$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/dc68da6e-f289-38e0-b21e-79cceebd9565.roa File: dc68da6e-f289-38e0-b21e-79cceebd9565.roa (raw, json) Hash identifier: GlBDRDpru8WKmtX8EuIQImKzw0mzcTMIsGSMWjT19kA= Subject key identifier: 62:2E:76:24:3F:49:0A:2D:26:63:CD:04:A9:4E:FD:11:7E:7B:05:7A Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F4DA28F5EE3AF310DF741D6D0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/dc68da6e-f289-38e0-b21e-79cceebd9565.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 7270 IP address blocks: 169.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8f:5e:e3:af:31:0d:f7:41:d6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=e1cab5c0-17c4-48b2-8401-e5667f37a2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:f1:0f:3c:2c:c6:fd:1e:ab:ff:c5:d4:b9: c7:c5:19:5b:9c:c8:7a:df:df:a5:00:38:11:78:5c: 07:81:46:df:3f:ed:98:59:9c:ca:7a:3c:b8:85:ed: 70:9f:49:fd:26:98:72:49:e0:db:bd:b4:d2:da:9a: 0f:0d:af:46:0f:e3:cb:6f:9b:5a:8c:2d:da:49:f9: fd:10:9c:4b:6d:95:3a:2b:d6:26:1c:8a:e8:5f:13: ea:20:bd:44:fd:2c:03:de:22:b5:90:d6:7b:b4:d7: 0a:be:56:7d:ec:e5:97:f5:4f:8f:75:4c:39:28:0e: 5d:cc:c1:ce:a5:4a:b8:ae:0a:59:a0:83:fa:2d:33: 24:6b:05:b9:5a:98:56:93:4d:7c:82:66:77:f5:3f: 85:0b:ca:13:9e:6f:e4:20:ff:31:dc:04:eb:49:0b: d9:61:3a:6c:e4:10:1a:23:bb:77:a6:4e:c7:bb:f4: 72:56:8a:a9:4e:e5:53:9b:91:9d:06:c6:8d:6c:b4: a4:f4:d9:fe:ef:cf:60:9e:dc:35:05:54:6a:be:00: 11:eb:85:12:60:64:b3:2d:2e:c8:8f:29:b7:3a:f1: 63:ca:22:52:d8:f5:81:8d:c6:2d:d0:8e:83:92:32: 63:c7:e5:a0:61:5b:36:2a:f3:43:27:d6:e7:8b:9f: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2E:76:24:3F:49:0A:2D:26:63:CD:04:A9:4E:FD:11:7E:7B:05:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/dc68da6e-f289-38e0-b21e-79cceebd9565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 169.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fd:f3:67:0b:81:b5:30:35:ba:16:6b:5c:70:07:b5:0a:21: e2:31:0a:27:b7:d7:ab:1a:9b:23:7f:9d:bb:df:c0:fe:8f:b2: 49:27:45:d4:5f:85:d9:49:2b:0e:a8:63:69:74:1d:96:db:61: 8f:03:2e:74:7e:7e:09:ff:c7:57:c9:a4:ed:bb:2d:80:74:c9: 63:e4:84:d7:11:e7:c0:b1:c2:21:42:5d:92:d7:20:b8:a2:38: 47:11:74:b0:49:cc:39:37:8b:01:21:ab:92:7f:1b:3b:9e:57: df:4c:44:bc:d3:c4:f8:c5:00:48:c2:ae:32:24:99:46:68:c1: 96:a7:d7:4f:f8:39:26:0a:95:78:d0:e9:4a:00:61:c1:7d:15: 92:a0:74:fb:8a:44:41:4e:28:19:5f:2b:b3:d6:e1:86:6a:ae: 8b:f8:f3:24:c8:96:97:6c:86:d6:05:0e:cc:d5:c7:e4:64:06: 41:d0:ca:3c:f5:e0:f5:67:74:b1:dd:b1:de:89:1b:5b:37:2a: ac:da:e6:20:0f:03:97:e8:7b:5b:c2:a2:23:96:bf:87:cb:ec: b3:21:f2:3a:f0:6d:d6:bb:0a:96:f6:f2:dc:3e:79:77:86:0e: 01:22:4c:4b:ae:68:09:e2:57:e6:e0:e9:7d:72:70:22:f8:6d: 0e:9d:70:79 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Noo9e468xDfdB1tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZTFjYWI1YzAtMTdjNC00OGIyLTg0MDEtZTU2NjdmMzdhMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiDxDzwsxv0eq//F1LnHxRlbnMh639+lADgR eFwHgUbfP+2YWZzKejy4he1wn0n9JphySeDbvbTS2poPDa9GD+PLb5tajC3aSfn9 EJxLbZU6K9YmHIroXxPqIL1E/SwD3iK1kNZ7tNcKvlZ97OWX9U+PdUw5KA5dzMHO pUq4rgpZoIP6LTMkawW5WphWk018gmZ39T+FC8oTnm/kIP8x3ATrSQvZYTps5BAa I7t3pk7Hu/RyVoqpTuVTm5GdBsaNbLSk9Nn+789gntw1BVRqvgAR64USYGSzLS7I jym3OvFjyiJS2PWBjcYt0I6DkjJjx+WgYVs2KvNDJ9bni5+PWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGIudiQ/SQotJmPNBKlO/RF+ewV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZGM2OGRhNmUtZjI4OS0z OGUwLWIyMWUtNzljY2VlYmQ5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqYQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnP3zZwuBtTA1uhZrXHAHtQoh4jEKJ7fXqxqbI3+du9/A/o+ySSdF1F+F 2UkrDqhjaXQdltthjwMudH5+Cf/HV8mk7bstgHTJY+SE1xHnwLHCIUJdktcguKI4 RxF0sEnMOTeLASGrkn8bO55X30xEvNPE+MUASMKuMiSZRmjBlqfXT/g5JgqVeNDp SgBhwX0VkqB0+4pEQU4oGV8rs9bhhmqui/jzJMiWl2yG1gUOzNXH5GQGQdDKPPXg 9Wd0sd2x3okbWzcqrNrmIA8Dl+h7W8KiI5a/h8vssyHyOvBt1rsKlvby3D55d4YO ASJMS65oCeJX5uDpfXJwIvhtDp1weQ== -----END CERTIFICATE-----Generated at Tue Sep 29 04:35:14 2026 by rpki-client