$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa File: 2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa (raw, json) Hash identifier: FTwGdqvfgs0KL6+/q5h+H4pD+gYRRZVS32oMzEANC1o= Subject key identifier: 4D:8F:51:C5:7B:91:A7:DC:0C:B0:4D:14:45:CD:3A:0C:43:77:3A:53 Certificate issuer: /CN=ee195698-fb60-40ef-a454-85fcbf3381b9 Certificate serial: 010D0C9F4328584F34826AB852BAB8AE293C7880 Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 198949 IP address blocks: 137.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6a:b8:52:ba:b8:ae:29:3c:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=d38c2270-01a2-4be3-9443-c5fdbbd0b469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:8b:7d:41:42:a0:e8:81:45:3c:32:c5:f9: c6:71:25:9c:4d:10:61:8e:31:55:67:5f:f0:af:2d: 56:17:c4:ee:3c:d7:3d:e5:3c:c3:a1:db:ef:6f:55: 5f:e2:30:8d:36:cb:be:30:64:48:60:55:64:3a:14: f7:79:e1:6f:2a:d5:e9:4f:85:c9:ac:b6:93:87:02: c8:7c:2e:b2:1c:89:02:26:07:6b:c9:ba:4b:95:d6: 24:1b:f8:17:8e:cd:af:1f:98:7b:b0:c1:5f:79:30: 5a:93:29:ad:bc:37:da:88:a1:e7:ec:7d:12:c7:cf: 88:d8:6e:5a:ce:fe:19:54:41:62:50:45:31:c6:48: c4:85:49:aa:a8:7a:77:a3:e2:97:01:e8:ce:47:74: 18:bb:fb:cd:df:c7:bd:e3:b8:b9:30:86:50:28:ce: d2:7b:8e:12:a5:69:54:de:a1:ce:f2:85:cb:bb:dd: c7:10:95:09:34:e2:88:8f:36:3d:50:7f:11:30:7b: 02:f7:27:f2:b3:04:1c:ef:c4:37:f1:6c:95:82:5b: aa:cc:95:ed:39:95:92:a5:74:45:30:9c:1a:81:93: 49:32:ad:9c:63:6c:d7:4a:aa:89:f4:e2:d4:40:39: 78:00:f8:bb:03:7e:1f:f8:ee:e3:05:ae:3c:37:06: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:51:C5:7B:91:A7:DC:0C:B0:4D:14:45:CD:3A:0C:43:77:3A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl X509v3 Authority Key Identifier: keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer sbgp-ipAddrBlock: critical IPv4: 137.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b5:06:1b:1c:9a:fe:d2:89:17:e0:c9:ed:12:7d:44:a6:b3: d0:22:ae:c9:ce:3a:58:b5:71:26:3d:a5:aa:18:93:8d:c8:18: 90:01:68:9d:be:bc:fa:19:7b:de:ae:e4:40:47:bb:d2:4b:b3: 17:bf:36:ae:88:7e:23:59:96:d5:a2:dd:8d:03:b9:5a:25:8c: 1e:43:33:44:19:9a:f6:37:fc:ab:c9:5e:6f:57:1c:bd:87:3d: 9f:50:61:78:10:e4:2c:2f:c2:00:37:d8:84:13:25:19:f3:f1: cf:02:da:b5:d8:fe:29:a6:a6:56:5b:ff:78:a7:20:19:fe:a4: 1e:35:65:5a:d9:2e:24:a9:13:0c:87:1a:3e:38:c1:3d:07:6d: a8:7f:58:54:34:f6:9d:e5:f3:fe:d2:db:28:f5:b0:f7:37:f3: 97:c6:43:32:6c:bf:7f:d3:be:54:0e:00:8c:2b:00:b3:27:d3: 02:5c:aa:95:4b:e4:dd:30:ff:51:0d:f3:7d:49:c1:c1:8d:d9: 4e:bd:05:4f:9c:2b:34:e1:e6:68:f5:7c:7c:72:b0:7f:64:30: 58:d0:38:d7:02:e9:f1:ef:ff:a5:ba:a5:c1:a4:76:7d:e6:28: 49:8a:04:db:d6:ea:61:71:24:df:3d:91:cf:64:c5:09:47:ef: 5f:79:ba:96 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE80gmq4Urq4rik8eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWUxOTU2OTgtZmI2MC00MGVmLWE0NTQtODVmY2JmMzM4 MWI5MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDM4YzIyNzAtMDFhMi00YmUzLTk0NDMtYzVmZGJiZDBiNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2qLfUFCoOiBRTwyxfnGcSWcTRBhjjFVZ1/w ry1WF8TuPNc95TzDodvvb1Vf4jCNNsu+MGRIYFVkOhT3eeFvKtXpT4XJrLaThwLI fC6yHIkCJgdrybpLldYkG/gXjs2vH5h7sMFfeTBakymtvDfaiKHn7H0Sx8+I2G5a zv4ZVEFiUEUxxkjEhUmqqHp3o+KXAejOR3QYu/vN38e947i5MIZQKM7Se44SpWlU 3qHO8oXLu93HEJUJNOKIjzY9UH8RMHsC9yfyswQc78Q38WyVgluqzJXtOZWSpXRF MJwagZNJMq2cY2zXSqqJ9OLUQDl4APi7A34f+O7jBa48Nwb4qQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE2PUcV7kafcDLBNFEXNOgxDdzpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTE5 NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYzMzgxYjkvMmZmYTFkZWItYTNmNy0z YzA2LTk0M2YtYTZlNDk4MmY4NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWUxOTU2OTgtZmI2MC00MGVmLWE0 NTQtODVmY2JmMzM4MWI5L2VlMTk1Njk4LWZiNjAtNDBlZi1hNDU0LTg1ZmNiZjMz ODFiOS5jcmwwHwYDVR0jBBgwFoAUPRcl8dsCqK/Mc9Thv4Fa9vmMCBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZj YmYzMzgxYjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAidgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADLUGGxya/tKJF+DJ7RJ9RKaz0CKuyc46WLVxJj2lqhiTjcgYkAFonb68 +hl73q7kQEe70kuzF782roh+I1mW1aLdjQO5WiWMHkMzRBma9jf8q8leb1ccvYc9 n1BheBDkLC/CADfYhBMlGfPxzwLatdj+KaamVlv/eKcgGf6kHjVlWtkuJKkTDIca PjjBPQdtqH9YVDT2neXz/tLbKPWw9zfzl8ZDMmy/f9O+VA4AjCsAsyfTAlyqlUvk 3TD/UQ3zfUnBwY3ZTr0FT5wrNOHmaPV8fHKwf2QwWNA41wLp8e//pbqlwaR2feYo SYoE29bqYXEk3z2Rz2TFCUfvX3m6lg== -----END CERTIFICATE-----Generated at Tue Sep 22 14:13:12 2026 by rpki-client