$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/572b5999-6c3a-336c-94cf-d4c69a279d6c.roa File: 572b5999-6c3a-336c-94cf-d4c69a279d6c.roa (raw, json) Hash identifier: TZfbfQuzLcynfkE76c9ywiB+w39TZusj4WlXn7/qU48= Subject key identifier: 5D:E8:47:47:7C:F3:26:F8:30:F8:3C:04:4D:C6:12:51:33:9E:59:5C Certificate issuer: /CN=709a4541-fc5b-40cd-b9fe-c967d885ead2 Certificate serial: 010D0C9F4328584F92088FC88FEA6574E26D6780 Authority key identifier: 5A:C1:BE:54:3C:91:F3:64:EC:18:D8:AE:A7:9A:6C:43:19:50:30:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/572b5999-6c3a-336c-94cf-d4c69a279d6c.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 402591 IP address blocks: 216.181.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:8f:c8:8f:ea:65:74:e2:6d:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709a4541-fc5b-40cd-b9fe-c967d885ead2 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=cdebeabb-7fec-4310-81dc-2ab8c6a0c002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cf:2e:81:9d:6c:d2:ca:14:0f:1e:09:51:a9: db:3d:e3:fa:56:f7:54:59:e5:1c:70:62:a4:70:1c: a1:62:d0:a6:bb:77:12:40:f6:2a:a4:f8:ec:85:9a: dc:5e:89:00:3b:71:e8:88:4a:59:38:81:11:44:64: 85:ac:24:22:ef:ef:f0:34:95:97:fe:28:6f:a4:54: 6f:5a:cc:f6:08:da:92:37:67:f4:62:24:ea:57:65: a9:3f:22:57:8e:1c:ff:b9:f9:42:58:74:06:42:35: 79:dd:76:1a:9e:ad:99:fe:4b:e1:44:51:3e:15:44: 4c:da:fb:37:b2:5d:97:a2:f5:fc:ac:44:78:ec:00: 3a:3b:7a:2d:0b:bb:21:18:52:8e:24:98:37:3c:95: b0:16:22:92:c1:f1:14:b4:6e:44:f9:95:c6:a2:a6: 66:72:cd:dd:cb:1c:34:4e:dd:d1:b3:f2:1d:3f:a6: ff:cb:8d:29:65:30:cd:a7:e8:e7:ea:87:bf:51:4b: 77:f7:fe:c0:c6:e2:7a:72:cf:35:e8:23:4f:66:5a: bf:6f:a6:f8:5a:2c:e3:d1:bd:c8:34:5b:a8:88:b5: cf:d1:06:05:45:7f:c4:6f:69:e4:82:25:21:bc:e0: a0:3f:68:b6:49:39:d7:71:07:4b:46:4a:18:e3:9e: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:47:47:7C:F3:26:F8:30:F8:3C:04:4D:C6:12:51:33:9E:59:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/572b5999-6c3a-336c-94cf-d4c69a279d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.crl X509v3 Authority Key Identifier: keyid:5A:C1:BE:54:3C:91:F3:64:EC:18:D8:AE:A7:9A:6C:43:19:50:30:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2.cer sbgp-ipAddrBlock: critical IPv4: 216.181.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d7:45:79:ed:d3:e0:09:43:de:68:d5:ca:e7:2c:29:7a:09: aa:88:7a:3d:88:2d:27:36:d8:be:8e:7e:40:37:90:7d:da:b0: 2d:2f:e9:a7:92:dd:e6:3a:50:19:63:64:6d:f5:b2:fb:94:32: 67:7f:4a:06:62:5b:e7:e2:bb:ea:4d:26:8a:08:ae:9b:0d:be: e2:e1:d8:c2:b8:7a:20:3c:74:f5:ac:94:73:b5:3c:ed:ef:e8: 33:74:76:8e:65:c2:5a:ec:a8:1a:f1:54:d0:ab:1c:b9:ad:b1: 22:ac:af:75:4a:2a:74:e4:6b:4d:16:7b:50:a8:73:d8:8c:1f: 71:72:99:d6:6f:fe:9f:5a:bd:45:91:e3:fe:1d:e0:3b:9c:c5: f4:ab:9e:b3:f7:5b:c8:ba:71:32:fb:3b:36:7a:3d:73:92:c4: 10:af:8e:55:97:14:01:08:e8:fb:3c:da:08:85:ee:dd:8b:6e: 15:5e:9d:a8:b9:e8:52:c9:39:69:37:66:1c:97:b3:5c:4e:93: 12:1b:e7:39:21:55:3d:1c:c2:22:8b:41:60:ac:a1:15:a7:04: e4:6f:db:26:a2:a5:4a:f2:11:d1:78:df:be:43:e5:84:58:3e: f4:63:2a:9f:81:b0:b9:b5:d6:86:bc:1c:93:48:a9:71:80:95: 81:dd:17:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCI/Ij+pldOJtZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA5YTQ1NDEtZmM1Yi00MGNkLWI5ZmUtYzk2N2Q4ODVl YWQyMB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2RlYmVhYmItN2ZlYy00MzEwLTgxZGMtMmFiOGM2YTBjMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc8ugZ1s0soUDx4JUanbPeP6VvdUWeUccGKk cByhYtCmu3cSQPYqpPjshZrcXokAO3HoiEpZOIERRGSFrCQi7+/wNJWX/ihvpFRv Wsz2CNqSN2f0YiTqV2WpPyJXjhz/uflCWHQGQjV53XYanq2Z/kvhRFE+FURM2vs3 sl2XovX8rER47AA6O3otC7shGFKOJJg3PJWwFiKSwfEUtG5E+ZXGoqZmcs3dyxw0 Tt3Rs/IdP6b/y40pZTDNp+jn6oe/UUt39/7AxuJ6cs816CNPZlq/b6b4Wizj0b3I NFuoiLXP0QYFRX/Eb2nkgiUhvOCgP2i2STnXcQdLRkoY457qwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3oR0d88yb4MPg8BE3GElEznllcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83MDlh NDU0MS1mYzViLTQwY2QtYjlmZS1jOTY3ZDg4NWVhZDIvNTcyYjU5OTktNmMzYS0z MzZjLTk0Y2YtZDRjNjlhMjc5ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzA5YTQ1NDEtZmM1Yi00MGNkLWI5 ZmUtYzk2N2Q4ODVlYWQyLzcwOWE0NTQxLWZjNWItNDBjZC1iOWZlLWM5NjdkODg1 ZWFkMi5jcmwwHwYDVR0jBBgwFoAUWsG+VDyR82TsGNiup5psQxlQMN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83MDlhNDU0MS1mYzViLTQwY2QtYjlmZS1jOTY3 ZDg4NWVhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrXRXnt0+AJQ95o1crnLCl6CaqIej2ILSc22L6OfkA3kH3asC0v6aeS 3eY6UBljZG31svuUMmd/SgZiW+fiu+pNJooIrpsNvuLh2MK4eiA8dPWslHO1PO3v 6DN0do5lwlrsqBrxVNCrHLmtsSKsr3VKKnTka00We1Coc9iMH3FymdZv/p9avUWR 4/4d4DucxfSrnrP3W8i6cTL7OzZ6PXOSxBCvjlWXFAEI6Ps82giF7t2LbhVenai5 6FLJOWk3ZhyXs1xOkxIb5zkhVT0cwiKLQWCsoRWnBORv2yaipUryEdF4375D5YRY PvRjKp+BsLm11oa8HJNIqXGAlYHdF9M= -----END CERTIFICATE-----Generated at Wed Oct 28 03:04:31 2026 by rpki-client