$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/a2bca416-30f9-3f3d-a3ad-921dda065a7c.roa File: a2bca416-30f9-3f3d-a3ad-921dda065a7c.roa (raw, json) Hash identifier: Pb58NizzT3bx0neimwmUTTGpsCfaAUuQWYekaj2aS2w= Subject key identifier: 83:9C:CB:F5:8F:66:07:49:D8:94:29:30:6B:61:14:55:8D:69:50:62 Certificate issuer: /CN=9f4a0908-708d-490b-9f22-60855d3d69b3 Certificate serial: 010D0C9F4328584F498A78E6987A4A0340D9CC20 Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/a2bca416-30f9-3f3d-a3ad-921dda065a7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 167.234.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:78:e6:98:7a:4a:03:40:d9:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9cc506ed-0f44-47d4-9388-51e82a951fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:5b:6f:cf:5f:d3:03:62:50:5b:b9:ad:0c: 38:fb:6d:ee:88:85:bc:e9:a1:8b:fd:69:25:7c:e0: 8b:9b:f7:12:73:f6:48:d3:e6:14:93:a2:0e:9a:12: dd:fa:3d:be:54:35:4e:85:ad:75:7f:20:33:af:86: 73:c2:be:89:a9:b9:4f:3e:05:bb:46:d5:ef:04:b3: c4:07:57:f3:67:2f:df:60:c1:6e:4e:1c:f2:56:15: b2:f2:b7:32:8b:90:2f:1c:28:78:e6:8b:e9:9a:8e: 0f:2a:c3:df:22:13:16:0e:e8:84:d2:96:01:66:78: c5:7f:f3:fd:7a:a6:87:e3:94:39:e7:05:c2:fb:ae: f1:4c:71:7d:c1:13:67:d9:a5:98:cf:cf:60:5b:22: c0:22:83:7c:98:56:d8:8b:07:21:dd:f4:e8:9b:cd: 26:85:98:0d:d2:75:45:01:a3:61:a1:58:4f:ba:1b: 42:7f:13:d9:7a:00:e9:de:b2:cd:07:74:ca:ab:13: 76:19:c3:d9:d7:dd:49:70:a4:9e:3d:5c:3f:c3:52: 21:ab:4f:85:06:ec:ef:66:b9:d7:bc:0c:2f:66:fa: da:f3:d6:f0:bc:bd:64:96:bb:bc:28:48:ea:0c:13: 56:30:dd:29:a0:59:51:b6:af:bb:52:63:6b:ad:8a: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:CB:F5:8F:66:07:49:D8:94:29:30:6B:61:14:55:8D:69:50:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/a2bca416-30f9-3f3d-a3ad-921dda065a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl X509v3 Authority Key Identifier: keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer sbgp-ipAddrBlock: critical IPv4: 167.234.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d0:26:7f:20:5d:4d:6e:28:69:c6:2c:9f:e0:86:e9:67:04: 33:23:30:26:47:8e:79:48:52:2a:70:29:d6:14:d1:9a:16:7b: 94:9d:93:f0:2e:99:67:a4:1d:04:dd:ad:12:82:a5:16:15:bf: 15:a8:92:9b:96:50:a4:97:10:d9:20:bb:3b:1b:d0:22:f5:5d: d7:bf:ec:21:78:3d:62:29:f9:08:e9:30:61:d4:c8:45:c4:ee: ab:38:f8:d7:3a:2d:c7:dc:6a:54:e9:fc:f4:9c:28:90:eb:cf: 38:c2:d1:35:cf:3b:4d:a2:5f:9c:99:25:62:ab:4e:87:e1:7d: e3:76:d6:06:f4:24:b0:ac:fc:97:14:ac:b8:a0:a2:04:b0:53: 97:aa:01:d4:6b:08:49:ce:1f:d0:e7:db:25:a1:49:67:8a:be: d6:48:1c:38:96:12:23:d8:d9:3c:22:70:d8:06:92:86:81:39: 4a:f8:44:84:e6:85:59:74:7c:f8:41:27:d3:08:53:ea:ed:dc: 6c:cd:2c:f5:e2:e7:5d:ba:01:e6:d3:29:98:21:c2:33:cb:17: dc:0f:1f:dd:a6:22:22:50:9f:94:cc:0f:09:f3:f7:5a:f4:f3: 78:6a:a5:11:e2:16:d1:1f:46:d9:20:42:82:59:3b:69:e3:ab: 27:5c:5b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JinjmmHpKA0DZzCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY0YTA5MDgtNzA4ZC00OTBiLTlmMjItNjA4NTVkM2Q2 OWIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWNjNTA2ZWQtMGY0NC00N2Q0LTkzODgtNTFlODJhOTUxZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP5bb89f0wNiUFu5rQw4+23uiIW86aGL/Wkl fOCLm/cSc/ZI0+YUk6IOmhLd+j2+VDVOha11fyAzr4Zzwr6JqblPPgW7RtXvBLPE B1fzZy/fYMFuThzyVhWy8rcyi5AvHCh45ovpmo4PKsPfIhMWDuiE0pYBZnjFf/P9 eqaH45Q55wXC+67xTHF9wRNn2aWYz89gWyLAIoN8mFbYiwch3fTom80mhZgN0nVF AaNhoVhPuhtCfxPZegDp3rLNB3TKqxN2GcPZ191JcKSePVw/w1Ihq0+FBuzvZrnX vAwvZvra89bwvL1klru8KEjqDBNWMN0poFlRtq+7UmNrrYpXqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOcy/WPZgdJ2JQpMGthFFWNaVBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZjRh MDkwOC03MDhkLTQ5MGItOWYyMi02MDg1NWQzZDY5YjMvYTJiY2E0MTYtMzBmOS0z ZjNkLWEzYWQtOTIxZGRhMDY1YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWY0YTA5MDgtNzA4ZC00OTBiLTlm MjItNjA4NTVkM2Q2OWIzLzlmNGEwOTA4LTcwOGQtNDkwYi05ZjIyLTYwODU1ZDNk NjliMy5jcmwwHwYDVR0jBBgwFoAUS6GvAvZX8ayMKkFOL4WEcFDagaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZjRhMDkwOC03MDhkLTQ5MGItOWYyMi02MDg1 NWQzZDY5YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp+pGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPQJn8gXU1uKGnGLJ/ghulnBDMjMCZHjnlIUipwKdYU0ZoWe5Sdk/Au mWekHQTdrRKCpRYVvxWokpuWUKSXENkguzsb0CL1Xde/7CF4PWIp+QjpMGHUyEXE 7qs4+Nc6LcfcalTp/PScKJDrzzjC0TXPO02iX5yZJWKrTofhfeN21gb0JLCs/JcU rLigogSwU5eqAdRrCEnOH9Dn2yWhSWeKvtZIHDiWEiPY2TwicNgGkoaBOUr4RITm hVl0fPhBJ9MIU+rt3GzNLPXi5126AebTKZghwjPLF9wPH92mIiJQn5TMDwnz91r0 83hqpRHiFtEfRtkgQoJZO2njqydcW6k= -----END CERTIFICATE-----Generated at Sat Sep 26 14:27:09 2026 by rpki-client