$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a97c73ed-a622-355b-8118-efdd099a2bcc.roa File: a97c73ed-a622-355b-8118-efdd099a2bcc.roa (raw, json) Hash identifier: +tDyBYF0+fXHeOFHluVR9PWs0c5qCLP+la+d0vBgWL0= Subject key identifier: A5:74:50:06:9C:A2:9C:6C:0F:A3:88:43:81:F1:B9:6E:24:36:B5:E4 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584F66C2C27364B82F9CC6CC2500 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a97c73ed-a622-355b-8118-efdd099a2bcc.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 393844 IP address blocks: 168.203.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c2:73:64:b8:2f:9c:c6:cc:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=d86eb91b-98cc-41c9-a42d-307fb83e8a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:55:cf:08:43:88:b5:fe:64:cf:7e:35:bb: 99:f1:01:30:98:43:03:39:5a:03:c1:19:de:f4:6d: 98:77:c5:4f:57:c7:ab:9f:33:2a:a0:80:37:6d:c3: be:d5:aa:f2:d6:b4:33:9a:e9:2a:a2:36:54:6d:1d: 5b:03:e3:e1:a9:74:58:36:3e:91:da:07:70:8b:30: 32:7b:5b:f7:4d:16:59:1d:4d:9b:74:3f:b4:da:5c: 86:ff:29:7c:6f:df:b1:07:73:6c:dd:c3:34:1b:d0: 06:4a:26:b6:d4:07:d4:cc:15:57:55:dc:1f:5a:4d: f2:91:f1:31:ae:6d:f8:60:89:08:33:61:d9:32:5e: 97:ff:75:af:75:01:fd:a3:72:d1:71:c4:7a:f9:2f: 71:8a:a7:c4:b3:37:32:ab:98:5e:95:51:c0:c9:6c: b6:79:00:29:6b:05:c5:32:2f:24:38:d5:9c:c5:82: c7:ad:58:73:50:72:ca:32:ec:5f:33:1f:35:2c:b0: 66:90:55:94:d4:57:a6:44:4c:4d:5b:a5:7f:5e:4e: 4f:71:b6:c1:4a:de:5a:5d:76:9b:35:da:5d:03:99: 8a:50:9b:82:70:8f:9e:bd:8c:e2:49:af:9e:20:48: ba:bc:fb:4c:9d:a9:8f:7a:6b:d3:17:4f:a8:ce:55: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:74:50:06:9C:A2:9C:6C:0F:A3:88:43:81:F1:B9:6E:24:36:B5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a97c73ed-a622-355b-8118-efdd099a2bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 168.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9f:94:4b:1e:88:95:19:ea:9e:3c:7a:0e:a1:39:af:b1:77: 6d:0a:72:6f:e6:13:3f:3f:02:23:a6:bc:f2:56:32:df:d1:8b: fc:46:48:8b:5d:c9:40:62:f9:20:77:fd:a7:82:f1:99:7d:34: 76:f9:b4:33:fb:5d:e9:a1:18:3e:cb:69:39:4d:ac:bd:2b:0a: 2d:fa:a0:12:4d:ca:c8:a4:58:03:19:ba:b3:c6:73:f8:72:53: d8:68:ad:8a:7d:e4:d8:4d:f9:87:94:95:27:8f:bc:f0:9d:75: 92:2b:7a:f3:f3:88:8e:48:1e:c1:96:f0:5b:d8:fa:ce:26:9d: 0c:f2:16:20:2c:f4:57:03:38:ab:08:83:3c:8d:dd:2f:7f:a4: b7:92:28:3d:64:46:99:19:cf:9d:fc:39:cf:55:56:b8:2a:27: fe:1c:e8:a9:e7:fb:ef:93:8b:6f:0e:30:61:ed:49:22:77:1a: 53:18:ea:88:dd:07:1e:63:27:26:38:54:da:fb:5a:91:8a:e3: dc:77:8a:b5:1c:b4:fd:ce:f8:d9:f2:5a:3b:1d:e3:82:d5:7c: d6:74:e9:e5:e2:bd:70:21:58:4b:ff:5e:5d:48:4a:69:c7:05: 89:36:d6:0e:de:21:df:93:36:04:bc:ab:ef:ce:29:28:15:49: c2:33:bf:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsJzZLgvnMbMJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk ZDg2ZWI5MWItOThjYy00MWM5LWE0MmQtMzA3ZmI4M2U4YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVVzwhDiLX+ZM9+NbuZ8QEwmEMDOVoDwRne 9G2Yd8VPV8ernzMqoIA3bcO+1ary1rQzmukqojZUbR1bA+PhqXRYNj6R2gdwizAy e1v3TRZZHU2bdD+02lyG/yl8b9+xB3Ns3cM0G9AGSia21AfUzBVXVdwfWk3ykfEx rm34YIkIM2HZMl6X/3WvdQH9o3LRccR6+S9xiqfEszcyq5helVHAyWy2eQApawXF Mi8kONWcxYLHrVhzUHLKMuxfMx81LLBmkFWU1FemRExNW6V/Xk5PcbbBSt5aXXab NdpdA5mKUJuCcI+evYziSa+eIEi6vPtMnamPemvTF0+ozlWgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV0UAacopxsD6OIQ4HxuW4kNrXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYTk3YzczZWQtYTYyMi0z NTViLTgxMTgtZWZkZDA5OWEyYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqMsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuflEseiJUZ6p48eg6hOa+xd20Kcm/mEz8/AiOmvPJWMt/Ri/xGSItd yUBi+SB3/aeC8Zl9NHb5tDP7XemhGD7LaTlNrL0rCi36oBJNysikWAMZurPGc/hy U9horYp95NhN+YeUlSePvPCddZIrevPziI5IHsGW8FvY+s4mnQzyFiAs9FcDOKsI gzyN3S9/pLeSKD1kRpkZz538Oc9VVrgqJ/4c6Knn+++Ti28OMGHtSSJ3GlMY6ojd Bx5jJyY4VNr7WpGK49x3irUctP3O+NnyWjsd44LVfNZ06eXivXAhWEv/Xl1ISmnH BYk21g7eId+TNgS8q+/OKSgVScIzv4s= -----END CERTIFICATE-----Generated at Sun Nov 1 23:15:11 2026 by rpki-client