$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de/a9d9252a-0ff3-392a-94d5-9f11d3080888.roa File: a9d9252a-0ff3-392a-94d5-9f11d3080888.roa (raw, json) Hash identifier: Hgp4Uhzet1kS0EdgQmRYbTOuJ18ztYPFaNaJLQpnYPs= Subject key identifier: 54:4D:88:3D:A1:E6:A5:7E:97:AB:27:F7:B7:41:D7:10:35:8A:25:61 Certificate issuer: /CN=57f8eb89-9278-4a23-9f75-b257e92b97de Certificate serial: 010D0C9F4328584F4957EE1769F9AAF45B609500 Authority key identifier: 25:35:35:C4:EF:AF:DF:F8:38:82:81:CF:9C:7D:EE:82:B4:FE:40:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de/a9d9252a-0ff3-392a-94d5-9f11d3080888.roa Signing time: Fri 25 Sep 2026 00:06:38 +0000 ROA not before: Fri 25 Sep 2026 00:06:38 +0000 ROA not after: Thu 24 Dec 2026 01:03:30 +0000 asID: 33055 IP address blocks: 65.182.96.0/20 maxlen: 24 204.152.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de/57f8eb89-9278-4a23-9f75-b257e92b97de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de/57f8eb89-9278-4a23-9f75-b257e92b97de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:57:ee:17:69:f9:aa:f4:5b:60:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57f8eb89-9278-4a23-9f75-b257e92b97de Validity Not Before: Sep 25 00:06:38 2026 GMT Not After : Dec 24 01:03:30 2026 GMT Subject: CN=c6769433-a93a-475e-9596-7daa085c7a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:d3:9a:04:d4:23:1d:e7:e3:ec:10:fe:1c: fb:99:a3:5e:50:e6:60:12:47:ff:59:68:50:39:73: 01:a9:a3:5b:91:7f:4e:f6:8b:da:fb:e4:7a:a1:ca: d9:84:d1:e2:31:c4:1b:51:fb:83:5c:a0:a3:c7:8f: d1:21:76:bf:a4:eb:33:ee:44:10:9a:05:01:be:47: 7e:67:69:b8:c5:1b:70:f3:95:53:12:f1:e7:2f:ba: 8e:ae:8f:81:09:bb:16:5c:38:15:70:3c:bc:30:bb: b8:84:59:06:7d:a6:8b:08:d8:28:36:21:08:22:65: 7d:fd:bc:f2:cb:de:81:dc:9a:f0:28:78:aa:28:7e: 9f:0e:5d:72:b0:20:14:d4:09:39:79:30:0f:06:11: 62:07:94:50:f0:a2:9d:42:b3:f6:3e:af:3a:43:5f: 1c:f7:38:69:4a:7d:5a:08:d0:04:f7:20:39:39:7f: 3f:5c:bb:b5:ab:5d:00:c3:52:7f:a1:5e:34:78:fe: 31:a6:f3:a2:7b:1f:74:67:12:56:97:35:6d:e3:92: 7d:9b:e9:33:e6:b9:f9:c1:5d:be:13:30:55:aa:ef: 91:c6:b9:db:0b:61:9e:0d:28:d7:c4:ba:e9:c5:33: b8:01:69:41:b8:7c:1c:d2:f6:c1:86:ac:b6:05:51: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4D:88:3D:A1:E6:A5:7E:97:AB:27:F7:B7:41:D7:10:35:8A:25:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de/a9d9252a-0ff3-392a-94d5-9f11d3080888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de/57f8eb89-9278-4a23-9f75-b257e92b97de.crl X509v3 Authority Key Identifier: keyid:25:35:35:C4:EF:AF:DF:F8:38:82:81:CF:9C:7D:EE:82:B4:FE:40:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57f8eb89-9278-4a23-9f75-b257e92b97de.cer sbgp-ipAddrBlock: critical IPv4: 65.182.96.0/20 204.152.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:13:1c:82:3b:7e:93:5e:52:44:d0:1b:cf:76:6c:7b:02:e7: 20:ce:f4:aa:08:f2:28:34:59:29:44:c8:24:77:1e:5f:02:2c: bd:39:7d:ea:96:32:01:ab:0b:fb:73:5d:e6:64:aa:55:1a:51: a7:6c:83:39:44:20:c6:d1:f1:ef:89:ee:03:10:97:a7:8a:33: 9b:33:46:e9:02:34:75:36:cd:16:c7:fc:7b:ae:31:9b:bc:8a: dd:90:b0:1a:8e:e2:0a:a5:e6:26:67:e5:0e:3a:65:c5:59:58: b0:ef:f0:68:2d:f4:fc:0a:00:1d:52:a6:cb:34:28:ad:91:c4: 09:db:bb:d3:8e:b1:89:76:f6:58:e9:25:b4:75:f4:a1:4f:66: 48:4f:f8:dd:cc:6e:2b:04:34:11:26:12:3e:6e:f6:2f:d9:63: dd:fa:47:af:37:2b:25:0f:3a:32:ca:34:8e:76:45:a4:66:66: 7b:8a:85:62:85:02:39:29:f8:5e:af:cb:cd:f9:9a:ea:af:49: df:79:d3:b3:89:1e:5d:53:a3:b3:b4:2e:4d:5a:a0:48:7c:4b: ee:43:58:85:85:6c:2b:4c:0f:f6:31:40:32:1d:f8:5f:6d:3d: 8d:34:8b:aa:d3:0e:2e:77:fe:46:4f:aa:bd:76:11:fe:74:b2: 36:c2:32:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JV+4Xafmq9FtglQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdmOGViODktOTI3OC00YTIzLTlmNzUtYjI1N2U5MmI5 N2RlMB4XDTI2MDkyNTAwMDYzOFoXDTI2MTIyNDAxMDMzMFowLzEtMCsGA1UEAxMk YzY3Njk0MzMtYTkzYS00NzVlLTk1OTYtN2RhYTA4NWM3YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGPTmgTUIx3n4+wQ/hz7maNeUOZgEkf/WWhQ OXMBqaNbkX9O9ova++R6ocrZhNHiMcQbUfuDXKCjx4/RIXa/pOsz7kQQmgUBvkd+ Z2m4xRtw85VTEvHnL7qOro+BCbsWXDgVcDy8MLu4hFkGfaaLCNgoNiEIImV9/bzy y96B3JrwKHiqKH6fDl1ysCAU1Ak5eTAPBhFiB5RQ8KKdQrP2Pq86Q18c9zhpSn1a CNAE9yA5OX8/XLu1q10Aw1J/oV40eP4xpvOiex90ZxJWlzVt45J9m+kz5rn5wV2+ EzBVqu+RxrnbC2GeDSjXxLrpxTO4AWlBuHwc0vbBhqy2BVFgrQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFRNiD2h5qV+l6sn97dB1xA1iiVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81N2Y4 ZWI4OS05Mjc4LTRhMjMtOWY3NS1iMjU3ZTkyYjk3ZGUvYTlkOTI1MmEtMGZmMy0z OTJhLTk0ZDUtOWYxMWQzMDgwODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTdmOGViODktOTI3OC00YTIzLTlm NzUtYjI1N2U5MmI5N2RlLzU3ZjhlYjg5LTkyNzgtNGEyMy05Zjc1LWIyNTdlOTJi OTdkZS5jcmwwHwYDVR0jBBgwFoAUJTU1xO+v3/g4goHPnH3ugrT+QNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81N2Y4ZWI4OS05Mjc4LTRhMjMtOWY3NS1iMjU3 ZTkyYjk3ZGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQbZgAwQE zJjwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAcTHII7fpNeUkTQG892bHsC5yDO9KoI8ig0WSlEyCR3Hl8C LL05feqWMgGrC/tzXeZkqlUaUadsgzlEIMbR8e+J7gMQl6eKM5szRukCNHU2zRbH /HuuMZu8it2QsBqO4gql5iZn5Q46ZcVZWLDv8Ggt9PwKAB1Spss0KK2RxAnbu9OO sYl29ljpJbR19KFPZkhP+N3MbisENBEmEj5u9i/ZY936R683KyUPOjLKNI52RaRm ZnuKhWKFAjkp+F6vy835muqvSd9507OJHl1To7O0Lk1aoEh8S+5DWIWFbCtMD/Yx QDId+F9tPY00i6rTDi53/kZPqr12Ef50sjbCMiw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:28 2026 by rpki-client