$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa File: d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa (raw, json) Hash identifier: 8MNjvPFp0JIT7cnwexcw7kcZsD7r57je0bjgxF5x+6E= Subject key identifier: 12:90:B2:B4:16:C4:C5:8A:2F:49:DB:C1:89:8F:C8:E3:3F:4E:2F:A2 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F4989F532A88B5E28D0651900 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f5:32:a8:8b:5e:28:d0:65:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81b71eda-94ef-4af3-9e2e-a01ee741d447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:2b:c7:03:48:4a:ac:66:ff:4e:b9:e1:52: a3:58:9c:06:f8:dd:1c:6a:9f:0e:13:fb:41:2e:50: c0:58:77:ae:4e:e0:a5:66:4f:fd:16:23:e9:ae:7b: f8:1c:56:8e:89:bc:04:30:c4:e4:b5:9d:5e:88:ac: 66:3a:37:1d:f2:01:e3:49:bc:05:be:8a:47:bb:9d: ce:fa:a3:b7:95:52:32:74:3f:62:ca:fd:47:a5:7c: 4f:42:22:4a:4c:f4:e9:81:3d:28:ae:5e:54:e9:8d: 60:18:5a:06:73:72:c8:55:c8:3f:bf:06:ba:0a:13: e8:16:0d:cd:96:16:66:db:ee:b3:5e:94:06:35:70: a1:b4:8d:ab:c1:0c:55:1e:b0:60:f0:b5:18:7d:ec: 5c:ae:8f:6f:39:1d:8f:3b:9d:df:e1:3b:0f:6c:64: 98:ac:4e:ba:79:32:fa:0c:1c:49:63:90:0f:45:7b: e3:45:81:5d:8f:ec:bd:f2:ca:f0:4a:43:0e:3b:e0: 62:76:a7:3b:0a:0f:8b:03:89:0d:e7:17:ef:d8:23: ef:4d:a9:a2:e7:39:aa:5f:36:cf:e0:5f:f2:28:9f: 78:1b:3b:b8:61:6f:ec:86:1f:48:85:c7:1a:f0:02: 26:0c:17:32:b9:ee:3b:3a:29:9e:9e:08:fd:df:9e: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:90:B2:B4:16:C4:C5:8A:2F:49:DB:C1:89:8F:C8:E3:3F:4E:2F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7d:42:b3:5f:10:23:de:a9:7b:0c:02:f9:5f:39:5b:5c:b4: 15:d3:00:a7:d5:f8:bc:b6:7c:92:48:04:80:22:14:27:a9:8b: 33:77:14:e2:8d:f0:35:27:5c:1b:81:76:a8:87:e5:c5:6f:1a: a5:59:87:b2:7e:fd:9d:a5:3d:5d:9e:89:33:14:53:52:a8:0d: 99:39:9d:1c:72:52:09:af:16:3a:d5:24:ff:f6:c2:47:15:de: 51:52:7d:e4:68:d1:68:10:99:d2:f8:83:e3:f6:ed:dc:85:01: 66:34:0a:b6:b6:78:fc:cf:fa:e0:ba:12:37:05:26:69:70:7d: e1:28:a6:77:c9:e4:46:b5:2e:f4:7b:8e:aa:06:3f:9b:26:7e: 33:2b:a9:48:27:7f:4b:ef:70:a2:ed:e8:23:97:83:44:3d:5a: e2:75:d3:46:c6:2d:a1:d0:38:01:82:d3:95:14:67:7e:8d:73: a2:cb:dd:20:b9:e5:63:b0:cb:d0:f1:56:5e:15:70:ab:aa:1b: 02:9b:16:b1:6e:86:a6:8d:c7:7b:e0:08:17:f5:ca:89:57:c3: fc:d1:84:5d:5c:1c:80:79:56:c6:67:2a:24:e3:45:d5:d1:74: 5e:bf:1d:89:04:e8:04:2b:30:16:40:61:9d:93:b6:82:53:e8: d1:f0:e4:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JifUyqIteKNBlGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFiNzFlZGEtOTRlZi00YWYzLTllMmUtYTAxZWU3NDFkNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJIrxwNISqxm/0654VKjWJwG+N0cap8OE/tB LlDAWHeuTuClZk/9FiPprnv4HFaOibwEMMTktZ1eiKxmOjcd8gHjSbwFvopHu53O +qO3lVIydD9iyv1HpXxPQiJKTPTpgT0orl5U6Y1gGFoGc3LIVcg/vwa6ChPoFg3N lhZm2+6zXpQGNXChtI2rwQxVHrBg8LUYfexcro9vOR2PO53f4TsPbGSYrE66eTL6 DBxJY5APRXvjRYFdj+y98srwSkMOO+Bidqc7Cg+LA4kN5xfv2CPvTami5zmqXzbP 4F/yKJ94Gzu4YW/shh9Ihcca8AImDBcyue47Oimengj9356cqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKQsrQWxMWKL0nbwYmPyOM/Ti+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZDgwZWYwMmItY2VjNi0z N2Q5LWIwYzgtYTc0ODYxZjdlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA59QrNfECPeqXsMAvlfOVtctBXTAKfV+Ly2fJJIBIAiFCepizN3FOKN 8DUnXBuBdqiH5cVvGqVZh7J+/Z2lPV2eiTMUU1KoDZk5nRxyUgmvFjrVJP/2wkcV 3lFSfeRo0WgQmdL4g+P27dyFAWY0Cra2ePzP+uC6EjcFJmlwfeEopnfJ5Ea1LvR7 jqoGP5smfjMrqUgnf0vvcKLt6COXg0Q9WuJ100bGLaHQOAGC05UUZ36Nc6LL3SC5 5WOwy9DxVl4VcKuqGwKbFrFuhqaNx3vgCBf1yolXw/zRhF1cHIB5VsZnKiTjRdXR dF6/HYkE6AQrMBZAYZ2TtoJT6NHw5Mg= -----END CERTIFICATE-----Generated at Sat Sep 26 16:52:32 2026 by rpki-client