$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac1331cf-83cb-3904-8494-8a75a81898af.roa File: ac1331cf-83cb-3904-8494-8a75a81898af.roa (raw, json) Hash identifier: S8aEogcX7IUqXmQPnSM+mrvTKjxiN8d0vASv32Sgspc= Subject key identifier: 77:1A:40:DF:25:D2:38:3D:9D:A1:52:22:AE:A8:6A:45:34:37:F1:94 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0D6CD449BB5916F14E922A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac1331cf-83cb-3904-8494-8a75a81898af.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 216.132.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d4:49:bb:59:16:f1:4e:92:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=3c7df5e1-3cd1-4fef-a42b-a2506b94076a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:32:d9:21:c3:50:90:f7:3b:64:63:33:de: c8:f2:a0:c2:eb:06:84:6d:24:ae:9f:0b:a4:a1:00: 30:3e:c8:3b:1e:bb:6d:64:9c:ba:62:46:aa:12:f1: 06:bc:13:37:91:a9:d7:24:f8:e6:19:da:69:a5:bb: cf:2b:cf:f7:a8:54:8c:19:5c:8c:2f:16:ec:83:93: 64:24:2b:fe:8c:4c:b5:ed:2e:a3:a4:0c:c9:33:d0: 94:13:67:13:bf:26:eb:32:58:6b:06:35:5e:88:10: ce:e6:0b:c7:74:c4:35:1c:41:d1:d2:e6:40:6f:a0: c2:03:3c:d2:e6:64:42:f5:e7:e0:43:a6:20:e0:ba: 38:d9:6b:54:c1:33:5a:96:a5:dd:b6:5f:a6:e1:c6: fc:25:b5:95:fc:25:69:f5:e4:0a:82:1c:ce:2b:52: 89:0d:eb:a9:9c:e6:8b:7f:0b:29:f9:b1:e1:0d:ac: a7:b1:08:cc:2c:b0:08:1d:08:c8:35:d3:a0:6a:06: 21:66:83:d1:82:84:c2:6a:eb:e2:72:f3:e6:e1:f7: 15:1e:b4:a8:a5:80:74:49:94:5f:39:29:e4:41:6d: 0b:1b:66:8e:9e:56:a5:22:24:2d:a0:d7:90:0b:48: 8c:19:ab:f6:dc:46:18:ec:28:dd:f2:31:80:3f:94: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1A:40:DF:25:D2:38:3D:9D:A1:52:22:AE:A8:6A:45:34:37:F1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac1331cf-83cb-3904-8494-8a75a81898af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ad:8b:36:57:92:52:52:0a:e0:c7:61:ae:26:c2:83:73:9b: a8:35:46:11:02:7e:0a:70:8e:e4:ff:e8:71:4a:b8:6f:90:aa: de:27:ee:8c:9a:a7:57:19:12:d3:b9:78:c7:87:62:87:60:c6: f8:05:f0:5a:68:13:01:e9:1b:c4:26:2e:69:48:68:7f:e7:56: 13:c1:59:35:a7:09:8f:fe:33:58:47:c2:ad:82:a4:68:72:94: d3:0e:2b:a9:6a:8b:95:ed:7d:0d:d3:8f:cc:52:4a:fd:8a:c4: 1a:0e:01:46:c0:5e:22:e6:39:2d:12:30:da:b2:9c:ca:af:28: 97:98:90:b6:eb:30:6d:f5:ef:f6:23:05:d8:8f:90:70:1e:84: c4:98:f6:e0:11:b7:07:b4:e7:78:b8:f2:24:fa:f6:80:c4:94: 2d:b4:d0:d6:75:b8:28:ef:94:61:f5:9e:69:25:16:c0:01:f0: 90:6c:b1:a0:8d:86:a6:dd:56:7e:6a:a3:60:86:42:6c:5a:0e: b6:b3:30:22:8d:5f:89:28:16:58:c6:5d:cf:cf:aa:63:8f:47: 6c:5a:fa:70:f5:cd:77:b3:18:99:4e:34:dd:89:e4:d0:7d:53: 79:01:3c:ab:41:38:60:ac:e8:9a:12:e5:f3:34:ff:2b:e5:39: c9:c2:94:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNRJu1kW8U6SKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk M2M3ZGY1ZTEtM2NkMS00ZmVmLWE0MmItYTI1MDZiOTQwNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpwy2SHDUJD3O2RjM97I8qDC6waEbSSunwuk oQAwPsg7HrttZJy6YkaqEvEGvBM3kanXJPjmGdpppbvPK8/3qFSMGVyMLxbsg5Nk JCv+jEy17S6jpAzJM9CUE2cTvybrMlhrBjVeiBDO5gvHdMQ1HEHR0uZAb6DCAzzS 5mRC9efgQ6Yg4Lo42WtUwTNalqXdtl+m4cb8JbWV/CVp9eQKghzOK1KJDeupnOaL fwsp+bHhDaynsQjMLLAIHQjINdOgagYhZoPRgoTCauvicvPm4fcVHrSopYB0SZRf OSnkQW0LG2aOnlalIiQtoNeQC0iMGav23EYY7Cjd8jGAP5T8mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcaQN8l0jg9naFSIq6oakU0N/GUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWMxMzMxY2YtODNjYi0z OTA0LTg0OTQtOGE3NWE4MTg5OGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2IRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACutizZXklJSCuDHYa4mwoNzm6g1RhECfgpwjuT/6HFKuG+Qqt4n7oya p1cZEtO5eMeHYodgxvgF8FpoEwHpG8QmLmlIaH/nVhPBWTWnCY/+M1hHwq2CpGhy lNMOK6lqi5XtfQ3Tj8xSSv2KxBoOAUbAXiLmOS0SMNqynMqvKJeYkLbrMG317/Yj BdiPkHAehMSY9uARtwe053i48iT69oDElC200NZ1uCjvlGH1nmklFsAB8JBssaCN hqbdVn5qo2CGQmxaDrazMCKNX4koFljGXc/PqmOPR2xa+nD1zXezGJlONN2J5NB9 U3kBPKtBOGCs6JoS5fM0/yvlOcnClE4= -----END CERTIFICATE-----Generated at Sun Sep 20 17:59:26 2026 by rpki-client