$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/9aa3ea75-ec74-3020-9160-9140174c6713.roa File: 9aa3ea75-ec74-3020-9160-9140174c6713.roa (raw, json) Hash identifier: EY3F4cjBlWVsydswXhmwQEnAuvH0u84Qiba027wQmSg= Subject key identifier: 70:DE:D1:61:02:7C:BF:70:CD:1F:E5:90:B2:2A:41:47:92:40:49:39 Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Certificate serial: 010D0C9F4328584F5CFD5AC42F49EA1B13AF9A20 Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/9aa3ea75-ec74-3020-9160-9140174c6713.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 40933 IP address blocks: 216.129.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:5a:c4:2f:49:ea:1b:13:af:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=60131ce2-99cf-41ad-b990-18232ad4cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:90:b9:e3:9c:95:bc:ac:03:92:e8:19:0a: fa:0d:5b:0d:50:d0:9d:e1:70:ff:0f:e4:de:30:0e: ee:cc:56:88:43:b1:4c:a2:7d:37:22:52:78:de:ea: 9a:70:18:5e:ac:d7:30:a0:c9:6c:8c:d9:b6:94:77: 1c:15:8d:77:4f:b4:fd:fc:66:75:2e:4e:a9:8e:78: 4d:5f:2f:6b:5f:ed:73:8d:2d:11:a7:42:70:73:29: 55:af:14:2d:40:4c:06:e9:84:b4:29:ba:b9:f6:79: b9:2a:3f:12:64:c0:01:37:b5:8c:e7:be:d9:aa:27: d0:ff:52:74:e5:52:98:4c:46:bf:2c:b4:88:23:31: 2c:85:b1:8a:9c:3d:1a:a6:c9:51:89:f0:47:7b:e7: e2:3a:33:26:5d:67:23:11:eb:8c:50:68:66:d5:37: 40:13:74:ce:a9:a6:89:ee:83:a9:75:b0:98:2e:87: 38:ef:bd:85:9f:23:f2:dd:6c:1b:54:0a:f2:6f:4b: c7:fe:30:93:81:0a:32:b1:4b:2d:f0:6d:a7:f6:02: 99:c0:11:92:ac:ff:cd:55:7b:15:79:4b:6a:d2:6a: 10:59:57:d1:53:dd:43:f6:af:01:11:29:68:1d:cc: 1e:89:be:92:81:59:f7:b0:1f:47:2b:a6:66:1c:d7: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DE:D1:61:02:7C:BF:70:CD:1F:E5:90:B2:2A:41:47:92:40:49:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/9aa3ea75-ec74-3020-9160-9140174c6713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl X509v3 Authority Key Identifier: keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer sbgp-ipAddrBlock: critical IPv4: 216.129.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d5:a8:62:a4:02:b2:ba:ef:fd:71:4d:81:6b:ad:dd:12:31: 3c:50:0f:d2:69:97:be:e3:6c:a1:5e:2b:4d:8c:c2:04:09:38: be:ba:fe:42:f0:d9:60:c6:85:b7:64:b7:6f:9a:e9:57:f7:9d: 29:b4:65:71:d7:11:aa:a6:e7:db:3c:75:d3:5d:b1:de:33:61: 56:94:1a:1f:57:bf:2b:17:fe:41:1d:11:2b:33:66:f1:bf:82: f7:58:16:91:a7:2d:54:70:38:bf:29:9d:22:c9:f4:5f:3b:9c: de:85:0e:b5:ef:c5:e3:69:b9:70:81:8d:72:b1:e4:91:95:1e: 4d:53:86:f9:1b:b6:af:89:30:3e:90:37:b4:5b:4c:af:bd:a7: c3:a3:e5:79:ae:06:18:07:f0:db:ea:e5:ca:29:0f:41:b1:a0: 02:8c:97:40:3b:f7:bf:1c:bc:45:1f:0d:df:c6:26:7e:fb:f4: 5d:a4:1c:2e:d6:36:3a:28:40:86:a1:8c:4f:c9:d4:68:a0:9d: d7:b4:d4:89:7d:74:e0:5b:bf:21:a2:5e:84:a1:1b:3a:e1:42: a7:b4:62:22:76:f3:22:c1:4e:5a:3b:1b:53:f9:b3:e4:09:ab: 7b:e8:8c:52:83:f8:cc:e3:88:d6:64:6e:20:ac:44:4c:a4:24: ca:69:46:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VrEL0nqGxOvmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh ZWNkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk NjAxMzFjZTItOTljZi00MWFkLWI5OTAtMTgyMzJhZDRjZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsWQueOclbysA5LoGQr6DVsNUNCd4XD/D+Te MA7uzFaIQ7FMon03IlJ43uqacBherNcwoMlsjNm2lHccFY13T7T9/GZ1Lk6pjnhN Xy9rX+1zjS0Rp0JwcylVrxQtQEwG6YS0Kbq59nm5Kj8SZMABN7WM577ZqifQ/1J0 5VKYTEa/LLSIIzEshbGKnD0apslRifBHe+fiOjMmXWcjEeuMUGhm1TdAE3TOqaaJ 7oOpdbCYLoc4772FnyPy3WwbVAryb0vH/jCTgQoysUst8G2n9gKZwBGSrP/NVXsV eUtq0moQWVfRU91D9q8BESloHcweib6SgVn3sB9HK6ZmHNfdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDe0WECfL9wzR/lkLIqQUeSQEk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5 ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvOWFhM2VhNzUtZWM3NC0z MDIwLTkxNjAtOTE0MDE3NGM2NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1 YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXVqGKkArK67/1xTYFrrd0SMTxQD9Jpl77jbKFeK02MwgQJOL66/kLw 2WDGhbdkt2+a6Vf3nSm0ZXHXEaqm59s8ddNdsd4zYVaUGh9XvysX/kEdESszZvG/ gvdYFpGnLVRwOL8pnSLJ9F87nN6FDrXvxeNpuXCBjXKx5JGVHk1Thvkbtq+JMD6Q N7RbTK+9p8Oj5XmuBhgH8Nvq5copD0GxoAKMl0A7978cvEUfDd/GJn779F2kHC7W NjooQIahjE/J1Gignde01Il9dOBbvyGiXoShGzrhQqe0YiJ28yLBTlo7G1P5s+QJ q3vojFKD+MzjiNZkbiCsREykJMppRiE= -----END CERTIFICATE-----Generated at Tue Oct 6 19:09:55 2026 by rpki-client