$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d/e69988a2-bc7d-3ddc-8299-101ab03a3e06.roa File: e69988a2-bc7d-3ddc-8299-101ab03a3e06.roa (raw, json) Hash identifier: LYXX3OIQY309tl9pGGSkU5uEhiST+cHnrhFKbx9LSkk= Subject key identifier: 6E:66:D5:CE:0B:9D:A0:82:D0:FE:4E:DE:00:22:B4:0E:81:A6:8D:40 Certificate issuer: /CN=21f6793a-29ab-43fa-83ed-ffce66c4078d Certificate serial: 010D0C9F4328584F0E068A0E9B740C1356545C00 Authority key identifier: 0E:9F:76:64:3E:BD:ED:1E:40:6E:3B:C4:CD:FD:EB:0F:63:B6:C0:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d/e69988a2-bc7d-3ddc-8299-101ab03a3e06.roa Signing time: Thu 03 Sep 2026 18:09:57 +0000 ROA not before: Thu 03 Sep 2026 18:09:57 +0000 ROA not after: Tue 01 Dec 2026 15:55:34 +0000 asID: 6079 IP address blocks: 216.127.0.0/20 maxlen: 24 216.197.0.0/20 maxlen: 24 216.197.16.0/20 maxlen: 24 216.197.32.0/20 maxlen: 24 216.197.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d/21f6793a-29ab-43fa-83ed-ffce66c4078d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d/21f6793a-29ab-43fa-83ed-ffce66c4078d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:06:8a:0e:9b:74:0c:13:56:54:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f6793a-29ab-43fa-83ed-ffce66c4078d Validity Not Before: Sep 3 18:09:57 2026 GMT Not After : Dec 1 15:55:34 2026 GMT Subject: CN=579d8e1f-d6b1-408c-b308-23150517ded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:c7:b1:1a:7e:15:84:0d:7f:7a:d7:bf:76: a3:47:56:b7:cd:fd:98:0b:11:f4:7f:3d:2d:f2:c1: 40:11:d7:36:d7:b5:70:09:b1:b5:4d:4b:76:d9:e5: 10:66:d6:d4:cf:79:88:3e:13:dc:81:c7:df:c3:c9: a6:85:ad:b6:c4:b8:3b:95:a1:97:19:ea:2c:00:0e: 43:17:fc:78:02:f5:1e:d7:ba:0a:0b:a5:61:da:0e: 77:75:02:0b:60:8f:14:ce:ca:bd:3e:4c:fc:02:49: e9:a9:36:44:a9:51:fe:a5:df:82:5d:90:b5:f1:75: 01:3f:71:c5:15:25:b5:13:90:77:81:68:72:92:ed: 6f:90:13:6f:3e:b7:71:d3:58:d7:92:db:f3:11:fe: ec:e2:47:60:24:55:6c:0b:6c:7d:dc:7d:ce:2d:74: 3d:2e:f4:e3:f3:c8:d2:5c:f7:f8:2f:bb:dc:5e:0b: 4b:1f:a4:24:50:78:0e:3d:ba:1d:52:8b:dc:c7:97: b7:04:82:af:57:73:99:e3:87:c5:d8:61:93:64:6c: 2e:e4:ac:fb:82:4a:85:a6:13:bb:36:14:96:79:78: 31:af:f6:8e:e3:fb:0a:22:a3:5d:fb:3f:3b:59:c4: 3e:6f:b0:03:87:e9:9c:27:58:91:61:1b:dc:31:0a: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:D5:CE:0B:9D:A0:82:D0:FE:4E:DE:00:22:B4:0E:81:A6:8D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d/e69988a2-bc7d-3ddc-8299-101ab03a3e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d/21f6793a-29ab-43fa-83ed-ffce66c4078d.crl X509v3 Authority Key Identifier: keyid:0E:9F:76:64:3E:BD:ED:1E:40:6E:3B:C4:CD:FD:EB:0F:63:B6:C0:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21f6793a-29ab-43fa-83ed-ffce66c4078d.cer sbgp-ipAddrBlock: critical IPv4: 216.127.0.0/20 216.197.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7f:fc:86:86:c7:79:36:88:e9:c8:68:82:57:79:4b:f3:63: 59:8c:0d:51:21:1c:6e:ed:6b:22:7d:b5:6b:e4:61:74:38:56: 54:f0:a1:ae:5f:95:99:ff:22:9c:42:b2:cc:5a:9a:7e:77:10: 9c:c9:7e:99:6b:71:68:27:de:32:84:43:73:a1:3d:c7:eb:85: e1:80:33:aa:30:a3:a4:02:8c:8a:0f:1e:3f:77:80:e5:fe:79: 14:e1:47:f1:76:58:c4:04:c1:f8:be:fa:bb:b3:58:cd:2e:6f: ec:60:2d:35:9e:a2:ba:f6:52:05:21:8a:1d:2f:c8:5c:2a:ca: 3f:30:e2:2b:f9:c0:4c:eb:28:df:03:3d:56:ad:88:bb:90:f4: 88:73:f4:08:e8:78:8f:70:7a:6b:78:2c:25:d8:b4:2e:60:29: 4d:ff:63:1e:8c:68:19:2b:c2:e3:c5:c1:35:08:43:b9:d9:89: 75:e6:c7:f3:4c:ca:43:bb:c2:56:34:9e:4a:2f:8d:cb:f8:d4: 72:d0:69:4f:b9:96:56:98:44:27:9e:66:13:ee:04:3f:0e:72: bd:ef:be:44:85:03:36:99:75:4d:59:53:07:cd:3f:b4:c8:f5: 97:a9:94:ba:3e:28:4a:af:cf:47:a8:b0:73:de:8c:19:76:0b: 29:e9:53:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8OBooOm3QME1ZUXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNjc5M2EtMjlhYi00M2ZhLTgzZWQtZmZjZTY2YzQw NzhkMB4XDTI2MDkwMzE4MDk1N1oXDTI2MTIwMTE1NTUzNFowLzEtMCsGA1UEAxMk NTc5ZDhlMWYtZDZiMS00MDhjLWIzMDgtMjMxNTA1MTdkZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl3HsRp+FYQNf3rXv3ajR1a3zf2YCxH0fz0t 8sFAEdc217VwCbG1TUt22eUQZtbUz3mIPhPcgcffw8mmha22xLg7laGXGeosAA5D F/x4AvUe17oKC6Vh2g53dQILYI8Uzsq9Pkz8AknpqTZEqVH+pd+CXZC18XUBP3HF FSW1E5B3gWhyku1vkBNvPrdx01jXktvzEf7s4kdgJFVsC2x93H3OLXQ9LvTj88jS XPf4L7vcXgtLH6QkUHgOPbodUovcx5e3BIKvV3OZ44fF2GGTZGwu5Kz7gkqFphO7 NhSWeXgxr/aO4/sKIqNd+z87WcQ+b7ADh+mcJ1iRYRvcMQoNjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG5m1c4LnaCC0P5O3gAitA6Bpo1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMWY2 NzkzYS0yOWFiLTQzZmEtODNlZC1mZmNlNjZjNDA3OGQvZTY5OTg4YTItYmM3ZC0z ZGRjLTgyOTktMTAxYWIwM2EzZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjFmNjc5M2EtMjlhYi00M2ZhLTgz ZWQtZmZjZTY2YzQwNzhkLzIxZjY3OTNhLTI5YWItNDNmYS04M2VkLWZmY2U2NmM0 MDc4ZC5jcmwwHwYDVR0jBBgwFoAUDp92ZD697R5AbjvEzf3rD2O2wOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMWY2NzkzYS0yOWFiLTQzZmEtODNlZC1mZmNl NjZjNDA3OGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQE2H8AAwQG 2MUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABp//IaGx3k2iOnIaIJXeUvzY1mMDVEhHG7tayJ9tWvkYXQ4 VlTwoa5flZn/IpxCssxamn53EJzJfplrcWgn3jKEQ3OhPcfrheGAM6owo6QCjIoP Hj93gOX+eRThR/F2WMQEwfi++ruzWM0ub+xgLTWeorr2UgUhih0vyFwqyj8w4iv5 wEzrKN8DPVatiLuQ9Ihz9AjoeI9wemt4LCXYtC5gKU3/Yx6MaBkrwuPFwTUIQ7nZ iXXmx/NMykO7wlY0nkovjcv41HLQaU+5llaYRCeeZhPuBD8Ocr3vvkSFAzaZdU1Z UwfNP7TI9ZeplLo+KEqvz0eosHPejBl2CynpU+A= -----END CERTIFICATE-----Generated at Tue Sep 22 18:49:40 2026 by rpki-client