$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa File: 5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa (raw, json) Hash identifier: qhGx4cPGq9I5uuFPbl9wKmG1kxGNZ2hnDPfGy8ZnOAc= Subject key identifier: 37:DB:09:84:E8:91:A0:CE:CA:C4:B3:39:D7:13:71:33:4D:F6:E4:EE Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F3A17D24A26E15D1D21827300 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 54004 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d2:4a:26:e1:5d:1d:21:82:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=0f2a34e5-6e44-48f9-a5d1-64eedbe82da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:6b:92:c4:49:ab:91:b4:7f:44:b5:86:20: 71:0a:bc:c4:36:21:77:f4:fd:4a:d2:53:6d:00:0c: a6:e2:27:93:c9:20:d9:84:46:b8:f6:6a:ee:55:51: 48:ef:de:e6:d7:88:0d:2c:bc:ad:01:e9:bb:48:4f: 51:62:ab:2f:33:e5:5d:25:d4:c9:2c:3a:2c:5f:36: f2:9f:b9:d8:13:a2:0c:50:38:df:31:12:e5:36:17: 4b:92:86:c7:0e:9e:02:83:00:2b:2f:79:31:54:73: 51:65:17:aa:14:37:08:5b:de:22:57:a7:a4:8b:86: 19:6c:27:8b:83:c7:ad:d6:6f:8a:90:31:54:4b:9d: f8:b2:ca:75:51:56:8d:a8:1a:35:36:ae:ca:38:d2: a3:94:15:e8:84:08:95:07:04:21:e5:3e:78:fc:cf: d4:f1:ce:fc:5c:1b:6b:bf:03:8d:11:f8:e7:35:f7: a6:69:43:cd:60:66:1c:2e:ee:c9:69:85:76:39:e9: 72:3f:69:85:4b:11:7a:b6:6a:aa:5f:96:08:f8:d4: 79:93:da:69:30:92:04:07:4a:f8:f1:6f:4c:1e:d5: 99:05:88:14:2b:a7:7d:fe:9e:c8:d7:d5:8d:87:ca: ba:a9:4b:3d:a3:2d:6e:78:f9:1d:c1:64:87:17:6d: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DB:09:84:E8:91:A0:CE:CA:C4:B3:39:D7:13:71:33:4D:F6:E4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:be:3e:57:80:78:19:94:c0:b5:75:2c:5c:7d:fc:d7:f1:47: d9:14:6d:c5:8e:65:5b:a6:c3:8b:49:17:06:8a:df:ec:31:0e: 6a:98:be:d5:12:64:0b:bd:09:26:86:b3:66:00:34:9e:48:a1: 38:71:27:3f:14:49:b8:ff:90:0e:bc:07:51:3c:91:85:37:96: ea:df:77:a8:c7:de:71:63:18:3e:1c:b1:84:37:7a:ec:dd:73: dc:20:dc:db:9a:ff:1c:2e:10:ef:7b:58:2c:af:92:16:cd:1d: 71:5a:0a:9c:65:b3:bd:be:96:d8:db:67:2b:a3:9e:3b:04:ce: 07:28:2e:22:51:70:e6:b1:58:c1:96:ec:13:48:87:04:03:12: 61:9d:45:d2:c7:c4:65:49:25:64:60:91:a2:0f:39:d2:f4:57: 4a:89:34:74:4b:35:ad:a6:b6:de:b0:04:60:d5:80:e9:6e:c1: e3:53:83:b7:a6:9e:1a:4c:ee:3f:5e:04:e0:19:2f:69:46:75: ae:b2:cb:0a:f0:2d:9c:46:11:a2:61:26:2f:d5:fb:b6:b7:00: 4c:9f:4d:5d:51:ec:3a:0c:88:60:9d:f4:a0:19:e2:23:fa:19: c8:11:60:b0:22:54:1e:67:3f:3a:b0:32:40:fd:4d:cb:3f:bc: 9d:ad:3a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9JKJuFdHSGCcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MGYyYTM0ZTUtNmU0NC00OGY5LWE1ZDEtNjRlZWRiZTgyZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdNrksRJq5G0f0S1hiBxCrzENiF39P1K0lNt AAym4ieTySDZhEa49mruVVFI797m14gNLLytAem7SE9RYqsvM+VdJdTJLDosXzby n7nYE6IMUDjfMRLlNhdLkobHDp4CgwArL3kxVHNRZReqFDcIW94iV6eki4YZbCeL g8et1m+KkDFUS534ssp1UVaNqBo1Nq7KONKjlBXohAiVBwQh5T54/M/U8c78XBtr vwONEfjnNfemaUPNYGYcLu7JaYV2OelyP2mFSxF6tmqqX5YI+NR5k9ppMJIEB0r4 8W9MHtWZBYgUK6d9/p7I19WNh8q6qUs9oy1uePkdwWSHF20+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfbCYTokaDOysSzOdcTcTNN9uTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNWIyZmE2M2ItZjY1MS0z YjQwLWFhMTQtYzhiODg0ZWY3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm+PleAeBmUwLV1LFx9/NfxR9kUbcWOZVumw4tJFwaK3+wxDmqYvtUS ZAu9CSaGs2YANJ5IoThxJz8USbj/kA68B1E8kYU3lurfd6jH3nFjGD4csYQ3euzd c9wg3Nua/xwuEO97WCyvkhbNHXFaCpxls72+ltjbZyujnjsEzgcoLiJRcOaxWMGW 7BNIhwQDEmGdRdLHxGVJJWRgkaIPOdL0V0qJNHRLNa2mtt6wBGDVgOluweNTg7em nhpM7j9eBOAZL2lGda6yywrwLZxGEaJhJi/V+7a3AEyfTV1R7DoMiGCd9KAZ4iP6 GcgRYLAiVB5nPzqwMkD9Tcs/vJ2tOnE= -----END CERTIFICATE-----Generated at Sun Sep 27 05:07:18 2026 by rpki-client