$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa File: 0d3a9201-b626-32e3-8ba2-32af8872019c.roa (raw, json) Hash identifier: mjiLIyzmXRz0gELeGPxCyOcWGNEjUNq6ib6BqypLA6w= Subject key identifier: B8:7B:F9:26:CC:AF:A1:24:C0:5B:21:3C:F7:0C:BC:39:AA:CA:AD:E0 Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F4328584F4973C25064FFD31C1E721200 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 168.235.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c2:50:64:ff:d3:1c:1e:72:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=999c4689-0b49-4ab8-9005-951ac76b9c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:d6:98:01:11:44:d5:8c:15:1a:93:40:71: a3:64:70:21:1c:54:3a:70:30:95:7f:df:7d:2c:1c: f5:fa:d3:6a:40:f6:89:91:4e:c5:a1:a7:51:46:79: b9:6d:5a:4e:15:be:76:b4:8b:a6:5c:b5:66:5c:4c: a0:0a:ca:01:0c:68:79:39:c7:a6:84:8f:1c:13:fb: b6:9c:ac:4c:69:e4:31:3b:7d:e1:ee:59:75:b7:e6: 94:c3:54:b4:49:6d:38:43:c2:00:24:15:7c:62:b2: 69:41:12:31:c8:be:43:38:1f:76:33:dc:11:90:02: 61:58:1f:e1:ff:68:05:dd:65:32:d1:e5:ca:13:ef: f6:1e:be:75:c6:78:66:4b:d7:a0:73:0c:4e:f9:d3: be:46:51:c6:a8:01:b0:2d:01:fe:5e:b6:35:09:ee: c4:7f:cb:79:76:b4:23:a0:52:7e:b4:d1:80:1b:d0: a9:47:db:3d:39:95:ee:ab:fa:d8:cb:fd:d7:58:c4: 3f:31:fe:6f:e6:f6:bd:47:99:ca:cc:c5:79:72:29: b4:a3:c6:f0:71:75:a0:0e:8a:63:d0:35:95:f5:1f: 31:f3:be:92:ed:56:9a:b2:09:e5:51:85:55:a4:0f: 45:39:0a:40:7f:74:5c:5e:0e:b5:e6:80:f9:93:ae: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:F9:26:CC:AF:A1:24:C0:5B:21:3C:F7:0C:BC:39:AA:CA:AD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:10:0a:89:52:1d:7b:d3:2a:12:d7:e8:ac:74:76:db:38:61: 19:e4:9b:ea:c7:30:e2:5a:d4:e1:e6:0b:5b:0d:10:19:98:c5: 03:92:d1:3e:44:e3:e0:ed:5e:0e:18:11:27:80:3b:01:e6:1c: 42:49:10:85:a9:36:a4:5e:11:9a:1d:98:f6:05:58:55:80:a9: 4f:fe:ab:46:f6:0c:5d:19:cc:ea:f6:27:a4:15:f4:b4:18:33: 21:3f:bc:86:02:27:1a:03:7f:a8:24:33:66:ad:0d:b3:b3:c8: 43:53:16:61:2e:81:19:b0:a9:7d:1d:c9:b5:fa:bd:bd:fc:78: 6b:b9:b8:f7:94:20:c8:6e:dc:36:b3:86:87:54:98:1a:70:19: 9f:73:47:31:56:bb:1d:c5:16:be:49:16:63:74:4d:03:a3:e9: 65:48:87:71:32:8d:5c:fa:43:0a:48:19:37:d4:1c:f4:fa:30: 8d:14:2c:a0:bf:1f:ab:d0:ad:3b:7d:4b:51:a1:0f:e4:e2:17: 0c:98:5a:43:10:0b:ae:0a:46:aa:f5:0f:b1:f5:89:c6:b8:1c: ba:74:c0:83:8c:18:1d:27:a7:b2:c1:60:bc:2a:b5:d5:d7:f9: 82:52:f5:23:51:48:2f:9d:06:3b:1e:b3:bb:3e:b8:77:dd:b7: 9a:0c:a0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8JQZP/THB5yEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTk5YzQ2ODktMGI0OS00YWI4LTkwMDUtOTUxYWM3NmI5YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiPWmAERRNWMFRqTQHGjZHAhHFQ6cDCVf999 LBz1+tNqQPaJkU7FoadRRnm5bVpOFb52tIumXLVmXEygCsoBDGh5OcemhI8cE/u2 nKxMaeQxO33h7ll1t+aUw1S0SW04Q8IAJBV8YrJpQRIxyL5DOB92M9wRkAJhWB/h /2gF3WUy0eXKE+/2Hr51xnhmS9egcwxO+dO+RlHGqAGwLQH+XrY1Ce7Ef8t5drQj oFJ+tNGAG9CpR9s9OZXuq/rYy/3XWMQ/Mf5v5va9R5nKzMV5cim0o8bwcXWgDopj 0DWV9R8x876S7VaasgnlUYVVpA9FOQpAf3RcXg615oD5k65LJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh7+SbMr6EkwFshPPcMvDmqyq3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMGQzYTkyMDEtYjYyNi0z MmUzLThiYTItMzJhZjg4NzIwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4QColSHXvTKhLX6Kx0dts4YRnkm+rHMOJa1OHmC1sNEBmYxQOS0T5E 4+DtXg4YESeAOwHmHEJJEIWpNqReEZodmPYFWFWAqU/+q0b2DF0ZzOr2J6QV9LQY MyE/vIYCJxoDf6gkM2atDbOzyENTFmEugRmwqX0dybX6vb38eGu5uPeUIMhu3Daz hodUmBpwGZ9zRzFWux3FFr5JFmN0TQOj6WVIh3EyjVz6QwpIGTfUHPT6MI0ULKC/ H6vQrTt9S1GhD+TiFwyYWkMQC64KRqr1D7H1ica4HLp0wIOMGB0np7LBYLwqtdXX +YJS9SNRSC+dBjses7s+uHfdt5oMoGc= -----END CERTIFICATE-----Generated at Sun Sep 27 01:33:42 2026 by rpki-client