$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/04a4d92b-1db0-321e-af6e-a92c0ea5f46c.roa File: 04a4d92b-1db0-321e-af6e-a92c0ea5f46c.roa (raw, json) Hash identifier: DvqFlvYjWvci0Jx/gRxV28LERLJoTjIEFb2zmk4MH9M= Subject key identifier: AA:29:B6:C2:53:F1:B2:B4:EE:F6:DB:A4:F4:5D:B8:C6:13:4C:77:B9 Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584F480D42CBC9875A5EA66B20C0 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/04a4d92b-1db0-321e-af6e-a92c0ea5f46c.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16524 IP address blocks: 72.11.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:42:cb:c9:87:5a:5e:a6:6b:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=02fd5abe-128f-401e-bb71-f650d9c39077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:01:05:9a:c1:92:ea:d8:4d:f3:7c:25:c1: 41:5d:7a:e5:a6:1c:86:54:d3:02:d6:6b:fe:d5:60: fc:dc:4b:0e:8d:81:9d:c4:7e:10:45:f0:81:39:9c: 92:04:7c:9f:5a:9c:c3:e3:bd:69:6f:99:67:f4:57: 7b:91:8d:c6:56:61:c5:80:d6:0a:89:d4:16:d3:03: 7c:2f:31:de:0d:bd:19:a1:8a:35:d1:b4:f7:1a:46: 54:d1:29:c3:4c:9a:c5:b7:5c:f2:81:34:79:b2:03: 54:b5:4e:3e:84:1f:82:19:8e:50:a4:23:3a:f4:f0: 52:19:c1:ff:c3:ed:7d:fe:1e:aa:f0:92:bc:5d:71: 97:2a:5d:e0:ca:fc:49:78:f7:04:cd:30:fb:d9:0f: 35:ce:d1:19:c8:f6:13:0f:76:7f:11:f8:ee:a7:c4: 0e:a6:00:09:da:a1:2d:ba:0b:16:73:73:9c:60:d5: b3:8b:76:bd:16:9b:e9:5d:d6:95:45:44:82:04:c4: a3:9e:96:88:1c:2d:41:f8:54:6a:bf:81:0f:80:27: 1f:67:90:58:5f:75:fb:11:2a:bf:b4:dc:53:c3:4e: 22:c4:95:92:15:cc:c5:dd:fe:7f:4e:f6:15:7a:b6: 50:34:de:a0:2e:a0:3d:1d:5c:a3:51:d9:1a:86:1f: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:B6:C2:53:F1:B2:B4:EE:F6:DB:A4:F4:5D:B8:C6:13:4C:77:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/04a4d92b-1db0-321e-af6e-a92c0ea5f46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:40:17:6e:88:5d:3e:f9:16:13:fc:d3:98:8b:4f:26:da:46: 96:1a:32:ed:e2:b8:f2:82:32:61:7e:aa:6e:11:6e:98:a3:f0: 0c:e4:7b:71:d6:cf:d2:ca:7b:fd:31:4d:5d:83:74:71:6e:8e: 08:62:23:e8:4e:f5:ea:66:d2:6f:6c:35:9c:fa:c0:e6:2b:05: e3:ad:57:05:25:87:2f:fd:b6:8f:fd:82:72:b5:48:59:40:26: ed:6a:db:7c:20:18:c3:ff:25:99:35:8d:79:03:5e:23:af:ff: 82:0c:50:99:73:78:81:18:7c:08:1c:a2:13:23:2f:66:d1:e3: 49:44:c6:de:3c:d0:2f:ca:aa:59:9a:f4:96:23:de:45:d1:d5: f6:4d:3c:22:6d:3d:8c:69:1c:88:d5:72:9b:a8:ca:10:80:7c: 81:d0:24:5f:04:bc:9e:ca:e5:65:2f:3e:12:44:cf:ca:01:53: 5d:ce:55:7a:cb:a4:47:af:ed:b5:05:f5:40:3a:ff:04:cb:d5: d6:5f:1c:5d:c8:46:5e:1b:9b:e1:5a:7e:0d:f7:ce:47:7a:2a: a2:ee:1d:49:0c:d3:0a:9b:73:c5:63:92:73:20:06:64:a5:6a: 9c:3e:b8:07:eb:95:7a:39:dc:82:0f:e4:89:44:d8:ab:8d:59: 8b:23:46:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDULLyYdaXqZrIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDJmZDVhYmUtMTI4Zi00MDFlLWJiNzEtZjY1MGQ5YzM5MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBABBZrBkurYTfN8JcFBXXrlphyGVNMC1mv+ 1WD83EsOjYGdxH4QRfCBOZySBHyfWpzD471pb5ln9Fd7kY3GVmHFgNYKidQW0wN8 LzHeDb0ZoYo10bT3GkZU0SnDTJrFt1zygTR5sgNUtU4+hB+CGY5QpCM69PBSGcH/ w+19/h6q8JK8XXGXKl3gyvxJePcEzTD72Q81ztEZyPYTD3Z/Efjup8QOpgAJ2qEt ugsWc3OcYNWzi3a9FpvpXdaVRUSCBMSjnpaIHC1B+FRqv4EPgCcfZ5BYX3X7ESq/ tNxTw04ixJWSFczF3f5/TvYVerZQNN6gLqA9HVyjUdkahh/nWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoptsJT8bK07vbbpPRduMYTTHe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvMDRhNGQ5MmItMWRiMC0z MjFlLWFmNmUtYTkyYzBlYTVmNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApAF26IXT75FhP805iLTybaRpYaMu3iuPKCMmF+qm4Rbpij8Azke3HW z9LKe/0xTV2DdHFujghiI+hO9epm0m9sNZz6wOYrBeOtVwUlhy/9to/9gnK1SFlA Ju1q23wgGMP/JZk1jXkDXiOv/4IMUJlzeIEYfAgcohMjL2bR40lExt480C/Kqlma 9JYj3kXR1fZNPCJtPYxpHIjVcpuoyhCAfIHQJF8EvJ7K5WUvPhJEz8oBU13OVXrL pEev7bUF9UA6/wTL1dZfHF3IRl4bm+Fafg33zkd6KqLuHUkM0wqbc8VjknMgBmSl apw+uAfrlXo53IIP5IlE2KuNWYsjRq0= -----END CERTIFICATE-----Generated at Tue Sep 29 13:04:18 2026 by rpki-client