$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/bae49279-f314-3c3e-84d0-debb52c63785.roa File: bae49279-f314-3c3e-84d0-debb52c63785.roa (raw, json) Hash identifier: 8akzK221G20aJMdpEJ+/VdBwFYftVo1o8IoycoPdsSQ= Subject key identifier: 57:88:7B:CF:9B:0B:3C:6C:2A:E8:DD:A9:ED:04:14:1F:6F:23:6A:1E Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F0672406FEF6022AE41D20E00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/bae49279-f314-3c3e-84d0-debb52c63785.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19650 IP address blocks: 216.88.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:40:6f:ef:60:22:ae:41:d2:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=e057c624-0aae-435d-9c0a-17f4a55a3c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:27:17:4a:ac:ca:75:a7:43:7a:ad:03:71:de: 14:59:c4:0f:c5:60:b5:58:3d:1a:70:0a:4e:23:d0: aa:a1:12:ad:d1:5d:19:2b:6b:ea:11:30:08:16:89: 12:bc:ef:0e:22:ab:57:6a:5e:d0:80:c9:26:57:83: df:b7:c7:e1:87:38:79:6b:88:cf:d8:2b:43:f3:0a: 16:46:db:f5:c3:11:21:81:28:88:31:5c:01:46:c2: 7e:ff:a4:45:df:95:e0:41:3b:3f:0a:21:d9:fc:7b: a1:75:7d:ca:6d:40:08:dc:54:79:32:1e:3e:5a:66: d4:2f:89:53:d9:b0:da:a6:66:9f:af:27:21:9d:f7: 32:57:63:5b:9e:58:5a:5c:88:92:25:e0:2b:c8:b9: 0b:4d:a6:48:da:e8:a8:ce:ba:6a:56:93:71:4f:07: 50:c2:b7:b3:e9:5e:7a:89:3c:c8:65:ed:10:a5:83: a5:1c:52:9f:bf:68:12:52:f3:81:23:b5:45:dd:3a: 19:a0:6b:60:0c:72:69:0c:e7:97:51:2b:89:df:27: 24:8f:61:eb:8d:a3:99:13:88:92:cd:45:d3:6e:d2: 71:3e:7c:37:05:71:65:b6:88:2a:02:2d:73:d1:2d: 6b:43:1c:f3:da:ba:b1:7d:38:5c:e9:f0:a7:ec:11: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:7B:CF:9B:0B:3C:6C:2A:E8:DD:A9:ED:04:14:1F:6F:23:6A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/bae49279-f314-3c3e-84d0-debb52c63785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 216.88.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3f:00:ba:63:37:b9:e5:98:6f:e8:4d:db:fb:b3:aa:19:7c: 20:71:89:a5:8a:5a:08:14:96:80:1c:ab:17:67:20:e7:61:ed: b3:8b:0b:9c:75:99:d9:ec:38:35:f6:a0:af:18:a1:f0:f2:a9: 31:3e:68:24:d0:5c:39:3e:c2:6b:c2:87:bb:f3:8f:94:76:02: 20:2b:48:16:c5:74:c8:c5:2e:d8:6c:de:94:27:d0:40:e6:2b: 1b:8f:06:56:f6:ee:ec:44:55:f8:a4:73:21:6a:b5:52:ee:b5: 61:3b:e8:fe:b1:4a:e5:d8:e1:95:51:7c:c8:39:b0:71:b6:96: eb:a9:9a:12:df:92:96:0d:bd:70:dc:c0:5d:d1:44:eb:fc:0e: 60:a0:7e:de:66:0b:9a:d9:4c:8b:a1:fb:f4:b1:93:5b:23:e8: 8e:64:0c:0b:02:6d:c9:b4:3e:88:c9:ab:a7:c0:a5:95:d2:97: 84:99:ed:38:5b:29:c0:71:00:f9:31:a3:29:54:fa:d1:df:d1: b6:d6:71:20:cf:d8:43:e3:64:cb:07:1d:8e:d8:69:0c:14:ac: 1f:4d:8b:9a:29:11:fd:f1:ff:52:34:13:d9:1c:a6:02:60:40: d6:74:96:72:04:06:a9:87:6d:d5:de:c3:db:f2:aa:c7:e8:c5: d1:22:78:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckBv72AirkHSDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTA1N2M2MjQtMGFhZS00MzVkLTljMGEtMTdmNGE1NWEzYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4icXSqzKdadDeq0Dcd4UWcQPxWC1WD0acApO I9CqoRKt0V0ZK2vqETAIFokSvO8OIqtXal7QgMkmV4Pft8fhhzh5a4jP2CtD8woW Rtv1wxEhgSiIMVwBRsJ+/6RF35XgQTs/CiHZ/HuhdX3KbUAI3FR5Mh4+WmbUL4lT 2bDapmafrychnfcyV2NbnlhaXIiSJeAryLkLTaZI2uiozrpqVpNxTwdQwrez6V56 iTzIZe0QpYOlHFKfv2gSUvOBI7VF3ToZoGtgDHJpDOeXUSuJ3yckj2HrjaOZE4iS zUXTbtJxPnw3BXFltogqAi1z0S1rQxzz2rqxfThc6fCn7BG+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeIe8+bCzxsKujdqe0EFB9vI2oeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYmFlNDkyNzktZjMxNC0z YzNlLTg0ZDAtZGViYjUyYzYzNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FiiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8/ALpjN7nlmG/oTdv7s6oZfCBxiaWKWggUloAcqxdnIOdh7bOLC5x1 mdnsODX2oK8YofDyqTE+aCTQXDk+wmvCh7vzj5R2AiArSBbFdMjFLths3pQn0EDm KxuPBlb27uxEVfikcyFqtVLutWE76P6xSuXY4ZVRfMg5sHG2luupmhLfkpYNvXDc wF3RROv8DmCgft5mC5rZTIuh+/Sxk1sj6I5kDAsCbcm0PojJq6fApZXSl4SZ7Thb KcBxAPkxoylU+tHf0bbWcSDP2EPjZMsHHY7YaQwUrB9Ni5opEf3x/1I0E9kcpgJg QNZ0lnIEBqmHbdXew9vyqsfoxdEiePQ= -----END CERTIFICATE-----Generated at Sat Sep 5 05:09:13 2026 by rpki-client