$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa File: de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa (raw, json) Hash identifier: xqu38jcUdPYjCDLSQPzSWBdknQKqT9ieNlZaCYkopyc= Subject key identifier: E4:DF:6F:5C:48:54:3F:11:F5:5C:DF:9D:01:49:7C:F9:02:28:C1:EF Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F3CE2A04C2C780AB838A1C980 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7270 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a0:4c:2c:78:0a:b8:38:a1:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=a78611ed-0025-4f8e-b4a4-39ff513f9870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:d3:44:22:00:83:5e:a0:20:78:10:60:88: c3:6c:47:33:b5:13:4b:02:13:9f:b4:0f:0b:bd:2e: 7d:34:9e:b5:03:7e:3d:c8:24:ef:e6:07:ac:e7:d8: b0:45:8a:7f:67:d3:1d:59:db:58:50:c7:d3:a9:38: 8f:da:be:bc:c9:8e:54:34:a7:a1:48:8d:04:a1:b5: 7c:53:d9:03:9e:fd:2a:41:19:0b:62:54:3b:7a:9d: 1d:ff:3e:e9:16:a9:62:17:e4:7a:3d:3c:5f:07:95: d0:cb:b9:39:96:46:fa:94:22:f7:b9:be:9c:4e:03: be:4c:8f:6c:a0:65:4e:7d:50:bc:fc:0c:e3:45:4c: 4b:c5:3a:5a:bd:45:9b:22:50:67:3d:5a:5d:cb:5e: 03:f1:5d:b3:4c:93:f4:bb:29:d9:69:9d:c6:5b:fc: 37:3f:d5:d7:e1:b3:ef:5c:44:1d:1e:81:cf:48:77: ad:1d:82:0d:57:e2:d5:34:3e:a0:73:30:d4:98:29: e8:8b:23:c6:9c:d2:4f:1d:74:76:ab:dc:82:49:6d: e8:e0:97:e3:e3:c2:43:6a:4e:ab:bb:3c:cc:dd:b1: 11:2f:8d:b3:46:25:8f:6a:aa:f6:d6:fa:34:f8:d5: 81:ad:1c:71:80:a8:d3:cc:b9:e5:f6:d0:68:0e:a2: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DF:6F:5C:48:54:3F:11:F5:5C:DF:9D:01:49:7C:F9:02:28:C1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5a:a7:2d:5a:74:dc:ab:38:35:56:6f:d0:12:16:f0:25:f7: 4c:93:ba:59:58:e1:5d:c8:0b:a1:b5:3d:07:88:5d:3b:fd:c5: 56:90:e2:99:00:af:e2:b9:07:4e:d0:0f:e2:3f:c1:ad:e7:06: b4:b7:7f:81:7a:10:93:eb:ec:52:58:12:26:82:d1:98:10:e8: d1:ea:a0:41:c1:db:01:f9:3b:e2:29:14:56:84:d4:e1:53:b1: e1:e4:ea:55:ff:7b:74:d4:68:7e:ee:ec:cc:25:42:da:a8:13: 1d:a6:c8:a4:f7:04:1a:ba:81:8b:6c:66:a5:71:d1:ce:6b:1e: 97:54:fb:81:d4:2f:7d:b6:7b:32:0b:0a:d8:3b:c5:07:ed:d0: d7:51:32:f5:a4:ee:05:65:7c:e8:96:79:00:d8:fc:34:10:09: 1b:d6:e3:26:fb:e7:6b:ec:df:97:44:e7:60:c8:f7:fb:b9:23: f1:c4:1a:8b:17:1b:3a:ce:bb:78:a0:73:ee:8c:b9:54:fb:e2: f7:29:2b:5d:1d:d2:f1:f7:81:8c:20:98:9f:4c:4e:0c:6a:85: 8b:e1:88:9a:9c:49:82:b6:31:4c:58:e8:43:d6:5a:e5:5a:67: d8:a3:c9:0b:bd:f6:c4:f0:f8:ed:04:2e:e7:da:5a:71:1b:12: 20:a7:26:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qBMLHgKuDihyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YTc4NjExZWQtMDAyNS00ZjhlLWI0YTQtMzlmZjUxM2Y5ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeTTRCIAg16gIHgQYIjDbEcztRNLAhOftA8L vS59NJ61A349yCTv5ges59iwRYp/Z9MdWdtYUMfTqTiP2r68yY5UNKehSI0EobV8 U9kDnv0qQRkLYlQ7ep0d/z7pFqliF+R6PTxfB5XQy7k5lkb6lCL3ub6cTgO+TI9s oGVOfVC8/AzjRUxLxTpavUWbIlBnPVpdy14D8V2zTJP0uynZaZ3GW/w3P9XX4bPv XEQdHoHPSHetHYINV+LVND6gczDUmCnoiyPGnNJPHXR2q9yCSW3o4Jfj48JDak6r uzzM3bERL42zRiWPaqr21vo0+NWBrRxxgKjTzLnl9tBoDqIybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTfb1xIVD8R9VzfnQFJfPkCKMHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZGU4YjdiZTQtZjRkZC0z ZmJmLTk4YzctYzQ1Y2MwNjIxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFapy1adNyrODVWb9ASFvAl90yTullY4V3IC6G1PQeIXTv9xVaQ4pkA r+K5B07QD+I/wa3nBrS3f4F6EJPr7FJYEiaC0ZgQ6NHqoEHB2wH5O+IpFFaE1OFT seHk6lX/e3TUaH7u7MwlQtqoEx2myKT3BBq6gYtsZqVx0c5rHpdU+4HUL322ezIL Ctg7xQft0NdRMvWk7gVlfOiWeQDY/DQQCRvW4yb752vs35dE52DI9/u5I/HEGosX GzrOu3igc+6MuVT74vcpK10d0vH3gYwgmJ9MTgxqhYvhiJqcSYK2MUxY6EPWWuVa Z9ijyQu99sTw+O0ELufaWnEbEiCnJmE= -----END CERTIFICATE-----Generated at Tue Sep 29 15:40:00 2026 by rpki-client