$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a259f40-aec9-3afb-95a3-13e758ac4ba2.roa File: 2a259f40-aec9-3afb-95a3-13e758ac4ba2.roa (raw, json) Hash identifier: rlTwM+ygWuWgivZGU8oq9TH3J1JlTJ77yicBCoxjjuI= Subject key identifier: 22:C6:DA:57:9A:01:48:B8:B3:F1:9A:09:37:58:67:E9:82:F1:37:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A31363C5E74596391E4B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a259f40-aec9-3afb-95a3-13e758ac4ba2.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 16625 IP address blocks: 72.247.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:13:63:c5:e7:45:96:39:1e:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=7f495796-885f-4082-97f0-54f5005bcc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:0f:55:01:08:2b:42:f3:25:ca:dc:2a:d7: de:cf:07:c1:51:94:87:99:c0:f6:34:0f:d2:f2:33: d3:c5:c9:65:51:2c:c7:a5:36:95:da:37:b3:27:67: 7a:9a:d7:eb:b4:80:65:1f:f2:71:62:a6:bd:41:56: c4:da:0a:bd:53:a6:fa:96:94:af:65:d8:30:4e:e1: 75:e3:58:33:fc:ef:cf:86:99:5b:64:19:19:21:cb: a8:4b:42:69:f1:2e:c6:e3:c3:61:1f:6b:99:e0:7a: 2b:8b:9e:5a:56:8c:6d:72:30:3b:ad:ea:7e:ba:61: 75:3c:17:47:35:37:7a:de:5f:c9:e4:b4:7e:56:86: 5a:b3:51:83:f3:26:c9:2d:cb:fa:60:9e:15:bf:88: d0:13:97:80:6c:d2:63:be:39:72:9b:cd:48:47:81: 61:2b:f4:2f:75:9c:5d:15:87:1b:d8:06:31:6e:6a: f0:57:6f:13:73:5d:c3:92:78:9f:94:9b:96:d2:b0: a4:fb:0b:f3:5b:87:b1:40:b3:56:19:dd:d7:e4:1d: c1:ba:36:e7:86:50:9e:1c:ac:fd:92:30:61:e7:ab: df:23:ab:71:d1:51:9f:7e:ad:02:e7:1d:b1:07:e4: 2c:be:37:d3:aa:74:8a:85:c1:02:2c:ef:1e:97:a9: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:DA:57:9A:01:48:B8:B3:F1:9A:09:37:58:67:E9:82:F1:37:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a259f40-aec9-3afb-95a3-13e758ac4ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:aa:9f:9e:4f:b2:bd:e7:72:8f:45:c5:33:37:4e:a1:83:8e: 8a:33:35:9e:0f:fd:74:99:24:08:41:ba:41:9a:09:d6:f4:91: d8:ed:56:33:56:52:0c:75:67:93:82:df:7c:6b:2e:ba:ec:ac: d8:33:a3:e7:4d:1d:9d:15:9c:91:73:e9:82:f6:a1:95:83:35: f1:42:22:cb:7f:71:be:85:15:b8:40:b6:03:bf:18:93:69:46: 72:20:bb:bf:2e:ca:ee:5d:4f:22:15:39:4d:24:a1:ed:72:bd: 17:69:44:ee:72:b2:36:21:37:cb:1c:09:06:57:11:f8:8f:f9: de:04:08:86:87:38:5d:70:b7:47:09:a3:50:84:65:c7:f2:ec: e1:19:7f:cd:dc:7b:74:a5:62:fb:43:eb:ba:fb:74:1e:10:3a: 3c:53:d8:5b:b8:b7:cb:9c:d9:af:a6:8d:50:96:74:33:39:98: 6e:ee:a0:41:be:31:dc:2e:da:c9:99:13:a7:a0:ed:6e:de:6c: 00:8c:f7:ae:cf:d6:d9:fc:2c:f9:63:85:f2:25:d6:44:78:93: 80:09:46:a5:60:bc:1c:93:50:82:d7:01:ac:e8:1f:c9:91:4b: e4:fd:f9:99:40:e1:16:0c:1c:45:26:6d:d5:a0:c5:ed:13:e0: e3:7d:f6:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxNjxedFljkeS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk N2Y0OTU3OTYtODg1Zi00MDgyLTk3ZjAtNTRmNTAwNWJjYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhoPVQEIK0LzJcrcKtfezwfBUZSHmcD2NA/S 8jPTxcllUSzHpTaV2jezJ2d6mtfrtIBlH/JxYqa9QVbE2gq9U6b6lpSvZdgwTuF1 41gz/O/PhplbZBkZIcuoS0Jp8S7G48NhH2uZ4Hori55aVoxtcjA7rep+umF1PBdH NTd63l/J5LR+VoZas1GD8ybJLcv6YJ4Vv4jQE5eAbNJjvjlym81IR4FhK/QvdZxd FYcb2AYxbmrwV28Tc13DkniflJuW0rCk+wvzW4exQLNWGd3X5B3BujbnhlCeHKz9 kjBh56vfI6tx0VGffq0C5x2xB+QsvjfTqnSKhcECLO8el6kmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLG2leaAUi4s/GaCTdYZ+mC8TcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmEyNTlmNDAtYWVjOS0z YWZiLTk1YTMtMTNlNzU4YWM0YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmqn55Psr3nco9FxTM3TqGDjoozNZ4P/XSZJAhBukGaCdb0kdjtVjNW Ugx1Z5OC33xrLrrsrNgzo+dNHZ0VnJFz6YL2oZWDNfFCIst/cb6FFbhAtgO/GJNp RnIgu78uyu5dTyIVOU0koe1yvRdpRO5ysjYhN8scCQZXEfiP+d4ECIaHOF1wt0cJ o1CEZcfy7OEZf83ce3SlYvtD67r7dB4QOjxT2Fu4t8uc2a+mjVCWdDM5mG7uoEG+ Mdwu2smZE6eg7W7ebACM967P1tn8LPljhfIl1kR4k4AJRqVgvByTUILXAazoH8mR S+T9+ZlA4RYMHEUmbdWgxe0T4ON99tc= -----END CERTIFICATE-----Generated at Sat Oct 24 12:21:22 2026 by rpki-client