$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/a630cce2-93d9-3356-bc79-894d2e85733e.roa File: a630cce2-93d9-3356-bc79-894d2e85733e.roa (raw, json) Hash identifier: S3Bhfr8dm9Vf1iNB3bw2y4Mzu3TC3vvpLk23WGl/O0o= Subject key identifier: 13:D3:CA:1D:0B:B3:66:DB:A6:05:65:9C:F2:62:8F:54:E0:79:A1:1E Certificate issuer: /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Certificate serial: 010D0C9F4328584EF44CC9F462D708788F8A7740 Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/a630cce2-93d9-3356-bc79-894d2e85733e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 401224 IP address blocks: 216.109.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c9:f4:62:d7:08:78:8f:8a:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=d2992191-7fa0-43e3-a6fa-e34c4ef58be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:bf:d8:7a:75:2c:b1:c5:91:b3:9f:79:1c: 13:46:df:7d:5e:7e:79:f6:83:9b:2d:cb:27:01:c7: 21:97:a0:c4:19:71:03:f1:c2:7b:d3:8e:f5:d2:ce: e6:78:97:51:71:ea:04:95:75:4f:cd:c6:52:a5:11: 2c:87:ea:88:e6:76:5e:96:3e:59:86:cc:5d:57:40: 70:ea:f0:7d:28:02:6b:0c:da:1d:f6:7e:08:bd:5b: c1:7f:fc:40:7a:54:f4:81:4c:06:d4:57:13:10:30: 05:74:7d:70:5f:12:de:54:eb:67:20:b7:76:2e:0e: e4:67:2e:33:93:60:95:8b:b3:bb:60:b2:af:68:bd: fc:cf:5f:f3:ba:b3:ab:35:b3:3f:69:1a:77:de:50: ae:43:a8:03:6f:d5:2e:7d:cf:fd:be:50:cb:91:62: a5:27:91:10:65:c6:94:9f:9f:19:f4:62:75:1a:0d: 6e:93:65:10:28:f8:05:aa:13:a5:ac:9c:a3:71:93: a8:27:5f:07:40:56:fa:04:39:62:22:65:b7:6a:a1: d2:e0:ba:43:32:93:b3:49:d8:b5:32:9b:72:04:f3: fb:13:e6:b4:e1:88:e3:0a:46:01:4f:3e:8e:92:d2: 9f:4a:3c:21:dd:35:30:4c:2e:1f:75:01:2d:10:b8: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:CA:1D:0B:B3:66:DB:A6:05:65:9C:F2:62:8F:54:E0:79:A1:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/a630cce2-93d9-3356-bc79-894d2e85733e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl X509v3 Authority Key Identifier: keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer sbgp-ipAddrBlock: critical IPv4: 216.109.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f1:21:2c:86:2a:0a:3a:24:5d:58:59:53:1c:c0:4e:59:d0: 3f:a7:7e:ca:a0:64:40:d2:eb:86:05:73:97:32:b1:9c:47:d0: 45:39:79:ae:89:98:d6:40:6e:f9:2f:34:4c:7d:ed:b7:7c:1e: 5c:37:4e:92:0a:fd:5f:53:78:56:d9:67:78:d7:c0:e1:8c:24: 38:6a:37:a6:02:6b:6c:8d:ef:01:a8:07:b0:43:3c:49:24:80: c2:a2:59:d4:ab:7b:d7:a1:40:4f:62:44:c2:8f:2c:b1:4d:d7: 03:1e:f2:6d:1e:0f:a1:6d:17:1a:40:5b:ce:9f:30:8e:c0:98: 05:06:80:ed:19:f2:01:90:a7:69:49:b7:01:5d:52:e9:23:3c: 39:fd:a4:9d:92:21:e0:49:63:2d:b4:0b:27:3e:e1:37:32:03: 7f:db:34:c0:f4:69:99:f4:e5:01:92:1b:07:90:17:fa:09:ff: 2c:1a:d5:5b:7b:3d:46:16:2d:f8:10:3d:48:73:82:f3:7a:57: 96:4a:b3:c0:40:56:5b:af:b9:0c:87:fd:a4:30:f4:64:d5:5f: 3a:3d:16:3c:19:25:dd:db:c5:da:b6:1a:4c:0d:56:30:a2:dc: 8e:31:f9:d0:3b:67:5a:21:70:0d:a2:93:43:52:33:95:c1:63: b0:9c:96:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMn0YtcIeI+Kd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZGY5YjQtNmY3My00M2M4LWFhY2MtNGQwNjhhODJj NWQ4MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDI5OTIxOTEtN2ZhMC00M2UzLWE2ZmEtZTM0YzRlZjU4YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPq/2Hp1LLHFkbOfeRwTRt99Xn559oObLcsn Acchl6DEGXED8cJ704710s7meJdRceoElXVPzcZSpREsh+qI5nZelj5ZhsxdV0Bw 6vB9KAJrDNod9n4IvVvBf/xAelT0gUwG1FcTEDAFdH1wXxLeVOtnILd2Lg7kZy4z k2CVi7O7YLKvaL38z1/zurOrNbM/aRp33lCuQ6gDb9Uufc/9vlDLkWKlJ5EQZcaU n58Z9GJ1Gg1uk2UQKPgFqhOlrJyjcZOoJ18HQFb6BDliImW3aqHS4LpDMpOzSdi1 MptyBPP7E+a04YjjCkYBTz6OktKfSjwh3TUwTC4fdQEtELiTvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPTyh0Ls2bbpgVlnPJij1TgeaEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDlk ZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2OGE4MmM1ZDgvYTYzMGNjZTItOTNkOS0z MzU2LWJjNzktODk0ZDJlODU3MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2Q5ZGY5YjQtNmY3My00M2M4LWFh Y2MtNGQwNjhhODJjNWQ4LzNkOWRmOWI0LTZmNzMtNDNjOC1hYWNjLTRkMDY4YTgy YzVkOC5jcmwwHwYDVR0jBBgwFoAUDVIzEr60YauI1fFIz7wBLC22X8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDlkZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2 OGE4MmM1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXxISyGKgo6JF1YWVMcwE5Z0D+nfsqgZEDS64YFc5cysZxH0EU5ea6J mNZAbvkvNEx97bd8Hlw3TpIK/V9TeFbZZ3jXwOGMJDhqN6YCa2yN7wGoB7BDPEkk gMKiWdSre9ehQE9iRMKPLLFN1wMe8m0eD6FtFxpAW86fMI7AmAUGgO0Z8gGQp2lJ twFdUukjPDn9pJ2SIeBJYy20Cyc+4TcyA3/bNMD0aZn05QGSGweQF/oJ/ywa1Vt7 PUYWLfgQPUhzgvN6V5ZKs8BAVluvuQyH/aQw9GTVXzo9FjwZJd3bxdq2GkwNVjCi 3I4x+dA7Z1ohcA2ik0NSM5XBY7CclnI= -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:08 2026 by rpki-client