$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/6d9dcc85-09a8-3533-9fcd-a798920789a2.roa File: 6d9dcc85-09a8-3533-9fcd-a798920789a2.roa (raw, json) Hash identifier: gz2ERBwclSAvKWLe5KaQd1A2qLfYI6woK4yAlxr8KlI= Subject key identifier: 71:C1:31:37:9C:51:9C:8B:BC:60:C1:21:79:D2:81:1E:DE:F5:D9:83 Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Certificate serial: 010D0C9F4328584F49764AAF0BFA7C023D0F10A0 Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/6d9dcc85-09a8-3533-9fcd-a798920789a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 198.54.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:4a:af:0b:fa:7c:02:3d:0f:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4086fc78-6241-4e23-b65a-3e680fb6536f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:8d:e7:c1:27:8e:f8:15:20:54:7d:ad:d6: ab:b4:6b:88:04:c9:4d:bd:4d:e7:23:90:96:63:ba: 47:8c:86:98:b4:54:a8:87:28:31:ae:d5:21:0e:09: e3:56:44:83:a2:e6:b8:ac:7a:39:77:41:c5:c7:ed: d2:17:4f:5a:e6:b1:cc:1a:c2:42:4a:7c:52:12:78: 36:23:c4:8d:2b:5e:90:49:1e:53:7a:e4:f3:0c:37: 0f:37:df:1e:1c:5b:01:97:37:2b:7a:99:71:fa:f8: 88:d9:3c:de:5b:ae:35:9b:58:7e:36:20:66:0a:df: 94:8b:0d:a6:fa:59:0d:99:00:03:5c:6f:6b:48:f9: af:a7:f1:ef:fa:94:4d:10:d6:98:7c:a7:2a:78:40: 7a:2b:3c:ae:02:f8:5b:4c:3f:ba:15:8b:e1:d2:a5: 6c:2f:6c:74:1f:a8:c9:d4:4b:00:ba:69:1c:00:ad: c5:81:db:d5:a4:c9:4b:68:04:61:d4:0f:0b:ab:22: f7:ef:1d:40:a9:df:d8:44:cb:e1:2a:73:03:7e:4e: 63:4f:b7:de:1f:e2:9f:f4:65:7c:06:45:5f:69:31: c8:78:8b:d3:3f:3d:b9:af:ec:28:06:ad:56:c1:76: 94:fe:a7:90:ac:18:9e:63:4e:76:0c:2e:87:ee:43: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C1:31:37:9C:51:9C:8B:BC:60:C1:21:79:D2:81:1E:DE:F5:D9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/6d9dcc85-09a8-3533-9fcd-a798920789a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl X509v3 Authority Key Identifier: keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer sbgp-ipAddrBlock: critical IPv4: 198.54.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:32:35:e7:5d:89:cb:0c:99:86:33:15:2c:39:50:33:31:de: 42:30:2d:0c:ad:09:9c:92:e6:fa:54:76:e9:84:db:f9:13:07: 85:b0:a8:82:5e:3d:47:37:60:c2:db:91:9c:39:fa:1c:bc:0f: f7:48:41:53:97:e7:6f:c9:54:1e:cc:6d:dc:a0:a0:6e:b2:61: c6:ae:d0:2b:a8:63:f9:0b:0c:ba:69:98:d6:c5:39:58:69:1e: c6:00:4a:9e:68:85:6a:94:5c:fc:ad:e9:2e:b1:2d:d3:75:da: b0:7b:9e:4b:d3:f6:6e:0b:ed:63:74:a7:9e:cd:95:34:76:09: 8c:01:75:39:3d:ea:bc:ab:63:9f:d1:c8:2d:bf:df:14:e3:7b: 49:f1:2c:ed:e0:8f:fc:73:a2:e4:e4:f1:32:c8:d5:b4:39:52: 58:5c:ba:48:0a:b8:93:eb:b9:4f:5c:b5:69:ef:af:8a:2f:ee: 79:67:17:72:4f:4e:de:4c:a3:b7:43:3c:6f:fe:ab:5d:68:25: 8e:c3:08:12:49:61:e8:67:56:ac:bf:e2:5d:a3:55:7c:2d:90: 24:07:48:e6:b9:0d:ac:f9:a4:42:99:ef:37:00:90:41:e5:7c: 58:88:0f:72:c3:cc:d5:cf:ce:20:93:f5:68:58:13:fa:ec:b0: 50:ef:78:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkqvC/p8Aj0PEKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk ZGI1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDA4NmZjNzgtNjI0MS00ZTIzLWI2NWEtM2U2ODBmYjY1MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9CN58EnjvgVIFR9rdartGuIBMlNvU3nI5CW Y7pHjIaYtFSohygxrtUhDgnjVkSDoua4rHo5d0HFx+3SF09a5rHMGsJCSnxSEng2 I8SNK16QSR5TeuTzDDcPN98eHFsBlzcreplx+viI2TzeW641m1h+NiBmCt+Uiw2m +lkNmQADXG9rSPmvp/Hv+pRNENaYfKcqeEB6KzyuAvhbTD+6FYvh0qVsL2x0H6jJ 1EsAumkcAK3FgdvVpMlLaARh1A8LqyL37x1Aqd/YRMvhKnMDfk5jT7feH+Kf9GV8 BkVfaTHIeIvTPz25r+woBq1WwXaU/qeQrBieY052DC6H7kNefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHBMTecUZyLvGDBIXnSgR7e9dmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvNmQ5ZGNjODUtMDlhOC0z NTMzLTlmY2QtYTc5ODkyMDc4OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1 YWRkZWRkYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQyNeddicsMmYYzFSw5UDMx3kIwLQytCZyS5vpUdumE2/kTB4WwqIJe PUc3YMLbkZw5+hy8D/dIQVOX52/JVB7MbdygoG6yYcau0CuoY/kLDLppmNbFOVhp HsYASp5ohWqUXPyt6S6xLdN12rB7nkvT9m4L7WN0p57NlTR2CYwBdTk96ryrY5/R yC2/3xTje0nxLO3gj/xzouTk8TLI1bQ5UlhcukgKuJPruU9ctWnvr4ov7nlnF3JP Tt5Mo7dDPG/+q11oJY7DCBJJYehnVqy/4l2jVXwtkCQHSOa5Daz5pEKZ7zcAkEHl fFiID3LDzNXPziCT9WhYE/rssFDveIY= -----END CERTIFICATE-----Generated at Fri Sep 25 16:58:34 2026 by rpki-client