:10:42:a5:51:c6:62:14:c2:69:98: b4:42:57:0e:93:29:a9:83:c2:48:a6:99:de:39:d4:ae:ad:08: 1d:2a:71:09:78:00:da:3b:e1:bf:0f:68:29:de:bd:36:c6:6d: a5:b9:3f:43:70:9d:1e:c3:b2:05:e3:d5:0c:7c:b6:30:5d:f2: cf:97:77:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkf8W8nO3Sb5sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzhhYTYxOGEtZWZjMi00NjJmLWE0MmQtMDJlNjg3MTQ4ODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLy4LCbqSAXy2QR4tH4LsY/Oib5+A0nFihxk 1LkeqHqF7Pg1bFS9OzyDgW7KiuJK0KZ34jRVkO3492v/wwiti5Gn6e77vKyDKsfB DXLNjTBWKGBmHQrw4FUlAXsPQ0js+Zm/4OAgHKYhfkn6c+WSFUaXY883/Dk7Sjh4 cksjBagCj2feMc74A6NetNbgjLX+b+ND9Fk4FLpmKlAA2JPO3yZsQjr6YjhPi60b bIXvpoxRBFNUifPig7m6b7Rhqdo9EWeu0E/PpFwt/pr/Y8uNlpr3V8jYcntLhERh RRkU5tCP3Z4JKdnhdeEaGJ0JLsnYF/I3URo86X0zh0bzdLBU6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ79Ta3WMZIEWVZUJcrOvd68dG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzE3YWQwNjAtYmU0ZS0z ZDRiLTg1NzUtNzQ4MWViMjlmNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvWyURi0PMjymPCXizm9lv/R13XQXrAi4Ezdjimrxla4HRK2zXrITjK bv8RVx63zKaYc6HnjBO+SBq8+cH3rvbAttP1U95BuWNZ3hacp6pA+8RbRcxSYqhz u81R49iBHfuvUIRUdDUafwsrkoF5DomNLYP/UUdJPMFJ13IcvkrZhoJpnFqXt6XK uu09mkJOmI4pS1e8lFh4Qom4jMFxmjyAWR9ceWoqH5H4SsBlSBE/6KBscMQ7ktzu J7YOEEKlUcZiFMJpmLRCVw6TKamDwkimmd451K6tCB0qcQl4ANo74b8PaCnevTbG baW5P0NwnR7DsgXj1Qx8tjBd8s+Xd8U= -----END CERTIFICATE-----Generated at Thu Sep 24 07:22:07 2026 by rpki-client