$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa File: 4a99249e-6e25-30fa-8e16-0fa2326d6959.roa (raw, json) Hash identifier: i+e5U7OYDGt0wbWVzeReJd6yCmi6BHSjn7voAm0HdOQ= Subject key identifier: 6F:5D:6B:F4:C3:62:E1:1C:AC:1C:FC:E5:BC:F2:2E:38:12:7D:05:F5 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584F58CD5570B84BBA31019E67E0 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 209854 IP address blocks: 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:55:70:b8:4b:ba:31:01:9e:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=8946d4cd-a5fc-42a4-aaf6-31a16ceb5ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:8b:ed:36:2a:55:38:c3:ac:ba:93:41:32: f8:5d:d9:de:c9:2d:ae:67:26:40:c0:87:6c:2c:93: 1b:35:9b:eb:7d:b5:48:fd:9a:d8:e0:9f:8d:b3:ed: 8b:e1:18:bb:a3:0e:9f:49:bd:e6:6a:80:f5:bb:ca: 7c:56:23:1f:bf:ca:bd:27:42:5c:16:6f:1e:76:fb: 0f:a4:5a:ee:6b:09:66:a8:64:b6:48:11:6f:83:c6: e9:87:c7:a8:f8:fb:dc:50:e0:39:72:26:f3:9a:67: c2:d3:f9:f2:82:12:75:df:5d:49:35:53:3f:b1:fa: c5:47:69:a0:21:43:6e:0f:44:1b:da:45:6b:f8:c0: 30:df:e7:bf:b6:2d:14:c9:06:8f:e9:d1:e8:f6:b0: 65:23:1e:e5:56:0d:7f:43:2f:41:be:cc:51:47:f1: 69:f0:aa:fd:dc:2e:52:13:45:4e:fc:f4:5e:24:c1: ec:32:11:4c:0f:1a:15:90:0e:40:c0:5d:47:97:16: c1:85:d7:84:db:aa:05:96:85:f2:8e:58:6d:d3:d2: 1f:4c:5a:5a:bf:6e:af:4b:88:c6:97:a2:70:5b:24: 3a:c8:f7:04:8e:25:75:e2:8d:82:10:e9:b5:13:5b: 2d:41:48:07:c2:27:dc:b6:87:46:46:db:36:a0:dc: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:6B:F4:C3:62:E1:1C:AC:1C:FC:E5:BC:F2:2E:38:12:7D:05:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d0:91:02:95:65:e9:82:7a:7d:26:cb:04:a6:9d:b3:01:56: 01:a2:36:32:16:27:b7:49:d2:14:d5:7c:ac:f1:bc:fd:51:ed: cf:1c:74:d1:9f:48:03:0a:8b:dd:72:ad:61:f4:8e:58:8a:9c: d1:ba:8f:61:6d:c6:09:1a:4c:e6:10:c8:51:24:71:89:77:70: 1d:f6:fa:ce:39:f2:e9:d2:59:b8:44:0b:f8:fb:ff:67:31:b5: 04:85:c4:46:1e:6a:04:5d:f1:2e:89:e2:44:ae:9a:5f:e6:30: f7:ac:9b:46:5a:f3:e8:8d:39:94:8f:ce:1f:db:f6:35:74:f3: ab:71:18:55:9e:0f:b7:42:18:60:c0:43:db:7c:8a:2b:2f:3b: 22:b7:cb:86:97:1f:1a:be:82:40:b1:39:f8:0a:e0:91:a6:84: 6c:b6:6a:03:1e:96:a6:8a:1c:9c:d6:52:3a:7b:aa:97:4c:a5: 5d:83:13:03:43:0c:c7:67:17:06:7b:af:3c:8f:05:e5:0d:cf: 1f:e2:60:e2:ed:8b:3d:e9:79:9d:d0:e6:55:61:d3:82:08:ab: 82:0c:74:3c:4d:1c:58:49:71:1f:60:61:74:9e:4a:18:b6:a9: 40:d1:3d:09:63:f7:c3:88:1c:26:70:94:06:53:5e:c0:ad:2e: ee:0d:97:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVVwuEu6MQGeZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ODk0NmQ0Y2QtYTVmYy00MmE0LWFhZjYtMzFhMTZjZWI1ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn6L7TYqVTjDrLqTQTL4XdneyS2uZyZAwIds LJMbNZvrfbVI/ZrY4J+Ns+2L4Ri7ow6fSb3maoD1u8p8ViMfv8q9J0JcFm8edvsP pFruawlmqGS2SBFvg8bph8eo+PvcUOA5cibzmmfC0/nyghJ1311JNVM/sfrFR2mg IUNuD0Qb2kVr+MAw3+e/ti0UyQaP6dHo9rBlIx7lVg1/Qy9BvsxRR/Fp8Kr93C5S E0VO/PReJMHsMhFMDxoVkA5AwF1HlxbBhdeE26oFloXyjlht09IfTFpav26vS4jG l6JwWyQ6yPcEjiV14o2CEOm1E1stQUgHwifctodGRts2oNxAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9da/TDYuEcrBz85bzyLjgSfQX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNGE5OTI0OWUtNmUyNS0z MGZhLThlMTYtMGZhMjMyNmQ2OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/QkQKVZemCen0mywSmnbMBVgGiNjIWJ7dJ0hTVfKzxvP1R7c8cdNGf SAMKi91yrWH0jliKnNG6j2FtxgkaTOYQyFEkcYl3cB32+s458unSWbhEC/j7/2cx tQSFxEYeagRd8S6J4kSuml/mMPesm0Za8+iNOZSPzh/b9jV086txGFWeD7dCGGDA Q9t8iisvOyK3y4aXHxq+gkCxOfgK4JGmhGy2agMelqaKHJzWUjp7qpdMpV2DEwND DMdnFwZ7rzyPBeUNzx/iYOLtiz3peZ3Q5lVh04IIq4IMdDxNHFhJcR9gYXSeShi2 qUDRPQlj98OIHCZwlAZTXsCtLu4Nl9A= -----END CERTIFICATE-----Generated at Fri Oct 9 21:00:26 2026 by rpki-client