$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa File: 2c9098e1-8590-3ce4-a313-bf25729c2190.roa (raw, json) Hash identifier: tjdSbrXD3vMaAk34o8aA5DRaVz9Cs/jQuI7k/LdEjRQ= Subject key identifier: 36:9E:3D:7E:47:AA:D3:8A:71:9C:9F:56:8E:A3:1B:CA:05:38:06:21 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584F4975BC7C6C79C92E24071F20 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398420 IP address blocks: 216.246.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:bc:7c:6c:79:c9:2e:24:07:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=01d9c426-0eab-42f9-b167-96be8e7867e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:36:95:10:8b:11:f1:a5:f7:75:ec:ab:39: 4a:d0:8e:b0:54:a1:cf:99:83:fd:7b:20:6f:4a:4f: 36:60:b2:34:09:3f:26:bb:45:97:69:00:72:24:a7: a7:42:39:93:ba:da:6c:8e:db:d5:b6:9b:b0:5a:92: d2:57:14:e7:e8:f0:98:f2:42:9f:00:4d:fa:18:72: 48:b0:00:20:ae:f6:2f:a1:4e:4c:58:c6:ad:56:75: 0d:9a:d9:b6:56:52:81:e9:aa:60:e9:e4:9f:01:1c: 6d:74:9f:44:ae:32:12:02:e6:47:eb:7f:65:75:95: 6f:f7:62:fd:b2:8b:55:3c:00:c5:93:af:e4:bb:7f: 91:a3:63:2f:7f:97:61:a1:8b:c4:e9:4f:bf:0e:9a: 08:08:36:dd:a7:43:0e:83:99:22:9f:bb:1e:05:bb: b1:22:4f:35:90:5c:49:19:ba:a9:b1:df:ad:c2:75: b8:6c:c1:f9:a5:69:2a:bc:c1:62:fc:fd:14:87:55: 33:b1:c5:bf:85:af:a3:90:8e:b7:09:3e:82:7a:10: 28:d5:94:49:3a:ff:d9:26:7d:44:8f:a4:b6:ff:9e: 81:c2:c7:c6:d8:c6:cb:30:e6:be:a8:d2:19:43:1e: 43:de:a2:ba:a1:21:ab:38:11:78:4a:2a:18:35:0d: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:3D:7E:47:AA:D3:8A:71:9C:9F:56:8E:A3:1B:CA:05:38:06:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e4:31:1a:e9:9e:5e:63:1d:a9:5d:9f:f1:6d:70:b5:8d:74: e7:03:eb:05:8c:cb:28:05:2a:1b:20:71:a6:1e:6e:34:1f:48: de:14:37:3d:13:c3:48:08:66:d8:4f:43:67:42:27:58:cb:ac: cc:bb:81:15:b5:70:b5:b0:12:16:6b:84:15:b6:c9:1c:f6:33: 61:d0:83:0e:49:3f:3e:59:01:59:d4:40:a6:89:30:81:7c:b9: 71:3c:17:c6:c0:fd:4c:13:1b:9e:d0:e8:8c:a5:24:95:ad:42: 9f:f4:81:2d:5c:97:15:59:6b:39:3f:2d:2f:56:8e:c1:84:a3: 04:03:6f:04:4d:6f:75:be:04:c1:55:f4:d3:0e:62:92:68:22: e4:7a:a2:3d:a8:10:6f:b3:4b:e2:46:b4:43:0d:77:d9:47:d9: 62:d0:8c:d9:10:33:6a:2c:fa:36:b7:0c:e3:11:e6:46:57:41: f5:fc:b3:28:0c:96:3e:b0:4a:d6:00:68:8a:13:38:23:f4:92: 9d:98:a7:8f:dc:55:82:87:31:82:7d:ec:3c:d9:42:fe:ff:de: 44:0c:61:fa:6a:17:a5:dd:09:74:03:fc:81:66:09:c5:e9:66: 91:bf:4c:c8:85:b0:9a:e5:54:bc:1c:52:1b:39:df:3d:e8:1f: d0:68:fb:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdbx8bHnJLiQHHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDFkOWM0MjYtMGVhYi00MmY5LWIxNjctOTZiZThlNzg2N2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqQ2lRCLEfGl93XsqzlK0I6wVKHPmYP9eyBv Sk82YLI0CT8mu0WXaQByJKenQjmTutpsjtvVtpuwWpLSVxTn6PCY8kKfAE36GHJI sAAgrvYvoU5MWMatVnUNmtm2VlKB6apg6eSfARxtdJ9ErjISAuZH639ldZVv92L9 sotVPADFk6/ku3+Ro2Mvf5dhoYvE6U+/DpoICDbdp0MOg5kin7seBbuxIk81kFxJ Gbqpsd+twnW4bMH5pWkqvMFi/P0Uh1UzscW/ha+jkI63CT6CehAo1ZRJOv/ZJn1E j6S2/56BwsfG2MbLMOa+qNIZQx5D3qK6oSGrOBF4SioYNQ2S6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaePX5HqtOKcZyfVo6jG8oFOAYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmM5MDk4ZTEtODU5MC0z Y2U0LWEzMTMtYmYyNTcyOWMyMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvkMRrpnl5jHaldn/FtcLWNdOcD6wWMyygFKhsgcaYebjQfSN4UNz0T w0gIZthPQ2dCJ1jLrMy7gRW1cLWwEhZrhBW2yRz2M2HQgw5JPz5ZAVnUQKaJMIF8 uXE8F8bA/UwTG57Q6IylJJWtQp/0gS1clxVZazk/LS9WjsGEowQDbwRNb3W+BMFV 9NMOYpJoIuR6oj2oEG+zS+JGtEMNd9lH2WLQjNkQM2os+ja3DOMR5kZXQfX8sygM lj6wStYAaIoTOCP0kp2Yp4/cVYKHMYJ97DzZQv7/3kQMYfpqF6XdCXQD/IFmCcXp ZpG/TMiFsJrlVLwcUhs53z3oH9Bo+8I= -----END CERTIFICATE-----Generated at Sun Oct 4 07:16:45 2026 by rpki-client