$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/bdb45b3c-808d-31b6-83d5-2bf16de00029.roa File: bdb45b3c-808d-31b6-83d5-2bf16de00029.roa (raw, json) Hash identifier: Y+KXEIAaWqAfCfLiOPQa2OmCm2/i+b9i9XPRbAwbOtc= Subject key identifier: D9:68:17:D2:AD:DC:94:6D:97:A6:AC:04:BE:AC:5A:E9:E1:DB:3B:45 Certificate issuer: /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765 Certificate serial: 010D0C9F4328584F497668FD9F1436F8749AF340 Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/bdb45b3c-808d-31b6-83d5-2bf16de00029.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33739 IP address blocks: 204.16.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:68:fd:9f:14:36:f8:74:9a:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7bab4655-82af-4d29-9a6e-74e7ba1d19f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:ea:8b:82:65:33:0a:24:5e:a2:18:ca:ad: b8:34:67:ea:e6:23:d1:94:41:07:6d:c8:60:20:92: 72:87:52:9f:95:85:15:5a:75:93:57:ad:00:c9:49: 02:6e:9b:29:81:5b:80:18:c6:25:32:ad:a0:76:da: 3c:21:da:b0:46:1b:52:e8:7b:01:f2:94:08:04:c3: 2f:96:d6:53:41:a0:47:9e:a0:c2:ae:bf:62:45:3a: d8:9c:8c:bf:df:12:7f:dd:3e:f3:48:62:99:ff:ba: 70:48:fa:87:20:00:c9:b0:bd:d8:ec:a9:c9:7f:83: 4e:28:ea:35:be:da:72:fd:ca:f7:bd:f6:45:5c:a9: 01:e2:52:27:75:43:52:d8:8e:d4:60:1f:b8:0f:e6: 11:ed:0f:5d:49:45:79:a1:a5:22:6b:64:05:2b:5c: 22:ee:8d:0b:b9:7d:22:8d:7c:b4:13:44:9e:30:78: 2e:d9:f6:69:bf:46:69:d1:67:3b:1f:f7:56:83:f8: 55:8c:f2:aa:49:d3:9c:b2:28:fb:c3:8e:08:f7:95: 92:61:be:9c:fb:7d:bf:d6:46:97:c8:8a:30:bf:c5: 7e:07:70:9b:d5:fa:a2:26:1a:41:4e:a5:01:71:db: fc:9e:3e:a9:e5:57:7b:a8:73:8d:ac:19:4d:ae:b0: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:68:17:D2:AD:DC:94:6D:97:A6:AC:04:BE:AC:5A:E9:E1:DB:3B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/bdb45b3c-808d-31b6-83d5-2bf16de00029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl X509v3 Authority Key Identifier: keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer sbgp-ipAddrBlock: critical IPv4: 204.16.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d3:46:3d:7e:10:e2:7f:e4:12:9c:f6:3c:aa:cc:bf:38:d2: 64:f1:57:97:c7:60:87:4e:4d:06:47:ae:7a:e4:6e:87:e8:a5: fe:51:48:85:3f:ba:c4:86:34:93:98:aa:9a:70:26:20:87:dc: e6:b4:9b:5b:24:a9:ee:27:39:91:20:ea:e1:12:9e:34:f4:f8: 0d:b6:4b:59:71:58:6e:f2:93:1e:31:34:c5:1e:15:57:92:79: 6a:0c:48:d2:f7:56:74:43:f3:4e:6b:bf:98:32:c0:28:c9:04: 12:af:70:23:3f:70:8d:df:42:1a:01:70:3d:1b:4f:9a:e7:7a: 97:62:be:cc:99:f8:00:13:0e:52:b7:79:2c:f0:3c:33:3f:f2: f3:2b:0d:6d:4a:f4:af:f1:a8:8d:85:86:b4:ff:9a:e6:94:f4: cf:3a:c2:26:11:20:95:2e:ac:ee:3c:1e:c9:4a:39:60:f5:e4: 94:29:5a:23:6e:e2:87:47:21:dc:62:a1:d1:22:67:00:89:f6: 32:fc:fb:4d:85:38:6f:3b:fb:a9:41:54:17:82:e1:ff:d7:65: 52:11:50:ae:e8:0e:a0:ad:0b:d7:ed:7e:c1:d2:bc:a1:5b:6a: dc:39:a2:37:38:bb:12:ed:39:1c:e2:d8:51:47:fe:a2:a3:d7: 53:f3:34:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdmj9nxQ2+HSa80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwMTNiZDgtZmMzNC00YWQ0LThkYzgtNTE2YmRkOGJj NzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JhYjQ2NTUtODJhZi00ZDI5LTlhNmUtNzRlN2JhMWQxOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioPqi4JlMwokXqIYyq24NGfq5iPRlEEHbchg IJJyh1KflYUVWnWTV60AyUkCbpspgVuAGMYlMq2gdto8IdqwRhtS6HsB8pQIBMMv ltZTQaBHnqDCrr9iRTrYnIy/3xJ/3T7zSGKZ/7pwSPqHIADJsL3Y7KnJf4NOKOo1 vtpy/cr3vfZFXKkB4lIndUNS2I7UYB+4D+YR7Q9dSUV5oaUia2QFK1wi7o0LuX0i jXy0E0SeMHgu2fZpv0Zp0Wc7H/dWg/hVjPKqSdOcsij7w44I95WSYb6c+32/1kaX yIowv8V+B3Cb1fqiJhpBTqUBcdv8nj6p5Vd7qHONrBlNrrBgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNloF9Kt3JRtl6asBL6sWunh2ztFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAx M2JkOC1mYzM0LTRhZDQtOGRjOC01MTZiZGQ4YmM3NjUvYmRiNDViM2MtODA4ZC0z MWI2LTgzZDUtMmJmMTZkZTAwMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUwMTNiZDgtZmMzNC00YWQ0LThk YzgtNTE2YmRkOGJjNzY1L2E1MDEzYmQ4LWZjMzQtNGFkNC04ZGM4LTUxNmJkZDhi Yzc2NS5jcmwwHwYDVR0jBBgwFoAUPNGeaXellv96HMZ7UJhoSVXPS6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAxM2JkOC1mYzM0LTRhZDQtOGRjOC01MTZi ZGQ4YmM3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPTRj1+EOJ/5BKc9jyqzL840mTxV5fHYIdOTQZHrnrkbofopf5RSIU/ usSGNJOYqppwJiCH3Oa0m1skqe4nOZEg6uESnjT0+A22S1lxWG7ykx4xNMUeFVeS eWoMSNL3VnRD805rv5gywCjJBBKvcCM/cI3fQhoBcD0bT5rnepdivsyZ+AATDlK3 eSzwPDM/8vMrDW1K9K/xqI2FhrT/muaU9M86wiYRIJUurO48HslKOWD15JQpWiNu 4odHIdxiodEiZwCJ9jL8+02FOG87+6lBVBeC4f/XZVIRUK7oDqCtC9ftfsHSvKFb atw5ojc4uxLtORzi2FFH/qKj11PzNLE= -----END CERTIFICATE-----Generated at Sat Oct 10 16:49:03 2026 by rpki-client