$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa File: 643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa (raw, json) Hash identifier: Zh1oTV7NskPu7Z0ia10Y8m1uDuoM22CuMUZJTuOh9og= Subject key identifier: 15:9E:1E:EC:0F:7D:0B:CB:1A:A6:10:EE:38:EE:B2:5A:13:9A:FF:47 Certificate issuer: /CN=d057304d-4312-43aa-92a7-91bbd7043aab Certificate serial: 010D0C9F4328584F497461EFF2840B8F90C84560 Authority key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53266 IP address blocks: 208.99.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:61:ef:f2:84:0b:8f:90:c8:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d057304d-4312-43aa-92a7-91bbd7043aab Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7bde6ec9-f6fe-49d6-9c92-477ac0561a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:f8:da:c6:ea:7a:7e:06:ad:97:24:74:71: 87:ee:c0:63:3a:07:be:0a:23:2d:21:bd:46:78:b0: ea:2e:6f:06:9f:2e:42:1a:d0:7f:66:41:cf:70:57: de:e2:c8:e9:e2:85:89:69:bb:98:b1:fe:ba:81:d9: 5e:d3:bf:34:76:a8:03:d4:cf:dc:c4:2d:ca:0d:69: 15:8b:88:63:a0:f2:2e:9a:85:6c:e9:ec:97:26:3a: 86:69:00:7c:43:e7:67:09:96:ac:87:87:2a:c0:7d: e0:69:e3:91:ab:30:d5:31:d4:05:04:5d:9c:97:c9: e9:a3:00:23:14:53:a1:5f:e1:64:d1:7d:dc:f8:d5: 03:61:93:2c:8d:74:4b:e6:08:37:7c:10:29:62:7e: 39:ba:05:50:ff:f7:f0:08:29:d3:16:09:c4:3e:c3: 2f:68:e3:19:09:59:b0:5c:c1:9f:92:86:3c:be:17: 50:85:4b:3b:90:80:4d:ed:e7:cd:5f:e8:9f:a7:81: be:2e:1d:74:b9:53:af:8a:67:9c:52:bd:83:50:71: d0:f6:1e:86:9b:b9:34:3a:e9:48:bf:75:36:44:de: a9:f3:05:fa:7e:4b:82:ef:c9:5a:d5:fa:83:c2:1b: f2:62:3b:73:ff:47:1c:81:2f:1b:c2:aa:cc:da:3c: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9E:1E:EC:0F:7D:0B:CB:1A:A6:10:EE:38:EE:B2:5A:13:9A:FF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl X509v3 Authority Key Identifier: keyid:91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer sbgp-ipAddrBlock: critical IPv4: 208.99.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:72:16:6c:67:0b:8d:28:eb:00:eb:2e:8d:c0:c0:6f:32:b7: b9:ec:08:4b:34:d5:fb:eb:c1:4a:c8:ff:d8:3a:d9:15:22:33: 2a:c0:00:be:01:27:24:db:8f:ab:dc:0c:70:7e:4d:b2:4b:60: 65:18:7d:47:63:0b:db:3d:d9:2d:8d:0b:63:4f:db:ea:36:ac: 90:64:e0:dc:3d:b1:3f:16:81:ed:53:9f:72:44:f3:18:b1:64: ce:bb:41:19:21:21:93:f1:11:3b:44:ec:12:ff:d2:b6:46:cb: 40:04:f9:fa:ec:fa:43:2d:7d:0d:f2:10:59:d9:33:43:b1:d9: e6:53:ee:ec:58:fa:85:74:83:2b:5d:76:9e:6b:13:7f:b7:a4: 79:91:b4:9b:71:66:cf:87:b0:e2:12:80:43:bd:76:ba:e1:71: 02:db:3b:cd:33:24:f8:88:b2:d2:a0:ca:bc:f5:f8:16:36:20: 9d:b5:5c:2e:da:90:e8:54:9a:0a:76:b1:ed:f4:78:e7:5d:0e: b9:b2:91:6f:82:fa:ae:99:47:ae:cd:bd:8f:ab:e8:2a:ff:20: 3d:4f:e6:64:34:de:95:b9:96:f7:fc:d7:35:42:2b:b5:b5:85: 21:47:1a:85:7d:b0:3e:10:1c:14:d7:f8:c5:14:b8:88:d7:18: 49:b4:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGHv8oQLj5DIRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA1NzMwNGQtNDMxMi00M2FhLTkyYTctOTFiYmQ3MDQz YWFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JkZTZlYzktZjZmZS00OWQ2LTljOTItNDc3YWMwNTYxYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohf42sbqen4GrZckdHGH7sBjOge+CiMtIb1G eLDqLm8Gny5CGtB/ZkHPcFfe4sjp4oWJabuYsf66gdle0780dqgD1M/cxC3KDWkV i4hjoPIumoVs6eyXJjqGaQB8Q+dnCZash4cqwH3gaeORqzDVMdQFBF2cl8npowAj FFOhX+Fk0X3c+NUDYZMsjXRL5gg3fBApYn45ugVQ//fwCCnTFgnEPsMvaOMZCVmw XMGfkoY8vhdQhUs7kIBN7efNX+ifp4G+Lh10uVOvimecUr2DUHHQ9h6Gm7k0OulI v3U2RN6p8wX6fkuC78la1fqDwhvyYjtz/0ccgS8bwqrM2jx+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWeHuwPfQvLGqYQ7jjusloTmv9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDU3 MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcwNDNhYWIvNjQzZjIyN2MtYzBlNy0z MThjLWJjZmEtOWQ1MzI4ZDhmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA1NzMwNGQtNDMxMi00M2FhLTky YTctOTFiYmQ3MDQzYWFiL2QwNTczMDRkLTQzMTItNDNhYS05MmE3LTkxYmJkNzA0 M2FhYi5jcmwwHwYDVR0jBBgwFoAUkT5oeCq3jCfMSweZXPG88/sRaXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJi ZDcwNDNhYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtyFmxnC40o6wDrLo3AwG8yt7nsCEs01fvrwUrI/9g62RUiMyrAAL4B JyTbj6vcDHB+TbJLYGUYfUdjC9s92S2NC2NP2+o2rJBk4Nw9sT8Wge1Tn3JE8xix ZM67QRkhIZPxETtE7BL/0rZGy0AE+frs+kMtfQ3yEFnZM0Ox2eZT7uxY+oV0gytd dp5rE3+3pHmRtJtxZs+HsOISgEO9drrhcQLbO80zJPiIstKgyrz1+BY2IJ21XC7a kOhUmgp2se30eOddDrmykW+C+q6ZR67NvY+r6Cr/ID1P5mQ03pW5lvf81zVCK7W1 hSFHGoV9sD4QHBTX+MUUuIjXGEm0vmg= -----END CERTIFICATE-----Generated at Tue Sep 29 13:17:01 2026 by rpki-client