$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa File: 95202044-ca70-36fe-9abd-667200710a5d.roa (raw, json) Hash identifier: 4Zt+5rV7jii4sJ8Tl8EqzP+ym+/szL67qLNJfevgQxQ= Subject key identifier: A6:22:F7:07:39:59:BE:8F:14:C3:91:50:6A:4F:DF:21:19:2F:D8:BB Certificate issuer: /CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Certificate serial: 010D0C9F4328584F2527A9E98744A77218DFD3C0 Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 15830 IP address blocks: 129.176.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a9:e9:87:44:a7:72:18:df:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=14150666-06bf-4047-aad2-95be6e8ea0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:14:95:3e:6e:9a:9c:b9:e3:5b:97:16:57: dd:6a:50:41:8c:cb:e3:29:8d:4e:dd:8c:e5:18:d1: 2c:d0:c6:89:11:db:39:06:6d:cb:ec:3d:a7:e8:cd: a6:00:5d:c4:c8:c7:07:7c:ce:91:ce:9e:b8:38:9f: c0:07:f6:7c:df:bb:14:d8:17:7e:fe:6d:97:37:ea: b9:bb:7b:9c:b8:61:84:55:7d:2f:0d:e4:99:f3:28: 5c:4f:93:9e:a5:f1:92:0e:a8:3a:d8:9c:cc:55:2f: 88:c0:b8:03:72:1d:42:e2:d5:66:ed:21:f9:79:8b: 02:2a:25:31:eb:9a:4c:6e:f5:29:96:95:4b:1c:42: f7:b4:21:c4:8d:71:26:1a:9f:ad:14:ae:5f:d2:30: b8:1d:7e:9b:73:4b:41:b2:87:4c:55:3a:bb:33:58: a1:fc:61:cc:7d:65:54:11:19:2f:96:a8:d8:18:16: 12:19:d0:80:cb:49:8f:d0:54:c3:b4:dd:b3:e9:28: 3a:90:d6:ac:19:8d:05:2b:82:25:58:ff:65:1a:01: 28:af:cc:e2:7f:ec:70:3f:32:c0:dd:39:86:e7:03: e8:62:2d:a9:f9:6f:71:5a:2a:5f:66:af:8e:8c:d3: 6b:83:2a:ed:1f:2f:76:8a:40:42:da:c3:7a:b7:f1: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:22:F7:07:39:59:BE:8F:14:C3:91:50:6A:4F:DF:21:19:2F:D8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl X509v3 Authority Key Identifier: keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer sbgp-ipAddrBlock: critical IPv4: 129.176.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:91:90:f7:92:50:8d:14:92:6c:64:7d:39:93:4a:dc:e1:d5: 14:2c:7c:62:ed:43:28:93:96:43:0f:dc:49:c1:0c:a6:e1:d6: 17:93:63:ee:9c:ac:ee:62:2f:cf:be:76:ba:97:d8:fc:b5:61: b7:93:0e:b1:b5:17:36:3a:b1:01:bf:cf:bd:5e:6b:6d:62:69: 19:61:71:d2:f1:f0:f7:ec:8e:42:f5:66:63:3f:4e:9f:5a:9b: 6c:4b:4b:6e:b9:b5:f7:18:a8:2c:4a:5f:b3:31:e2:d0:1b:1c: 81:aa:dd:63:00:d7:08:7e:fd:0f:15:51:50:67:35:c4:c3:2e: 13:9c:6d:ad:05:75:16:f8:e3:cd:b2:13:b7:c2:9d:dd:43:6b: 3f:a7:fb:69:fc:2c:37:81:76:fb:42:2a:97:74:51:26:ed:0d: 71:a0:6b:e7:eb:1c:d6:3f:d9:5d:16:c8:e3:7c:c9:a3:ca:54: 97:aa:9a:68:51:e8:e5:9b:7a:87:71:29:c1:d1:cc:12:f2:29: 7b:c2:55:c4:fa:c0:56:81:5c:c7:df:87:4e:9f:7d:d4:4e:b5: 9c:df:7d:30:56:97:f0:26:2f:5c:23:c4:0a:99:58:86:ac:fb: d9:2c:0e:6a:28:4e:39:39:ac:d6:02:99:14:ac:26:df:7f:02: 2d:25:3c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6nph0Snchjf08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJmNjYzODQtZmE1My00N2ZiLTkzOGEtZjFlNTA2NDAy M2U1MB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk MTQxNTA2NjYtMDZiZi00MDQ3LWFhZDItOTViZTZlOGVhMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIUlT5umpy541uXFlfdalBBjMvjKY1O3Yzl GNEs0MaJEds5Bm3L7D2n6M2mAF3EyMcHfM6Rzp64OJ/AB/Z837sU2Bd+/m2XN+q5 u3ucuGGEVX0vDeSZ8yhcT5OepfGSDqg62JzMVS+IwLgDch1C4tVm7SH5eYsCKiUx 65pMbvUplpVLHEL3tCHEjXEmGp+tFK5f0jC4HX6bc0tBsodMVTq7M1ih/GHMfWVU ERkvlqjYGBYSGdCAy0mP0FTDtN2z6Sg6kNasGY0FK4IlWP9lGgEor8zif+xwPzLA 3TmG5wPoYi2p+W9xWipfZq+OjNNrgyrtHy92ikBC2sN6t/FcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYi9wc5Wb6PFMORUGpP3yEZL9i7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2 NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1MDY0MDIzZTUvOTUyMDIwNDQtY2E3MC0z NmZlLTlhYmQtNjY3MjAwNzEwYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGJmNjYzODQtZmE1My00N2ZiLTkz OGEtZjFlNTA2NDAyM2U1L2RiZjY2Mzg0LWZhNTMtNDdmYi05MzhhLWYxZTUwNjQw MjNlNS5jcmwwHwYDVR0jBBgwFoAU2cAvW7cA5P+Rm/sAOGgrg1/jqskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1 MDY0MDIzZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgbDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGRkPeSUI0UkmxkfTmTStzh1RQsfGLtQyiTlkMP3EnBDKbh1heTY+6c rO5iL8++drqX2Py1YbeTDrG1FzY6sQG/z71ea21iaRlhcdLx8PfsjkL1ZmM/Tp9a m2xLS265tfcYqCxKX7Mx4tAbHIGq3WMA1wh+/Q8VUVBnNcTDLhOcba0FdRb4482y E7fCnd1Daz+n+2n8LDeBdvtCKpd0USbtDXGga+frHNY/2V0WyON8yaPKVJeqmmhR 6OWbeodxKcHRzBLyKXvCVcT6wFaBXMffh06ffdROtZzffTBWl/AmL1wjxAqZWIas +9ksDmooTjk5rNYCmRSsJt9/Ai0lPKE= -----END CERTIFICATE-----Generated at Sun Oct 11 17:36:03 2026 by rpki-client