$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa File: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (raw, json) Hash identifier: 090aHXr8iSIxCzDcp5gg9MFEcpoqShuI03jTGXsYdAA= Subject key identifier: 9E:73:2C:08:31:CC:C7:9B:4A:29:03:A5:83:27:73:9E:AE:3C:E9:43 Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Certificate serial: 010D0C9F4328584F06723175A73E3AFFD1F7FC80 Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 16652 IP address blocks: 198.252.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:31:75:a7:3e:3a:ff:d1:f7:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=c177b85b-dc5a-4427-a862-95b0c789f4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:f2:c5:bc:3c:d4:12:77:d9:b6:33:0a:2e: 9b:63:45:fa:06:e5:8f:da:a4:3d:f3:9c:a3:37:b1: a1:ca:7b:4c:31:53:fd:a1:b0:7f:bc:f1:55:86:72: 2b:a3:1f:13:1a:22:19:cd:f0:82:fb:9f:18:34:56: 05:b9:94:a5:44:1d:32:3b:45:44:1d:99:a6:99:47: 48:8d:c4:26:10:a5:e0:33:7a:ad:33:05:41:0b:ec: e8:23:21:e7:e3:24:89:e8:01:bc:4d:69:04:03:05: 34:e3:87:e0:de:bb:49:07:97:84:fa:ba:b8:4f:73: c7:5d:db:38:d0:1a:ad:57:2b:41:dd:e4:3a:04:c9: 64:2b:27:35:06:a4:c0:78:e9:32:35:22:ec:15:d7: 26:68:4d:96:25:2b:18:d8:7f:12:ed:b2:16:ac:79: 5f:35:96:26:a6:33:2c:f1:2d:34:12:9e:2a:ae:88: 2a:22:bb:a2:e2:17:47:14:cc:cf:50:9b:51:e8:88: fd:8d:d5:d6:11:a3:47:29:6d:a2:23:a3:e1:f1:e7: e5:4c:fe:7a:e6:bd:dd:d4:88:c3:b8:2f:3c:b5:0b: a0:30:6e:b2:75:ce:73:5b:f4:47:7a:e3:c4:38:91: 48:8a:8b:d1:e8:ae:cd:c4:f6:1d:65:6e:90:cf:d8: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:73:2C:08:31:CC:C7:9B:4A:29:03:A5:83:27:73:9E:AE:3C:E9:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl X509v3 Authority Key Identifier: keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer sbgp-ipAddrBlock: critical IPv4: 198.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a9:01:ad:eb:4f:f0:c2:00:4e:af:10:e5:8a:52:53:64:b7: fa:7d:16:01:2c:0d:3c:93:cf:e9:4d:d3:16:90:83:ea:22:e4: c1:20:ba:d4:af:b0:5f:6b:96:78:c1:c6:d3:e1:28:40:a4:56: a3:18:43:cf:73:9e:52:a6:3d:83:0e:63:c0:89:ed:31:14:ea: cd:a9:ac:f2:a7:4f:99:f9:42:53:eb:0d:03:54:e3:c8:b5:5f: 5e:78:26:bd:c8:7c:6e:a6:c7:8b:d7:f9:b6:30:43:a2:cf:0f: d2:af:c7:2f:cf:3b:bb:d6:8b:19:05:2d:95:33:64:40:a4:ba: 66:98:b2:57:4b:ea:60:56:47:33:d6:b9:42:8f:70:f5:cd:74: 98:2a:df:47:8b:0c:ea:66:cf:d8:c4:a3:32:55:5b:1c:f6:c4: 9a:e9:5b:92:80:f4:c1:c1:28:00:83:7d:59:19:89:2f:28:f5: a4:3d:00:88:cd:45:c2:b3:8c:87:97:32:07:8f:89:83:16:39: c7:a0:de:71:ec:d2:d6:f6:46:31:e7:7b:bb:21:d4:ce:75:c4: ec:b9:f5:0c:66:d9:99:34:a0:61:49:0a:c7:4f:ed:30:88:82: 84:4e:e7:b3:c7:35:55:5b:c9:24:1f:e4:ae:cd:60:23:cd:20: 8f:ca:a6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjF1pz46/9H3/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4 ZWEzMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YzE3N2I4NWItZGM1YS00NDI3LWE4NjItOTViMGM3ODlmNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWfyxbw81BJ32bYzCi6bY0X6BuWP2qQ985yj N7GhyntMMVP9obB/vPFVhnIrox8TGiIZzfCC+58YNFYFuZSlRB0yO0VEHZmmmUdI jcQmEKXgM3qtMwVBC+zoIyHn4ySJ6AG8TWkEAwU044fg3rtJB5eE+rq4T3PHXds4 0BqtVytB3eQ6BMlkKyc1BqTAeOkyNSLsFdcmaE2WJSsY2H8S7bIWrHlfNZYmpjMs 8S00Ep4qrogqIrui4hdHFMzPUJtR6Ij9jdXWEaNHKW2iI6Ph8eflTP565r3d1IjD uC88tQugMG6ydc5zW/RHeuPEOJFIiovR6K7NxPYdZW6Qz9jxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5zLAgxzMebSikDpYMnc56uPOlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBh ODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvOGQ3ZGI3NDYtMzVmYi0z OTUyLWE0ZmUtNzNmZDI3ZjA0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjMwYTgzZmMtNTc1My00ZDk0LTg1 ZDEtMjY5MjRhZmE4ZWEzL2YzMGE4M2ZjLTU3NTMtNGQ5NC04NWQxLTI2OTI0YWZh OGVhMy5jcmwwHwYDVR0jBBgwFoAU8FBMFnRyiq26v7tn6h9pVELZXz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjky NGFmYThlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOpAa3rT/DCAE6vEOWKUlNkt/p9FgEsDTyTz+lN0xaQg+oi5MEgutSv sF9rlnjBxtPhKECkVqMYQ89znlKmPYMOY8CJ7TEU6s2prPKnT5n5QlPrDQNU48i1 X154Jr3IfG6mx4vX+bYwQ6LPD9Kvxy/PO7vWixkFLZUzZECkumaYsldL6mBWRzPW uUKPcPXNdJgq30eLDOpmz9jEozJVWxz2xJrpW5KA9MHBKACDfVkZiS8o9aQ9AIjN RcKzjIeXMgePiYMWOceg3nHs0tb2RjHne7sh1M51xOy59Qxm2Zk0oGFJCsdP7TCI goRO57PHNVVbySQf5K7NYCPNII/KprM= -----END CERTIFICATE-----Generated at Thu Sep 17 00:34:54 2026 by rpki-client