$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa File: 3ee16212-ace1-3836-9f78-e67462b4a3ba.roa (raw, json) Hash identifier: GN2x+Nkj/rZzYC9BPNuwyxmAcQwMMTXMCCNGjbUw5DU= Subject key identifier: 96:1F:13:F5:1A:13:D9:76:19:86:59:C1:F1:B8:1A:DB:27:B2:FE:D8 Certificate issuer: /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Certificate serial: 010D0C9F4328584EA01530EB005ADEE929508840 Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 10973 IP address blocks: 216.128.96.0/20 maxlen: 20 216.128.96.0/21 maxlen: 21 216.128.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:30:eb:00:5a:de:e9:29:50:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=29ad5222-1ac0-4550-93ec-afb6ed16c5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:df:76:dd:19:7a:e1:4c:43:2c:2a:96:85:f1: b0:e1:59:56:5f:37:36:da:4f:70:9d:c1:96:6e:c2: bb:b9:aa:d2:e2:cb:2c:78:ff:72:20:c2:67:70:8b: 2e:ca:af:d4:18:02:46:69:25:b1:12:09:2e:12:be: 16:24:77:6d:ad:80:23:0d:e3:81:83:cd:ea:9c:97: 57:92:b2:e1:86:72:49:67:7c:3f:64:96:aa:21:d1: 08:52:6c:99:62:aa:74:02:dd:2b:3d:76:eb:64:23: 64:3e:df:c8:6d:e8:d3:47:b7:8b:e5:5c:bb:af:52: f4:0b:fa:2f:83:b9:bd:3c:a1:3f:f4:3c:fc:3b:6e: c8:c5:6d:6d:44:2c:c2:9a:07:9b:09:09:4f:29:54: 1e:c7:6c:8f:48:a8:8b:81:3d:b8:ab:de:dc:a3:12: 73:8e:97:54:38:5d:2b:7a:3c:d3:28:07:21:99:62: d7:10:50:c5:a1:b6:3a:42:fc:ef:f8:aa:33:60:08: f6:f2:e7:44:f4:55:a4:8b:52:cf:e3:fb:7f:cb:a8: 45:9a:6a:e3:d4:fd:54:f8:d3:b3:dc:b3:41:cc:19: cf:65:30:f4:b0:fc:a3:b1:08:1a:c8:d6:6d:ab:13: 40:5e:75:cc:47:89:73:c8:ac:c3:7b:0e:99:2b:22: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:13:F5:1A:13:D9:76:19:86:59:C1:F1:B8:1A:DB:27:B2:FE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl X509v3 Authority Key Identifier: keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer sbgp-ipAddrBlock: critical IPv4: 216.128.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1b:74:a3:cd:fd:19:a7:c6:19:e0:c8:3e:bf:d8:e9:34:85: 6d:e4:e2:9a:81:fe:dd:4b:94:1a:e5:34:2c:bb:ac:d0:36:ad: 34:94:5d:f4:49:e2:0c:42:b3:59:c1:92:99:50:b4:74:0e:4b: 80:90:81:cd:cd:12:56:9e:60:80:59:59:8f:17:09:00:c9:2f: 1c:54:e2:2a:d5:51:33:7a:18:d2:40:4d:e5:a4:ee:5f:f4:2c: 52:38:96:91:f0:d7:13:c4:96:91:9e:fb:f9:b3:f8:06:4f:bb: bc:f3:78:30:9e:85:da:ba:bf:49:5d:f9:e4:a3:16:5b:ac:74: c4:04:f6:45:6e:65:59:0c:4e:43:99:50:50:b4:cd:ad:5a:3e: 2d:4a:50:ad:fe:bc:fa:a0:43:14:50:77:1a:32:60:21:17:f9: fa:c9:2a:1f:c5:75:9e:8c:a5:2b:40:76:ea:47:10:4a:fb:45: 6d:40:5d:32:41:4e:ec:f0:41:c3:81:f6:0a:c3:1c:92:86:1d: 2a:3e:d6:0b:12:35:f5:49:e7:3e:c8:3d:dd:9f:04:af:97:bb: f8:28:7f:f3:10:8e:15:80:2d:8a:53:2d:38:0d:60:50:93:57: 3c:7e:cf:75:47:87:6b:ef:15:f2:0b:f7:ff:99:e6:a8:d7:73: 51:ca:c6:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFTDrAFre6SlQiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWViYTEyZmYtYzIyMS00YWIzLTlhYTYtZDU0MmQwODEy NTQzMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MjlhZDUyMjItMWFjMC00NTUwLTkzZWMtYWZiNmVkMTZjNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9923Rl64UxDLCqWhfGw4VlWXzc22k9wncGW bsK7uarS4ssseP9yIMJncIsuyq/UGAJGaSWxEgkuEr4WJHdtrYAjDeOBg83qnJdX krLhhnJJZ3w/ZJaqIdEIUmyZYqp0At0rPXbrZCNkPt/IbejTR7eL5Vy7r1L0C/ov g7m9PKE/9Dz8O27IxW1tRCzCmgebCQlPKVQex2yPSKiLgT24q97coxJzjpdUOF0r ejzTKAchmWLXEFDFobY6Qvzv+KozYAj28udE9FWki1LP4/t/y6hFmmrj1P1U+NOz 3LNBzBnPZTD0sPyjsQgayNZtqxNAXnXMR4lzyKzDew6ZKyJuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYfE/UaE9l2GYZZwfG4Gtsnsv7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJh MTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQyZDA4MTI1NDMvM2VlMTYyMTItYWNlMS0z ODM2LTlmNzgtZTY3NDYyYjRhM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWViYTEyZmYtYzIyMS00YWIzLTlh YTYtZDU0MmQwODEyNTQzLzFlYmExMmZmLWMyMjEtNGFiMy05YWE2LWQ1NDJkMDgx MjU0My5jcmwwHwYDVR0jBBgwFoAUO3Cbc63ymWoAZSmxQ0389dJAUgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJhMTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQy ZDA4MTI1NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0bdKPN/RmnxhngyD6/2Ok0hW3k4pqB/t1LlBrlNCy7rNA2rTSUXfRJ 4gxCs1nBkplQtHQOS4CQgc3NElaeYIBZWY8XCQDJLxxU4irVUTN6GNJATeWk7l/0 LFI4lpHw1xPElpGe+/mz+AZPu7zzeDCehdq6v0ld+eSjFlusdMQE9kVuZVkMTkOZ UFC0za1aPi1KUK3+vPqgQxRQdxoyYCEX+frJKh/FdZ6MpStAdupHEEr7RW1AXTJB TuzwQcOB9grDHJKGHSo+1gsSNfVJ5z7IPd2fBK+Xu/gof/MQjhWALYpTLTgNYFCT Vzx+z3VHh2vvFfIL9/+Z5qjXc1HKxog= -----END CERTIFICATE-----Generated at Thu Jul 30 06:55:01 2026 by rpki-client