$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/7117fc13-0cad-3e0f-902e-3791b529e19a.roa File: 7117fc13-0cad-3e0f-902e-3791b529e19a.roa (raw, json) Hash identifier: aVqNtTf8K7Iu+RDEHksELuX+YQPUYYaomFAFVzdaJm4= Subject key identifier: C9:A5:5D:4D:46:5D:13:85:C6:67:B3:C9:EC:2B:9A:E0:E6:93:B6:0C Certificate issuer: /CN=c45d9c28-5e03-4cf6-8640-7b575dcd27af Certificate serial: 010D0C9F4328584F4972D90A8F466FAF62B2D200 Authority key identifier: 2F:F9:FE:C3:D8:D0:83:20:EB:14:A1:60:B9:6B:6A:64:89:C1:A5:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/7117fc13-0cad-3e0f-902e-3791b529e19a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33601 IP address blocks: 216.234.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d9:0a:8f:46:6f:af:62:b2:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45d9c28-5e03-4cf6-8640-7b575dcd27af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ccd401c4-bd8d-4423-8d0c-2bcab4d622f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:b2:8b:35:54:87:72:fc:18:ec:80:0e:bf: 5e:a6:05:8f:32:b9:d9:47:c7:cf:60:4b:d8:84:54: a1:12:74:ff:5c:ec:2e:36:17:62:ac:5a:2a:1f:49: 26:63:1a:70:a5:8a:74:b9:9c:b3:e8:c3:48:f3:8f: 7a:bc:e9:f9:3e:a7:a4:6f:04:bc:a3:93:50:af:2e: d3:d7:7a:11:be:ad:84:22:9d:b5:f5:64:39:88:69: 09:1f:4c:e9:dc:3b:a5:96:97:55:2c:e1:f5:d3:53: 53:bf:4d:d9:09:9a:54:24:4d:bf:f1:9d:26:58:2c: de:04:e0:77:66:c8:2a:a1:8c:78:78:19:ee:0c:84: e0:98:cd:d4:51:19:01:1b:a6:d2:af:ac:19:17:2a: 24:37:e1:22:e4:68:ca:af:ce:5b:75:cf:9d:57:0f: 33:98:cd:bf:79:4e:72:7b:1c:72:f5:4f:bb:52:02: 71:87:a7:c5:51:8a:5a:bb:db:00:7d:36:56:17:97: 94:61:22:f0:96:a7:09:ff:a8:60:68:f6:a8:86:06: 09:45:a3:3b:3e:5f:68:e4:57:2d:6c:3a:41:cd:1c: 37:15:0a:41:e1:ae:b5:93:42:aa:5d:fd:fd:b9:87: 66:d6:61:d9:86:fb:e0:d9:73:ef:33:0c:4b:9c:4f: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A5:5D:4D:46:5D:13:85:C6:67:B3:C9:EC:2B:9A:E0:E6:93:B6:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/7117fc13-0cad-3e0f-902e-3791b529e19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.crl X509v3 Authority Key Identifier: keyid:2F:F9:FE:C3:D8:D0:83:20:EB:14:A1:60:B9:6B:6A:64:89:C1:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer sbgp-ipAddrBlock: critical IPv4: 216.234.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a0:a4:16:76:63:b0:c9:84:bf:b4:0f:bc:e8:6f:58:68:77: aa:12:bf:0e:ad:a1:c2:a0:c0:8a:9a:6e:09:fc:d1:ee:74:af: 45:73:66:ec:a0:a1:5b:ed:18:02:61:d7:99:b2:50:eb:cf:51: 6a:ca:11:ad:0e:13:33:f1:87:ff:48:86:a4:cf:bb:ab:d7:5d: cf:9e:26:bc:d8:cd:47:a8:c5:fc:10:3a:26:e7:20:df:e0:45: 67:3b:fc:c1:58:bb:92:aa:88:1b:f1:f5:79:fc:c1:47:0c:3d: da:ca:74:0e:69:e6:73:c9:a7:b5:c2:79:8f:c4:b2:4f:84:25: bc:a4:17:36:ac:85:7d:9c:80:96:96:5f:ad:66:a8:48:6c:12: 40:fa:5b:0d:9f:53:0a:59:31:cd:36:21:1e:bf:5d:45:27:f6: 73:68:77:98:5c:98:aa:f9:28:c9:93:f5:c6:4c:77:b2:01:45: 8a:e8:6b:9a:ed:11:55:7c:6d:34:7f:ce:66:93:f2:70:5a:d7: 48:f9:10:50:64:d6:56:5e:77:36:9d:54:44:3a:bc:3b:ee:52: 26:8d:40:4c:09:1d:0a:2a:a0:35:30:f1:6f:55:2b:7f:1f:d9: 4c:00:88:d0:59:70:28:17:0b:7c:85:35:74:24:8e:5e:6d:fb: e7:4c:50:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctkKj0Zvr2Ky0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1ZDljMjgtNWUwMy00Y2Y2LTg2NDAtN2I1NzVkY2Qy N2FmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2NkNDAxYzQtYmQ4ZC00NDIzLThkMGMtMmJjYWI0ZDYyMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1qyizVUh3L8GOyADr9epgWPMrnZR8fPYEvY hFShEnT/XOwuNhdirFoqH0kmYxpwpYp0uZyz6MNI8496vOn5PqekbwS8o5NQry7T 13oRvq2EIp219WQ5iGkJH0zp3DullpdVLOH101NTv03ZCZpUJE2/8Z0mWCzeBOB3 ZsgqoYx4eBnuDITgmM3UURkBG6bSr6wZFyokN+Ei5GjKr85bdc+dVw8zmM2/eU5y exxy9U+7UgJxh6fFUYpau9sAfTZWF5eUYSLwlqcJ/6hgaPaohgYJRaM7Pl9o5Fct bDpBzRw3FQpB4a61k0KqXf39uYdm1mHZhvvg2XPvMwxLnE/23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmlXU1GXROFxmezyewrmuDmk7YMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNDVk OWMyOC01ZTAzLTRjZjYtODY0MC03YjU3NWRjZDI3YWYvNzExN2ZjMTMtMGNhZC0z ZTBmLTkwMmUtMzc5MWI1MjllMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzQ1ZDljMjgtNWUwMy00Y2Y2LTg2 NDAtN2I1NzVkY2QyN2FmL2M0NWQ5YzI4LTVlMDMtNGNmNi04NjQwLTdiNTc1ZGNk MjdhZi5jcmwwHwYDVR0jBBgwFoAUL/n+w9jQgyDrFKFguWtqZInBpS4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNDVkOWMyOC01ZTAzLTRjZjYtODY0MC03YjU3 NWRjZDI3YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqgpBZ2Y7DJhL+0D7zob1hod6oSvw6tocKgwIqabgn80e50r0VzZuyg oVvtGAJh15myUOvPUWrKEa0OEzPxh/9IhqTPu6vXXc+eJrzYzUeoxfwQOibnIN/g RWc7/MFYu5KqiBvx9Xn8wUcMPdrKdA5p5nPJp7XCeY/Esk+EJbykFzashX2cgJaW X61mqEhsEkD6Ww2fUwpZMc02IR6/XUUn9nNod5hcmKr5KMmT9cZMd7IBRYroa5rt EVV8bTR/zmaT8nBa10j5EFBk1lZedzadVEQ6vDvuUiaNQEwJHQoqoDUw8W9VK38f 2UwAiNBZcCgXC3yFNXQkjl5t++dMUHk= -----END CERTIFICATE-----Generated at Mon Sep 28 20:17:25 2026 by rpki-client