$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa File: 9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa (raw, json) Hash identifier: Zb3VsYyTZ1hs+gK/1sAnzmHf+2P3k/DE0cP6U1N5KyM= Subject key identifier: E1:39:07:55:2A:D6:33:DA:96:A3:4E:7C:AE:57:FA:88:4D:23:B7:A3 Certificate issuer: /CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59 Certificate serial: 010D0C9F4328584F454291A72B2F458D4A724380 Authority key identifier: 96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 62648 IP address blocks: 72.22.192.0/21 maxlen: 21 192.198.188.0/22 maxlen: 22 209.172.16.0/22 maxlen: 22 216.245.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:91:a7:2b:2f:45:8d:4a:72:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=df97c545-5bb6-4a41-9575-6d18d0953476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:ad:92:dc:f8:fc:0c:f1:2e:56:99:22:fe: 52:03:82:bf:b6:47:27:fe:08:7b:ff:83:05:d4:f3: 10:70:c0:c3:97:c6:ba:42:d1:92:07:84:9b:4d:19: 01:ad:f8:6c:22:0e:ae:3a:1b:33:d7:28:59:21:f7: 32:5d:34:ff:80:43:3c:b6:8f:ec:16:2c:c1:65:00: 73:ab:cf:00:05:9a:79:ea:8b:b2:b6:b7:b3:7d:55: 43:be:b4:08:bb:ad:87:44:4a:11:c5:a6:ba:27:30: 31:b6:10:25:88:64:6b:52:a0:ff:9c:3b:cc:bb:8e: 42:b3:3a:c4:9c:1e:19:55:90:f3:3a:65:2c:32:9b: c3:68:dd:57:ae:79:ce:f5:22:db:c6:1a:f7:1f:64: 31:76:9e:71:f2:8c:45:b2:23:b0:f1:32:03:52:b7: 26:dc:69:11:02:fb:65:a9:b7:6a:80:14:7a:d2:47: 65:f3:7b:86:da:44:61:40:eb:f6:02:24:8f:a3:37: ba:0b:7f:b1:b0:98:22:db:64:29:09:11:b0:ee:a0: f4:fe:6f:64:42:86:ae:a9:94:87:e1:62:f0:41:67: c1:4a:04:71:18:4d:f1:71:09:6a:98:5e:6c:53:3d: 1e:50:aa:2e:2a:b3:e3:46:11:dd:ed:a8:17:68:e6: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:39:07:55:2A:D6:33:DA:96:A3:4E:7C:AE:57:FA:88:4D:23:B7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl X509v3 Authority Key Identifier: keyid:96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer sbgp-ipAddrBlock: critical IPv4: 72.22.192.0/21 192.198.188.0/22 209.172.16.0/22 216.245.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a5:9a:a9:25:b2:6e:2e:78:8f:4a:34:c4:51:f0:12:61:26: 69:56:45:30:bc:25:de:34:e4:e9:b9:4d:ab:98:01:e7:7b:87: ed:03:48:a2:5d:83:d7:72:0e:5d:c8:99:69:0d:e7:7f:7e:bd: cc:d2:d1:3c:ef:a4:fb:37:38:5c:d8:43:7e:75:5c:d6:94:df: fe:c8:8c:3a:b0:c1:13:a4:65:ba:08:91:67:31:a1:28:e7:63: 0b:cf:b8:4f:e1:b8:ab:77:56:fc:cb:81:8c:4b:51:9d:27:b3: ca:18:bd:06:14:31:ac:97:2e:e7:58:7b:17:55:a4:7e:8e:f1: 3c:88:be:a8:02:fe:70:8b:1a:9d:43:93:c6:e9:79:6d:06:50: 6e:6e:26:6f:bb:89:6e:42:1f:6f:ce:98:ee:c2:86:d5:b2:2a: 08:bc:fc:ea:35:c2:b6:3d:53:63:b7:2e:28:03:a4:0d:dd:43: 3d:3d:02:1c:68:66:cf:dd:68:4e:4e:8a:6f:b6:6f:40:1c:98: 0e:4a:1a:98:3a:20:03:ed:87:18:ff:d4:94:a8:77:37:cc:1b: fe:9e:e3:e5:90:4f:e9:72:88:08:4c:85:5f:3b:9d:03:fb:23: 78:c1:c0:a4:1b:84:b4:05:4f:79:d1:65:fb:32:4d:40:a1:54: dd:e0:83:63 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9FQpGnKy9FjUpyQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwZjZhMGEtYjZjMy00ZTRhLTg5NDEtMTczNjcwMGRl ZDU5MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZGY5N2M1NDUtNWJiNi00YTQxLTk1NzUtNmQxOGQwOTUzNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCutktz4/AzxLlaZIv5SA4K/tkcn/gh7/4MF 1PMQcMDDl8a6QtGSB4SbTRkBrfhsIg6uOhsz1yhZIfcyXTT/gEM8to/sFizBZQBz q88ABZp56ouytrezfVVDvrQIu62HREoRxaa6JzAxthAliGRrUqD/nDvMu45CszrE nB4ZVZDzOmUsMpvDaN1XrnnO9SLbxhr3H2Qxdp5x8oxFsiOw8TIDUrcm3GkRAvtl qbdqgBR60kdl83uG2kRhQOv2AiSPoze6C3+xsJgi22QpCRGw7qD0/m9kQoauqZSH 4WLwQWfBSgRxGE3xcQlqmF5sUz0eUKouKrPjRhHd7agXaOaKDwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFOE5B1Uq1jPalqNOfK5X+ohNI7ejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZTBm NmEwYS1iNmMzLTRlNGEtODk0MS0xNzM2NzAwZGVkNTkvOTE1MmIwOGUtZTUyNS0z OGEyLThlZDItNjJlNDIyN2E2ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGUwZjZhMGEtYjZjMy00ZTRhLTg5 NDEtMTczNjcwMGRlZDU5L2RlMGY2YTBhLWI2YzMtNGU0YS04OTQxLTE3MzY3MDBk ZWQ1OS5jcmwwHwYDVR0jBBgwFoAUlvlhRSpzomVs+q/f9PQ7B8FoIGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZTBmNmEwYS1iNmMzLTRlNGEtODk0MS0xNzM2 NzAwZGVkNTkuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDSBbAAwQC wMa8AwQC0awQAwQC2PVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADKlmqklsm4ueI9KNMRR8BJhJmlWRTC8 Jd405Om5TauYAed7h+0DSKJdg9dyDl3ImWkN539+vczS0TzvpPs3OFzYQ351XNaU 3/7IjDqwwROkZboIkWcxoSjnYwvPuE/huKt3VvzLgYxLUZ0ns8oYvQYUMayXLudY exdVpH6O8TyIvqgC/nCLGp1Dk8bpeW0GUG5uJm+7iW5CH2/OmO7ChtWyKgi8/Oo1 wrY9U2O3LigDpA3dQz09AhxoZs/daE5Oim+2b0AcmA5KGpg6IAPthxj/1JSodzfM G/6e4+WQT+lyiAhMhV87nQP7I3jBwKQbhLQFT3nRZfsyTUChVN3gg2M= -----END CERTIFICATE-----Generated at Thu Sep 24 20:53:46 2026 by rpki-client