$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f6f1b287-8286-351f-a7b8-132eb845210f.roa File: f6f1b287-8286-351f-a7b8-132eb845210f.roa (raw, json) Hash identifier: CRRvthXJzm1KAsCSeSZv15w9Rdun9UcGckupSp/dq0A= Subject key identifier: B4:14:B8:A7:74:58:33:88:F3:DD:1D:FE:88:98:EC:3E:D3:0A:31:8C Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F4986E9FEC484764DA07BD710 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f6f1b287-8286-351f-a7b8-132eb845210f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:e9:fe:c4:84:76:4d:a0:7b:d7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49aae1cf-0d0c-433d-8161-8b0fb18230e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:cf:0f:3a:f0:6d:58:92:67:ae:cf:80:da: 7a:40:77:5a:da:e8:6a:61:51:05:72:da:b9:7d:2d: 71:8d:8e:ba:ba:05:bc:80:91:d8:3a:9b:9d:13:20: bd:ba:8a:d8:6b:91:37:33:25:39:61:7c:05:98:0a: f0:f9:2c:dd:24:a4:0d:53:27:e8:57:2c:69:a1:0f: 7f:51:10:b7:dc:20:ca:29:76:26:c5:af:1e:8c:b2: 46:c0:3d:38:fd:37:41:26:0f:db:76:49:36:52:22: 0a:d3:9e:04:25:51:93:b5:de:f6:c2:69:31:bf:93: 9e:e1:eb:bb:63:2c:a1:d0:74:7f:a5:ad:45:54:12: 0b:66:54:56:28:f2:d9:76:50:69:18:55:fe:43:6d: 98:37:87:9b:9f:cb:dc:d7:85:a2:4f:db:b0:72:9a: 7e:a3:1a:eb:c3:c5:4e:a2:77:70:bc:1b:75:a7:96: e0:01:b6:99:37:0a:71:4c:d9:3b:e9:a5:e8:0b:f4: 3f:d8:91:75:02:08:2e:9a:8b:63:37:ba:5d:b7:e2: b7:04:b0:a9:9d:ee:98:8c:c4:11:21:27:ee:94:6a: a2:3d:87:d7:32:0c:2a:be:c2:a6:c8:64:4e:b4:53: be:3b:e2:31:80:5a:87:c7:89:78:56:dd:cf:00:ea: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:14:B8:A7:74:58:33:88:F3:DD:1D:FE:88:98:EC:3E:D3:0A:31:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f6f1b287-8286-351f-a7b8-132eb845210f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:24:68:4a:93:e3:82:1e:2a:60:72:45:48:d5:84:4d:a4:97: c1:e1:f8:75:5e:7d:b0:74:8d:f6:f3:aa:28:0b:87:40:77:70: bf:af:a9:10:13:73:3a:63:35:da:b7:03:0b:e0:eb:26:23:cd: e3:e8:7d:cd:07:72:d9:a2:3e:70:28:ff:91:8d:a7:c2:2b:81: e3:d0:6a:6f:f7:4e:4f:df:8e:77:c8:22:bc:1d:7e:ee:6c:e2: 7b:75:97:78:97:3d:d5:9b:5f:0a:6e:c2:b1:23:9e:8e:6c:bd: 8c:5f:65:54:89:82:79:c0:30:e3:ba:b7:a4:31:63:42:3f:38: e1:39:92:a8:77:45:cd:53:a6:95:ac:2e:2a:15:84:a5:9b:65: 1f:8e:fe:32:16:bb:2e:0c:64:3d:20:6f:a1:d5:58:6e:a8:0b: 52:10:49:a8:c6:44:ec:8d:96:95:09:d9:96:a2:e2:91:af:8c: 2b:be:12:f8:32:f7:3c:63:a1:62:33:58:12:39:ac:61:ef:f6: 3a:a5:e9:d1:f9:5c:7b:99:61:63:a5:81:a3:a2:c6:dd:95:b0: 5f:f4:79:2f:83:f0:e8:64:92:c0:58:aa:68:d8:35:53:21:04: a7:78:6f:b2:c2:5b:a0:3f:d2:cf:98:a6:35:2e:55:97:ea:79: d2:4a:83:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhun+xIR2TaB71xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDlhYWUxY2YtMGQwYy00MzNkLTgxNjEtOGIwZmIxODIzMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1rPDzrwbViSZ67PgNp6QHda2uhqYVEFctq5 fS1xjY66ugW8gJHYOpudEyC9uorYa5E3MyU5YXwFmArw+SzdJKQNUyfoVyxpoQ9/ URC33CDKKXYmxa8ejLJGwD04/TdBJg/bdkk2UiIK054EJVGTtd72wmkxv5Oe4eu7 Yyyh0HR/pa1FVBILZlRWKPLZdlBpGFX+Q22YN4ebn8vc14WiT9uwcpp+oxrrw8VO ondwvBt1p5bgAbaZNwpxTNk76aXoC/Q/2JF1AggumotjN7pdt+K3BLCpne6YjMQR ISfulGqiPYfXMgwqvsKmyGROtFO+O+IxgFqHx4l4Vt3PAOqgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQUuKd0WDOI890d/oiY7D7TCjGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZjZmMWIyODctODI4Ni0z NTFmLWE3YjgtMTMyZWI4NDUyMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHskaEqT44IeKmByRUjVhE2kl8Hh+HVefbB0jfbzqigLh0B3cL+vqRAT czpjNdq3Awvg6yYjzePofc0HctmiPnAo/5GNp8IrgePQam/3Tk/fjnfIIrwdfu5s 4nt1l3iXPdWbXwpuwrEjno5svYxfZVSJgnnAMOO6t6QxY0I/OOE5kqh3Rc1TppWs LioVhKWbZR+O/jIWuy4MZD0gb6HVWG6oC1IQSajGROyNlpUJ2Zai4pGvjCu+Evgy 9zxjoWIzWBI5rGHv9jql6dH5XHuZYWOlgaOixt2VsF/0eS+D8OhkksBYqmjYNVMh BKd4b7LCW6A/0s+YpjUuVZfqedJKg9E= -----END CERTIFICATE-----Generated at Sat Oct 3 13:21:12 2026 by rpki-client