$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa File: c4d0d21f-1690-36d6-8c24-202cfa311060.roa (raw, json) Hash identifier: o1rjkSn+cRicmhyLc9S27O5p4rhz0fFur8FOD/oc6q4= Subject key identifier: F4:8A:7C:65:89:3E:B6:08:A6:51:F0:97:36:DA:4A:EF:C2:44:2D:88 Certificate issuer: /CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Certificate serial: 010D0C9F4328584EB84742B339463F65C834AE80 Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 394710 IP address blocks: 209.216.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:42:b3:39:46:3f:65:c8:34:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=2188e085-798d-4c5a-940e-f30b1340cdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:7b:3b:57:23:a6:27:da:c2:e1:de:a4:a0: 4a:4e:0d:11:94:ac:36:1e:e1:4d:0e:c2:02:2c:27: 97:ee:bd:39:4d:65:97:d2:ae:1f:d7:b2:68:f7:7e: 36:ee:55:fe:f6:55:ef:15:32:cc:93:0b:a2:bf:33: 0c:b0:75:98:7e:59:c2:b4:08:ed:b8:2d:c0:e9:21: b9:af:38:09:b7:2f:53:05:27:2a:6e:e1:90:aa:7a: 57:7f:89:3b:11:98:a8:35:f4:d3:70:06:e9:0b:4d: 9e:f0:0c:cc:04:34:c8:ca:de:75:d1:a7:be:87:d3: 61:55:94:1d:ac:8f:f0:2b:52:e3:0a:53:75:b7:de: 93:30:46:dd:d7:fc:51:87:ea:25:5d:a5:0d:2f:74: f5:5e:60:d8:76:a8:80:8b:8f:03:ae:05:0a:72:29: 4b:a0:e5:32:d6:e3:7f:97:36:ab:7b:9f:90:22:ae: 72:6e:a4:a5:6e:ac:d3:32:d8:62:6e:c8:24:c4:a5: 93:7f:8a:1c:0f:03:1e:35:80:20:36:88:eb:f2:42: 28:b8:52:e4:b9:5d:a4:37:c3:97:a2:00:d0:b3:69: a4:db:4e:e5:41:06:a3:c8:7f:ee:75:df:e8:55:52: 7b:be:07:65:96:e7:76:6e:fd:de:ab:d7:bc:28:53: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:7C:65:89:3E:B6:08:A6:51:F0:97:36:DA:4A:EF:C2:44:2D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl X509v3 Authority Key Identifier: keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer sbgp-ipAddrBlock: critical IPv4: 209.216.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8e:1c:84:9b:9d:0c:f7:3c:53:94:e7:59:85:7f:86:0d:df: b6:2c:99:6a:1f:d9:b5:e2:4c:7a:e5:b8:c1:fb:b5:24:ae:2d: 67:80:14:5a:0f:8e:0d:43:a2:97:bb:2c:a2:7e:28:bc:30:a0: d3:8b:08:40:0d:27:bb:3e:5e:07:95:98:5b:78:89:f5:cb:46: ba:cd:08:95:f7:cb:78:c7:38:2c:e8:d3:dc:67:ac:c3:6b:36: 66:a2:d2:2c:13:1f:a4:ba:47:0b:d2:e3:c0:8a:58:71:12:34: ce:2f:3d:f1:e8:3e:6c:ce:02:5a:46:32:36:38:68:1e:47:f9: 43:19:d8:fb:c6:93:13:77:8a:1b:ef:e4:5c:e1:75:f9:2f:07: 71:47:97:f0:bb:21:70:4d:05:18:64:bf:2d:44:1f:5b:be:43: 9c:3d:05:75:02:bf:24:1c:ff:82:cc:8a:31:28:32:18:72:5d: d0:01:02:71:d4:da:45:0a:6f:ed:c3:a3:57:08:44:a8:d2:69: e3:15:51:8a:50:04:59:8f:f8:22:15:2a:10:39:62:4f:cb:97: 37:3b:61:5b:41:9f:8a:67:29:55:ad:87:9c:a5:a9:de:b9:7e: 11:76:14:2d:94:93:27:14:57:9d:3c:dd:a0:e8:f8:d6:24:ee: 3d:69:61:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R0KzOUY/Zcg0roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4 YmQyMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk MjE4OGUwODUtNzk4ZC00YzVhLTk0MGUtZjMwYjEzNDBjZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzF7O1cjpifawuHepKBKTg0RlKw2HuFNDsIC LCeX7r05TWWX0q4f17Jo93427lX+9lXvFTLMkwuivzMMsHWYflnCtAjtuC3A6SG5 rzgJty9TBScqbuGQqnpXf4k7EZioNfTTcAbpC02e8AzMBDTIyt510ae+h9NhVZQd rI/wK1LjClN1t96TMEbd1/xRh+olXaUNL3T1XmDYdqiAi48DrgUKcilLoOUy1uN/ lzare5+QIq5ybqSlbqzTMthibsgkxKWTf4ocDwMeNYAgNojr8kIouFLkuV2kN8OX ogDQs2mk207lQQajyH/udd/oVVJ7vgdllud2bv3eq9e8KFNSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSKfGWJPrYIplHwlzbaSu/CRC2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvYzRkMGQyMWYtMTY5MC0z NmQ2LThjMjQtMjAyY2ZhMzExMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3 MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx MTNhYjhiZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0dhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2OHISbnQz3PFOU51mFf4YN37YsmWof2bXiTHrluMH7tSSuLWeAFFoP jg1Dope7LKJ+KLwwoNOLCEANJ7s+XgeVmFt4ifXLRrrNCJX3y3jHOCzo09xnrMNr Nmai0iwTH6S6RwvS48CKWHESNM4vPfHoPmzOAlpGMjY4aB5H+UMZ2PvGkxN3ihvv 5FzhdfkvB3FHl/C7IXBNBRhkvy1EH1u+Q5w9BXUCvyQc/4LMijEoMhhyXdABAnHU 2kUKb+3Do1cIRKjSaeMVUYpQBFmP+CIVKhA5Yk/Llzc7YVtBn4pnKVWth5ylqd65 fhF2FC2UkycUV5083aDo+NYk7j1pYbw= -----END CERTIFICATE-----Generated at Tue Sep 29 00:57:32 2026 by rpki-client