$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/889fa4c1-655d-3d3a-a583-c558553c1843.roa File: 889fa4c1-655d-3d3a-a583-c558553c1843.roa (raw, json) Hash identifier: J6ZrNw8tLa4vvK/qUm7vzoYtGemko1oBX07O9dLhIN0= Subject key identifier: 7E:05:E0:19:2F:9B:67:5D:CE:20:66:32:E2:6D:4D:C4:4B:B7:98:A9 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584F498863DF158C3828C38B8D20 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/889fa4c1-655d-3d3a-a583-c558553c1843.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 65.37.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:63:df:15:8c:38:28:c3:8b:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33ca0ae9-bc90-40fc-8bee-c170cd15aca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:81:d2:6d:72:bc:bd:ff:67:8c:71:eb:37: 52:43:e5:66:ee:f9:2a:27:61:70:87:5e:02:b5:77: dd:10:3c:c5:9f:5a:47:c0:4e:77:5d:a3:7f:c2:a3: 59:38:57:85:20:59:db:7e:7b:b5:84:78:0d:34:5f: de:86:56:57:99:1b:f7:b6:f5:87:78:1f:15:b6:42: 42:06:b5:b2:de:40:87:fc:1b:b2:67:4e:20:74:ea: 9c:6e:a5:c6:c7:47:78:b7:dd:e9:6b:ec:89:51:28: 99:da:b8:56:45:02:9b:97:07:6b:45:de:cd:54:65: af:d4:f7:86:9a:fb:79:72:16:01:d6:e0:0d:cf:ce: 8b:cd:59:b6:e5:74:87:82:5f:b6:80:7f:f0:de:d2: e2:ee:56:4c:ac:27:24:7c:f4:18:60:b8:3f:aa:6f: 73:06:62:52:3f:32:9f:3f:26:fc:8c:91:55:ce:83: 94:a0:52:00:fd:04:cd:18:ad:63:62:12:b6:98:fa: 90:5f:a4:4e:20:67:0c:84:bf:3e:6c:01:21:54:80: 61:c8:a1:c8:e9:e3:54:51:39:58:d0:ce:97:23:e2: c6:8f:7d:44:0d:33:e9:de:ab:1d:6d:89:8a:0a:cf: 29:02:0c:30:4d:3a:97:ae:7a:82:43:52:e2:1c:59: 5c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:E0:19:2F:9B:67:5D:CE:20:66:32:E2:6D:4D:C4:4B:B7:98:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/889fa4c1-655d-3d3a-a583-c558553c1843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 65.37.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:dc:b1:84:a5:c5:68:26:6d:d0:1b:4b:5c:23:a9:2d:4f:e0: 9f:a5:82:3e:0c:96:36:6e:89:c0:4b:a4:ec:86:f4:a2:b7:fb: 5d:ca:1c:8e:7a:a5:69:1f:bf:5b:e8:78:62:55:7c:66:87:9f: 3f:50:f9:fc:1e:25:c8:38:ae:99:68:cf:de:d9:82:eb:6a:b8: 6a:8c:2d:25:fd:0c:55:94:94:5a:bf:15:9c:c5:93:22:d1:0a: 01:d6:3f:47:17:1c:3e:95:0a:6b:6f:97:fd:7a:03:24:35:46: c8:4b:d8:99:cc:13:dc:bf:26:98:bc:ba:a5:71:7e:b0:4e:ab: c5:44:3e:c3:87:47:d8:5b:ac:af:d2:2e:99:f2:e9:aa:2d:d0: 54:b1:fe:f8:b3:53:02:89:fd:62:ec:81:0c:77:91:0c:43:5d: 0e:41:b4:ef:7f:be:30:cb:d5:d3:56:5e:a1:36:69:5e:72:61: b7:51:db:c6:17:31:f4:e4:b1:df:9f:fc:73:28:d1:de:79:d8: 12:48:70:30:48:e7:60:3a:5f:07:15:be:74:17:9d:6d:4a:88: c0:ea:a3:7f:5b:d7:8f:eb:52:90:52:d2:ef:93:8a:13:d9:e4: 05:6d:15:e0:42:67:c7:e4:dd:3a:02:9c:76:12:75:4a:e6:3b: 81:1a:45:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiGPfFYw4KMOLjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNjYTBhZTktYmM5MC00MGZjLThiZWUtYzE3MGNkMTVhY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyqB0m1yvL3/Z4xx6zdSQ+Vm7vkqJ2Fwh14C tXfdEDzFn1pHwE53XaN/wqNZOFeFIFnbfnu1hHgNNF/ehlZXmRv3tvWHeB8VtkJC BrWy3kCH/BuyZ04gdOqcbqXGx0d4t93pa+yJUSiZ2rhWRQKblwdrRd7NVGWv1PeG mvt5chYB1uANz86LzVm25XSHgl+2gH/w3tLi7lZMrCckfPQYYLg/qm9zBmJSPzKf Pyb8jJFVzoOUoFIA/QTNGK1jYhK2mPqQX6ROIGcMhL8+bAEhVIBhyKHI6eNUUTlY 0M6XI+LGj31EDTPp3qsdbYmKCs8pAgwwTTqXrnqCQ1LiHFlctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4F4Bkvm2ddziBmMuJtTcRLt5ipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvODg5ZmE0YzEtNjU1ZC0z ZDNhLWE1ODMtYzU1ODU1M2MxODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7csYSlxWgmbdAbS1wjqS1P4J+lgj4MljZuicBLpOyG9KK3+13KHI56 pWkfv1voeGJVfGaHnz9Q+fweJcg4rploz97ZgutquGqMLSX9DFWUlFq/FZzFkyLR CgHWP0cXHD6VCmtvl/16AyQ1RshL2JnME9y/Jpi8uqVxfrBOq8VEPsOHR9hbrK/S Lpny6aot0FSx/vizUwKJ/WLsgQx3kQxDXQ5BtO9/vjDL1dNWXqE2aV5yYbdR28YX MfTksd+f/HMo0d552BJIcDBI52A6XwcVvnQXnW1KiMDqo39b14/rUpBS0u+TihPZ 5AVtFeBCZ8fk3ToCnHYSdUrmO4EaRRI= -----END CERTIFICATE-----Generated at Wed Sep 30 19:57:44 2026 by rpki-client