$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa File: c17d307a-6891-39f3-9e92-66ead209b199.roa (raw, json) Hash identifier: OzY+3pJPEZJ3HT7Jp3YSl8F0Ox/Pnid1hfjDlYpS4H4= Subject key identifier: 45:79:68:D2:F6:11:DA:01:89:BB:58:6B:0A:B1:FA:F2:B2:99:46:B0 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584F4B39FC3E89EA8FC9B0E8EA80 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa Signing time: Fri 25 Sep 2026 16:17:55 +0000 ROA not before: Fri 25 Sep 2026 16:17:55 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11067 IP address blocks: 216.251.0.0/19 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:39:fc:3e:89:ea:8f:c9:b0:e8:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Sep 25 16:17:55 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33d1a94e-7034-4242-bd03-a150acf959fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:ba:c8:bc:c4:0c:3e:84:12:a2:db:fb:aa: 61:89:f9:4f:44:27:a6:ed:1a:d4:03:28:ce:64:cd: 09:ee:ca:0b:49:36:32:cb:19:f0:f0:e5:06:f3:ed: e7:ff:3f:73:3c:2c:e0:e4:77:67:db:af:4b:e7:02: a8:f2:62:73:d4:bd:f0:36:d2:28:89:99:fb:4f:2d: 60:2a:56:9e:56:54:2a:c3:e6:40:ed:37:a4:6f:8e: 4d:19:db:08:2b:b3:a2:16:37:ed:30:d5:32:72:97: c5:47:f2:51:c9:25:79:ec:1b:3b:7f:e6:5b:3e:84: e5:52:5f:6a:0c:aa:4b:de:87:50:50:d6:b6:7a:67: 98:6c:f9:34:9a:e7:ab:fc:14:84:0d:f8:83:15:f2: 5e:7a:a9:36:7c:f2:f2:fa:6a:16:20:4e:0e:ce:f2: b4:a0:8c:ed:23:dc:04:96:eb:02:f5:b7:51:14:91: 1b:b7:cf:8c:ac:0a:37:b2:3f:4b:03:38:fd:c0:63: 6d:4c:17:20:21:54:ee:94:cc:e5:61:32:07:78:d1: 32:25:24:7e:dd:54:23:21:b6:7c:40:fa:30:b3:91: 19:1e:06:1e:66:eb:6b:32:89:80:bc:75:6f:16:8e: b1:46:54:37:f4:44:c6:15:c2:61:4e:e1:15:a4:a5: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:79:68:D2:F6:11:DA:01:89:BB:58:6B:0A:B1:FA:F2:B2:99:46:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 216.251.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d6:b2:cb:6e:e8:cf:f1:d0:a1:32:3d:6f:e4:93:7a:26:85: bb:36:8d:5e:c8:57:73:ac:d4:37:ef:97:22:d9:ca:7e:25:f2: 64:57:2a:6b:f9:72:16:e1:6b:a9:f7:24:83:f3:88:48:c4:6b: 5f:56:15:6e:72:5a:b4:33:c2:2f:ce:7d:50:3f:a5:0b:13:5e: 0f:69:b7:5f:4d:08:8e:c8:27:39:50:1f:a0:72:63:22:d4:1b: 25:aa:1e:c9:e3:e5:fc:d0:9e:cf:b0:cb:a6:b8:7d:a9:5d:8f: 11:19:32:64:7a:de:58:d1:42:5e:d1:fc:92:fd:5f:ac:eb:f9: 61:df:bb:d1:50:0d:a0:22:46:f9:5a:50:78:74:90:66:0e:94: dd:8e:b6:07:e7:f1:2a:aa:43:ec:e2:15:e5:4b:45:0f:76:67: 05:cf:37:55:0a:03:49:64:22:bf:14:d5:a3:85:99:c0:a6:86: f4:82:ca:1d:c2:b0:cb:29:35:b3:e4:03:ca:26:31:ec:7c:07: 76:30:19:32:e8:a6:18:03:79:82:15:7d:23:47:01:d0:f7:a1: 2e:f0:e2:99:b7:10:c0:f6:0e:e4:57:5a:32:4f:96:25:73:74: 7e:0b:42:ba:3b:39:04:27:df:da:bb:8e:6f:bb:1e:ae:fc:13: a5:b5:32:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LOfw+ieqPybDo6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI2MDkyNTE2MTc1NVoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNkMWE5NGUtNzAzNC00MjQyLWJkMDMtYTE1MGFjZjk1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS26yLzEDD6EEqLb+6phiflPRCem7RrUAyjO ZM0J7soLSTYyyxnw8OUG8+3n/z9zPCzg5Hdn269L5wKo8mJz1L3wNtIoiZn7Ty1g KlaeVlQqw+ZA7Tekb45NGdsIK7OiFjftMNUycpfFR/JRySV57Bs7f+ZbPoTlUl9q DKpL3odQUNa2emeYbPk0muer/BSEDfiDFfJeeqk2fPLy+moWIE4OzvK0oIztI9wE lusC9bdRFJEbt8+MrAo3sj9LAzj9wGNtTBcgIVTulMzlYTIHeNEyJSR+3VQjIbZ8 QPows5EZHgYeZutrMomAvHVvFo6xRlQ39ETGFcJhTuEVpKV3dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV5aNL2EdoBibtYawqx+vKymUawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvYzE3ZDMwN2EtNjg5MS0z OWYzLTllOTItNjZlYWQyMDliMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2PsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrWsstu6M/x0KEyPW/kk3omhbs2jV7IV3Os1DfvlyLZyn4l8mRXKmv5 chbha6n3JIPziEjEa19WFW5yWrQzwi/OfVA/pQsTXg9pt19NCI7IJzlQH6ByYyLU GyWqHsnj5fzQns+wy6a4faldjxEZMmR63ljRQl7R/JL9X6zr+WHfu9FQDaAiRvla UHh0kGYOlN2Otgfn8SqqQ+ziFeVLRQ92ZwXPN1UKA0lkIr8U1aOFmcCmhvSCyh3C sMspNbPkA8omMex8B3YwGTLophgDeYIVfSNHAdD3oS7w4pm3EMD2DuRXWjJPliVz dH4LQro7OQQn39q7jm+7Hq78E6W1Mvg= -----END CERTIFICATE-----Generated at Sun Oct 4 23:17:45 2026 by rpki-client