$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa File: 0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa (raw, json) Hash identifier: f13QyrLNf9Kd38Dv8A58M+3zCJMuNBtYqJ4lif5RHXQ= Subject key identifier: 66:1F:40:9D:B8:29:4A:BD:3A:1D:7A:3B:7E:F4:50:43:9A:3C:24:94 Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Certificate serial: 010D0C9F4328584F4976EA375B26C67DB1921500 Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 204.128.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:ea:37:5b:26:c6:7d:b1:92:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1fe64f75-fe2e-4a47-82bf-eb81c6b8ba84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:65:52:09:7e:a5:46:2b:76:88:66:38:31: 68:41:63:3b:25:44:48:39:af:f1:1f:d9:f4:9b:27: e5:fe:71:4f:83:71:49:24:84:25:09:eb:33:2d:4e: 09:10:cc:39:0b:e8:8b:92:17:17:0a:d8:6b:a4:a0: 65:73:72:9a:fe:2f:aa:95:67:69:db:40:77:22:d7: 7e:24:bf:4f:64:e7:45:03:d2:e8:c7:fd:47:31:e9: e5:d1:8a:61:f0:1d:58:ef:d0:16:17:7c:7a:b9:96: 4c:87:2e:0d:db:67:ff:24:f1:1c:e1:a8:d1:2b:ad: a3:0f:7e:df:2b:00:25:32:05:e5:a3:9b:d6:9d:67: 27:45:6c:5a:06:3e:e7:5c:f5:6e:f0:4b:09:83:77: 08:0c:2c:55:b9:2e:6d:a2:55:f2:74:93:a3:a9:64: 56:1b:40:b9:58:c1:bc:b2:52:39:3d:de:18:b1:03: be:25:87:d7:c8:fc:b5:b2:98:4b:0f:09:a3:e9:7d: a4:89:09:53:0a:37:68:0d:9e:5f:1d:ed:c3:d4:31: 1d:66:49:75:ab:9d:d2:cb:3c:26:01:71:a7:44:ab: 76:7e:6e:f6:3c:29:d3:39:fe:05:52:af:b7:4d:04: d1:3a:4a:ea:fe:f9:1a:a1:15:29:6f:b0:81:40:26: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:40:9D:B8:29:4A:BD:3A:1D:7A:3B:7E:F4:50:43:9A:3C:24:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl X509v3 Authority Key Identifier: keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:28:45:a5:99:35:da:a1:9b:65:86:c6:36:e9:5a:94:1f:6a: d6:bd:0d:91:99:60:fe:ca:cd:7f:ea:55:a5:41:16:26:5d:5b: 18:70:1a:48:1e:9a:04:1b:54:95:6b:11:e2:47:ac:9a:60:9e: 31:39:9b:01:cc:d4:96:ce:35:e8:d3:63:c1:b4:f1:7e:64:bb: b8:da:a5:ee:72:80:a3:44:42:c1:f7:be:51:75:23:b4:64:ea: 8e:cb:b1:99:fc:27:a5:4a:de:97:c4:e9:36:f6:7f:0b:e1:fb: 50:98:93:ac:d7:fe:f1:bf:44:ce:d6:2f:2a:a9:0a:26:18:89: 58:b7:ac:a7:1f:09:6a:c6:5b:ae:7c:f5:f9:d4:5d:11:f4:82: cd:3f:a8:a8:0d:c9:d7:97:ea:bb:dc:6e:b2:3d:05:cb:3a:46: 16:ba:a8:d8:b1:ed:a3:0c:cd:d6:84:7d:2b:20:e7:94:e5:76: 9a:6e:9c:a3:12:c5:1d:83:da:4d:41:8b:2c:ad:31:7e:fb:09: de:96:0a:47:b9:b1:db:8c:5a:c8:50:47:4e:f7:e5:b5:50:44: f3:29:da:61:6a:27:8f:5b:3a:2d:5c:65:65:1d:4f:2d:df:7a: 0a:82:74:43:97:a1:01:7e:6e:c4:41:71:51:f5:2f:1d:8f:21: 84:36:2c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jduo3WybGfbGSFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkNTYwZDQtNzdjOS00YWI2LWIyMmItOTc3MWFhM2I2 N2MyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZlNjRmNzUtZmUyZS00YTQ3LTgyYmYtZWI4MWM2YjhiYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh5lUgl+pUYrdohmODFoQWM7JURIOa/xH9n0 myfl/nFPg3FJJIQlCeszLU4JEMw5C+iLkhcXCthrpKBlc3Ka/i+qlWdp20B3Itd+ JL9PZOdFA9Lox/1HMenl0Yph8B1Y79AWF3x6uZZMhy4N22f/JPEc4ajRK62jD37f KwAlMgXlo5vWnWcnRWxaBj7nXPVu8EsJg3cIDCxVuS5tolXydJOjqWRWG0C5WMG8 slI5Pd4YsQO+JYfXyPy1sphLDwmj6X2kiQlTCjdoDZ5fHe3D1DEdZkl1q53Syzwm AXGnRKt2fm72PCnTOf4FUq+3TQTROkrq/vkaoRUpb7CBQCYi+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYfQJ24KUq9Oh16O370UEOaPCSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1 NjBkNC03N2M5LTRhYjYtYjIyYi05NzcxYWEzYjY3YzIvMGRmYTA5ZGQtOGM4My0z MWJlLWIyNWItYmZjZmQzZjEwYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2RkNTYwZDQtNzdjOS00YWI2LWIy MmItOTc3MWFhM2I2N2MyLzdkZDU2MGQ0LTc3YzktNGFiNi1iMjJiLTk3NzFhYTNi NjdjMi5jcmwwHwYDVR0jBBgwFoAUaH23I0rV6sAiz6qA1UzejvWxHL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1NjBkNC03N2M5LTRhYjYtYjIyYi05Nzcx YWEzYjY3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEoRaWZNdqhm2WGxjbpWpQfata9DZGZYP7KzX/qVaVBFiZdWxhwGkge mgQbVJVrEeJHrJpgnjE5mwHM1JbONejTY8G08X5ku7jape5ygKNEQsH3vlF1I7Rk 6o7LsZn8J6VK3pfE6Tb2fwvh+1CYk6zX/vG/RM7WLyqpCiYYiVi3rKcfCWrGW658 9fnUXRH0gs0/qKgNydeX6rvcbrI9Bcs6Rha6qNix7aMMzdaEfSsg55TldppunKMS xR2D2k1BiyytMX77Cd6WCke5sduMWshQR0735bVQRPMp2mFqJ49bOi1cZWUdTy3f egqCdEOXoQF+bsRBcVH1Lx2PIYQ2LKc= -----END CERTIFICATE-----Generated at Sat Sep 26 14:27:51 2026 by rpki-client