$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa File: 3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa (raw, json) Hash identifier: 9mrVG2U8jAlJJiV2jO89JwNh427Iudv3mty+D2nXe3I= Subject key identifier: B5:E4:F5:E8:04:71:31:84:58:70:28:81:8C:1C:32:2F:3D:C8:66:12 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA7987C3CF43DDA42BD343180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2914 IP address blocks: 216.132.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:7c:3c:f4:3d:da:42:bd:34:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5afd81b8-7f6f-4857-9391-b9018bfd247d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:28:3d:af:9b:a5:16:54:ba:a0:b0:37:66: 26:0f:20:bb:46:17:80:5c:46:e2:58:a7:64:37:70: 61:ba:32:26:87:f3:37:40:3b:b9:b5:d7:ea:b8:60: 15:25:e1:9e:d9:07:f6:79:8a:6a:64:f9:a7:e2:fe: 56:fb:06:f2:4c:9b:83:0f:d7:01:9d:17:b1:70:0c: fd:bb:63:5b:11:6f:19:df:bb:d1:e1:d2:87:cc:ee: 21:ee:1d:53:5d:e6:2e:f1:a7:fa:1a:71:4f:a0:74: 03:d6:ee:af:48:ab:31:d5:0d:50:36:20:6d:d3:8e: e8:ae:89:db:a4:2a:b6:97:45:36:ff:03:b5:26:35: b1:56:1d:23:ec:0e:99:11:03:87:0f:53:20:91:68: 10:37:ba:4a:58:9a:9f:21:a7:93:3e:5e:b5:dd:10: 8e:c5:e4:b3:84:ac:1f:ea:94:9f:1c:0e:ac:78:f7: a1:c2:67:81:f9:39:cc:57:e6:fb:76:b4:1d:72:20: 44:a1:50:14:32:48:6a:1b:c8:a5:a8:5d:c5:3c:7c: 54:f9:e4:f4:bc:74:d9:3e:47:bd:da:11:89:c0:df: df:9b:cb:2a:0f:c3:44:56:e7:db:f0:ca:9a:c9:04: f0:eb:0b:d5:f0:5b:fb:e5:aa:11:ef:5e:70:96:69: e3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E4:F5:E8:04:71:31:84:58:70:28:81:8C:1C:32:2F:3D:C8:66:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:a6:63:1e:ac:88:51:9c:6a:44:15:df:11:1a:b1:f7:b2:49: 49:c1:80:d4:47:97:5a:88:4c:bd:a2:36:a7:f9:f0:de:6e:e2: 0b:74:8b:70:47:20:c9:e3:6a:6f:73:f6:1d:b3:5b:fb:d3:6f: d7:44:6f:3c:ef:2a:a3:e8:e8:36:ba:40:fa:48:22:4e:25:e7: c4:03:c8:6c:5b:0f:ff:ab:b2:72:98:49:fc:f8:ed:02:9b:0e: 1f:41:80:63:a1:32:82:d9:a3:23:f6:cc:90:2e:22:71:ba:a6: f3:0e:15:21:d5:ab:40:a0:57:14:64:c2:3d:23:63:db:79:ed: 93:ff:05:1e:15:63:32:5b:53:94:30:00:a2:ba:18:41:c6:2a: a1:99:ea:f1:e7:55:a1:40:58:d6:05:aa:1e:b0:14:b0:1c:02: 3a:c0:3c:d1:02:40:f5:20:a3:29:ea:84:ef:0e:b6:a8:ad:f6: 4c:14:0f:bd:b5:cf:dd:3a:83:66:d6:dc:a9:67:3b:10:51:98: ad:f2:3e:a4:f9:0d:f4:04:f8:00:41:f8:2b:02:77:64:d3:4f: 6e:86:28:4c:4e:28:7a:da:1f:84:40:5e:0a:19:69:14:42:da: ff:38:27:eb:99:a7:1b:89:d4:9a:53:84:88:aa:88:5c:d1:05: 63:a4:84:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHw89D3aQr00MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWFmZDgxYjgtN2Y2Zi00ODU3LTkzOTEtYjkwMThiZmQyNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc4oPa+bpRZUuqCwN2YmDyC7RheAXEbiWKdk N3BhujImh/M3QDu5tdfquGAVJeGe2Qf2eYpqZPmn4v5W+wbyTJuDD9cBnRexcAz9 u2NbEW8Z37vR4dKHzO4h7h1TXeYu8af6GnFPoHQD1u6vSKsx1Q1QNiBt047oronb pCq2l0U2/wO1JjWxVh0j7A6ZEQOHD1MgkWgQN7pKWJqfIaeTPl613RCOxeSzhKwf 6pSfHA6sePehwmeB+TnMV+b7drQdciBEoVAUMkhqG8ilqF3FPHxU+eT0vHTZPke9 2hGJwN/fm8sqD8NEVufb8MqayQTw6wvV8Fv75aoR715wlmnjpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXk9egEcTGEWHAogYwcMi89yGYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2UwMWRlMzgtYzAzZC0z N2FiLWJjMTUtMWU3ZDA0YjM2NWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2IT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWmYx6siFGcakQV3xEasfeySUnBgNRHl1qITL2iNqf58N5u4gt0i3BH IMnjam9z9h2zW/vTb9dEbzzvKqPo6Da6QPpIIk4l58QDyGxbD/+rsnKYSfz47QKb Dh9BgGOhMoLZoyP2zJAuInG6pvMOFSHVq0CgVxRkwj0jY9t57ZP/BR4VYzJbU5Qw AKK6GEHGKqGZ6vHnVaFAWNYFqh6wFLAcAjrAPNECQPUgoynqhO8Otqit9kwUD721 z906g2bW3KlnOxBRmK3yPqT5DfQE+ABB+CsCd2TTT26GKExOKHraH4RAXgoZaRRC 2v84J+uZpxuJ1JpThIiqiFzRBWOkhGs= -----END CERTIFICATE-----Generated at Wed Jul 29 19:40:35 2026 by rpki-client