$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa File: a559552c-2373-383e-9f4d-c6e59db5d6ad.roa (raw, json) Hash identifier: HsCuqFPyV+hUk5kg06ht69jD0d3FjFtnQUcL/MmEEAM= Subject key identifier: 09:4F:9B:BF:E0:77:FF:7A:FB:A3:D6:93:F8:E8:3C:A4:FE:08:B2:20 Certificate issuer: /CN=250ff67c-5904-4655-8b50-832a485ad1b8 Certificate serial: 010D0C9F4328584F4972D8F1964E2289E3EE8D40 Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 216.163.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d8:f1:96:4e:22:89:e3:ee:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f42f3b39-801c-404b-9191-ec4de623c336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:68:b0:72:87:e5:7d:41:58:f5:42:40:16: 38:1a:b9:08:5e:f8:29:e1:ef:a9:79:65:a4:ef:40: f0:87:d6:bb:37:ce:98:d5:93:12:dd:9f:75:e0:49: a7:46:7b:99:65:ee:2a:c6:61:f4:d7:53:86:d5:18: 46:51:c2:3a:f6:59:23:33:90:11:57:5f:60:3b:a3: 7a:fe:48:04:c8:b2:ed:aa:d8:cd:aa:8d:d7:2d:23: 4e:ed:6a:f4:ba:3f:1f:82:b2:f6:5d:4d:de:a0:fb: 0a:d3:49:c6:8a:c4:e8:5e:0d:48:3b:aa:74:96:fb: 6e:7f:20:96:fb:13:eb:f8:25:af:9e:c6:8f:9d:d3: 26:d3:8f:87:5c:8f:77:e6:4c:0e:bb:de:7f:dc:53: bb:8b:84:10:21:d3:a3:8d:ca:ec:8f:05:64:b4:d0: 6c:2a:f2:34:ea:07:e7:84:65:ce:0c:28:36:4c:7f: 13:f5:e1:64:30:51:42:7c:fa:ba:64:cf:df:85:ac: 00:4e:47:8d:2a:7e:f4:e9:9f:f8:17:41:2b:c1:2a: ee:10:90:05:cc:5e:29:4b:a4:d3:d3:c4:36:ab:3b: 46:e7:c2:1d:38:56:05:85:10:e9:5d:6d:ba:60:44: d4:02:7c:af:bc:41:45:7f:09:fa:91:f7:d5:f7:bf: d9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4F:9B:BF:E0:77:FF:7A:FB:A3:D6:93:F8:E8:3C:A4:FE:08:B2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl X509v3 Authority Key Identifier: keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer sbgp-ipAddrBlock: critical IPv4: 216.163.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f5:c4:fc:93:43:58:69:9e:3e:c2:e9:30:41:36:32:bf:c2: a3:64:14:a0:1b:57:a7:4d:2e:dd:a9:b7:fc:67:af:95:f6:28: 05:d2:d3:d7:bd:dc:e7:a2:5e:a2:c1:df:fd:be:65:e4:29:16: 58:64:26:39:73:17:14:61:d2:f1:89:ae:55:4d:1f:83:84:f4: 5e:a8:c9:0b:54:48:59:49:26:20:68:fb:25:28:c2:d6:f5:d6: cf:a9:3d:bd:0d:cf:38:57:0d:92:81:fc:a0:44:bf:9d:99:50: 59:84:c6:14:f7:f8:d5:31:28:9f:3b:44:07:93:57:a6:68:0e: 88:1f:aa:fb:df:b9:d8:d1:07:a7:24:c9:c7:9a:50:2d:89:f5: d1:38:ef:54:52:61:e8:44:cd:4f:e7:93:09:c9:3b:fc:28:bc: 2c:88:8a:5d:6a:a6:f5:62:25:5e:ca:85:0a:11:99:d5:eb:38: 2b:bb:2f:ed:2e:e9:d6:ae:54:33:96:91:25:d3:c6:94:6b:2b: 91:ab:67:52:a6:58:43:98:bf:04:a8:e6:62:e1:e1:da:0d:2c: ec:e2:b4:a3:77:e9:6d:2a:a0:89:df:1c:31:aa:22:ef:89:2e: b2:a5:2c:fb:55:be:d1:53:5e:00:98:c4:f6:59:68:1c:e9:9e: 2e:f9:dc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jctjxlk4iiePujUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFk MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQyZjNiMzktODAxYy00MDRiLTkxOTEtZWM0ZGU2MjNjMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjposHKH5X1BWPVCQBY4GrkIXvgp4e+peWWk 70Dwh9a7N86Y1ZMS3Z914EmnRnuZZe4qxmH011OG1RhGUcI69lkjM5ARV19gO6N6 /kgEyLLtqtjNqo3XLSNO7Wr0uj8fgrL2XU3eoPsK00nGisToXg1IO6p0lvtufyCW +xPr+CWvnsaPndMm04+HXI935kwOu95/3FO7i4QQIdOjjcrsjwVktNBsKvI06gfn hGXODCg2TH8T9eFkMFFCfPq6ZM/fhawATkeNKn706Z/4F0ErwSruEJAFzF4pS6TT 08Q2qztG58IdOFYFhRDpXW26YETUAnyvvEFFfwn6kffV97/ZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlPm7/gd/96+6PWk/joPKT+CLIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBm ZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvYTU1OTU1MmMtMjM3My0z ODNlLTlmNGQtYzZlNTlkYjVkNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUwZmY2N2MtNTkwNC00NjU1LThi NTAtODMyYTQ4NWFkMWI4LzI1MGZmNjdjLTU5MDQtNDY1NS04YjUwLTgzMmE0ODVh ZDFiOC5jcmwwHwYDVR0jBBgwFoAU2WxV3mS4zLuq8SxpN5dSmXVVazkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJh NDg1YWQxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn1xPyTQ1hpnj7C6TBBNjK/wqNkFKAbV6dNLt2pt/xnr5X2KAXS09e9 3OeiXqLB3/2+ZeQpFlhkJjlzFxRh0vGJrlVNH4OE9F6oyQtUSFlJJiBo+yUowtb1 1s+pPb0NzzhXDZKB/KBEv52ZUFmExhT3+NUxKJ87RAeTV6ZoDogfqvvfudjRB6ck yceaUC2J9dE471RSYehEzU/nkwnJO/wovCyIil1qpvViJV7KhQoRmdXrOCu7L+0u 6dauVDOWkSXTxpRrK5GrZ1KmWEOYvwSo5mLh4doNLOzitKN36W0qoInfHDGqIu+J LrKlLPtVvtFTXgCYxPZZaBzpni753Ec= -----END CERTIFICATE-----Generated at Sat Oct 10 22:14:20 2026 by rpki-client