$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/539db5ec-2fb2-3d69-ba50-372febe3f676.roa File: 539db5ec-2fb2-3d69-ba50-372febe3f676.roa (raw, json) Hash identifier: TvIzhAXDR5sVJ9lw8l4ZroAgOHVetCtJmLuZhlSfOts= Subject key identifier: 23:91:DD:5B:EA:CE:67:2E:DB:70:CE:94:93:95:A2:9F:AB:FF:A3:A4 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584F087E4995CDA50E36FF9FD160 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/539db5ec-2fb2-3d69-ba50-372febe3f676.roa Signing time: Tue 01 Sep 2026 18:36:22 +0000 ROA not before: Tue 01 Sep 2026 18:36:22 +0000 ROA not after: Mon 30 Nov 2026 19:36:22 +0000 asID: 16653 IP address blocks: 216.230.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:7e:49:95:cd:a5:0e:36:ff:9f:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Sep 1 18:36:22 2026 GMT Not After : Nov 30 19:36:22 2026 GMT Subject: CN=f4c149cd-bb5f-4d1f-b07c-ba6a67688ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:f6:26:9d:fa:19:73:1a:db:e5:4b:28:94: 5f:89:e3:6f:5b:e9:49:6e:c4:45:b4:92:7e:ce:c1: 77:a0:ba:4e:95:f0:74:7b:e9:fa:94:be:46:69:5f: 9d:ec:e7:32:62:88:ab:81:de:f8:cb:2b:36:4a:ef: 78:99:92:09:8b:ba:9c:76:58:bc:94:72:3f:6f:cc: c6:58:1d:8c:de:d9:d3:2b:ea:24:ec:78:32:26:db: 36:a5:ce:a9:a7:28:3d:19:95:a5:b8:59:2e:20:40: 2a:10:ee:ce:76:bb:d6:6e:60:56:73:f4:7c:13:7c: 76:4b:2e:46:f9:f5:1d:79:94:84:4c:bb:a7:ff:f6: ec:5b:24:db:ce:56:c1:2d:69:e8:e9:ce:e2:33:26: 45:d4:3e:ed:1c:bc:06:c1:28:04:f8:ca:bc:7e:32: 34:ed:b6:93:9c:d9:5e:4b:1f:cc:b1:73:28:cd:ec: 83:c0:f2:f3:37:c1:1c:88:e2:39:37:98:5a:03:78: 8b:17:23:29:6b:f8:03:1a:11:e2:45:82:d2:a8:a2: 13:e9:79:61:ec:60:53:12:20:45:96:68:cf:0f:54: 9c:b2:35:59:d1:68:16:0f:06:b7:ef:d5:af:30:8c: 4b:1a:23:61:4e:79:30:e5:d8:45:8e:43:10:a7:b3: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:91:DD:5B:EA:CE:67:2E:DB:70:CE:94:93:95:A2:9F:AB:FF:A3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/539db5ec-2fb2-3d69-ba50-372febe3f676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 216.230.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bf:95:80:f7:99:6c:7d:d8:83:aa:78:f0:c4:16:d0:c8:ba: 3a:2b:c3:c4:87:ac:08:ae:4b:3c:56:10:3a:98:c4:82:49:90: 65:e6:11:d1:7e:3c:e8:ad:48:a7:55:e0:a9:85:85:85:bb:29: a5:23:4a:4d:91:70:36:e5:3d:23:93:06:2d:7d:aa:3e:78:b4: c8:fd:be:f3:eb:ad:06:5a:ad:d1:b2:3e:82:65:38:6f:a2:2d: b8:c8:71:c7:b4:78:65:34:7c:bf:3c:db:96:cf:6b:d3:f2:77: 89:f0:e6:6c:48:bf:79:9b:7c:2e:ad:ab:e0:1a:66:c1:9d:5c: 2a:53:d7:f1:dd:1a:8c:db:62:5d:e9:2e:d5:a1:d7:de:6d:f3: 50:29:a1:4e:47:14:06:ca:43:37:06:8c:ba:c5:04:fb:af:dd: 95:2b:fd:a0:6a:3c:0b:c8:a4:51:c3:d6:21:80:18:26:d5:22: b7:ba:69:09:e0:cd:6c:a3:25:06:6d:70:b9:94:ca:9b:08:5c: 36:7e:e9:0f:93:ec:64:0a:fd:d9:95:3b:14:ed:e4:29:62:bd: 6b:02:20:1a:68:b1:08:44:d8:d9:b7:6d:66:84:40:4b:2b:3f: ae:aa:04:72:e8:31:a6:32:dd:36:dc:8b:8e:8d:33:8f:f9:ad: 44:37:89:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8IfkmVzaUONv+f0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI2MDkwMTE4MzYyMloXDTI2MTEzMDE5MzYyMlowLzEtMCsGA1UEAxMk ZjRjMTQ5Y2QtYmI1Zi00ZDFmLWIwN2MtYmE2YTY3Njg4Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXT2Jp36GXMa2+VLKJRfieNvW+lJbsRFtJJ+ zsF3oLpOlfB0e+n6lL5GaV+d7OcyYoirgd74yys2Su94mZIJi7qcdli8lHI/b8zG WB2M3tnTK+ok7HgyJts2pc6ppyg9GZWluFkuIEAqEO7OdrvWbmBWc/R8E3x2Sy5G +fUdeZSETLun//bsWyTbzlbBLWno6c7iMyZF1D7tHLwGwSgE+Mq8fjI07baTnNle Sx/MsXMozeyDwPLzN8EciOI5N5haA3iLFyMpa/gDGhHiRYLSqKIT6Xlh7GBTEiBF lmjPD1ScsjVZ0WgWDwa379WvMIxLGiNhTnkw5dhFjkMQp7ND9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOR3Vvqzmcu23DOlJOVop+r/6OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvNTM5ZGI1ZWMtMmZiMi0z ZDY5LWJhNTAtMzcyZmViZTNmNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2/lYD3mWx92IOqePDEFtDIujorw8SHrAiuSzxWEDqYxIJJkGXmEdF+ POitSKdV4KmFhYW7KaUjSk2RcDblPSOTBi19qj54tMj9vvPrrQZardGyPoJlOG+i LbjIcce0eGU0fL8825bPa9Pyd4nw5mxIv3mbfC6tq+AaZsGdXCpT1/HdGozbYl3p LtWh195t81ApoU5HFAbKQzcGjLrFBPuv3ZUr/aBqPAvIpFHD1iGAGCbVIre6aQng zWyjJQZtcLmUypsIXDZ+6Q+T7GQK/dmVOxTt5ClivWsCIBposQhE2Nm3bWaEQEsr P66qBHLoMaYy3Tbci46NM4/5rUQ3iac= -----END CERTIFICATE-----Generated at Tue Oct 6 21:06:57 2026 by rpki-client