$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: vwrU5o4vaQomxlYPCHwEs5KnvnuvUG1WEYjA8WU6Kjc= Subject key identifier: DE:6B:4E:7A:59:CA:F7:2C:3A:93:55:D8:78:8E:DF:7C:CC:18:B1:31 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4C3D4AB63C789ACB37CC8700 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4a:b6:3c:78:9a:cb:37:cc:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cf366ac6-09d9-4f76-a3cf-4827ad8ebab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:09:d7:a5:ac:4e:3e:60:ff:bf:9e:5b:07: 56:8e:16:f5:65:71:91:fc:83:a7:63:bc:2f:48:50: db:be:47:08:ca:d1:d3:c1:ad:e2:9a:dd:3a:c4:e9: 2b:77:ae:54:ec:27:b5:60:2e:c8:bb:10:d5:34:0d: 80:d1:40:4f:ce:13:52:37:36:0c:2e:56:08:81:6d: 4b:16:42:8d:27:06:f5:9a:d7:f1:96:ea:f3:67:36: a2:e8:20:f8:26:63:92:43:6a:2a:33:2a:67:18:4f: c2:4b:f8:42:77:62:19:b9:ff:82:ad:6c:6a:20:a5: b2:b6:3f:b5:02:64:5e:ed:d6:74:79:8b:df:98:19: 8e:e0:ee:70:87:be:d5:3a:dc:7f:da:93:b6:5e:09: 70:3a:ed:94:44:2e:b3:0f:48:77:7f:2c:e5:62:5c: 14:f1:7a:65:2f:11:c7:86:7e:52:a4:4a:f9:0c:f1: ea:62:f9:7f:9d:35:94:b7:bd:97:77:38:10:40:fb: 11:de:ce:60:94:6e:e7:0d:32:f2:56:29:7c:3c:6d: 21:e6:de:47:24:df:90:ca:97:e2:e2:59:c5:4f:b8: 22:2a:f1:99:f1:01:45:46:19:65:a3:13:14:ba:67: b7:c1:a3:5f:5d:20:e4:cc:f9:5b:d1:2f:32:8e:56: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:4E:7A:59:CA:F7:2C:3A:93:55:D8:78:8E:DF:7C:CC:18:B1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:34:82:52:f2:76:7d:6e:bc:5e:73:5b:bb:02:41:8d:91:e0: a7:ab:82:be:d1:45:77:6e:59:a2:8d:bd:7e:b3:95:5c:0e:09: 17:2d:f6:d2:86:b1:c2:9c:e9:48:84:44:7e:50:5a:05:81:c2: 2a:a0:43:9e:fb:b5:ab:21:8f:89:fb:9a:43:01:f1:36:f4:44: b8:a5:4e:4b:86:67:57:f5:13:20:33:e0:2f:03:f5:9e:90:c0: 83:43:2d:c3:8e:98:fa:7b:9a:bd:62:75:29:86:cf:cb:65:a8: cb:44:fc:2a:5e:72:a6:c0:23:9d:92:1f:cf:30:b1:b7:a7:67: 9c:60:59:08:19:9c:4a:f8:84:6e:85:d7:43:6e:47:90:b5:51: 2b:4b:ce:11:7f:5c:e1:93:16:5c:4a:57:c1:e1:07:6a:4f:b7: e8:26:fa:4f:aa:60:10:45:ac:ef:e4:74:3a:97:b6:8c:c5:bf: 21:fb:cd:f0:63:74:3b:27:b5:7e:f9:92:22:86:ca:60:08:ea: 82:d6:b3:e0:32:b1:ad:76:7a:b6:9e:67:af:f5:36:0a:f7:5e: 4a:22:4b:ec:90:c1:7f:b9:c6:e7:08:12:ae:e5:59:f3:2e:c5: 0e:50:bd:a7:93:c2:34:8b:bb:52:bc:36:e3:6b:58:df:d6:cd: d1:b0:58:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUq2PHiayzfMhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2YzNjZhYzYtMDlkOS00Zjc2LWEzY2YtNDgyN2FkOGViYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigMJ16WsTj5g/7+eWwdWjhb1ZXGR/IOnY7wv SFDbvkcIytHTwa3imt06xOkrd65U7Ce1YC7IuxDVNA2A0UBPzhNSNzYMLlYIgW1L FkKNJwb1mtfxlurzZzai6CD4JmOSQ2oqMypnGE/CS/hCd2IZuf+CrWxqIKWytj+1 AmRe7dZ0eYvfmBmO4O5wh77VOtx/2pO2XglwOu2URC6zD0h3fyzlYlwU8XplLxHH hn5SpEr5DPHqYvl/nTWUt72XdzgQQPsR3s5glG7nDTLyVil8PG0h5t5HJN+Qypfi 4lnFT7giKvGZ8QFFRhlloxMUume3waNfXSDkzPlb0S8yjlbndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5rTnpZyvcsOpNV2HiO33zMGLExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk0glLydn1uvF5zW7sCQY2R4Kergr7RRXduWaKNvX6zlVwOCRct9tKG scKc6UiERH5QWgWBwiqgQ577tashj4n7mkMB8Tb0RLilTkuGZ1f1EyAz4C8D9Z6Q wINDLcOOmPp7mr1idSmGz8tlqMtE/CpecqbAI52SH88wsbenZ5xgWQgZnEr4hG6F 10NuR5C1UStLzhF/XOGTFlxKV8HhB2pPt+gm+k+qYBBFrO/kdDqXtozFvyH7zfBj dDsntX75kiKGymAI6oLWs+Aysa12eraeZ6/1Ngr3XkoiS+yQwX+5xucIEq7lWfMu xQ5QvaeTwjSLu1K8NuNrWN/WzdGwWMs= -----END CERTIFICATE-----Generated at Sun Sep 27 07:50:40 2026 by rpki-client