$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa File: a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa (raw, json) Hash identifier: 8c0gH/NvpUSjJxbOXQaYhmCiPI1c23MVdxR+PAHkx9s= Subject key identifier: 49:51:03:EE:16:20:1B:BB:42:7C:ED:E0:57:28:88:25:B8:02:5A:46 Certificate issuer: /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b Certificate serial: 010D0C9F4328584F6292D6525B0FFA4ACC22B420 Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 12059 IP address blocks: 216.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d6:52:5b:0f:fa:4a:cc:22:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7131a86b-e014-4238-b5bb-8c7939bfe4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:84:5f:ed:25:3e:b5:56:e7:36:c4:9e:ae: 39:f5:d5:e3:31:25:08:fe:f1:22:32:60:d0:0c:33: 0a:a0:f7:a6:a8:6f:f0:30:0b:61:c1:4f:fd:79:87: 70:2e:4e:c3:cb:f4:56:aa:91:7b:78:0f:44:94:56: 81:a5:7f:cd:5d:79:16:d8:16:2d:61:d4:1f:e2:3a: 4d:84:45:25:c0:58:87:e5:f2:67:b6:3a:c5:c2:6b: 16:83:cd:e5:d3:0f:27:42:fa:fb:fd:4d:8b:8b:74: 7b:4e:82:0f:42:76:98:d0:dd:8e:3a:bf:8f:03:35: e5:56:4c:e9:29:08:6e:cb:85:b2:f7:83:d5:43:17: 5e:89:f0:46:5a:ea:62:7f:a5:80:a2:87:1a:c0:88: 7e:d9:22:c2:b3:c9:91:13:83:38:c9:0c:19:ec:bf: bf:76:5a:17:58:2f:5d:0f:0d:6d:dd:bd:fd:a9:60: 74:11:bc:e7:82:34:f0:a4:3a:a2:cd:d7:c6:6b:b2: 99:c9:eb:17:fd:9e:c3:a2:bf:68:23:7b:3c:66:39: d7:c3:a4:c1:c2:e6:e1:3b:10:19:b4:09:89:f7:1e: 80:f4:98:cc:1d:e4:46:5e:fe:00:e0:12:93:a4:e0: 59:cf:d9:d7:ea:84:dc:48:c9:90:bc:bb:ad:50:95: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:03:EE:16:20:1B:BB:42:7C:ED:E0:57:28:88:25:B8:02:5A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl X509v3 Authority Key Identifier: keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer sbgp-ipAddrBlock: critical IPv4: 216.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f9:8a:3f:00:c0:5f:f1:1d:20:f7:65:69:58:61:05:34:3c: 62:aa:05:0b:42:fe:65:40:18:33:a6:2c:0a:08:5a:44:ab:dd: 71:5d:be:96:03:9c:1b:e3:f3:bf:6f:7e:ea:55:4c:97:4a:28: 69:62:03:6b:2e:da:bb:94:e4:d8:18:fd:6a:e9:60:08:83:53: ce:ea:ef:ae:bc:1d:ee:4a:ff:76:b2:c9:eb:2c:c9:71:10:62: 49:9d:4b:0d:01:1d:af:f8:dd:4c:3d:1e:e3:9e:da:34:8e:db: ff:e8:5d:06:ed:f0:72:55:84:65:3b:ba:92:5a:a7:5c:cf:e2: 01:6b:40:01:fa:03:c6:80:f9:4b:27:74:35:6c:88:9f:e9:a2: bf:ff:86:b3:5b:81:77:c5:2d:3f:e7:84:d4:c0:66:07:d1:4d: c5:2d:eb:92:39:47:99:db:c6:1f:0f:ad:24:0e:ae:d6:7d:10: 62:5e:26:d1:31:37:4b:9d:87:b9:71:1c:2f:97:1e:87:42:fe: b0:4f:2a:d4:a5:7b:22:03:12:97:0b:34:e7:59:33:fa:1f:b8: 74:df:73:6d:32:02:c1:e1:62:13:52:97:07:01:65:56:e0:d6: 0d:12:84:36:31:e8:bd:43:7f:2d:01:70:e3:50:24:4a:fd:31: 63:50:c6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktZSWw/6SswitCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVlMWM5NTQtNjdmYy00YjFjLTg1ZWEtOGYyYjI1N2Zk MzdiMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NzEzMWE4NmItZTAxNC00MjM4LWI1YmItOGM3OTM5YmZlNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVSEX+0lPrVW5zbEnq459dXjMSUI/vEiMmDQ DDMKoPemqG/wMAthwU/9eYdwLk7Dy/RWqpF7eA9ElFaBpX/NXXkW2BYtYdQf4jpN hEUlwFiH5fJntjrFwmsWg83l0w8nQvr7/U2Li3R7ToIPQnaY0N2OOr+PAzXlVkzp KQhuy4Wy94PVQxdeifBGWupif6WAoocawIh+2SLCs8mRE4M4yQwZ7L+/dloXWC9d Dw1t3b39qWB0EbzngjTwpDqizdfGa7KZyesX/Z7Dor9oI3s8ZjnXw6TBwubhOxAZ tAmJ9x6A9JjMHeRGXv4A4BKTpOBZz9nX6oTcSMmQvLutUJVRmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElRA+4WIBu7Qnzt4FcoiCW4AlpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NWUx Yzk1NC02N2ZjLTRiMWMtODVlYS04ZjJiMjU3ZmQzN2IvYTI0OWU3ZTctNzNlYS0z Njg2LWIyNmEtNTFmNDQ0ZjliNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjVlMWM5NTQtNjdmYy00YjFjLTg1 ZWEtOGYyYjI1N2ZkMzdiLzY1ZTFjOTU0LTY3ZmMtNGIxYy04NWVhLThmMmIyNTdm ZDM3Yi5jcmwwHwYDVR0jBBgwFoAUnOc/exeZAcO0K6LdzNctgB749OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NWUxYzk1NC02N2ZjLTRiMWMtODVlYS04ZjJi MjU3ZmQzN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2N+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD35ij8AwF/xHSD3ZWlYYQU0PGKqBQtC/mVAGDOmLAoIWkSr3XFdvpYD nBvj879vfupVTJdKKGliA2su2ruU5NgY/WrpYAiDU87q7668He5K/3ayyessyXEQ YkmdSw0BHa/43Uw9HuOe2jSO2//oXQbt8HJVhGU7upJap1zP4gFrQAH6A8aA+Usn dDVsiJ/por//hrNbgXfFLT/nhNTAZgfRTcUt65I5R5nbxh8PrSQOrtZ9EGJeJtEx N0udh7lxHC+XHodC/rBPKtSleyIDEpcLNOdZM/ofuHTfc20yAsHhYhNSlwcBZVbg 1g0ShDYx6L1Dfy0BcONQJEr9MWNQxss= -----END CERTIFICATE-----Generated at Sun Oct 4 21:34:16 2026 by rpki-client