$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa File: 546853d9-414a-3e2e-85ae-b99c281ac2b0.roa (raw, json) Hash identifier: rCnxuBrrxE0f+wBtLHQLKI/y1MKa1IRV/Qe1p4oEZSU= Subject key identifier: 10:C0:A8:01:A2:DD:C7:1E:1C:06:5E:6E:B0:B1:0E:D1:EB:65:DC:01 Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F4328584F4975F333CFE0A2D01BCBB880 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11872 IP address blocks: 128.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f3:33:cf:e0:a2:d0:1b:cb:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a6147f6f-6afc-4430-9f4a-20e701f30fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5e:3b:52:16:f7:fc:7b:8c:9b:cf:3a:fc:5c: 8c:f0:33:93:b6:cb:0d:eb:3d:44:a2:d9:65:00:5a: 0d:09:1d:e9:e0:c3:a0:8a:89:9f:cd:6c:e3:f0:f2: 70:1c:ab:69:1a:f4:2d:4d:c6:8f:7c:b8:00:8b:d1: 3d:35:b3:10:60:ad:32:b0:33:76:e5:6a:1f:82:82: 16:b8:ed:67:ec:78:ad:c0:7d:5f:f0:66:09:d0:f5: 7f:90:5b:1e:bc:c6:24:e6:d2:8f:d8:16:02:72:32: 11:fe:8d:b5:1d:60:72:04:9b:5c:a1:aa:87:8e:67: c6:83:8a:fe:97:34:4e:4a:48:43:20:bd:9d:62:02: 4d:a0:0d:aa:33:bc:92:3f:87:56:80:b4:ec:e8:72: 79:3a:21:15:4a:34:b2:b8:29:56:64:e5:6d:e4:c1: 81:2d:96:4c:75:72:45:9a:6b:41:86:08:e1:d0:f8: c9:f6:91:9a:21:55:6d:81:4a:d8:9c:03:df:d3:e8: 92:11:4e:1a:3f:ad:ce:b5:55:9d:87:bd:c1:9d:93: 4d:30:99:c8:e9:ff:75:75:ce:1d:63:00:28:90:d8: 83:50:a3:7c:ea:3b:51:3f:1f:fc:6f:b5:52:48:95: 41:69:95:db:1d:f9:ac:ef:f4:2c:ea:7d:54:68:f7: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C0:A8:01:A2:DD:C7:1E:1C:06:5E:6E:B0:B1:0E:D1:EB:65:DC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: 128.230.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:13:48:72:c5:6d:d9:38:83:f1:19:de:e6:f8:33:fd:92:ac: 0d:9d:bb:a9:91:55:6c:ad:9e:f0:4f:08:dd:a0:30:c9:68:70: 22:be:f8:4d:a7:a1:55:3e:dd:78:41:e4:0a:a2:5a:08:08:2e: 78:75:b0:31:9e:a7:93:e0:46:f6:d3:5f:f7:81:b0:9b:62:70: ec:48:09:ce:58:88:7a:0e:f2:02:76:f7:ef:7b:26:08:34:49: e4:98:51:be:07:c1:18:1d:6d:76:33:b9:d2:aa:c3:b3:b3:b3: dd:74:aa:0f:ba:64:e8:a2:94:aa:24:2a:89:a5:53:80:58:04: 3f:d8:0b:ad:b5:25:ee:9c:66:c2:8f:bd:61:a5:29:d3:e7:bc: 55:f3:d2:5f:d7:c0:e9:88:92:f9:92:38:ad:8f:72:2a:a7:25: a1:29:f7:40:dc:2c:bb:d7:81:1e:78:24:fc:5f:9d:5e:35:8f: 64:cf:c2:fc:f9:a8:8f:7e:fb:b0:2c:c7:c3:6f:ba:54:39:03: 97:81:0c:93:3e:8a:0e:65:43:9a:7b:47:9b:5a:b5:da:98:da: db:dd:c3:54:f8:0c:46:8b:f7:cc:1e:7a:8c:02:3a:25:2d:56: 36:e9:2a:ee:a5:ae:0e:34:d3:26:1a:25:4d:3f:e2:0f:53:65: a6:6a:83:fe -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdfMzz+Ci0BvLuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTYxNDdmNmYtNmFmYy00NDMwLTlmNGEtMjBlNzAxZjMwZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV47Uhb3/HuMm886/FyM8DOTtssN6z1Eotll AFoNCR3p4MOgiomfzWzj8PJwHKtpGvQtTcaPfLgAi9E9NbMQYK0ysDN25WofgoIW uO1n7HitwH1f8GYJ0PV/kFsevMYk5tKP2BYCcjIR/o21HWByBJtcoaqHjmfGg4r+ lzROSkhDIL2dYgJNoA2qM7ySP4dWgLTs6HJ5OiEVSjSyuClWZOVt5MGBLZZMdXJF mmtBhgjh0PjJ9pGaIVVtgUrYnAPf0+iSEU4aP63OtVWdh73BnZNNMJnI6f91dc4d YwAokNiDUKN86jtRPx/8b7VSSJVBaZXbHfms7/Qs6n1UaPeE/QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBDAqAGi3cceHAZebrCxDtHrZdwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvNTQ2ODUzZDktNDE0YS0z ZTJlLTg1YWUtYjk5YzI4MWFjMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADRNIcsVt2TiD8Rne5vgz/ZKsDZ27qZFVbK2e8E8I3aAwyWhwIr74Taeh VT7deEHkCqJaCAgueHWwMZ6nk+BG9tNf94Gwm2Jw7EgJzliIeg7yAnb373smCDRJ 5JhRvgfBGB1tdjO50qrDs7Oz3XSqD7pk6KKUqiQqiaVTgFgEP9gLrbUl7pxmwo+9 YaUp0+e8VfPSX9fA6YiS+ZI4rY9yKqcloSn3QNwsu9eBHngk/F+dXjWPZM/C/Pmo j377sCzHw2+6VDkDl4EMkz6KDmVDmntHm1q12pja293DVPgMRov3zB56jAI6JS1W Nukq7qWuDjTTJholTT/iD1NlpmqD/g== -----END CERTIFICATE-----Generated at Fri Oct 9 16:29:07 2026 by rpki-client