$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa File: cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json) Hash identifier: 8okFqAzIk9zQtWOM/5aH5vz31y6aYJ8e9XVvY4WQD6Y= Subject key identifier: 62:46:6C:9C:4E:90:45:C2:4F:D4:84:3F:14:EB:A0:45:2D:D8:EF:D8 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584EA7887F2A462B5FA21EB5E274 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7f:2a:46:2b:5f:a2:1e:b5:e2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9f16b9e9-bfc4-4d9e-9d05-5fba04ba0089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:e1:9b:cb:f8:a5:2c:e8:46:93:aa:2e:dc: 2b:6f:08:12:ac:54:7e:4b:6d:77:23:ab:cc:48:65: 4b:11:58:d5:9f:1b:be:dc:71:4c:79:3c:d2:73:4e: e3:9f:f4:ee:af:e3:fd:9e:79:2e:66:4e:5b:c2:ad: 18:f4:06:79:df:69:00:78:79:a3:ad:5d:eb:e2:01: d1:ab:a2:d2:cf:e0:a3:59:76:06:b7:34:16:4e:2c: c9:1f:d4:6f:0c:cc:ee:ab:a1:54:f3:c9:d6:2e:4b: 24:e1:c9:65:7b:a0:ff:61:38:0b:c4:21:82:d9:37: 73:2b:0a:41:49:4f:f9:f0:c0:87:3f:55:ff:67:36: f9:ca:46:e6:06:cb:04:bc:ad:19:b9:19:e1:e9:09: df:cd:f7:d2:f3:f8:33:b0:93:6c:bb:b9:e2:1f:e2: 0a:db:50:d9:47:83:58:72:54:10:91:5a:49:83:d6: 13:8f:04:94:d0:9d:8d:8a:33:64:eb:ea:10:93:cf: 7c:14:68:b0:17:b9:dc:1f:2a:2c:8d:6d:2e:85:cf: 83:63:cd:95:7b:89:ba:a9:83:79:c5:8a:2f:6f:15: 37:03:38:28:d7:07:cf:b6:d1:cd:c7:e6:2f:f5:0e: 0f:56:6b:1d:15:13:4c:2b:98:7d:4e:00:5b:51:f5: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:6C:9C:4E:90:45:C2:4F:D4:84:3F:14:EB:A0:45:2D:D8:EF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:df:94:31:62:ad:a6:7c:b5:87:12:45:a0:b5:54:3d:29:53: 84:0a:58:1a:b5:52:e3:0a:99:71:83:8b:0c:96:4b:76:fb:2f: cd:8c:c4:3c:5b:9b:9a:a7:a4:bb:6e:ec:0d:af:ba:bc:c1:ba: 2a:98:75:c5:aa:f5:64:a9:76:20:14:71:aa:6a:49:c6:b5:ed: 3a:86:29:95:06:cb:e4:3d:0e:b4:cd:15:ae:86:ad:3c:fd:a5: e4:23:6d:fd:38:28:26:49:a9:c5:2b:05:6f:24:48:3e:20:50: b3:d1:24:8c:64:ef:aa:35:a4:18:3e:32:60:14:cf:5d:4e:aa: 7e:33:8a:05:14:46:23:c4:29:fa:f2:0d:b2:9d:85:6e:2f:04: 8e:29:45:12:a3:bc:5b:d9:b3:ce:b9:f5:b1:3f:19:f1:09:c6: ac:48:19:34:cd:18:a9:e7:e1:96:f6:6b:65:6e:5b:53:15:aa: a5:a0:74:8c:64:8e:84:95:be:2b:3b:c3:af:c8:61:83:aa:1f: e0:37:27:83:40:17:5f:ac:11:0e:61:a0:fa:f4:99:68:d6:e1: cc:8d:c6:08:4b:49:c3:ee:99:be:11:e9:b4:61:67:92:a7:a9: 05:48:e2:64:0e:13:ad:4d:ad:30:a7:26:96:d4:a6:ff:ad:03: b1:65:77:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH8qRitfoh614nQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWYxNmI5ZTktYmZjNC00ZDllLTlkMDUtNWZiYTA0YmEwMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOzhm8v4pSzoRpOqLtwrbwgSrFR+S213I6vM SGVLEVjVnxu+3HFMeTzSc07jn/Tur+P9nnkuZk5bwq0Y9AZ532kAeHmjrV3r4gHR q6LSz+CjWXYGtzQWTizJH9RvDMzuq6FU88nWLksk4clle6D/YTgLxCGC2TdzKwpB SU/58MCHP1X/Zzb5ykbmBssEvK0ZuRnh6QnfzffS8/gzsJNsu7niH+IK21DZR4NY clQQkVpJg9YTjwSU0J2NijNk6+oQk898FGiwF7ncHyosjW0uhc+DY82Ve4m6qYN5 xYovbxU3Azgo1wfPttHNx+Yv9Q4PVmsdFRNMK5h9TgBbUfW6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJGbJxOkEXCT9SEPxTroEUt2O/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvY2M5NDM1MTQtMzUwOS0z M2IzLWIyZGMtMzU5YWYyMmIxZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPflDFiraZ8tYcSRaC1VD0pU4QKWBq1UuMKmXGDiwyWS3b7L82MxDxb m5qnpLtu7A2vurzBuiqYdcWq9WSpdiAUcapqSca17TqGKZUGy+Q9DrTNFa6GrTz9 peQjbf04KCZJqcUrBW8kSD4gULPRJIxk76o1pBg+MmAUz11Oqn4zigUURiPEKfry DbKdhW4vBI4pRRKjvFvZs8659bE/GfEJxqxIGTTNGKnn4Zb2a2VuW1MVqqWgdIxk joSVvis7w6/IYYOqH+A3J4NAF1+sEQ5hoPr0mWjW4cyNxghLScPumb4R6bRhZ5Kn qQVI4mQOE61NrTCnJpbUpv+tA7Fld+c= -----END CERTIFICATE-----Generated at Wed Jul 29 04:38:19 2026 by rpki-client