$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa File: 982467e0-bb30-39d1-b029-5277f662fd9c.roa (raw, json) Hash identifier: 3jAelRI2qeJCTgBEwgltoRHhIezqOPlwc6tiHJTy5+0= Subject key identifier: 17:34:FB:FC:74:87:AD:AF:D3:56:6E:1C:03:00:35:F5:69:2B:06:6C Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584F4F082BB3A6E3537C960D71C0 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 72.0.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:2b:b3:a6:e3:53:7c:96:0d:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=1b96f1f1-d026-403d-a455-69b4f66660ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:dc:1e:86:77:3f:a0:06:3f:dd:56:1d:65: a1:0b:20:8b:78:16:20:c8:03:96:34:ce:e6:41:d2: f1:05:5c:22:fb:f5:10:29:88:82:21:81:0f:67:41: 2e:15:0f:01:dc:60:65:17:95:f0:01:82:4c:b4:6e: 5e:9c:11:51:76:3d:11:81:e7:f6:b6:df:c8:bb:29: 0e:db:85:c9:3b:af:0e:3f:f7:da:31:e0:d7:96:a9: c3:ff:4c:76:3b:8b:c3:c4:9b:41:a9:9f:a4:96:0f: f2:a5:85:14:56:c9:6e:64:18:45:36:c9:ad:39:07: 24:c8:93:fd:bb:e3:1f:d8:82:65:77:9b:38:c7:db: e4:4e:5e:40:27:dc:65:79:73:fa:72:66:32:8c:8f: 78:09:43:34:bb:6e:79:e5:8f:f8:c1:4d:91:55:5b: a3:63:20:97:52:d0:37:1f:bb:7b:c0:c0:c0:98:d6: 60:24:45:61:2c:8e:95:c0:2c:25:08:3d:a1:58:4a: c9:38:92:cd:fd:82:3a:ab:49:c8:8e:3d:aa:14:80: 72:d4:dc:0d:d7:98:da:09:51:f7:99:48:58:c2:33: c5:85:29:c9:df:85:29:d1:ca:be:f9:db:2f:44:3e: 02:c5:b8:53:2c:90:fe:2b:85:52:1d:14:69:54:17: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:34:FB:FC:74:87:AD:AF:D3:56:6E:1C:03:00:35:F5:69:2B:06:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:04:ab:12:a6:1a:a8:ff:a0:bf:10:f6:87:b3:f5:74:a9:c2: c3:94:c1:44:61:91:49:f8:59:d7:15:42:50:dc:88:e3:5a:80: ee:aa:8c:78:4c:a4:76:82:ce:5d:81:85:80:18:84:89:f1:93: 68:cc:6e:fe:ea:4f:0d:b4:df:83:4a:94:e7:ec:c2:08:90:59: e5:e4:5c:94:01:8b:04:99:31:80:de:f3:85:80:27:44:f0:1f: 1d:5a:bb:33:73:d4:7c:5c:99:db:23:1c:5c:5f:3f:4c:81:8a: 49:8f:ef:49:a5:0a:f4:61:c1:21:03:74:00:3b:6e:ac:36:fc: 54:e1:21:d2:33:22:b2:27:11:a7:c6:82:2d:d1:c7:fe:24:28: 7a:1b:76:2d:7a:80:34:8c:ea:bf:90:44:05:c9:56:09:1b:3b: 6e:c0:e4:59:b1:a2:20:fe:a5:8c:01:d8:96:1d:d3:3f:8b:72: 85:b6:af:f9:f3:0e:1d:26:0e:50:ea:db:76:53:30:45:4d:1d: 99:82:b8:33:61:3c:4e:4d:2c:c5:d7:86:cb:da:38:d0:65:9a: 0b:5c:9c:0e:90:15:6f:fa:bd:3a:b5:a1:e6:16:be:9e:e2:31: 0e:44:e3:27:22:b4:a2:a1:ac:92:8a:34:59:cf:63:9d:e3:4f: fc:d8:bb:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCuzpuNTfJYNccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MWI5NmYxZjEtZDAyNi00MDNkLWE0NTUtNjliNGY2NjY2MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPcHoZ3P6AGP91WHWWhCyCLeBYgyAOWNM7m QdLxBVwi+/UQKYiCIYEPZ0EuFQ8B3GBlF5XwAYJMtG5enBFRdj0Rgef2tt/IuykO 24XJO68OP/faMeDXlqnD/0x2O4vDxJtBqZ+klg/ypYUUVsluZBhFNsmtOQckyJP9 u+Mf2IJld5s4x9vkTl5AJ9xleXP6cmYyjI94CUM0u2555Y/4wU2RVVujYyCXUtA3 H7t7wMDAmNZgJEVhLI6VwCwlCD2hWErJOJLN/YI6q0nIjj2qFIBy1NwN15jaCVH3 mUhYwjPFhSnJ34Up0cq++dsvRD4CxbhTLJD+K4VSHRRpVBehwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc0+/x0h62v01ZuHAMANfVpKwZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvOTgyNDY3ZTAtYmIzMC0z OWQxLWIwMjktNTI3N2Y2NjJmZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0EqxKmGqj/oL8Q9oez9XSpwsOUwURhkUn4WdcVQlDciONagO6qjHhM pHaCzl2BhYAYhInxk2jMbv7qTw2034NKlOfswgiQWeXkXJQBiwSZMYDe84WAJ0Tw Hx1auzNz1HxcmdsjHFxfP0yBikmP70mlCvRhwSEDdAA7bqw2/FThIdIzIrInEafG gi3Rx/4kKHobdi16gDSM6r+QRAXJVgkbO27A5FmxoiD+pYwB2JYd0z+LcoW2r/nz Dh0mDlDq23ZTMEVNHZmCuDNhPE5NLMXXhsvaONBlmgtcnA6QFW/6vTq1oeYWvp7i MQ5E4ycitKKhrJKKNFnPY53jT/zYu0M= -----END CERTIFICATE-----Generated at Tue Oct 6 05:36:49 2026 by rpki-client