$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa File: 1bad068c-3a7e-3488-8d50-a5e1755f7430.roa (raw, json) Hash identifier: YxOnGJW4sem2eLEsBuuVHHTtgiRvQgzshmNlcGrawlA= Subject key identifier: 85:A0:0D:7C:49:0F:30:70:60:32:8F:B1:D9:6C:8C:5F:07:53:A0:82 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F49740A1B38EC8138AB3710B0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 216.131.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0a:1b:38:ec:81:38:ab:37:10:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=15c9e573-6d43-414c-80d8-06de0a4c4d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:40:ba:b1:ee:a1:78:08:37:a6:80:44:d8: 1d:8f:1f:46:dd:4a:ff:f6:52:00:ea:07:27:f2:4f: 72:70:b7:56:57:66:22:9b:98:f6:f6:f7:24:92:28: 21:0d:cb:c7:8b:a2:5d:06:a1:40:ff:fe:a3:cd:cb: 52:e9:29:1a:ec:0b:69:56:1a:d7:c0:3e:ed:78:e7: 6e:76:ea:77:7b:c3:b6:db:e4:fe:6d:a3:0f:00:4b: fe:47:ae:d2:c1:1e:c1:68:1e:08:c0:f1:dd:9e:6a: 8a:c3:e6:cd:ae:4a:b6:31:91:74:e0:61:f2:54:d5: f4:5a:b5:81:b4:e0:34:50:fd:14:ec:9d:2e:b1:2f: 19:2c:b0:2c:52:4a:56:8a:30:09:82:07:b8:03:61: 57:f8:74:c7:50:09:23:d7:73:10:16:95:47:61:dc: 7d:50:8a:07:f3:64:c8:18:ff:92:63:ce:34:83:ea: 01:5b:31:3f:d1:06:51:a3:44:5b:1b:d4:ad:68:e4: ab:4f:1c:ae:2d:6d:58:ea:6d:d7:1f:37:6d:8e:ef: 48:24:c6:02:b2:5c:fc:da:40:93:8b:d5:1a:86:b0: 04:50:a4:f8:fa:9e:00:f2:9f:f7:76:05:19:b9:ce: b7:5d:d3:18:13:d4:ce:47:26:d6:07:74:60:a7:14: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:0D:7C:49:0F:30:70:60:32:8F:B1:D9:6C:8C:5F:07:53:A0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:94:d5:4f:be:75:be:db:2e:a7:0a:db:15:2b:40:9e:ab:a1: 48:7f:74:cd:02:28:cd:16:bb:6a:d6:1d:97:43:68:a5:a0:69: c7:2f:08:ec:b8:e4:f7:11:e9:f0:e5:69:8a:c9:28:9d:30:94: 2b:6c:ba:cb:7c:6a:46:a7:5a:83:b8:fd:78:7a:d8:1d:f8:ed: 11:5a:33:ca:4b:16:4f:90:8f:43:a4:e0:55:e7:2d:13:d6:6f: 7e:28:e9:35:18:15:14:55:04:60:f7:37:95:c9:49:95:84:76: 69:21:e0:7b:10:34:0f:2d:16:7a:7d:d7:61:99:34:8c:d1:e0: 35:f6:8a:1a:3d:27:cb:dc:f4:83:37:87:3e:10:98:d1:51:cf: 24:7e:83:1a:8d:ba:08:fb:d5:7c:9e:0c:af:ff:e8:c1:74:cf: 45:87:f3:1c:0d:db:3a:65:06:d4:e5:09:fa:13:4d:77:95:fe: b9:f7:6c:3b:b1:1f:6d:54:52:e5:73:f8:57:a5:5f:8f:37:cb: c9:1f:5c:73:5f:1f:2d:af:b2:5f:83:4c:f6:79:5b:38:a1:a6: 67:66:39:4b:1e:b4:e6:b2:3e:ae:66:05:d3:e1:9c:e6:dd:98: 4f:0c:d4:7c:2f:8f:22:f2:89:1b:f6:80:35:0a:c7:36:d9:af: 34:38:91:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAobOOyBOKs3ELAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTVjOWU1NzMtNmQ0My00MTRjLTgwZDgtMDZkZTBhNGM0ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5pAurHuoXgIN6aARNgdjx9G3Ur/9lIA6gcn 8k9ycLdWV2Yim5j29vckkighDcvHi6JdBqFA//6jzctS6Ska7AtpVhrXwD7teOdu dup3e8O22+T+baMPAEv+R67SwR7BaB4IwPHdnmqKw+bNrkq2MZF04GHyVNX0WrWB tOA0UP0U7J0usS8ZLLAsUkpWijAJgge4A2FX+HTHUAkj13MQFpVHYdx9UIoH82TI GP+SY840g+oBWzE/0QZRo0RbG9StaOSrTxyuLW1Y6m3XHzdtju9IJMYCslz82kCT i9UahrAEUKT4+p4A8p/3dgUZuc63XdMYE9TORybWB3RgpxRFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWgDXxJDzBwYDKPsdlsjF8HU6CCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWJhZDA2OGMtM2E3ZS0z NDg4LThkNTAtYTVlMTc1NWY3NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2U1U++db7bLqcK2xUrQJ6roUh/dM0CKM0Wu2rWHZdDaKWgaccvCOy4 5PcR6fDlaYrJKJ0wlCtsust8akanWoO4/Xh62B347RFaM8pLFk+Qj0Ok4FXnLRPW b34o6TUYFRRVBGD3N5XJSZWEdmkh4HsQNA8tFnp912GZNIzR4DX2iho9J8vc9IM3 hz4QmNFRzyR+gxqNugj71XyeDK//6MF0z0WH8xwN2zplBtTlCfoTTXeV/rn3bDux H21UUuVz+FelX483y8kfXHNfHy2vsl+DTPZ5WzihpmdmOUsetOayPq5mBdPhnObd mE8M1HwvjyLyiRv2gDUKxzbZrzQ4kUA= -----END CERTIFICATE-----Generated at Tue Oct 13 22:40:29 2026 by rpki-client