$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/97b98d89-5401-36f8-883e-093dacf36f23.roa File: 97b98d89-5401-36f8-883e-093dacf36f23.roa (raw, json) Hash identifier: 2H/AiSmbOW2qFbQ9tYKqNdPECaVG+x8HRw2p6HM3fhA= Subject key identifier: 88:14:32:BA:D3:48:F7:20:09:9F:00:BA:CE:C0:5C:83:F3:C7:5F:15 Certificate issuer: /CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b Certificate serial: 010D0C9F4328584F43DD47F100BB691C88C27D20 Authority key identifier: E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/97b98d89-5401-36f8-883e-093dacf36f23.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 62467 IP address blocks: 216.109.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:47:f1:00:bb:69:1c:88:c2:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=04b8fdbd-7de1-4545-926e-501fec67ef3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:74:1e:dc:fd:ef:4b:d0:a9:89:09:96:d3: e8:b2:cc:8f:bc:43:32:87:73:64:85:8e:ad:52:01: 6e:6a:51:9f:d4:5a:bf:ec:0c:92:89:b5:ed:5c:7b: 1d:e1:58:39:3f:b4:7e:93:18:dd:0f:12:28:b2:7b: 29:8f:3d:31:ea:d5:ca:82:14:73:07:92:95:ef:fc: b1:f8:89:85:22:15:99:6b:d9:1f:dd:37:ec:bd:45: 0a:03:b4:39:a2:89:d8:05:c7:f1:77:56:40:af:4e: 7e:ff:f3:01:46:20:af:ed:8d:6f:42:69:23:86:d7: f9:14:24:b1:08:ee:c8:d2:8d:84:cc:09:6e:62:97: aa:bf:5f:7a:67:c4:f3:43:f1:66:85:6b:73:9b:07: ad:dd:2b:a8:82:39:2b:be:1e:db:ae:af:86:de:5d: 5d:0f:00:7b:2e:f7:f7:3c:46:43:85:0f:85:d9:8c: 1b:88:52:d2:d8:ac:ef:dc:8a:a1:8a:96:f4:d9:9d: 7b:6e:a6:ca:01:97:d8:ab:75:55:8a:b0:16:86:b5: 7a:7c:f1:13:67:5a:e1:34:e3:83:8f:09:7e:65:89: fb:cd:18:18:d4:13:01:42:cd:f1:75:c3:a8:80:58: cd:2c:9a:63:3d:ea:b4:79:61:08:94:31:ac:b5:09: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:32:BA:D3:48:F7:20:09:9F:00:BA:CE:C0:5C:83:F3:C7:5F:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/97b98d89-5401-36f8-883e-093dacf36f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl X509v3 Authority Key Identifier: keyid:E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer sbgp-ipAddrBlock: critical IPv4: 216.109.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b6:56:d3:29:4a:17:3e:5b:f5:6d:f7:bb:d1:df:08:ca:68: 68:d9:50:26:e7:71:ef:00:bc:c8:00:38:a1:f1:4a:20:40:20: e9:e1:c3:39:4d:c9:c4:b3:40:ae:17:97:31:04:37:02:4b:46: db:59:4b:ce:97:7c:48:e1:89:6f:bb:53:e6:58:7f:db:38:4c: e7:01:9e:97:f7:07:38:91:29:cc:ac:dc:21:4c:5f:70:cd:17: f5:8e:5a:1c:17:9b:53:6b:d2:59:53:68:0e:18:f1:c8:a5:61: 59:1c:89:8b:dd:05:a6:37:4e:12:88:ed:61:b2:e1:f8:f4:a3: f2:34:a5:7a:57:c1:c5:42:cd:a6:53:18:52:47:cb:47:00:b1: 5d:6f:96:d9:21:a8:2f:f5:81:a3:4f:d4:e9:fa:f6:b7:e3:59: ac:dd:a2:ef:8a:25:0a:6e:1c:9d:f9:33:5e:fb:13:7a:af:26: 7e:3c:3f:6a:5e:eb:e7:96:14:d1:a3:c6:84:86:ae:5d:8b:78: 47:7e:1b:a9:b6:48:ae:74:e9:fa:cd:21:57:12:1a:25:08:79: ac:5d:47:76:b8:43:cc:6e:be:40:51:15:0d:87:a6:e3:8e:79: 31:4c:9a:ef:8b:41:cb:74:85:19:3f:6e:01:a9:5d:7a:eb:0f: 38:cb:05:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UfxALtpHIjCfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdhZGNhYTktOWNiNC00ZDlhLTgxMDQtZmU2NGViYjM3 NzBiMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDRiOGZkYmQtN2RlMS00NTQ1LTkyNmUtNTAxZmVjNjdlZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWV0Htz970vQqYkJltPossyPvEMyh3NkhY6t UgFualGf1Fq/7AySibXtXHsd4Vg5P7R+kxjdDxIosnspjz0x6tXKghRzB5KV7/yx +ImFIhWZa9kf3TfsvUUKA7Q5oonYBcfxd1ZAr05+//MBRiCv7Y1vQmkjhtf5FCSx CO7I0o2EzAluYpeqv196Z8TzQ/FmhWtzmwet3Suogjkrvh7brq+G3l1dDwB7Lvf3 PEZDhQ+F2YwbiFLS2Kzv3Iqhipb02Z17bqbKAZfYq3VVirAWhrV6fPETZ1rhNOOD jwl+ZYn7zRgY1BMBQs3xdcOogFjNLJpjPeq0eWEIlDGstQkS+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgUMrrTSPcgCZ8Aus7AXIPzx18VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xN2Fk Y2FhOS05Y2I0LTRkOWEtODEwNC1mZTY0ZWJiMzc3MGIvOTdiOThkODktNTQwMS0z NmY4LTg4M2UtMDkzZGFjZjM2ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTdhZGNhYTktOWNiNC00ZDlhLTgx MDQtZmU2NGViYjM3NzBiLzE3YWRjYWE5LTljYjQtNGQ5YS04MTA0LWZlNjRlYmIz NzcwYi5jcmwwHwYDVR0jBBgwFoAU5OEHiqE9F9XqcdMdgBjLezOVHX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xN2FkY2FhOS05Y2I0LTRkOWEtODEwNC1mZTY0 ZWJiMzc3MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G2/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD62VtMpShc+W/Vt97vR3wjKaGjZUCbnce8AvMgAOKHxSiBAIOnhwzlN ycSzQK4XlzEENwJLRttZS86XfEjhiW+7U+ZYf9s4TOcBnpf3BziRKcys3CFMX3DN F/WOWhwXm1Nr0llTaA4Y8cilYVkciYvdBaY3ThKI7WGy4fj0o/I0pXpXwcVCzaZT GFJHy0cAsV1vltkhqC/1gaNP1On69rfjWazdou+KJQpuHJ35M177E3qvJn48P2pe 6+eWFNGjxoSGrl2LeEd+G6m2SK506frNIVcSGiUIeaxdR3a4Q8xuvkBRFQ2HpuOO eTFMmu+LQct0hRk/bgGpXXrrDzjLBaY= -----END CERTIFICATE-----Generated at Sat Sep 26 17:05:38 2026 by rpki-client