$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa File: 973468d0-7226-3ff1-a216-3007302b0b90.roa (raw, json) Hash identifier: VzWvJOyViJoUwo9QDoQlTNNkD3IVYHQdIjpGVPiCGZE= Subject key identifier: 70:3D:37:E5:33:8A:FA:0E:05:AD:CB:55:18:61:D3:C3:F5:BE:D7:72 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584F4973677846BEB7104482D300 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30313 IP address blocks: 152.216.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:67:78:46:be:b7:10:44:82:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5e3d8a08-9f86-4b95-a56b-c718ef7d027f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:54:50:1a:32:04:0f:91:e6:69:e3:6e:79: c4:d9:c7:ec:cd:ce:3e:78:e3:dd:62:36:0a:41:1b: 6a:33:fc:bb:3f:7c:41:9a:87:0c:f1:69:19:bf:41: cd:4d:6f:55:49:f6:51:0e:e2:d6:56:4a:bc:7a:dc: 34:11:e1:97:ad:25:89:8a:17:17:dc:6d:35:d1:88: 0a:f7:d2:fc:a0:f2:1c:46:9e:c3:ae:dd:a4:e0:af: 3b:6a:74:36:71:73:87:5e:b5:38:a3:6a:cc:08:78: cf:93:da:f3:65:31:45:4f:84:72:41:76:f9:23:bf: f7:c4:7a:e6:3e:1e:3c:d4:8a:4c:85:ed:2a:26:c5: 58:b0:ef:82:53:fd:7c:9c:99:4e:80:8c:e1:93:13: 52:cf:87:59:13:e5:7e:b3:f2:19:d2:21:5e:b9:f0: 5c:e7:9e:c4:d7:c2:9b:93:0a:92:f3:c2:a8:38:3a: bb:4b:5b:8f:2c:ea:97:1e:db:d0:5d:82:ea:6b:69: 20:1d:92:67:af:a4:49:25:06:fb:8f:44:63:58:d1: c9:12:67:6b:d8:43:90:0e:1c:73:29:5f:cd:f1:b2: 39:26:a6:db:2f:4b:0d:60:c8:8e:b7:0c:2b:35:57: 45:8c:cb:c1:bb:21:56:8e:e6:e3:8a:e7:9d:8d:21: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:37:E5:33:8A:FA:0E:05:AD:CB:55:18:61:D3:C3:F5:BE:D7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:12:fb:26:36:b0:63:52:cb:bc:d1:9c:7b:a2:95:5f:9d: f6:fb:88:a2:57:77:5a:d3:ac:86:12:54:c8:ab:34:73:30:c2: f5:b6:f8:1c:40:68:21:e5:05:99:c5:e6:fb:aa:81:7e:7e:20: e5:4c:57:c2:88:a3:f9:95:1a:ae:07:34:c7:f9:17:a3:93:07: ee:c6:4d:c9:50:d9:37:87:7f:3d:8c:db:72:1d:73:91:59:98: ac:46:32:8b:a5:08:28:cb:d4:17:31:dd:8e:bb:3e:24:0d:d5: b6:71:2f:6f:ce:7e:63:87:cc:c1:f5:82:30:91:f3:82:d0:70: 16:06:8f:49:de:93:3e:28:7d:7e:3c:47:b5:ea:bd:97:8d:fc: 88:c7:ae:e8:52:bb:f9:83:cb:d8:93:1d:81:bc:85:f2:c2:f6: c8:06:c3:d2:80:1b:9b:20:09:60:c9:e2:20:ab:e8:d3:7f:70: cc:a0:4f:18:d8:80:8a:78:2a:15:3b:4a:76:56:45:d8:f8:60: 72:c8:de:58:a6:f2:4c:a9:54:fe:d9:51:0c:45:98:e6:24:f2: 95:f2:5f:48:7e:00:b8:7c:7b:17:f1:ee:e9:1b:8d:39:ba:2a: ff:43:05:67:45:28:23:cf:e3:fc:a4:50:6d:1e:de:3c:42:31: 42:6e:3f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2d4Rr63EESC0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWUzZDhhMDgtOWY4Ni00Yjk1LWE1NmItYzcxOGVmN2QwMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcBUUBoyBA+R5mnjbnnE2cfszc4+eOPdYjYK QRtqM/y7P3xBmocM8WkZv0HNTW9VSfZRDuLWVkq8etw0EeGXrSWJihcX3G010YgK 99L8oPIcRp7Drt2k4K87anQ2cXOHXrU4o2rMCHjPk9rzZTFFT4RyQXb5I7/3xHrm Ph481IpMhe0qJsVYsO+CU/18nJlOgIzhkxNSz4dZE+V+s/IZ0iFeufBc557E18Kb kwqS88KoODq7S1uPLOqXHtvQXYLqa2kgHZJnr6RJJQb7j0RjWNHJEmdr2EOQDhxz KV/N8bI5JqbbL0sNYMiOtwwrNVdFjMvBuyFWjubjiuedjSFnfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA9N+UzivoOBa3LVRhh08P1vtdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvOTczNDY4ZDAtNzIyNi0z ZmYxLWEyMTYtMzAwNzMwMmIwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkCEvsmNrBjUsu80Zx7opVfnfb7iKJXd1rTrIYSVMirNHMwwvW2+BxA aCHlBZnF5vuqgX5+IOVMV8KIo/mVGq4HNMf5F6OTB+7GTclQ2TeHfz2M23Idc5FZ mKxGMoulCCjL1Bcx3Y67PiQN1bZxL2/OfmOHzMH1gjCR84LQcBYGj0nekz4ofX48 R7XqvZeN/IjHruhSu/mDy9iTHYG8hfLC9sgGw9KAG5sgCWDJ4iCr6NN/cMygTxjY gIp4KhU7SnZWRdj4YHLI3lim8kypVP7ZUQxFmOYk8pXyX0h+ALh8exfx7ukbjTm6 Kv9DBWdFKCPP4/ykUG0e3jxCMUJuP/o= -----END CERTIFICATE-----Generated at Thu Oct 8 21:47:56 2026 by rpki-client