$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa File: 3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa (raw, json) Hash identifier: nFqrzKRpA7/VkxIjNumfwLENdtmBPVEl2SfYmBXRfHU= Subject key identifier: 54:0D:55:F0:B3:49:19:71:4B:9D:44:48:7A:A9:60:06:E1:09:46:5B Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F49732DDB4B7803D1D7E1AC80 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2d:db:4b:78:03:d1:d7:e1:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d3e0e151-c537-4c44-a3e7-5b57c519e341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:cf:04:1d:60:95:e6:43:e6:4f:57:d4:00: 05:07:02:a9:9b:fb:1b:ef:0e:65:36:30:a9:03:71: 68:02:24:d3:ea:82:44:4e:90:f2:15:ac:28:f6:cd: 04:f9:45:99:80:e7:f5:9e:42:07:6b:1b:60:c0:8e: a2:63:80:13:5e:cc:a3:6e:83:81:2b:df:bd:e8:cf: 09:ba:dc:5e:a6:64:b9:22:34:5c:12:ec:65:30:d8: 83:9e:65:28:dc:73:ff:3c:e7:2b:71:4b:fc:94:40: d7:e2:d5:12:4a:5a:7a:78:00:4d:a3:9c:29:47:da: 5e:b7:ff:81:14:b8:b7:ef:91:29:b3:4e:0e:36:4c: b2:7f:be:b7:74:16:ea:47:7a:0d:40:48:4c:12:b0: c1:00:43:f9:ec:c3:38:5a:6d:0c:f8:c9:7f:40:ae: 44:79:b4:7a:fc:00:4a:01:9c:a2:9c:07:5c:8a:87: db:14:60:5c:4c:51:94:6c:46:d1:97:e0:d5:52:0e: af:b4:ef:26:bc:77:28:e0:91:7b:cc:51:d6:a6:16: 76:75:68:03:1d:ca:2e:f5:a5:3b:f8:f2:32:1c:98: 9c:1c:c0:97:17:e5:f9:16:d5:a9:c6:1e:b9:3c:c6: 24:4f:62:55:64:cb:5e:2b:30:dc:09:3e:f8:91:4d: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:55:F0:B3:49:19:71:4B:9D:44:48:7A:A9:60:06:E1:09:46:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b1:d3:0a:40:c9:b5:1b:5f:e5:82:7b:6c:61:8e:86:dc:9a: af:75:5b:aa:e5:17:cc:dc:18:99:5c:85:1f:17:cf:7e:2d:a4: ba:4f:d1:b4:cd:69:cb:f4:28:0d:69:8e:b0:2b:95:b7:dd:21: ca:b8:e5:c7:39:27:5a:fa:78:61:9b:2c:a5:5f:7d:64:fb:ef: d7:c4:a4:e6:ef:f9:4c:29:2b:e3:63:d7:59:57:d4:57:5b:29: d2:30:87:e4:2e:7b:0c:ea:2b:90:42:14:66:1c:03:ca:57:e6: d4:ab:13:31:7c:ad:46:07:cf:c3:10:f7:47:3b:df:b5:41:33: db:6b:87:cf:74:ee:41:39:21:02:8d:87:35:de:33:31:e0:9d: 7f:86:8d:53:b1:99:b9:6d:ca:a0:4b:ad:3f:23:d5:e4:c5:36: cf:99:02:4c:80:c6:cd:2a:55:77:d4:eb:17:14:e8:3f:f5:8f: cb:ff:fc:03:2f:6c:7f:a5:9a:c2:25:e6:60:ad:b6:6c:ca:a1: 2e:fd:b8:70:43:f1:47:c9:e9:4c:da:c6:57:c8:b6:bf:18:5c: d1:f5:c3:c0:93:bb:80:66:62:3f:88:1e:26:8f:b3:05:2c:12: 3e:0a:d9:08:66:43:e1:f7:06:28:d9:de:fa:00:15:6b:a2:e5: bf:24:68:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcy3bS3gD0dfhrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDNlMGUxNTEtYzUzNy00YzQ0LWEzZTctNWI1N2M1MTllMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgazPBB1gleZD5k9X1AAFBwKpm/sb7w5lNjCp A3FoAiTT6oJETpDyFawo9s0E+UWZgOf1nkIHaxtgwI6iY4ATXsyjboOBK9+96M8J utxepmS5IjRcEuxlMNiDnmUo3HP/POcrcUv8lEDX4tUSSlp6eABNo5wpR9pet/+B FLi375Eps04ONkyyf763dBbqR3oNQEhMErDBAEP57MM4Wm0M+Ml/QK5EebR6/ABK AZyinAdciofbFGBcTFGUbEbRl+DVUg6vtO8mvHco4JF7zFHWphZ2dWgDHcou9aU7 +PIyHJicHMCXF+X5FtWpxh65PMYkT2JVZMteKzDcCT74kU3rsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQNVfCzSRlxS51ESHqpYAbhCUZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvM2RlZDFhNzAtNWE5MS0z ZjllLWE1YWUtZjgzNTBlZmMxYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIix0wpAybUbX+WCe2xhjobcmq91W6rlF8zcGJlchR8Xz34tpLpP0bTN acv0KA1pjrArlbfdIcq45cc5J1r6eGGbLKVffWT779fEpObv+UwpK+Nj11lX1Fdb KdIwh+QuewzqK5BCFGYcA8pX5tSrEzF8rUYHz8MQ90c737VBM9trh8907kE5IQKN hzXeMzHgnX+GjVOxmbltyqBLrT8j1eTFNs+ZAkyAxs0qVXfU6xcU6D/1j8v//AMv bH+lmsIl5mCttmzKoS79uHBD8UfJ6UzaxlfItr8YXNH1w8CTu4BmYj+IHiaPswUs Ej4K2QhmQ+H3BijZ3voAFWui5b8kaEU= -----END CERTIFICATE-----Generated at Sun Sep 27 06:04:59 2026 by rpki-client