$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa File: da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa (raw, json) Hash identifier: 2+fi08NzDBGPyGusxQJYG3dC0R5frzmNeXJ2OxSMvzs= Subject key identifier: 37:D9:E2:C9:4F:0C:FE:76:63:2E:5E:2D:FD:0B:7C:FB:05:33:ED:85 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4973B7E0E79B3429A7D43B80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 216.115.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b7:e0:e7:9b:34:29:a7:d4:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d9114d1-696b-4136-9f7a-7f859c272eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:ea:f4:41:e2:27:62:a3:d8:73:65:59:fc: af:8d:e4:f1:6b:49:2f:18:06:fe:d5:04:98:a7:c0: ac:c3:ff:6e:60:3c:d1:66:b4:a6:8e:2d:7f:f4:11: cd:a9:b7:22:75:f3:86:f7:a0:a0:76:e7:a9:10:f7: d3:94:a1:94:84:32:8b:a1:82:62:07:dc:77:0a:7d: d8:1f:a5:c0:a3:01:43:d9:99:1d:d4:0c:f7:e1:79: bc:ae:4f:4e:cd:5f:ba:06:dc:82:6e:29:f0:7f:f4: 6f:22:2b:67:16:92:c7:a4:59:3f:ee:3d:cb:e7:2d: 88:df:77:dd:f7:df:0a:4e:6d:c1:4e:3c:ff:a4:6d: 18:70:0e:ee:68:f1:db:3e:16:8e:6e:bb:ce:87:58: 23:4d:8d:1a:2c:09:d0:a7:36:a4:d4:63:e3:3c:3a: 00:ea:33:5a:bd:2a:1c:91:c8:b8:a8:17:83:e4:d3: f5:37:ea:8e:40:38:5c:2d:81:71:c9:08:d0:8a:72: ad:80:80:2c:f6:da:a8:d0:32:d1:c3:af:3d:24:53: d1:95:21:e2:d2:17:38:65:36:15:e3:47:38:51:7e: da:02:4e:46:b8:6f:98:df:0c:31:7b:28:14:8c:86: fa:1d:e8:b0:c4:36:95:81:ec:bf:fe:b1:75:e1:a4: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:E2:C9:4F:0C:FE:76:63:2E:5E:2D:FD:0B:7C:FB:05:33:ED:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.115.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ca:75:0d:ec:97:15:1d:62:52:1e:f6:12:b7:1b:61:8b:f7: 02:b7:0c:a1:2c:84:d3:10:38:8b:75:e3:b0:6b:14:32:c0:13: f7:ce:13:80:88:41:68:dd:dc:bd:1a:83:5d:9b:ac:75:0a:6f: 59:e8:4b:aa:58:3b:49:f3:dc:c5:8d:89:d1:c0:b3:ad:f8:6f: 05:3f:8c:a8:21:0f:d8:d3:8d:35:d2:8f:13:3e:dd:ee:43:8b: 86:b1:1a:65:ed:75:99:f7:76:99:50:b8:c6:e6:77:51:c5:8f: 62:46:f4:58:22:d2:f1:11:96:07:15:99:c6:68:25:9f:c3:ec: 76:4f:f9:f6:4b:da:3d:92:f5:c8:88:c8:03:74:ed:5d:0e:da: f4:b8:19:ee:e7:fa:80:a4:23:08:ea:7b:b3:7a:03:05:b3:72: 89:06:64:a0:31:b9:aa:65:ed:ea:ad:c5:5b:ce:73:f3:b4:a9: 65:de:c1:44:17:cd:9a:bc:34:c1:b3:27:e9:b0:37:c7:75:1f: 4a:9d:ce:fd:42:86:f6:c1:b3:b1:d4:99:9c:c7:10:10:73:40: 0f:fc:fa:8c:4a:8c:97:14:8e:99:ba:50:d9:5a:05:fe:ac:93: da:b9:72:58:73:56:af:ce:83:f8:92:f7:9b:2d:cc:9a:7b:e7: be:b4:5a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7fg55s0KafUO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q5MTE0ZDEtNjk2Yi00MTM2LTlmN2EtN2Y4NTljMjcyZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT7q9EHiJ2Kj2HNlWfyvjeTxa0kvGAb+1QSY p8Csw/9uYDzRZrSmji1/9BHNqbcidfOG96CgduepEPfTlKGUhDKLoYJiB9x3Cn3Y H6XAowFD2Zkd1Az34Xm8rk9OzV+6BtyCbinwf/RvIitnFpLHpFk/7j3L5y2I33fd 998KTm3BTjz/pG0YcA7uaPHbPhaObrvOh1gjTY0aLAnQpzak1GPjPDoA6jNavSoc kci4qBeD5NP1N+qOQDhcLYFxyQjQinKtgIAs9tqo0DLRw689JFPRlSHi0hc4ZTYV 40c4UX7aAk5GuG+Y3wwxeygUjIb6HeiwxDaVgey//rF14aSQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfZ4slPDP52Yy5eLf0LfPsFM+2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGExYzc3ZGEtMzdmOS0z OGYyLTgxOGEtYzdlN2ZkMmVjYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbKdQ3slxUdYlIe9hK3G2GL9wK3DKEshNMQOIt147BrFDLAE/fOE4CI QWjd3L0ag12brHUKb1noS6pYO0nz3MWNidHAs634bwU/jKghD9jTjTXSjxM+3e5D i4axGmXtdZn3dplQuMbmd1HFj2JG9Fgi0vERlgcVmcZoJZ/D7HZP+fZL2j2S9ciI yAN07V0O2vS4Ge7n+oCkIwjqe7N6AwWzcokGZKAxuapl7eqtxVvOc/O0qWXewUQX zZq8NMGzJ+mwN8d1H0qdzv1ChvbBs7HUmZzHEBBzQA/8+oxKjJcUjpm6UNlaBf6s k9q5clhzVq/Og/iS95stzJp75760WlA= -----END CERTIFICATE-----Generated at Sat Oct 10 21:00:04 2026 by rpki-client