$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa File: 481e6446-0bc6-31ec-845c-a168a1f29c35.roa (raw, json) Hash identifier: x47hJt8GSGSdjLPjXzTb+LU2bY+hiDFT9AJgcavU1K8= Subject key identifier: 50:44:94:7E:30:3B:AA:EE:46:8A:BE:EF:CC:D1:AA:48:A5:68:9A:95 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584F43DD555AAF0AA9D1B80C0BC0 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 25769 IP address blocks: 216.122.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:55:5a:af:0a:a9:d1:b8:0c:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=116522a3-2a8a-4b1c-b3e5-f286b911d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:44:11:92:26:cf:ef:25:9c:09:6c:5a:4d: 60:71:03:e1:ec:d6:06:ab:49:09:9f:d4:a2:50:79: a4:1d:2f:13:3c:03:db:b8:22:e4:b9:f3:7a:24:73: 58:34:36:05:ca:f4:6a:4e:01:27:c5:6f:ce:86:7b: 3e:64:39:b9:32:5e:6b:9c:4a:69:ad:96:94:ab:ee: 3d:5d:df:a7:d0:38:50:d4:1f:10:12:06:7b:69:26: 7b:ac:0f:78:dc:db:be:13:22:f5:24:c2:d3:50:60: a0:7d:ac:88:48:99:e1:ed:e7:71:9d:f1:9c:11:c9: 22:c2:a4:bc:96:ea:2d:8b:2a:6e:f3:56:7c:17:30: 87:cf:98:6d:35:f2:eb:c1:90:e8:87:1f:86:ae:b7: 8e:83:f7:ad:57:bf:6a:ac:78:01:0d:1a:55:73:05: 8f:d3:9b:59:b7:eb:42:9f:db:bc:1f:3b:22:32:51: c7:83:c1:b2:5a:2b:1b:35:63:c1:41:bd:a8:73:b6: 08:92:63:83:d7:81:ce:9e:94:6a:7b:50:61:9a:de: 8b:1f:3b:df:61:73:9c:c1:62:ff:6f:48:13:e6:44: 62:0d:dd:eb:a4:c8:49:6b:9f:57:c0:2d:c3:04:a6: 4f:53:9f:5f:5f:81:8a:ea:c1:13:11:bb:3d:09:31: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:44:94:7E:30:3B:AA:EE:46:8A:BE:EF:CC:D1:AA:48:A5:68:9A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 216.122.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3e:37:97:16:be:ed:15:65:9c:f9:11:7a:fe:91:9b:92:ed: d9:e5:3a:3a:2a:4b:b2:d9:2f:6c:1e:d0:96:ab:74:c7:27:71: 07:5b:b5:36:9d:b9:a7:b2:9d:7b:cf:53:38:66:66:29:db:cf: e7:82:ec:63:67:aa:5f:db:f9:cd:b4:0f:95:29:02:3e:c2:3f: ce:8c:39:92:b0:93:05:4d:3f:a7:38:eb:fe:b2:6f:cb:03:29: 13:59:71:ae:e2:0b:4e:ea:17:7f:9b:71:31:b3:e2:96:89:6c: 8c:a3:49:a8:44:7a:4b:60:b8:81:f4:bf:16:06:e6:7e:82:b7: f6:fa:52:f3:cf:be:cd:12:ad:c4:27:a5:18:18:ed:b8:23:7f: 09:95:26:26:7b:fe:6d:44:6d:a0:37:27:3c:8d:aa:db:e1:1e: d5:0e:42:79:de:08:eb:5c:f0:d6:1e:fd:a9:bf:aa:73:1d:17: 81:29:e6:8d:c6:9c:49:48:57:bc:7a:96:d3:1f:50:50:1b:26: b2:b0:39:0a:1a:83:3f:e6:28:62:da:8f:34:0a:52:e9:51:88: ee:fd:47:21:33:5a:93:bf:79:51:d5:ad:e6:46:9e:88:a1:da: c0:cf:00:27:ec:a8:ba:9c:4d:f0:1a:f5:94:e1:1a:c5:82:9f: 5d:67:6a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VVarwqp0bgMC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MTE2NTIyYTMtMmE4YS00YjFjLWIzZTUtZjI4NmI5MTFkMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQFEEZImz+8lnAlsWk1gcQPh7NYGq0kJn9Si UHmkHS8TPAPbuCLkufN6JHNYNDYFyvRqTgEnxW/Ohns+ZDm5Ml5rnEpprZaUq+49 Xd+n0DhQ1B8QEgZ7aSZ7rA943Nu+EyL1JMLTUGCgfayISJnh7edxnfGcEckiwqS8 luotiypu81Z8FzCHz5htNfLrwZDohx+GrreOg/etV79qrHgBDRpVcwWP05tZt+tC n9u8HzsiMlHHg8GyWisbNWPBQb2oc7YIkmOD14HOnpRqe1Bhmt6LHzvfYXOcwWL/ b0gT5kRiDd3rpMhJa59XwC3DBKZPU59fX4GK6sETEbs9CTH7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBElH4wO6ruRoq+78zRqkilaJqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvNDgxZTY0NDYtMGJjNi0z MWVjLTg0NWMtYTE2OGExZjI5YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs+N5cWvu0VZZz5EXr+kZuS7dnlOjoqS7LZL2we0JardMcncQdbtTad uaeynXvPUzhmZinbz+eC7GNnql/b+c20D5UpAj7CP86MOZKwkwVNP6c46/6yb8sD KRNZca7iC07qF3+bcTGz4paJbIyjSahEektguIH0vxYG5n6Ct/b6UvPPvs0SrcQn pRgY7bgjfwmVJiZ7/m1EbaA3JzyNqtvhHtUOQnneCOtc8NYe/am/qnMdF4Ep5o3G nElIV7x6ltMfUFAbJrKwOQoagz/mKGLajzQKUulRiO79RyEzWpO/eVHVreZGnoih 2sDPACfsqLqcTfAa9ZThGsWCn11nah8= -----END CERTIFICATE-----Generated at Sat Sep 26 03:53:34 2026 by rpki-client