$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: GnhQw8HiFSCYLLb/agQaWbCQgVEwlJF7mWUMZglw8M8= Subject key identifier: F6:75:27:65:7D:F1:2F:6A:4C:82:A2:24:91:FF:17:A7:1D:B3:44:D6 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584F374D2D8FD7DAFC1CBEF40140 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2d:8f:d7:da:fc:1c:be:f4:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=bead09b5-6b19-4b3f-b2e2-bb808818da1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:4f:d9:74:fb:ce:b4:3b:49:e3:d5:bd:2f: cd:11:5b:b2:8d:ab:76:fe:da:fc:a7:39:65:ea:65: 44:95:bc:1f:bb:d7:c9:a1:64:1c:c5:1e:92:d7:38: c6:ee:aa:1c:18:a4:ac:5f:de:5a:68:3e:22:a4:ab: d6:0d:86:70:be:6a:81:5e:c0:bc:8e:dc:b3:f6:58: 50:ba:aa:67:25:2d:e9:86:c3:e8:bc:3b:41:aa:0a: 64:3d:86:08:ee:b7:1c:55:d1:ba:9e:f7:a4:87:ff: b8:6d:2d:6e:bb:fa:0f:bf:45:70:a1:29:d4:b6:c7: 36:7f:45:72:ad:2d:7f:fc:89:1f:70:d3:87:11:67: 97:94:95:e4:fa:26:ed:18:f6:34:a3:f9:fc:d1:e5: 06:16:e0:76:3f:16:9b:68:7e:be:f3:25:5d:7d:a2: 03:0f:63:7f:25:5e:3e:a7:88:d2:52:df:eb:ed:4a: 6c:50:d9:fe:11:d8:e5:af:74:6d:a9:39:1c:09:8f: cc:d1:30:18:8e:e8:ce:26:2d:b9:d2:8e:c2:ad:51: 11:ba:6e:b0:9f:87:5c:ab:f3:5b:53:34:01:51:62: 0d:4c:9d:2c:29:b1:cd:77:c6:e9:a1:8c:b9:b2:69: b7:58:ea:9a:f9:fe:42:e3:26:cc:05:dc:4e:a9:f1: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:75:27:65:7D:F1:2F:6A:4C:82:A2:24:91:FF:17:A7:1D:B3:44:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:80:6c:1e:cf:93:1a:ae:00:95:af:15:76:3e:d6:7a:03:f4: ab:8e:62:e2:16:18:66:42:df:25:85:75:1e:80:15:2a:1f:dd: ad:dd:4f:ba:2c:c1:27:fb:2c:5c:98:9d:e2:49:28:bd:72:50: 3d:f6:f7:a3:84:8a:47:7a:a7:e9:d6:c7:82:cd:15:7c:d7:47: ca:23:90:c5:00:da:56:b6:0f:15:ae:a8:c2:17:e1:ad:8f:0b: 23:6e:94:a6:37:50:56:32:14:18:85:24:59:66:d7:e7:3b:09: ae:4c:03:15:d3:98:6d:39:f8:53:cb:c3:28:19:1f:49:cd:e5: fa:3c:d4:86:cb:e3:87:cd:fc:c9:c8:29:3a:7e:3d:c9:64:c5: c7:a7:1f:19:18:1a:71:d4:79:3b:07:a4:0c:e3:9c:a9:c9:bd: 29:ad:f1:43:28:cb:af:b7:98:30:63:aa:b5:5f:b2:55:7c:fd: 6b:4b:3a:93:a4:bc:49:ff:b1:34:ea:7c:63:72:d2:72:05:c4: 73:77:89:4e:a0:7f:ce:da:5f:2b:6c:78:b4:0d:76:6d:72:fa: 6b:fb:51:84:3a:f3:83:82:a0:87:82:1a:7b:2f:88:2e:97:e7: 69:a9:70:b3:25:d0:b7:71:34:5e:3d:5d:62:2f:70:a7:69:e0: 51:f4:ce:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TS2P19r8HL70AUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YmVhZDA5YjUtNmIxOS00YjNmLWIyZTItYmI4MDg4MThkYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGVP2XT7zrQ7SePVvS/NEVuyjat2/tr8pzll 6mVElbwfu9fJoWQcxR6S1zjG7qocGKSsX95aaD4ipKvWDYZwvmqBXsC8jtyz9lhQ uqpnJS3phsPovDtBqgpkPYYI7rccVdG6nvekh/+4bS1uu/oPv0VwoSnUtsc2f0Vy rS1//IkfcNOHEWeXlJXk+ibtGPY0o/n80eUGFuB2PxabaH6+8yVdfaIDD2N/JV4+ p4jSUt/r7UpsUNn+Edjlr3RtqTkcCY/M0TAYjujOJi250o7CrVERum6wn4dcq/Nb UzQBUWINTJ0sKbHNd8bpoYy5smm3WOqa+f5C4ybMBdxOqfFRXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ1J2V98S9qTIKiJJH/F6cds0TWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2AbB7PkxquAJWvFXY+1noD9KuOYuIWGGZC3yWFdR6AFSof3a3dT7os wSf7LFyYneJJKL1yUD3296OEikd6p+nWx4LNFXzXR8ojkMUA2la2DxWuqMIX4a2P CyNulKY3UFYyFBiFJFlm1+c7Ca5MAxXTmG05+FPLwygZH0nN5fo81IbL44fN/MnI KTp+PclkxcenHxkYGnHUeTsHpAzjnKnJvSmt8UMoy6+3mDBjqrVfslV8/WtLOpOk vEn/sTTqfGNy0nIFxHN3iU6gf87aXytseLQNdm1y+mv7UYQ684OCoIeCGnsviC6X 52mpcLMl0LdxNF49XWIvcKdp4FH0ztk= -----END CERTIFICATE-----Generated at Sat Sep 26 06:25:20 2026 by rpki-client