$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa File: 5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa (raw, json) Hash identifier: Wj3foUgzoacvLM1SZ9cm9baHc0XS4JpYUwooxNL843A= Subject key identifier: 3F:33:67:03:56:2A:9A:7D:E8:BA:30:EA:B4:5F:65:F5:30:0D:16:4B Certificate issuer: /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Certificate serial: 010D0C9F4328584F78E8340B34ABCCDA00EAB400 Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 55189 IP address blocks: 216.38.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:34:0b:34:ab:cc:da:00:ea:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=f5e390c7-c5de-429f-ac26-9ffa43c2ff91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f0:64:3e:d5:e9:a9:b2:1a:2f:3d:fa:83:f6: ba:3b:8c:ef:53:d0:43:10:22:8e:ab:41:a4:58:bc: 85:1c:ca:ee:da:94:99:12:70:5a:9a:19:7c:ac:56: 48:9a:ca:45:98:6c:1d:9a:a3:21:8f:66:b3:18:5f: 1b:8c:41:c8:a7:31:97:1c:a3:bd:25:c7:e0:e3:07: c2:ad:92:06:7c:5e:87:44:b2:3e:44:a6:09:98:e9: 35:a0:df:f8:10:f2:54:48:76:9f:4c:b1:f2:0a:ee: 2f:c1:59:f0:ee:e1:72:bd:bc:73:c9:69:95:0e:1a: 93:4a:2e:9f:54:14:80:89:51:b2:54:1b:a1:cc:70: 0f:e1:29:91:9a:9e:52:fe:83:02:fc:8b:e9:af:e6: bc:de:8e:98:53:6b:fb:f8:d0:b2:c9:24:6f:0e:68: 21:e1:fa:cb:16:73:17:8e:6c:5d:f0:59:d7:de:a9: 0c:d9:5e:f0:e0:70:b3:68:25:69:c3:b5:0b:cb:c7: 57:0a:92:4a:22:de:c7:a5:80:88:c0:46:19:49:b8: f2:94:83:70:3b:27:9d:29:a6:c4:13:1b:ab:55:61: dd:84:0f:f6:3b:ee:58:5e:c8:85:d7:f4:6a:6e:9b: e3:e7:c7:e0:1d:b0:05:80:a9:6b:cf:56:91:96:76: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:33:67:03:56:2A:9A:7D:E8:BA:30:EA:B4:5F:65:F5:30:0D:16:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl X509v3 Authority Key Identifier: keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer sbgp-ipAddrBlock: critical IPv4: 216.38.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6b:a0:34:7e:f2:da:79:0f:fb:14:87:c4:ee:7d:06:05:76: 0d:74:10:7c:17:8d:5a:e9:64:70:95:32:95:72:16:8c:b5:be: 1e:77:8e:cb:9c:46:c8:69:0d:15:77:9e:a7:97:f9:25:90:be: 57:20:bc:1d:7c:37:a2:aa:93:f0:f2:6d:2d:42:fb:6b:cc:6a: f2:5d:6e:75:5a:9a:ac:6a:a6:34:e2:f2:0b:8a:03:15:50:de: 7b:5d:12:f9:07:ad:5b:89:92:06:a2:06:8e:e7:46:22:9c:43: d7:94:09:3c:14:b3:c5:0d:6c:9d:19:26:05:1b:e0:db:20:cc: 54:ae:e8:81:25:f0:ee:26:f4:e3:eb:97:88:74:92:70:fb:52: 80:35:44:5c:ad:9a:01:3a:21:e0:dc:73:b0:07:e2:c8:b8:d5: 05:4a:3a:49:e2:9d:99:01:2e:68:6f:43:d6:9f:95:8b:b8:b2: 0d:23:bb:63:c4:e3:bb:de:3e:e3:2b:33:0b:6f:03:42:d6:78: 86:74:f9:0c:cf:a3:54:ec:4f:3e:f9:bc:97:b9:76:3f:e9:37: 02:51:35:69:5b:5b:40:1f:d4:bd:23:ae:2b:54:30:9d:6c:43: 85:c2:66:a9:00:66:3b:20:b9:c5:2f:aa:ce:1e:d6:12:29:93: 30:e8:e7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DQLNKvM2gDqtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi MDQ5MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk ZjVlMzkwYzctYzVkZS00MjlmLWFjMjYtOWZmYTQzYzJmZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/BkPtXpqbIaLz36g/a6O4zvU9BDECKOq0Gk WLyFHMru2pSZEnBamhl8rFZImspFmGwdmqMhj2azGF8bjEHIpzGXHKO9Jcfg4wfC rZIGfF6HRLI+RKYJmOk1oN/4EPJUSHafTLHyCu4vwVnw7uFyvbxzyWmVDhqTSi6f VBSAiVGyVBuhzHAP4SmRmp5S/oMC/Ivpr+a83o6YU2v7+NCyySRvDmgh4frLFnMX jmxd8FnX3qkM2V7w4HCzaCVpw7ULy8dXCpJKIt7HpYCIwEYZSbjylINwOyedKabE ExurVWHdhA/2O+5YXsiF1/Rqbpvj58fgHbAFgKlrz1aRlnbrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8zZwNWKpp96Low6rRfZfUwDRZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvNWI0YjJlYjMtZGUzZC0z MTBjLTk0YzgtMWM5MzJkZjNjNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZroDR+8tp5D/sUh8TufQYFdg10EHwXjVrpZHCVMpVyFoy1vh53jsuc RshpDRV3nqeX+SWQvlcgvB18N6Kqk/DybS1C+2vMavJdbnVamqxqpjTi8guKAxVQ 3ntdEvkHrVuJkgaiBo7nRiKcQ9eUCTwUs8UNbJ0ZJgUb4NsgzFSu6IEl8O4m9OPr l4h0knD7UoA1RFytmgE6IeDcc7AH4si41QVKOkninZkBLmhvQ9aflYu4sg0ju2PE 47vePuMrMwtvA0LWeIZ0+QzPo1TsTz75vJe5dj/pNwJRNWlbW0Af1L0jritUMJ1s Q4XCZqkAZjsgucUvqs4e1hIpkzDo52g= -----END CERTIFICATE-----Generated at Sun Nov 1 17:13:05 2026 by rpki-client