$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa File: c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa (raw, json) Hash identifier: AFDpbsAWDFJoEPwkU7Tg1P9GIJHGGXjuBVtIhrZSdZM= Subject key identifier: 35:82:C8:C0:16:DF:3F:3A:3E:CA:12:B4:A2:D4:95:74:B9:D5:54:E0 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F498A32759CB422FCE82BC9E0 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:32:75:9c:b4:22:fc:e8:2b:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09218a99-e929-484f-bf56-ca7871e3b424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f7:0c:d7:e6:2d:e9:23:05:b6:52:4e:04:0f: a0:a4:3d:76:eb:35:4e:e5:9f:88:fa:65:cc:49:6c: 53:9e:db:29:b5:8d:3b:9f:51:47:65:7d:ad:d2:53: a0:9c:51:ae:03:b9:38:6a:68:5f:79:d8:9d:ce:07: c0:cd:2d:d9:10:7a:87:0b:f6:c4:94:99:d4:6c:95: ab:8c:05:00:01:f6:ff:70:20:f0:a6:6e:2f:94:8f: 19:f6:43:83:9e:17:55:9c:97:bd:73:6d:e0:ed:25: 41:1f:88:34:e9:fe:5c:63:5a:18:ad:aa:75:0c:a3: 3d:fb:7f:30:ce:16:2d:16:e4:33:0b:d3:5e:f9:64: e4:5c:49:11:51:c5:ce:33:69:ba:c3:2b:51:9b:cb: bf:a6:8b:33:48:fa:11:04:d6:63:a4:fc:f7:01:d7: 39:ef:9d:3b:d1:a6:4f:98:12:99:d8:93:85:e2:a0: 79:d6:22:17:c2:6a:2a:39:f5:c7:64:cb:59:fe:b0: cb:de:13:59:30:a5:b4:45:fc:b9:e5:25:d3:ab:60: 1f:fc:80:8a:12:b3:f5:f7:51:a6:8f:f9:6c:77:7c: 4a:bf:b1:db:27:15:09:f4:a6:c8:56:03:1b:9c:bf: a4:a3:ab:25:06:4f:2d:72:d0:6a:d5:28:6b:33:40: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:C8:C0:16:DF:3F:3A:3E:CA:12:B4:A2:D4:95:74:B9:D5:54:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ff:8e:84:7e:90:d0:f7:86:1b:dd:fd:62:ca:a8:76:26:02: 7c:f7:f0:af:33:f5:68:83:08:7a:b4:23:f5:8c:74:fe:9f:5b: a8:c4:ac:eb:f2:b7:40:6d:ee:92:ef:4f:ef:e3:f9:fe:c9:27: 6e:6d:61:24:e4:62:e5:c2:c2:27:10:a2:91:5e:df:a8:b9:ae: 6c:fb:44:38:d7:10:a4:8d:4d:68:76:05:a6:01:a3:51:ff:96: 55:af:49:db:08:09:24:df:12:97:7a:df:e6:80:97:14:68:c3: 0b:fe:91:84:5a:7b:a6:ee:20:cf:88:06:68:45:ad:e8:5f:71: 81:cd:9a:02:30:97:90:41:01:68:27:87:e2:41:22:1c:d4:bc: 22:dc:46:ae:db:73:e5:71:c6:0f:08:43:27:30:2d:20:9b:3d: 74:5c:9e:b1:62:ce:75:c2:e8:dc:b8:b9:6a:6d:b4:99:6f:a0: bb:59:e2:82:9f:26:c2:f6:4f:e4:4f:1f:cd:0a:2d:e3:14:5c: 7d:18:f5:89:a1:fe:8d:a2:7a:42:d5:ea:63:dc:e6:18:b5:f5: 94:58:fa:df:45:0b:fd:c7:48:85:f0:77:2e:4b:01:f2:dc:5e: 60:95:e2:34:81:a3:ec:a5:a8:4c:fa:7c:fc:07:f5:01:2b:c3: d5:1f:45:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JijJ1nLQi/OgryeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDkyMThhOTktZTkyOS00ODRmLWJmNTYtY2E3ODcxZTNiNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfcM1+Yt6SMFtlJOBA+gpD126zVO5Z+I+mXM SWxTntsptY07n1FHZX2t0lOgnFGuA7k4amhfedidzgfAzS3ZEHqHC/bElJnUbJWr jAUAAfb/cCDwpm4vlI8Z9kODnhdVnJe9c23g7SVBH4g06f5cY1oYrap1DKM9+38w zhYtFuQzC9Ne+WTkXEkRUcXOM2m6wytRm8u/poszSPoRBNZjpPz3Adc575070aZP mBKZ2JOF4qB51iIXwmoqOfXHZMtZ/rDL3hNZMKW0Rfy55SXTq2Af/ICKErP191Gm j/lsd3xKv7HbJxUJ9KbIVgMbnL+ko6slBk8tctBq1ShrM0B5DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWCyMAW3z86PsoStKLUlXS51VTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYzJlN2VjYTktYmM2Ni0z ZjA2LTlhN2EtNmUyZjRjOWU0NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG//joR+kND3hhvd/WLKqHYmAnz38K8z9WiDCHq0I/WMdP6fW6jErOvy t0Bt7pLvT+/j+f7JJ25tYSTkYuXCwicQopFe36i5rmz7RDjXEKSNTWh2BaYBo1H/ llWvSdsICSTfEpd63+aAlxRowwv+kYRae6buIM+IBmhFrehfcYHNmgIwl5BBAWgn h+JBIhzUvCLcRq7bc+Vxxg8IQycwLSCbPXRcnrFiznXC6Ny4uWpttJlvoLtZ4oKf JsL2T+RPH80KLeMUXH0Y9Ymh/o2iekLV6mPc5hi19ZRY+t9FC/3HSIXwdy5LAfLc XmCV4jSBo+ylqEz6fPwH9QErw9UfRfw= -----END CERTIFICATE-----Generated at Sun Sep 27 23:33:00 2026 by rpki-client