$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/baed09fa-df39-385e-902d-f41b1fe142f2.roa File: baed09fa-df39-385e-902d-f41b1fe142f2.roa (raw, json) Hash identifier: 0ol/y2GIlX+CpOoEHNzN14qOYARosW4Xz8IBXzXTqLc= Subject key identifier: 42:6F:AA:09:AE:B3:4E:80:1D:DD:1C:DE:C8:B1:73:54:1E:EC:C6:45 Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F539C08A272E3AFA2D00DE980 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/baed09fa-df39-385e-902d-f41b1fe142f2.roa Signing time: Mon 28 Sep 2026 16:21:56 +0000 ROA not before: Mon 28 Sep 2026 16:21:56 +0000 ROA not after: Sun 27 Dec 2026 17:21:56 +0000 asID: 394085 IP address blocks: 216.83.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9c:08:a2:72:e3:af:a2:d0:0d:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 28 16:21:56 2026 GMT Not After : Dec 27 17:21:56 2026 GMT Subject: CN=9aa08d14-8639-428d-9953-f8e0a3a3f7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:9d:9c:e0:ca:91:92:15:7c:63:d9:77:a0: 79:68:cf:d9:ad:d7:1e:10:c3:1d:49:eb:ad:b5:3a: 4b:e7:ce:2c:c1:53:3f:9d:9e:8d:25:81:ad:47:f4: 3a:08:52:0c:cd:db:78:73:f0:20:9f:c7:f4:9a:31: 94:b9:05:a7:1e:60:0a:71:bc:d2:db:98:3a:19:e4: 01:b9:a5:6a:71:05:6a:c0:63:c8:10:2a:2b:d1:1e: 18:b1:8f:37:ea:f7:e1:e3:d0:61:d3:c4:9b:00:97: 36:1a:35:34:78:52:e7:bc:16:8c:ac:d5:84:c4:ba: 89:ef:a2:43:6f:29:02:53:8f:e5:89:3c:28:15:8e: 75:78:fe:f9:03:5f:02:0b:40:5d:95:74:1a:22:0c: bd:99:d2:56:b5:b3:c3:5a:ce:4b:55:54:b9:54:b9: cb:28:e8:a0:6a:21:ef:9b:fd:59:d8:66:21:79:75: cf:5d:a0:21:75:e1:4f:3e:25:c8:e9:2e:d2:f8:22: 7a:13:de:6b:80:62:69:5c:2d:ab:eb:e0:98:f8:b0: 7e:bd:90:08:9b:db:b4:aa:ef:9a:8c:c7:06:a0:73: 22:3b:4c:75:f2:49:4b:07:21:90:17:da:36:92:9c: f5:98:0f:98:0d:dd:d2:bb:99:89:10:74:b7:2f:b2: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:AA:09:AE:B3:4E:80:1D:DD:1C:DE:C8:B1:73:54:1E:EC:C6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/baed09fa-df39-385e-902d-f41b1fe142f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 216.83.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a5:f4:2f:a9:a3:be:2d:f3:94:63:74:11:27:de:c0:e3:69: e2:6e:f6:58:e9:e3:72:10:71:d3:79:00:9b:80:24:9a:90:d0: 20:1b:4d:d6:5a:83:bd:5f:34:0e:da:61:6d:45:70:67:e1:85: bf:43:8f:0a:be:a8:f7:8c:81:6e:22:57:a5:41:6b:3d:29:62: a1:5e:d7:5f:31:d8:9f:a7:87:37:93:6a:c1:5c:61:a7:63:58: 50:e8:b0:93:81:cc:5b:91:5d:12:9a:f9:5f:a5:96:4a:73:13: af:c2:7a:b8:33:99:d7:4e:dc:43:ae:96:96:83:f3:d4:9d:4b: 5d:1b:2f:56:14:a3:7c:d7:66:72:c0:43:f7:eb:a4:98:82:1c: 4a:1a:3e:4e:46:4c:9e:6f:16:c5:7b:1a:53:6e:e7:c5:83:f0: 19:23:82:a0:af:04:65:8b:1f:6e:68:f6:b0:8c:8d:52:88:91: c3:45:1d:81:25:2a:bd:b7:86:a1:27:70:59:c1:1e:c6:01:37: 49:8d:6c:74:e8:e0:6c:64:76:48:a5:8f:dc:76:4d:05:76:dd: 90:5a:0a:9a:f6:c3:2a:bb:d8:df:13:87:c4:ab:31:68:93:63: 4e:93:f0:8f:99:39:d1:77:27:7d:a6:9f:d3:21:fc:6c:9c:1d: 0e:69:f3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnAiicuOvotAN6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkyODE2MjE1NloXDTI2MTIyNzE3MjE1NlowLzEtMCsGA1UEAxMk OWFhMDhkMTQtODYzOS00MjhkLTk5NTMtZjhlMGEzYTNmN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20WdnODKkZIVfGPZd6B5aM/ZrdceEMMdSeut tTpL584swVM/nZ6NJYGtR/Q6CFIMzdt4c/Agn8f0mjGUuQWnHmAKcbzS25g6GeQB uaVqcQVqwGPIECor0R4YsY836vfh49Bh08SbAJc2GjU0eFLnvBaMrNWExLqJ76JD bykCU4/liTwoFY51eP75A18CC0BdlXQaIgy9mdJWtbPDWs5LVVS5VLnLKOigaiHv m/1Z2GYheXXPXaAhdeFPPiXI6S7S+CJ6E95rgGJpXC2r6+CY+LB+vZAIm9u0qu+a jMcGoHMiO0x18klLByGQF9o2kpz1mA+YDd3Su5mJEHS3L7I2tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJvqgmus06AHd0c3sixc1Qe7MZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvYmFlZDA5ZmEtZGYzOS0z ODVlLTkwMmQtZjQxYjFmZTE0MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWl9C+po74t85RjdBEn3sDjaeJu9ljp43IQcdN5AJuAJJqQ0CAbTdZa g71fNA7aYW1FcGfhhb9Djwq+qPeMgW4iV6VBaz0pYqFe118x2J+nhzeTasFcYadj WFDosJOBzFuRXRKa+V+llkpzE6/CergzmddO3EOulpaD89SdS10bL1YUo3zXZnLA Q/frpJiCHEoaPk5GTJ5vFsV7GlNu58WD8BkjgqCvBGWLH25o9rCMjVKIkcNFHYEl Kr23hqEncFnBHsYBN0mNbHTo4Gxkdkilj9x2TQV23ZBaCpr2wyq72N8Th8SrMWiT Y06T8I+ZOdF3J32mn9Mh/GycHQ5p83c= -----END CERTIFICATE-----Generated at Wed Oct 28 03:13:27 2026 by rpki-client