$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa File: 3ffa981a-91a8-3617-9331-ea8500d52ebc.roa (raw, json) Hash identifier: 9mEJ8IKt8zzEBt8eQRbCk74kDnyAeVJmWb1xHCx8VDQ= Subject key identifier: 34:04:EA:8D:90:99:66:63:39:22:D2:EB:A3:5C:05:5A:BE:86:6A:25 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584EFF7777CA6B7739248DE60800 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 23158 IP address blocks: 67.216.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:77:ca:6b:77:39:24:8d:e6:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=7bd39135-60b6-44fd-b9fb-0c10389cc3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:0b:7f:e9:c7:ba:60:86:82:d1:6d:2b:34: 6a:25:58:8f:51:fd:c6:3f:60:41:fd:fe:7a:7b:57: d2:24:8d:22:44:84:46:ec:28:1a:cc:5f:87:88:ad: b7:e4:9c:15:7e:a3:6b:ec:ce:51:7d:9c:31:a6:a4: 00:83:95:96:7b:7e:b6:12:0d:05:97:f0:26:4f:db: d6:25:35:82:48:5e:2b:f7:2e:fd:56:54:e5:48:ea: 9e:97:98:93:d3:43:6c:6d:72:36:df:2e:3e:bb:da: 00:19:74:4a:97:b7:97:66:0b:1d:7f:d6:f4:73:a9: 7a:ae:49:42:7a:5a:84:b2:83:23:5f:40:6a:5d:bf: 95:6f:35:13:6b:b5:94:39:21:08:f7:fe:72:ab:54: 5c:ce:3a:4f:be:75:2a:6d:1a:eb:95:6e:4a:de:4d: 54:12:68:71:af:4b:4b:d8:91:78:c5:26:41:42:0a: 4b:79:98:69:c1:02:c2:70:c6:07:9d:b1:d9:be:8c: cb:3d:1e:6d:43:86:fc:a6:31:4c:a7:c7:87:e5:17: 92:19:50:70:7f:03:18:3c:66:77:d2:44:99:0a:b1: 9e:76:ad:77:51:88:f3:2f:e4:f6:0b:13:62:29:a0: c8:74:69:cd:9b:bd:72:eb:10:3f:0c:1c:6c:1b:68: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:04:EA:8D:90:99:66:63:39:22:D2:EB:A3:5C:05:5A:BE:86:6A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 67.216.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:22:37:c2:e2:a2:a6:6c:d6:6e:d5:f4:52:4d:55:18:d8:89: c9:e1:49:73:c1:3e:69:b6:74:90:33:51:36:16:6f:57:2f:2c: cc:5c:16:73:15:be:24:72:d0:b0:41:b4:70:40:ff:15:28:46: a8:46:19:97:15:96:1f:19:d2:a6:cd:95:6c:a9:3e:68:09:00: 79:26:8d:11:68:58:0f:2a:d8:53:b7:fd:94:b6:53:17:03:db: a9:d4:c2:c6:ac:b8:db:4d:aa:cb:9c:4c:72:ba:6e:42:c7:dc: 0b:34:70:41:98:ac:0d:39:21:69:04:0f:36:ca:7d:e0:45:54: 9a:b2:12:ae:4d:24:e5:7c:cc:f5:54:09:cb:83:38:0c:f6:a4: d3:cb:15:8a:de:b3:64:e5:83:ba:f6:cf:3e:70:38:3d:3f:74: 33:f1:76:e1:96:66:ed:57:2d:8d:a9:db:38:d0:c4:6d:45:c1: e5:49:69:62:8e:d7:41:18:c9:ba:dc:3a:94:a5:00:0c:a7:e0: 07:1c:f0:42:ed:f6:79:94:c2:50:3c:75:bf:d0:18:ee:9f:29: 77:4e:79:53:c4:7e:8e:fb:cc:e0:0d:9c:fb:93:79:72:3f:0f: 8c:9e:ec:7f:9e:6b:4a:7a:49:3d:f6:b0:a4:f3:49:6a:de:76: 7f:a9:3e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3fKa3c5JI3mCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk N2JkMzkxMzUtNjBiNi00NGZkLWI5ZmItMGMxMDM4OWNjM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigcLf+nHumCGgtFtKzRqJViPUf3GP2BB/f56 e1fSJI0iRIRG7CgazF+HiK235JwVfqNr7M5RfZwxpqQAg5WWe362Eg0Fl/AmT9vW JTWCSF4r9y79VlTlSOqel5iT00NsbXI23y4+u9oAGXRKl7eXZgsdf9b0c6l6rklC elqEsoMjX0BqXb+VbzUTa7WUOSEI9/5yq1RczjpPvnUqbRrrlW5K3k1UEmhxr0tL 2JF4xSZBQgpLeZhpwQLCcMYHnbHZvozLPR5tQ4b8pjFMp8eH5ReSGVBwfwMYPGZ3 0kSZCrGedq13UYjzL+T2CxNiKaDIdGnNm71y6xA/DBxsG2iSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQE6o2QmWZjOSLS66NcBVq+hmolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvM2ZmYTk4MWEtOTFhOC0z NjE3LTkzMzEtZWE4NTAwZDUyZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGciN8LioqZs1m7V9FJNVRjYicnhSXPBPmm2dJAzUTYWb1cvLMxcFnMV viRy0LBBtHBA/xUoRqhGGZcVlh8Z0qbNlWypPmgJAHkmjRFoWA8q2FO3/ZS2UxcD 26nUwsasuNtNqsucTHK6bkLH3As0cEGYrA05IWkEDzbKfeBFVJqyEq5NJOV8zPVU CcuDOAz2pNPLFYres2Tlg7r2zz5wOD0/dDPxduGWZu1XLY2p2zjQxG1FweVJaWKO 10EYybrcOpSlAAyn4Acc8ELt9nmUwlA8db/QGO6fKXdOeVPEfo77zOANnPuTeXI/ D4ye7H+ea0p6ST32sKTzSWredn+pPjU= -----END CERTIFICATE-----Generated at Tue Sep 22 16:10:13 2026 by rpki-client