$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa File: 9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (raw, json) Hash identifier: XlyOejA1gioeqyfQ5UqMyD+3vqdzbIxpvlZ47g9gZ1k= Subject key identifier: 2D:8B:9E:BF:2A:A7:12:C0:1C:24:21:43:68:A1:61:71:8F:76:38:2A Certificate issuer: /CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Certificate serial: 010D0C9F4328584F4976A3EF01EEF2058BF44180 Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7896 IP address blocks: 144.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a3:ef:01:ee:f2:05:8b:f4:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c09ba808-f88b-4dbb-93c7-549103b1f1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:69:fc:2c:4f:38:46:1b:f4:d0:db:85:25: 2a:1f:77:73:d2:4d:78:ba:7d:96:c7:df:59:2a:34: a7:9e:57:7a:e4:a1:fb:e3:5a:db:a0:6e:41:69:83: f2:0b:1f:db:fe:15:89:25:57:c8:78:e7:57:e7:17: 4c:e1:0b:a8:73:48:a0:7d:ef:6e:08:d5:e6:6a:5a: a6:47:e2:05:74:83:81:8d:db:bf:1c:f9:3f:e0:36: 54:37:36:43:a2:61:25:69:a2:50:c7:d1:30:8b:36: 2d:17:7a:4a:d3:e9:e6:d6:f3:45:db:f9:b4:f6:a7: 00:02:bb:23:6c:76:7e:58:4a:2e:56:f2:50:95:80: 99:f4:60:43:62:1e:2a:41:18:39:08:c2:8c:d1:69: 0a:ca:6f:e2:54:4b:d7:a0:8a:d4:12:55:f8:2e:1e: b2:81:85:f3:99:10:2b:28:bd:3a:85:33:c4:29:51: 2f:ef:e2:e9:9d:88:68:69:5d:fb:0e:46:26:95:1d: 97:0e:7c:ba:5e:28:9f:55:fa:37:78:f4:b1:7e:2c: e6:61:5e:5f:a2:13:21:8b:fa:51:44:0d:b4:52:fd: 61:4a:e2:f4:6c:2b:3c:8b:fa:dd:b2:6a:15:f9:08: 4c:cc:ac:25:43:99:f7:d6:08:d8:da:21:22:17:4f: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:9E:BF:2A:A7:12:C0:1C:24:21:43:68:A1:61:71:8F:76:38:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl X509v3 Authority Key Identifier: keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer sbgp-ipAddrBlock: critical IPv4: 144.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:01:7e:96:09:8f:77:82:45:9d:d7:2b:3e:49:70:3c:57:0d: fa:87:86:01:00:97:86:27:ce:45:8d:e2:ab:24:3a:2b:59:7a: d2:24:12:a7:0c:bd:6d:ba:49:30:81:60:4f:04:b8:ec:bf:6a: 96:a2:2d:fa:17:e1:40:bd:1b:9a:6b:78:70:88:32:04:65:29: 6b:e8:dd:d2:13:3f:21:12:16:1e:83:2c:2c:3b:1c:d3:3d:7b: a6:87:6b:f8:09:57:34:1c:9e:14:c4:61:69:b0:32:bf:2c:d5: bc:84:9f:21:a5:22:bf:74:2c:36:48:ea:70:66:dc:69:f8:c7: e6:6b:d7:1e:76:1e:e0:8f:2c:cc:ef:0a:79:45:05:46:36:1d: 51:f4:dc:cf:b6:1e:ac:12:c1:ea:05:58:f7:b6:3a:09:b8:2b: 8d:55:fb:d8:b2:62:e0:8c:a8:9a:b0:0e:06:a9:d7:33:91:83: 30:38:c4:ab:67:75:2e:cb:7a:60:b5:8b:09:fe:5b:6e:8c:61: b8:68:70:90:a6:74:b8:dd:58:16:bb:2b:4a:19:2c:2a:f7:4d: 84:10:54:23:c9:cf:f0:e9:a1:b3:7a:12:99:cb:bf:56:50:59: 5d:5d:2a:ef:91:7d:4f:f4:05:19:02:56:33:e7:3f:46:09:3f: b3:2a:ee:b6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdqPvAe7yBYv0QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdmODQ5OWItMjQ1Ni00YmU4LWJhZDktY2VkNDM0MTk4 ZmEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA5YmE4MDgtZjg4Yi00ZGJiLTkzYzctNTQ5MTAzYjFmMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTdp/CxPOEYb9NDbhSUqH3dz0k14un2Wx99Z KjSnnld65KH741rboG5BaYPyCx/b/hWJJVfIeOdX5xdM4Quoc0igfe9uCNXmalqm R+IFdIOBjdu/HPk/4DZUNzZDomElaaJQx9EwizYtF3pK0+nm1vNF2/m09qcAArsj bHZ+WEouVvJQlYCZ9GBDYh4qQRg5CMKM0WkKym/iVEvXoIrUElX4Lh6ygYXzmRAr KL06hTPEKVEv7+LpnYhoaV37DkYmlR2XDny6XiifVfo3ePSxfizmYV5fohMhi/pR RA20Uv1hSuL0bCs8i/rdsmoV+QhMzKwlQ5n31gjY2iEiF0+VaQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC2Lnr8qpxLAHCQhQ2ihYXGPdjgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4 NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0MzQxOThmYTAvOWRlYWZhN2MtZTk3NC0z ZmNiLWJkNmItMTRmMmEwYjY2YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjdmODQ5OWItMjQ1Ni00YmU4LWJh ZDktY2VkNDM0MTk4ZmEwL2Y3Zjg0OTliLTI0NTYtNGJlOC1iYWQ5LWNlZDQzNDE5 OGZhMC5jcmwwHwYDVR0jBBgwFoAUNY08X4pzlnRC8WBNZVfaIPilZJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0 MzQxOThmYTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADwF+lgmPd4JFndcrPklwPFcN+oeGAQCXhifORY3iqyQ6K1l60iQSpwy9 bbpJMIFgTwS47L9qlqIt+hfhQL0bmmt4cIgyBGUpa+jd0hM/IRIWHoMsLDsc0z17 podr+AlXNByeFMRhabAyvyzVvISfIaUiv3QsNkjqcGbcafjH5mvXHnYe4I8szO8K eUUFRjYdUfTcz7YerBLB6gVY97Y6CbgrjVX72LJi4IyomrAOBqnXM5GDMDjEq2d1 Lst6YLWLCf5bboxhuGhwkKZ0uN1YFrsrShksKvdNhBBUI8nP8Omhs3oSmcu/VlBZ XV0q75F9T/QFGQJWM+c/Rgk/syrutg== -----END CERTIFICATE-----Generated at Fri Sep 25 13:20:55 2026 by rpki-client