$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa File: 570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa (raw, json) Hash identifier: rOUiZQVHZRdhPb7SpoNUzaiE9Cax2JAMUt5JiRHFIx0= Subject key identifier: 75:5F:41:21:8D:7D:D8:F0:4B:66:02:48:38:72:D2:A8:C3:DB:7A:28 Certificate issuer: /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Certificate serial: 010D0C9F4328584F4277F8CA3668F39A17877B08 Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16715 IP address blocks: 67.220.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f8:ca:36:68:f3:9a:17:87:7b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=ad246fa6-a951-4c91-81a5-1427365d6105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:e8:b4:40:f2:ec:f3:9d:7a:4a:01:3f:0c: d0:88:5a:5c:43:9e:0b:7e:33:e0:7c:d6:e7:8e:e8: f3:76:36:2a:25:82:db:ce:13:92:8d:4e:3d:54:8f: 62:bc:60:aa:d4:af:2b:c1:12:8a:77:dc:b9:0e:d0: a0:e9:a1:ea:9d:ac:6d:79:48:51:b1:dc:56:4f:e3: d2:d7:75:15:98:54:62:03:06:6f:a7:3e:61:76:b9: 72:4f:75:7b:1b:f5:fd:c1:1c:d5:aa:40:3f:f6:23: 48:12:33:3e:76:9b:63:39:11:7a:e1:c2:50:a4:20: 4f:d6:16:6c:5d:d5:2c:17:4f:a8:d4:09:1b:40:c8: 95:0b:f2:de:2e:af:ef:c1:28:b7:d9:4f:c6:86:2c: 1d:0e:53:f7:15:76:31:0a:b7:86:9c:71:7c:cd:a1: f4:e7:b4:9f:f1:40:2f:b2:fb:ed:1d:ac:f9:09:8c: 7f:ff:b7:cf:7d:7a:54:e7:b0:7f:70:c9:bb:98:c5: f5:3b:b5:09:0c:54:63:d3:3b:cc:f2:e7:08:89:a7: 98:3b:d8:98:df:7e:57:b6:20:94:8b:a7:03:72:ce: 84:c1:39:df:b4:83:2c:4f:9a:1b:77:63:e1:30:8e: 30:02:7c:e5:56:c8:0f:df:10:21:b4:82:2f:59:3c: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:41:21:8D:7D:D8:F0:4B:66:02:48:38:72:D2:A8:C3:DB:7A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl X509v3 Authority Key Identifier: keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer sbgp-ipAddrBlock: critical IPv4: 67.220.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b9:b1:60:b9:d2:84:b0:87:4e:be:f4:ea:0c:fc:5f:a1:93: 32:39:2b:2d:49:20:15:94:c9:a8:be:2d:60:e6:8f:95:b3:fa: 0f:a1:b2:37:8e:9f:e3:c8:51:e8:62:fb:60:10:2b:bb:0b:b4: 65:ed:0a:02:3d:d3:d4:03:9c:93:dd:73:ae:8b:08:d4:b0:11: f4:af:0a:a0:39:16:60:04:16:eb:0c:b2:c4:94:57:7e:11:fc: cb:90:60:85:f8:8a:e8:66:3e:54:56:ca:18:e0:a8:86:81:aa: 9d:52:d2:2f:d1:81:52:bb:a6:7d:35:8c:8d:83:19:16:29:84: ba:6c:8d:39:eb:64:da:da:6d:f9:47:c3:24:7d:74:42:d7:ec: fc:ea:af:b8:a7:70:96:21:88:3c:a0:60:95:54:6c:ad:9c:ad: d9:e5:6b:ef:83:0d:d6:91:48:02:a3:50:6e:c5:29:22:30:ab: 20:c9:7c:6e:0e:e3:68:c1:dd:a0:4a:e2:7d:f8:bd:0b:d9:96: ec:f3:d1:87:03:27:d9:64:6b:03:fe:7e:e0:6d:56:15:1e:29: 2e:58:a9:41:90:16:1c:cd:85:62:06:a4:a3:01:c5:c2:75:e9: c7:41:97:79:92:29:4d:fe:a2:b9:7a:b1:59:5b:7e:a0:cc:7b: 5c:04:3e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/jKNmjzmheHewgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmNWFjODctNzgxNC00ZjU4LWEyYjYtMjA3NWFmYzU2 ZjIxMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YWQyNDZmYTYtYTk1MS00YzkxLTgxYTUtMTQyNzM2NWQ2MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/votEDy7POdekoBPwzQiFpcQ54LfjPgfNbn jujzdjYqJYLbzhOSjU49VI9ivGCq1K8rwRKKd9y5DtCg6aHqnaxteUhRsdxWT+PS 13UVmFRiAwZvpz5hdrlyT3V7G/X9wRzVqkA/9iNIEjM+dptjORF64cJQpCBP1hZs XdUsF0+o1AkbQMiVC/LeLq/vwSi32U/GhiwdDlP3FXYxCreGnHF8zaH057Sf8UAv svvtHaz5CYx//7fPfXpU57B/cMm7mMX1O7UJDFRj0zvM8ucIiaeYO9iY335XtiCU i6cDcs6EwTnftIMsT5obd2PhMI4wAnzlVsgP3xAhtIIvWTzw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVfQSGNfdjwS2YCSDhy0qjD23ooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1 YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1YWZjNTZmMjEvNTcwZGEzYjItOTllNC0z MGNjLWI2ZjUtZWQwZjM5OTc5N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmZmNWFjODctNzgxNC00ZjU4LWEy YjYtMjA3NWFmYzU2ZjIxLzJmZjVhYzg3LTc4MTQtNGY1OC1hMmI2LTIwNzVhZmM1 NmYyMS5jcmwwHwYDVR0jBBgwFoAUqyudZJ+QwRg/Ky44H3m/fZNqR50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1 YWZjNTZmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe5sWC50oSwh06+9OoM/F+hkzI5Ky1JIBWUyai+LWDmj5Wz+g+hsjeO n+PIUehi+2AQK7sLtGXtCgI909QDnJPdc66LCNSwEfSvCqA5FmAEFusMssSUV34R /MuQYIX4iuhmPlRWyhjgqIaBqp1S0i/RgVK7pn01jI2DGRYphLpsjTnrZNrabflH wyR9dELX7Pzqr7incJYhiDygYJVUbK2crdnla++DDdaRSAKjUG7FKSIwqyDJfG4O 42jB3aBK4n34vQvZluzz0YcDJ9lkawP+fuBtVhUeKS5YqUGQFhzNhWIGpKMBxcJ1 6cdBl3mSKU3+orl6sVlbfqDMe1wEPsk= -----END CERTIFICATE-----Generated at Thu Oct 1 10:47:12 2026 by rpki-client