$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/dc9b23aa-c308-3321-b747-7aab417a9c01.roa File: dc9b23aa-c308-3321-b747-7aab417a9c01.roa (raw, json) Hash identifier: pN/IdLhVrOstXPbPtaYtRXjb0ZLSb/aq4hmzl6qLOjc= Subject key identifier: 24:2B:99:7B:31:5C:B8:B3:D1:C1:C2:C3:45:A5:86:96:32:9F:2C:3D Certificate issuer: /CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Certificate serial: 010D0C9F4328584F2901D7BC222A7A124039D54A Authority key identifier: EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/dc9b23aa-c308-3321-b747-7aab417a9c01.roa Signing time: Sun 13 Sep 2026 10:07:18 +0000 ROA not before: Sun 13 Sep 2026 10:07:18 +0000 ROA not after: Sat 12 Dec 2026 11:07:18 +0000 asID: 198949 IP address blocks: 158.65.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:01:d7:bc:22:2a:7a:12:40:39:d5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Validity Not Before: Sep 13 10:07:18 2026 GMT Not After : Dec 12 11:07:18 2026 GMT Subject: CN=02853afd-f286-47f5-976a-dfc7992f0cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:0e:b6:2a:de:50:19:9e:61:c2:b9:5f:58: 9a:da:f1:d9:7a:81:c6:ef:ee:47:21:c0:9d:64:03: 63:6c:fd:40:0a:71:1c:ae:23:cd:94:5f:e1:41:c1: e3:5d:cc:cc:22:37:fc:b1:1f:ad:c6:a7:78:d3:de: 9d:07:41:76:8f:e5:02:43:da:fb:4c:05:6a:42:16: 21:59:97:a9:88:90:27:6a:02:df:81:ad:91:ae:42: d9:be:e9:db:05:ab:74:c6:fd:74:61:cb:d6:69:af: 48:3c:19:5f:70:c8:22:bd:65:d8:2b:48:89:0f:16: 63:0a:a2:d7:a4:67:35:58:37:10:69:77:7e:70:6c: c4:74:fb:bf:05:18:9b:ef:94:f9:e3:ce:5b:57:c3: 1f:25:7b:b4:25:80:17:61:8f:f4:fa:b8:10:79:4f: 4e:6e:17:b0:c9:31:c2:85:ae:ff:6f:e6:71:5f:9a: 5b:49:ce:7f:18:d4:39:a5:2f:52:ae:59:cf:db:ff: 5b:16:d3:0f:bb:34:ba:93:8a:1e:69:c5:89:5a:45: 2a:a7:bb:4a:5f:d3:84:c8:44:0c:6a:2e:35:33:c7: f5:61:6f:3a:4d:5e:b9:6e:e3:26:c6:f2:31:3b:7e: c4:d6:8f:65:03:07:96:2d:a2:0a:81:1f:7b:a1:f8: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2B:99:7B:31:5C:B8:B3:D1:C1:C2:C3:45:A5:86:96:32:9F:2C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/dc9b23aa-c308-3321-b747-7aab417a9c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl X509v3 Authority Key Identifier: keyid:EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer sbgp-ipAddrBlock: critical IPv4: 158.65.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8f:af:ab:47:ce:91:dd:67:dc:2d:a0:57:75:b6:e2:a7:1e: 32:c7:5b:e5:c7:eb:c1:4b:e3:1a:f4:88:2d:32:56:a7:04:47: cc:ad:1c:ec:66:80:36:ee:9d:62:be:80:87:67:d0:0d:f3:f6: 4d:a4:8a:f9:5f:e7:4c:71:a4:31:3a:08:18:c9:d8:e4:ee:ba: b6:d9:5c:84:0c:e7:3c:5b:51:ed:c4:50:ab:de:a9:c8:df:b2: c5:07:e7:28:41:52:cf:c3:53:f9:55:5b:10:fb:68:c7:c1:89: 16:f7:31:15:b1:ec:fb:79:47:1a:3e:c5:3d:56:0a:f1:3d:f8: b5:51:2f:3b:5c:75:e6:56:33:0d:ed:61:87:74:e8:88:6e:b6: fa:34:0d:e1:a2:06:2e:be:b0:9b:1c:14:de:c9:07:c7:00:3b: 4b:08:e2:20:da:f9:ba:61:f9:a3:8d:2c:15:5f:66:43:e6:a4: f9:91:13:d1:a1:4e:51:14:07:d2:3f:14:af:12:4f:51:13:93: 5d:3b:55:e4:b1:83:7e:aa:47:8d:cc:65:09:bf:0b:bd:70:e7: db:82:95:02:12:19:07:8c:25:66:7f:ba:46:4a:28:db:56:c8: 01:68:7b:f1:2a:4e:1e:da:f6:c5:de:4c:7f:e2:9e:3b:f4:6b: e5:37:e6:f8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8pAde8Iip6EkA51UowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0NGRkZmUtNmZkZS00MDgzLWExZGQtY2JiMzcwN2Ux YjcwMB4XDTI2MDkxMzEwMDcxOFoXDTI2MTIxMjExMDcxOFowLzEtMCsGA1UEAxMk MDI4NTNhZmQtZjI4Ni00N2Y1LTk3NmEtZGZjNzk5MmYwY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz0OtireUBmeYcK5X1ia2vHZeoHG7+5HIcCd ZANjbP1ACnEcriPNlF/hQcHjXczMIjf8sR+txqd4096dB0F2j+UCQ9r7TAVqQhYh WZepiJAnagLfga2RrkLZvunbBat0xv10YcvWaa9IPBlfcMgivWXYK0iJDxZjCqLX pGc1WDcQaXd+cGzEdPu/BRib75T5485bV8MfJXu0JYAXYY/0+rgQeU9ObhewyTHC ha7/b+ZxX5pbSc5/GNQ5pS9SrlnP2/9bFtMPuzS6k4oeacWJWkUqp7tKX9OEyEQM ai41M8f1YW86TV65buMmxvIxO37E1o9lAweWLaIKgR97ofi/AQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCQrmXsxXLiz0cHCw0WlhpYynyw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTQ0 ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIzNzA3ZTFiNzAvZGM5YjIzYWEtYzMwOC0z MzIxLWI3NDctN2FhYjQxN2E5YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE0NGRkZmUtNmZkZS00MDgzLWEx ZGQtY2JiMzcwN2UxYjcwLzBhNDRkZGZlLTZmZGUtNDA4My1hMWRkLWNiYjM3MDdl MWI3MC5jcmwwHwYDVR0jBBgwFoAU61b6mf+W2WIibWtv4wAQCLrKqWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTQ0ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIz NzA3ZTFiNzAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnkEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAII+vq0fOkd1n3C2gV3W24qceMsdb5cfrwUvjGvSILTJWpwRHzK0c7GaA Nu6dYr6Ah2fQDfP2TaSK+V/nTHGkMToIGMnY5O66ttlchAznPFtR7cRQq96pyN+y xQfnKEFSz8NT+VVbEPtox8GJFvcxFbHs+3lHGj7FPVYK8T34tVEvO1x15lYzDe1h h3ToiG62+jQN4aIGLr6wmxwU3skHxwA7SwjiINr5umH5o40sFV9mQ+ak+ZET0aFO URQH0j8UrxJPUROTXTtV5LGDfqpHjcxlCb8LvXDn24KVAhIZB4wlZn+6Rkoo21bI AWh78SpOHtr2xd5Mf+KeO/Rr5Tfm+A== -----END CERTIFICATE-----Generated at Sat Sep 26 11:48:00 2026 by rpki-client