$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a9872aef-9503-3b41-82b2-ac88f334dc71.roa File: a9872aef-9503-3b41-82b2-ac88f334dc71.roa (raw, json) Hash identifier: p3rEIujVKa1mNl1FNEv5SiDcCZcQCFMZ3RLXdq/FhPM= Subject key identifier: 81:D3:2B:1E:8A:E6:F1:02:B8:AC:0F:65:A9:8F:B3:8B:C7:58:8A:D4 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F4C3DD05A3BB58CD419332040 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a9872aef-9503-3b41-82b2-ac88f334dc71.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 36492 IP address blocks: 64.9.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d0:5a:3b:b5:8c:d4:19:33:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=01c820b1-38a1-4b3a-8514-03db16bce144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:ed:f0:fb:e4:65:c9:c8:b9:ff:6a:af:83: 7a:e0:08:3e:77:ca:b1:4b:62:5d:4f:91:37:f9:f8: ee:21:11:7b:8d:c4:80:9b:47:ed:78:a5:cb:58:df: 5c:c4:25:0d:e7:f0:d5:73:f2:e5:e7:e6:9f:f2:b9: c9:bf:8f:de:15:1b:59:53:4f:fb:29:12:ea:57:d1: b8:06:75:69:49:a8:9e:d0:5b:30:52:aa:34:81:85: 3b:66:e1:d5:b1:eb:3f:20:a7:d8:53:97:06:b3:1e: 44:63:b7:81:23:17:2a:c2:e9:ff:e2:d0:fc:f4:e9: 27:9c:d8:a1:76:aa:a3:12:51:0d:c5:89:81:88:c0: b4:5c:16:ba:44:75:c1:3d:a0:96:43:1b:98:37:3c: 32:5b:7f:e1:92:dd:9f:b1:3c:ad:60:2f:5d:8b:3f: 19:d6:8f:4a:9d:e8:81:b7:80:0f:bd:dd:ea:35:89: 6f:1c:a9:42:80:12:bc:59:32:86:29:7b:d0:55:d0: 2b:6a:e9:5f:58:87:35:2a:f2:87:15:4b:6e:ac:48: dd:4c:8b:aa:14:49:16:4a:57:34:4d:40:dd:a9:ea: e3:72:98:16:d9:d5:c3:3a:94:cb:d8:5f:ba:79:82: 43:0c:ab:d9:e8:a8:9c:12:68:6a:4d:b6:ff:c3:14: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D3:2B:1E:8A:E6:F1:02:B8:AC:0F:65:A9:8F:B3:8B:C7:58:8A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a9872aef-9503-3b41-82b2-ac88f334dc71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:82:49:bb:b2:5b:bb:b7:75:24:a9:10:78:98:e8:cb:95:c9: 3f:54:b2:30:93:2b:f8:cf:0d:61:55:28:56:97:2d:b0:bb:8f: 4a:1c:6e:40:76:dc:67:6c:0c:8c:de:c0:16:c5:66:1f:7e:31: c0:b3:db:60:e0:d1:57:91:ea:38:19:2b:6f:21:23:82:0d:e7: 62:7a:e1:85:e9:02:26:38:af:81:30:18:13:5a:4a:24:02:07: 9a:77:84:69:66:8e:ba:70:7b:0c:de:e2:3f:2e:a9:da:c1:af: 1c:fe:b7:02:b5:df:22:65:88:2e:ae:e6:51:cd:2c:53:68:37: 6d:16:98:49:b8:37:56:e5:2a:c1:48:cc:a9:ae:4d:6a:7c:ab: fa:41:ec:6e:f5:6f:2e:0c:a1:b7:85:5b:c1:4e:9f:f0:39:ac: 88:75:55:89:f7:b0:55:94:33:8b:63:56:44:ab:09:55:69:b1: 91:b7:b1:a6:11:a4:3e:02:96:d1:e9:e3:6f:8b:0d:04:1e:47: 99:bc:a4:8e:e6:28:73:04:ea:26:65:f2:c2:4e:dc:42:d5:1a: 6e:8b:50:3b:01:9e:41:9a:08:54:91:27:a9:7f:b8:c0:30:a2: c6:8f:1d:14:bd:de:1e:34:e2:64:e3:fc:11:8a:23:2b:d9:26: ca:dc:16:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdBaO7WM1BkzIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDFjODIwYjEtMzhhMS00YjNhLTg1MTQtMDNkYjE2YmNlMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBLt8PvkZcnIuf9qr4N64Ag+d8qxS2JdT5E3 +fjuIRF7jcSAm0fteKXLWN9cxCUN5/DVc/Ll5+af8rnJv4/eFRtZU0/7KRLqV9G4 BnVpSaie0FswUqo0gYU7ZuHVses/IKfYU5cGsx5EY7eBIxcqwun/4tD89OknnNih dqqjElENxYmBiMC0XBa6RHXBPaCWQxuYNzwyW3/hkt2fsTytYC9diz8Z1o9KneiB t4APvd3qNYlvHKlCgBK8WTKGKXvQVdAraulfWIc1KvKHFUturEjdTIuqFEkWSlc0 TUDdqerjcpgW2dXDOpTL2F+6eYJDDKvZ6KicEmhqTbb/wxQsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHTKx6K5vECuKwPZamPs4vHWIrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTk4NzJhZWYtOTUwMy0z YjQxLTgyYjItYWM4OGYzMzRkYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOCSbuyW7u3dSSpEHiY6MuVyT9UsjCTK/jPDWFVKFaXLbC7j0ocbkB2 3GdsDIzewBbFZh9+McCz22Dg0VeR6jgZK28hI4IN52J64YXpAiY4r4EwGBNaSiQC B5p3hGlmjrpwewze4j8uqdrBrxz+twK13yJliC6u5lHNLFNoN20WmEm4N1blKsFI zKmuTWp8q/pB7G71by4MobeFW8FOn/A5rIh1VYn3sFWUM4tjVkSrCVVpsZG3saYR pD4CltHp42+LDQQeR5m8pI7mKHME6iZl8sJO3ELVGm6LUDsBnkGaCFSRJ6l/uMAw osaPHRS93h404mTj/BGKIyvZJsrcFm0= -----END CERTIFICATE-----Generated at Mon Sep 28 00:59:09 2026 by rpki-client