$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/7df7e5aa-3013-3b51-996b-bcb77c988535.roa File: 7df7e5aa-3013-3b51-996b-bcb77c988535.roa (raw, json) Hash identifier: I33QNJD2P7YFV3/IVwtLv2AfrkXShidPmOmhDxuWT3g= Subject key identifier: 48:DA:88:78:D5:84:3A:68:E5:6B:3B:69:71:91:BD:69:4D:55:4C:23 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584F498AF31BD487C0390C464A00 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/7df7e5aa-3013-3b51-996b-bcb77c988535.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30039 IP address blocks: 216.222.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:f3:1b:d4:87:c0:39:0c:46:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=06c461c6-bc13-4a29-a8e3-28271d24664e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:2c:f9:50:51:cd:61:69:5e:78:fe:67:08: 62:5e:9e:80:84:8e:2c:cc:bc:cd:73:5e:94:91:aa: ae:c6:46:d4:88:01:05:3f:6d:bd:a7:e5:ef:4b:bc: d2:81:11:36:da:08:7a:46:ff:e6:b9:55:cb:e5:49: 39:64:a2:60:ef:c2:29:c7:9c:b9:86:16:67:92:f3: 7e:fb:0f:5f:ab:9c:70:ab:49:54:58:f8:84:3c:00: a2:cf:3a:55:95:82:2d:4e:4c:a2:0d:62:ef:b0:62: f2:24:7e:dc:15:8f:75:af:25:52:6c:2c:52:14:f5: 1b:19:26:35:8e:ac:1c:a4:2f:31:70:0f:d2:a3:c1: 26:84:01:11:1e:1f:98:c5:d3:7e:38:d8:74:0f:46: 56:25:79:8d:8e:b4:6e:6a:54:77:f2:7c:e4:c8:31: b3:e5:b9:dc:89:74:18:ec:b2:6d:0e:0d:bd:e2:b2: 94:06:b7:27:d0:60:a7:1b:4c:e2:bd:b6:7b:41:77: cb:44:e8:8f:91:45:c6:79:62:22:d7:78:4e:9f:67: 1f:23:7c:e8:80:4b:bc:86:c8:e6:a6:87:00:c2:01: 23:5b:bd:79:9f:83:e3:43:87:6b:53:9f:ab:46:f0: 99:c6:57:6b:df:31:3d:a2:fb:a1:f0:90:b1:8c:96: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:88:78:D5:84:3A:68:E5:6B:3B:69:71:91:BD:69:4D:55:4C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/7df7e5aa-3013-3b51-996b-bcb77c988535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:38:e9:9b:49:6f:eb:8a:17:2d:3c:4b:27:75:6e:2c:df:f5: e8:55:4e:b1:3a:c2:ff:de:c8:3f:24:f8:b8:d7:45:e0:0a:77: 06:96:eb:2a:51:e8:f0:09:9b:ef:9c:96:1b:fa:fa:0f:b5:d7: cf:d2:b0:ea:2c:01:1a:ca:0d:73:ea:43:c4:e2:6b:dd:59:85: 85:c1:b1:6d:fb:37:3f:92:ef:27:4e:cc:3e:91:24:90:b1:76: 86:56:fc:73:c4:4f:55:00:0c:78:87:31:3e:1f:80:0c:e1:73: 34:bb:ad:6d:72:2f:79:4b:90:67:40:c4:d6:ab:57:af:48:fa: c8:c6:3e:10:72:eb:28:1b:7f:80:3f:c7:6f:b7:6d:c6:5b:72: 67:81:ab:a2:79:b3:f0:0b:82:26:3c:17:f7:ad:50:20:42:41: ab:87:6c:5e:25:4a:61:53:65:ad:38:64:65:99:82:42:77:b4: c1:37:57:ce:75:c0:9c:87:88:4d:1f:0e:c4:68:15:92:4f:43: 35:88:29:06:bf:4f:15:91:b5:7a:64:e8:b9:52:7f:fe:f0:8d: 82:ca:32:66:d4:88:02:fc:d5:c6:db:03:46:63:a8:07:d6:75: ad:6a:c5:38:62:aa:ae:a7:99:8e:00:27:ec:d1:b1:c0:d3:02: bd:ba:a0:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JivMb1IfAOQxGSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDZjNDYxYzYtYmMxMy00YTI5LWE4ZTMtMjgyNzFkMjQ2NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq8s+VBRzWFpXnj+ZwhiXp6AhI4szLzNc16U kaquxkbUiAEFP229p+XvS7zSgRE22gh6Rv/muVXL5Uk5ZKJg78Ipx5y5hhZnkvN+ +w9fq5xwq0lUWPiEPACizzpVlYItTkyiDWLvsGLyJH7cFY91ryVSbCxSFPUbGSY1 jqwcpC8xcA/So8EmhAERHh+YxdN+ONh0D0ZWJXmNjrRualR38nzkyDGz5bnciXQY 7LJtDg294rKUBrcn0GCnG0zivbZ7QXfLROiPkUXGeWIi13hOn2cfI3zogEu8hsjm pocAwgEjW715n4PjQ4drU5+rRvCZxldr3zE9ovuh8JCxjJbF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjaiHjVhDpo5Ws7aXGRvWlNVUwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvN2RmN2U1YWEtMzAxMy0z YjUxLTk5NmItYmNiNzdjOTg4NTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg46ZtJb+uKFy08Syd1bizf9ehVTrE6wv/eyD8k+LjXReAKdwaW6ypR 6PAJm++clhv6+g+118/SsOosARrKDXPqQ8Tia91ZhYXBsW37Nz+S7ydOzD6RJJCx doZW/HPET1UADHiHMT4fgAzhczS7rW1yL3lLkGdAxNarV69I+sjGPhBy6ygbf4A/ x2+3bcZbcmeBq6J5s/ALgiY8F/etUCBCQauHbF4lSmFTZa04ZGWZgkJ3tME3V851 wJyHiE0fDsRoFZJPQzWIKQa/TxWRtXpk6LlSf/7wjYLKMmbUiAL81cbbA0ZjqAfW da1qxThiqq6nmY4AJ+zRscDTAr26oGs= -----END CERTIFICATE-----Generated at Sun Sep 27 06:33:09 2026 by rpki-client