$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/dd7f54a2-e18b-3400-b749-3660e88a17bd.roa File: dd7f54a2-e18b-3400-b749-3660e88a17bd.roa (raw, json) Hash identifier: JLk4B366neHy8pENAO6kvPNFI5r8Et9S3Gdh131xJZk= Subject key identifier: AF:30:9D:9A:C5:FD:83:3A:A3:6E:B6:FB:EF:89:9F:12:F1:5F:4C:98 Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584F0D6CF652ED3D3531DC2C3EC0 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/dd7f54a2-e18b-3400-b749-3660e88a17bd.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16524 IP address blocks: 72.11.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f6:52:ed:3d:35:31:dc:2c:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=15208712-bfe7-47b8-a567-51aca31d69d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:3f:5d:b8:8c:02:87:5c:fa:41:9a:18:ec: e4:bc:39:b0:14:a7:65:fb:fc:94:3b:66:87:c2:03: eb:5a:4e:3c:b8:c0:9c:6a:b9:80:fc:2d:eb:5b:7a: 6a:40:bc:b0:c2:c3:2c:60:77:20:bb:df:a9:76:97: eb:43:60:fb:2e:9e:bc:5a:27:d7:36:ec:30:25:52: 98:85:98:94:4d:a8:0c:bb:f7:d7:26:a8:b6:f5:c2: 66:ef:ca:54:e4:0f:65:73:a6:f8:98:93:4b:65:20: d5:06:86:00:07:85:a8:c9:34:db:df:3b:5c:5d:0f: e0:94:8c:e1:f7:0a:15:ce:ee:33:0f:d4:21:72:1e: 63:cd:07:a2:54:55:8f:64:3b:14:75:da:e2:0d:2f: 4f:f9:9e:92:eb:b7:15:af:bd:f8:3c:ac:9d:a9:56: a5:ae:b6:eb:0e:83:02:de:8a:b9:f3:3e:ef:85:57: a7:dc:19:19:0f:40:ac:65:02:52:23:66:f4:3c:9d: 49:74:9b:67:06:f9:7f:5e:1c:d5:49:bf:fe:d3:c9: bd:69:2d:4b:01:e4:49:fb:6a:43:c4:fe:5a:4c:07: ed:dd:e4:27:97:e6:52:51:16:20:3b:0e:ca:44:53: 6a:d5:4c:f2:08:b4:45:86:2b:d5:44:ac:9d:78:38: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:30:9D:9A:C5:FD:83:3A:A3:6E:B6:FB:EF:89:9F:12:F1:5F:4C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/dd7f54a2-e18b-3400-b749-3660e88a17bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:53:bb:27:54:28:ac:04:81:3e:b4:40:dd:a4:f8:80:f5:d2: 9b:58:d6:be:29:49:e6:bf:fe:a8:bf:f0:2e:50:0f:9f:19:61: 7b:47:9d:c7:d8:e2:f6:0d:bf:a3:9b:5f:b0:5e:cd:fc:36:3c: 4f:f9:fe:2a:ae:0f:f3:d2:a7:ab:a1:8a:32:5e:61:5c:db:aa: ad:84:34:2f:f4:17:e5:3f:3d:3f:dc:cc:7b:fb:a9:f9:16:5e: e2:eb:0b:00:52:ae:a6:2c:69:4c:bf:61:4b:ec:1e:06:3c:ba: 3e:0f:28:15:b3:82:43:4f:f5:ca:e8:9f:2c:c9:38:eb:bf:34: 0b:f7:8c:f2:0a:9c:b4:0f:b2:7f:48:66:a7:a6:cf:ec:b0:ab: b8:e3:56:53:92:8d:92:17:df:3f:f4:a0:29:62:59:7d:29:6f: 4f:4f:f2:20:b2:2b:f7:9a:99:5e:b7:f6:02:41:8b:d7:c7:d5: 2d:0b:4a:4b:46:f0:77:a3:d6:50:7d:5e:3b:25:31:2d:94:33: 3b:ff:24:f5:19:a9:92:4b:56:b6:b5:32:f7:ef:0a:87:d8:82: d2:4a:01:d9:55:de:d4:51:5b:b2:33:e1:ce:74:cd:14:23:d8: 9f:4a:5e:42:4e:c8:35:14:11:0d:84:9d:8a:76:00:de:9f:f5: 7d:47:79:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPZS7T01MdwsPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MTUyMDg3MTItYmZlNy00N2I4LWE1NjctNTFhY2EzMWQ2OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI0/XbiMAodc+kGaGOzkvDmwFKdl+/yUO2aH wgPrWk48uMCcarmA/C3rW3pqQLywwsMsYHcgu9+pdpfrQ2D7Lp68WifXNuwwJVKY hZiUTagMu/fXJqi29cJm78pU5A9lc6b4mJNLZSDVBoYAB4WoyTTb3ztcXQ/glIzh 9woVzu4zD9Qhch5jzQeiVFWPZDsUddriDS9P+Z6S67cVr734PKydqValrrbrDoMC 3oq58z7vhVen3BkZD0CsZQJSI2b0PJ1JdJtnBvl/XhzVSb/+08m9aS1LAeRJ+2pD xP5aTAft3eQnl+ZSURYgOw7KRFNq1UzyCLRFhivVRKydeDhnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8wnZrF/YM6o262+++JnxLxX0yYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvZGQ3ZjU0YTItZTE4Yi0z NDAwLWI3NDktMzY2MGU4OGExN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAveMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9TuydUKKwEgT60QN2k+ID10ptY1r4pSea//qi/8C5QD58ZYXtHncfY 4vYNv6ObX7Bezfw2PE/5/iquD/PSp6uhijJeYVzbqq2ENC/0F+U/PT/czHv7qfkW XuLrCwBSrqYsaUy/YUvsHgY8uj4PKBWzgkNP9cronyzJOOu/NAv3jPIKnLQPsn9I Zqemz+ywq7jjVlOSjZIX3z/0oCliWX0pb09P8iCyK/eamV639gJBi9fH1S0LSktG 8Hej1lB9XjslMS2UMzv/JPUZqZJLVra1MvfvCofYgtJKAdlV3tRRW7Iz4c50zRQj 2J9KXkJOyDUUEQ2EnYp2AN6f9X1HeaU= -----END CERTIFICATE-----Generated at Tue Sep 29 17:39:58 2026 by rpki-client