$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa File: 5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa (raw, json) Hash identifier: dp9En33feA9JDx+ZyI6qPqO7YJZTe8Kp0TZpeSy7tNU= Subject key identifier: 6B:8F:C9:AB:F4:C5:A9:DE:F5:8A:C4:35:9B:49:7F:B3:8F:CF:1F:E0 Certificate issuer: /CN=e5980411-174b-477f-83d7-607e6bdd6922 Certificate serial: 010D0C9F4328584F093CEFC6B1BACF22A85AF080 Authority key identifier: 40:FD:5A:CB:DD:94:63:EB:3F:A1:C3:D2:B3:DD:20:54:77:83:1B:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 40463 IP address blocks: 209.178.216.0/21 maxlen: 24 2602:f9fd::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:ef:c6:b1:ba:cf:22:a8:5a:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5980411-174b-477f-83d7-607e6bdd6922 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7d1c24b8-f23f-4164-b1b3-d234d3d18cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:f3:91:c4:63:12:88:e3:fd:47:61:09:af: 81:8c:61:5e:bc:bd:0c:29:e4:c6:c1:bb:e3:3c:ec: 18:25:22:b4:02:97:70:33:c0:e3:69:4d:da:b6:03: 12:4f:7d:e1:fa:ce:85:7a:55:40:92:9b:be:13:04: e8:57:cf:47:68:23:eb:21:be:7b:e1:f4:0f:b0:3f: 0b:1f:18:ed:25:20:0c:19:2f:1c:d7:21:37:d4:e1: 9d:61:49:67:14:e9:24:d2:69:ac:bf:fc:90:14:5c: 5f:10:ca:62:a4:26:37:b2:ad:cb:04:3d:aa:fc:a9: 45:c7:dc:bc:25:43:ec:5b:c1:fc:3b:d6:76:f2:d2: 59:0f:3b:92:15:3f:55:ae:6d:f3:25:ce:6b:65:b0: ce:69:fa:cb:89:ee:64:29:90:97:55:86:44:bd:d7: b8:26:14:9d:88:0e:1c:5e:a0:ed:09:7e:99:c4:76: 07:2a:50:86:ef:57:f1:5a:84:6e:e8:30:86:c0:f1: 0d:f5:eb:41:a3:dd:33:f0:82:f5:5a:07:58:5a:4f: d1:d9:5a:d5:34:2f:4f:7c:c2:64:c6:c1:25:da:b1: 95:96:7e:be:d4:a0:ee:4e:81:18:c2:33:d3:a3:14: 71:23:ca:f3:00:70:7a:95:90:0e:06:d5:d9:83:6c: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8F:C9:AB:F4:C5:A9:DE:F5:8A:C4:35:9B:49:7F:B3:8F:CF:1F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.crl X509v3 Authority Key Identifier: keyid:40:FD:5A:CB:DD:94:63:EB:3F:A1:C3:D2:B3:DD:20:54:77:83:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer sbgp-ipAddrBlock: critical IPv4: 209.178.216.0/21 IPv6: 2602:f9fd::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:20:dd:f1:5a:ac:a1:15:f3:7f:48:be:14:e7:a1:ba:7a:32: 6a:50:2c:d0:c9:7d:e3:25:a7:e7:4b:0d:e7:6e:cd:e4:1f:2f: 17:c6:60:76:e5:96:34:be:75:18:c1:4c:87:8c:45:18:88:7f: ef:7a:d8:9f:e1:30:dc:42:5d:aa:35:75:99:52:18:e2:1a:ad: de:16:e3:79:59:1e:40:01:68:2a:41:2b:83:f8:d0:37:88:bb: c5:0a:11:e7:9b:88:37:00:e8:e7:13:32:c2:42:5a:0d:43:73: b8:3c:6e:0e:84:15:8f:b4:c4:ef:f8:22:64:83:98:3d:91:82: a1:92:c0:93:92:2e:cd:ab:e2:3d:99:14:64:a3:31:a3:9b:6f: 78:57:27:d7:b0:d7:32:27:0f:7a:62:91:04:46:44:a1:1e:f1: 10:ef:6c:1d:00:d0:a2:d0:36:5f:16:53:00:3d:42:d4:ff:bd: 0c:1b:e6:44:2a:da:27:c2:b3:9e:db:a4:a9:28:b5:b5:c0:bf: f7:bf:cf:0d:aa:a9:48:55:4a:41:30:45:19:a4:16:a1:90:08: 0a:37:90:01:a5:1e:74:32:0f:7f:0b:c9:d3:86:3d:3f:da:1b: 2f:5b:5b:bf:63:db:9c:69:b8:01:90:52:90:4f:81:02:d4:3d: be:0b:7c:25 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8JPO/GsbrPIqha8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU5ODA0MTEtMTc0Yi00NzdmLTgzZDctNjA3ZTZiZGQ2 OTIyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2QxYzI0YjgtZjIzZi00MTY0LWIxYjMtZDIzNGQzZDE4Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9zzkcRjEojj/UdhCa+BjGFevL0MKeTGwbvj POwYJSK0ApdwM8DjaU3atgMST33h+s6FelVAkpu+EwToV89HaCPrIb574fQPsD8L HxjtJSAMGS8c1yE31OGdYUlnFOkk0mmsv/yQFFxfEMpipCY3sq3LBD2q/KlFx9y8 JUPsW8H8O9Z28tJZDzuSFT9Vrm3zJc5rZbDOafrLie5kKZCXVYZEvde4JhSdiA4c XqDtCX6ZxHYHKlCG71fxWoRu6DCGwPEN9etBo90z8IL1WgdYWk/R2VrVNC9PfMJk xsEl2rGVln6+1KDuToEYwjPToxRxI8rzAHB6lZAOBtXZg2zOZQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFGuPyav0xane9YrENZtJf7OPzx/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNTk4 MDQxMS0xNzRiLTQ3N2YtODNkNy02MDdlNmJkZDY5MjIvNTU2MmQxOTUtYjhmOS0z N2U1LWFhYjItNTYwMzhkOWMyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU5ODA0MTEtMTc0Yi00NzdmLTgz ZDctNjA3ZTZiZGQ2OTIyL2U1OTgwNDExLTE3NGItNDc3Zi04M2Q3LTYwN2U2YmRk NjkyMi5jcmwwHwYDVR0jBBgwFoAUQP1ay92UY+s/ocPSs90gVHeDG4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lNTk4MDQxMS0xNzRiLTQ3N2YtODNkNy02MDdl NmJkZDY5MjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD0bLYMA0E AgACMAcDBQAmAvn9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADsg3fFarKEV839IvhTnobp6MmpQLNDJfeMl p+dLDeduzeQfLxfGYHblljS+dRjBTIeMRRiIf+962J/hMNxCXao1dZlSGOIard4W 43lZHkABaCpBK4P40DeIu8UKEeebiDcA6OcTMsJCWg1Dc7g8bg6EFY+0xO/4ImSD mD2RgqGSwJOSLs2r4j2ZFGSjMaObb3hXJ9ew1zInD3pikQRGRKEe8RDvbB0A0KLQ Nl8WUwA9QtT/vQwb5kQq2ifCs57bpKkotbXAv/e/zw2qqUhVSkEwRRmkFqGQCAo3 kAGlHnQyD38LydOGPT/aGy9bW79j25xpuAGQUpBPgQLUPb4LfCU= -----END CERTIFICATE-----Generated at Sun Sep 13 13:32:36 2026 by rpki-client