$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/bf4a8aed-9913-35d7-94f2-8643e8c92972.roa File: bf4a8aed-9913-35d7-94f2-8643e8c92972.roa (raw, json) Hash identifier: ISscC0aPwB4hAQODiPoF9Nyk7KhV6TjqVBPFpYexMSc= Subject key identifier: 49:79:F6:58:CD:EC:23:24:BF:CF:A6:23:36:D8:E8:BA:F3:73:AC:63 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584F4972E4113A0D82472F79FB19 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/bf4a8aed-9913-35d7-94f2-8643e8c92972.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394905 IP address blocks: 216.234.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e4:11:3a:0d:82:47:2f:79:fb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8d94452-70e4-40c2-a3ca-a2182518aaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:32:dd:dd:c8:92:76:e5:74:cf:f2:b9:ab: 44:d1:2d:0d:4e:c6:91:cf:91:e9:2f:b3:b0:c3:01: 38:6d:61:be:6f:55:9e:72:1f:07:b5:8a:e0:fc:47: 1d:69:d7:49:c5:32:a3:2b:66:3e:36:26:4a:5c:10: e8:d4:cc:ca:40:e6:c6:3d:83:33:ca:e6:db:14:0a: db:10:24:3e:cc:b2:91:bc:6a:7a:98:54:fc:cc:3e: 67:46:c7:bf:68:af:c9:7d:84:00:c3:ba:b2:4f:34: 7a:a7:a6:34:89:19:b3:b8:fc:7c:28:64:e2:5e:90: 20:2a:d8:90:5d:74:a0:63:34:97:9f:60:e3:cf:b8: 02:8f:ff:43:ca:40:e1:96:4a:fe:e2:1e:b8:4c:f4: a7:9c:0d:42:1b:7d:ff:14:e4:15:1a:74:f7:27:fa: 3e:7b:75:ad:24:cc:92:af:4f:94:87:88:0e:6c:c5: c1:f9:09:c2:44:70:4d:a8:39:c6:d3:23:48:0c:dd: de:16:6a:bd:45:24:72:97:94:76:10:eb:56:99:b5: 94:09:d5:99:86:d3:16:22:79:4e:fd:40:74:b1:1a: 37:75:3e:7b:08:67:b6:f5:4e:40:07:51:5d:19:1a: cc:9f:2d:16:5e:42:f1:7f:35:93:4f:6d:ef:ab:af: 44:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:F6:58:CD:EC:23:24:BF:CF:A6:23:36:D8:E8:BA:F3:73:AC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/bf4a8aed-9913-35d7-94f2-8643e8c92972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 216.234.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9e:70:44:fc:6b:8a:a2:25:36:12:e1:62:e2:7d:2d:2e:5f: 71:e7:40:b9:0e:5c:08:17:a3:27:e3:32:29:9f:30:bf:d6:28: da:62:34:53:8b:28:0d:4d:59:9e:31:19:63:5d:5d:d4:e9:97: 7e:d4:db:95:cc:81:63:42:8e:73:55:60:0c:07:71:ca:82:7a: 28:46:26:8d:d3:de:ee:32:93:42:bf:10:61:64:23:b7:9a:09: 3a:ea:fa:83:cd:f2:8d:0e:35:69:e6:bd:1b:10:82:43:f5:42: 88:51:0d:dd:63:64:d9:54:ac:64:a0:86:3e:49:09:02:60:24: 54:78:7c:9c:84:3e:12:51:ad:89:91:73:31:83:a2:f4:02:26: 73:31:96:39:22:1f:de:24:22:79:c9:5b:a7:f6:74:a7:74:78: 5d:6f:4b:00:d3:1e:27:72:1f:07:85:81:a6:c7:28:20:c4:13: 0f:ea:f1:52:8a:54:6f:d4:2d:56:e6:bc:26:3e:8b:35:6d:2e: 2d:14:20:0b:d7:21:f4:dd:be:c9:c5:fc:d1:03:82:f5:fa:21: d3:b6:f3:dd:65:51:f9:78:a8:0f:1f:2e:ea:64:6c:25:10:ed: 43:6b:c8:a3:f3:68:c9:0c:da:2e:63:7e:aa:ca:20:dc:03:dc: 00:ae:25:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuQROg2CRy95+xkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThkOTQ0NTItNzBlNC00MGMyLWEzY2EtYTIxODI1MThhYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Iy3d3IknbldM/yuatE0S0NTsaRz5HpL7Ow wwE4bWG+b1Wech8HtYrg/EcdaddJxTKjK2Y+NiZKXBDo1MzKQObGPYMzyubbFArb ECQ+zLKRvGp6mFT8zD5nRse/aK/JfYQAw7qyTzR6p6Y0iRmzuPx8KGTiXpAgKtiQ XXSgYzSXn2Djz7gCj/9DykDhlkr+4h64TPSnnA1CG33/FOQVGnT3J/o+e3WtJMyS r0+Uh4gObMXB+QnCRHBNqDnG0yNIDN3eFmq9RSRyl5R2EOtWmbWUCdWZhtMWInlO /UB0sRo3dT57CGe29U5AB1FdGRrMny0WXkLxfzWTT23vq69E1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl59ljN7CMkv8+mIzbY6Lrzc6xjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYmY0YThhZWQtOTkxMy0z NWQ3LTk0ZjItODY0M2U4YzkyOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Op1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGecET8a4qiJTYS4WLifS0uX3HnQLkOXAgXoyfjMimfML/WKNpiNFOL KA1NWZ4xGWNdXdTpl37U25XMgWNCjnNVYAwHccqCeihGJo3T3u4yk0K/EGFkI7ea CTrq+oPN8o0ONWnmvRsQgkP1QohRDd1jZNlUrGSghj5JCQJgJFR4fJyEPhJRrYmR czGDovQCJnMxljkiH94kInnJW6f2dKd0eF1vSwDTHidyHweFgabHKCDEEw/q8VKK VG/ULVbmvCY+izVtLi0UIAvXIfTdvsnF/NEDgvX6IdO2891lUfl4qA8fLupkbCUQ 7UNryKPzaMkM2i5jfqrKINwD3ACuJXw= -----END CERTIFICATE-----Generated at Tue Sep 29 02:50:54 2026 by rpki-client