$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa File: 4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa (raw, json) Hash identifier: 3wZr+3SuoIhYDOuAdHnNlXaskmQk9xiavAP+aviZRCg= Subject key identifier: 0E:76:DC:75:7A:53:4A:FF:F0:46:04:7D:39:F5:1C:B5:60:9D:EE:A5 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584F51D2A5326C110750CFF2FBC0 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 12684 IP address blocks: 209.198.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a5:32:6c:11:07:50:cf:f2:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=66b7c7c6-3af6-4a4e-a148-1acf9830576f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f7:d1:c2:68:ae:cb:a9:da:e7:45:4a:0e:af: f7:56:61:16:ad:d0:86:e2:13:31:95:a6:35:77:c8: 21:6a:6f:2f:0a:f9:91:0b:6f:e8:9c:e4:0e:10:88: 77:a3:bd:04:6f:fb:5a:e3:44:7a:dd:aa:24:54:b4: f5:93:7a:04:61:a1:4e:ec:2d:c7:0e:b3:54:46:52: de:8d:3c:5b:c0:fb:f8:56:bb:db:72:85:97:12:b2: 03:ed:cd:ca:3d:b7:41:ce:62:db:d5:98:28:fb:f1: c8:73:58:93:e7:cd:e5:c6:91:f9:70:5b:2b:9d:27: 09:43:d6:f8:5a:37:ac:69:ad:16:9d:6c:f2:f6:24: 11:99:89:55:60:c2:27:0f:ed:de:15:8a:36:5a:db: 85:06:3c:4a:20:19:7a:f0:d5:70:c6:fb:84:d2:39: dd:30:34:39:7a:3d:c6:1c:1a:23:11:36:a9:40:3f: 95:cf:15:60:3b:ff:72:91:69:fb:ea:9f:e4:7f:8d: 2e:62:27:d9:23:85:2a:cf:2c:ac:9e:26:3f:74:b1: 5a:77:ce:42:57:a7:a0:df:15:5d:d7:cd:6e:70:be: b6:ac:e1:e8:bc:89:a5:ce:99:44:b3:74:07:a2:63: e9:7d:48:06:99:3a:57:8f:50:10:62:ff:f0:70:ac: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:76:DC:75:7A:53:4A:FF:F0:46:04:7D:39:F5:1C:B5:60:9D:EE:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 209.198.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3e:08:0c:1c:f3:8e:63:e0:50:b2:27:4c:b1:0b:1a:60:d1: 84:8e:4f:bf:49:68:bb:c9:fd:59:d3:0d:b1:fc:67:88:c6:7d: b3:5a:2a:c9:6c:51:4f:a3:5c:e0:8c:10:23:fc:70:1d:ff:dd: 9b:3b:30:ae:5d:67:9e:1d:1b:c4:7f:23:ac:d2:35:36:d7:bc: f8:9c:96:bb:12:55:87:39:85:f6:83:25:e8:1a:db:3b:25:98: d3:69:7a:2c:cd:a4:9d:53:4e:55:df:50:9b:96:73:5b:e7:9d: 94:4f:6e:63:d9:5e:e7:b7:49:91:f0:01:5f:2c:4b:e6:50:81: 18:40:3f:70:09:ba:b5:29:16:b1:24:bf:81:11:20:38:f4:01: 27:19:6a:27:9b:cf:7e:a8:1e:ae:97:be:34:b3:1e:70:44:40: 50:6b:0a:b9:cb:7b:b8:9c:f4:46:49:bc:10:d3:c3:fc:b0:2c: fd:fd:aa:67:3f:81:d2:52:3f:8f:0e:bd:22:c6:35:a4:bc:35: d8:91:94:e8:3b:54:45:8f:9d:b1:68:df:70:2e:a5:2e:7b:b9: 92:d8:87:08:d5:7c:db:24:54:8c:e3:44:08:44:fc:98:10:3e: 12:71:88:82:b5:cf:dc:26:9c:7e:32:1f:11:38:f5:2b:0f:d5: 16:8d:16:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qUybBEHUM/y+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NjZiN2M3YzYtM2FmNi00YTRlLWExNDgtMWFjZjk4MzA1NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/fRwmiuy6na50VKDq/3VmEWrdCG4hMxlaY1 d8gham8vCvmRC2/onOQOEIh3o70Eb/ta40R63aokVLT1k3oEYaFO7C3HDrNURlLe jTxbwPv4VrvbcoWXErID7c3KPbdBzmLb1Zgo+/HIc1iT583lxpH5cFsrnScJQ9b4 Wjesaa0WnWzy9iQRmYlVYMInD+3eFYo2WtuFBjxKIBl68NVwxvuE0jndMDQ5ej3G HBojETapQD+VzxVgO/9ykWn76p/kf40uYifZI4UqzyysniY/dLFad85CV6eg3xVd 181ucL62rOHovImlzplEs3QHomPpfUgGmTpXj1AQYv/wcKxOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA523HV6U0r/8EYEfTn1HLVgne6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvNGM4YTdiMTctYjgzOC0z MGUzLTlmYjAtYTQxYTRjYjUwMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo+CAwc845j4FCyJ0yxCxpg0YSOT79JaLvJ/VnTDbH8Z4jGfbNaKsls UU+jXOCMECP8cB3/3Zs7MK5dZ54dG8R/I6zSNTbXvPiclrsSVYc5hfaDJega2zsl mNNpeizNpJ1TTlXfUJuWc1vnnZRPbmPZXue3SZHwAV8sS+ZQgRhAP3AJurUpFrEk v4ERIDj0AScZaiebz36oHq6XvjSzHnBEQFBrCrnLe7ic9EZJvBDTw/ywLP39qmc/ gdJSP48OvSLGNaS8NdiRlOg7VEWPnbFo33AupS57uZLYhwjVfNskVIzjRAhE/JgQ PhJxiIK1z9wmnH4yHxE49SsP1RaNFnU= -----END CERTIFICATE-----Generated at Fri Oct 2 15:09:54 2026 by rpki-client