$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa File: 851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa (raw, json) Hash identifier: OvwiH7VxqemRJ1+VXqZbwwFwRqMNAiEH4Zpnk5/OwDE= Subject key identifier: FD:62:0C:FB:A5:54:F9:B2:7D:5A:30:A8:84:AB:4A:F0:87:AF:E9:F1 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584F1467966E77FE452C92A5E280 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36374 IP address blocks: 216.122.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:96:6e:77:fe:45:2c:92:a5:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=47dd0348-26b6-4fd1-bc27-e13442c19482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:77:07:88:bf:dd:a9:9c:80:55:97:6d:cb: a3:8c:66:49:a6:3e:48:fa:85:95:b1:75:e3:5c:dc: 80:df:63:c4:7f:05:ce:cd:0b:05:8c:b5:2d:06:c4: dd:1c:38:66:74:f0:c9:8d:fc:20:5a:8d:b7:46:b1: 08:5c:dd:8e:ba:6e:40:d0:27:1d:94:95:dd:5b:05: 7e:ac:1b:99:0c:27:c1:75:ea:3b:c6:1a:2c:14:50: ff:f3:37:63:6a:49:8d:14:61:ad:a8:18:3a:59:7b: 77:0d:de:b5:67:1a:78:f9:99:b1:69:ff:08:25:33: 4b:38:c1:6a:4e:ea:af:5b:00:f0:74:a3:9f:5f:72: 1f:87:51:2e:af:4c:b9:1e:a0:45:c5:12:81:ba:af: 80:dc:bb:c9:0b:3a:df:9a:f6:e7:70:01:fa:9d:8d: bd:96:0c:aa:05:06:27:67:b0:d8:26:1d:78:2c:8f: d9:55:98:5b:ea:b7:7b:55:08:ec:e7:2e:18:09:1d: f9:ff:5f:10:57:d7:4f:12:00:52:9b:27:9a:95:1d: 02:20:e2:32:65:e7:a2:0e:de:f2:c9:46:8b:5c:56: 21:7a:eb:8b:bd:4b:83:fe:fd:9f:7f:9f:ba:cf:85: db:ab:60:18:d6:93:ce:33:19:74:71:df:fd:be:9f: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:0C:FB:A5:54:F9:B2:7D:5A:30:A8:84:AB:4A:F0:87:AF:E9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 216.122.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:a5:cd:40:fe:89:35:c2:5c:14:75:15:8b:b5:81:40:74:53: e1:5d:d0:e5:ff:df:19:b1:d5:56:c1:5c:89:16:35:a7:8d:cc: a9:57:27:15:2a:29:41:6d:40:b8:99:f3:4b:da:a2:f1:99:ff: f1:63:75:0b:f7:78:54:0f:bd:ad:e3:2c:80:26:78:33:f9:84: ca:ad:68:97:54:34:41:be:ed:86:e8:5f:ac:2e:98:cf:cb:2e: 5b:0c:d7:e7:5a:63:bf:81:9e:9e:59:6b:e7:14:42:b0:81:71: e3:78:d2:ab:f8:f7:54:19:3b:1e:5f:21:a7:44:5e:9b:6e:f6: 1b:0e:a2:68:ac:06:9e:ab:5f:90:cc:41:b1:eb:a6:c8:e0:b1: 11:f1:bc:fb:49:f5:fb:d3:4f:21:cb:23:20:a6:03:92:96:bc: 47:a3:7a:90:bc:f8:6a:ce:4a:ed:5a:83:83:f9:c6:ec:d5:0f: 69:a9:cc:f2:86:b8:02:8f:4b:c0:5f:2c:5d:4e:10:f5:fa:46: 22:5e:d0:83:bd:3e:e1:9a:c1:8e:01:65:71:ea:1f:39:03:b7: 76:7e:d1:a6:47:60:43:ac:7a:5f:4a:6c:d2:c1:d3:3e:fe:c3: 5a:f5:3f:de:5d:c2:3c:cb:74:4c:a4:8e:be:20:b6:8a:9c:33: bf:5e:2a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5Zud/5FLJKl4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NDdkZDAzNDgtMjZiNi00ZmQxLWJjMjctZTEzNDQyYzE5NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/t3B4i/3amcgFWXbcujjGZJpj5I+oWVsXXj XNyA32PEfwXOzQsFjLUtBsTdHDhmdPDJjfwgWo23RrEIXN2Oum5A0CcdlJXdWwV+ rBuZDCfBdeo7xhosFFD/8zdjakmNFGGtqBg6WXt3Dd61Zxp4+Zmxaf8IJTNLOMFq TuqvWwDwdKOfX3Ifh1Eur0y5HqBFxRKBuq+A3LvJCzrfmvbncAH6nY29lgyqBQYn Z7DYJh14LI/ZVZhb6rd7VQjs5y4YCR35/18QV9dPEgBSmyealR0CIOIyZeeiDt7y yUaLXFYheuuLvUuD/v2ff5+6z4Xbq2AY1pPOMxl0cd/9vp+iXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1iDPulVPmyfVowqISrSvCHr+nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvODUxZjNlMGItODBjYS0z MmZlLWFlMTYtMGVhMDYyYzRlNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2HpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmlzUD+iTXCXBR1FYu1gUB0U+Fd0OX/3xmx1VbBXIkWNaeNzKlXJxUq KUFtQLiZ80vaovGZ//FjdQv3eFQPva3jLIAmeDP5hMqtaJdUNEG+7YboX6wumM/L LlsM1+daY7+Bnp5Za+cUQrCBceN40qv491QZOx5fIadEXptu9hsOomisBp6rX5DM QbHrpsjgsRHxvPtJ9fvTTyHLIyCmA5KWvEejepC8+GrOSu1ag4P5xuzVD2mpzPKG uAKPS8BfLF1OEPX6RiJe0IO9PuGawY4BZXHqHzkDt3Z+0aZHYEOsel9KbNLB0z7+ w1r1P95dwjzLdEykjr4gtoqcM79eKn0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:14:43 2026 by rpki-client