$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa File: 3401e74f-a936-383a-95be-c5719615d9b9.roa (raw, json) Hash identifier: ctNSfhM25NJ0OKH3Bc5+3R2A6wAdHxdHrTP0iL8siT0= Subject key identifier: FD:C9:F6:B9:6C:72:5E:79:C1:B9:FA:BD:8A:2E:FA:FB:EF:AE:CD:E6 Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad Certificate serial: 010D0C9F4328584E6B0A1174B29229A5678F9690 Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 13959 IP address blocks: 216.150.32.0/24 maxlen: 24 216.150.33.0/24 maxlen: 24 216.150.34.0/24 maxlen: 24 216.150.35.0/24 maxlen: 24 216.150.36.0/24 maxlen: 24 216.150.37.0/24 maxlen: 24 216.150.38.0/24 maxlen: 24 216.150.39.0/24 maxlen: 24 216.150.40.0/24 maxlen: 24 216.150.41.0/24 maxlen: 24 216.150.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:11:74:b2:92:29:a5:67:8f:96:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=81cda39f-b26a-44bb-aefc-df94ac8ec387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:45:2e:a3:2c:59:0c:a6:fa:91:92:38:e3: 92:18:1d:75:ae:76:18:b0:11:3d:f3:b6:75:84:90: 15:af:44:78:e3:b1:d5:58:f3:26:c7:20:e9:42:59: b8:b5:5a:44:9e:17:82:6d:a0:33:4c:29:86:d7:37: 58:89:a1:bc:36:71:ed:46:5d:c3:14:96:90:37:8b: 4d:de:77:ed:18:b1:f2:f7:10:64:cc:6f:f7:40:a7: 7b:2f:67:4e:86:96:d3:64:bf:6b:a0:f9:91:88:90: 38:fe:af:9d:d7:51:07:0b:25:f0:82:66:f3:8b:d1: ad:1f:3b:1e:6b:f3:64:5b:d5:d0:df:17:1d:d9:71: 2d:2a:57:7d:77:ef:40:3a:02:16:dc:0f:73:65:b1: 32:45:9f:47:8e:06:00:cf:bc:ca:8b:f2:64:c3:dd: fe:8d:55:8b:e2:c0:32:14:93:39:40:b1:be:1e:97: c3:d6:40:18:59:4e:d7:5b:6c:3e:8b:49:46:9d:21: b8:af:7a:14:e0:9d:1c:6b:20:7e:6d:e4:11:c7:a9: 74:ef:2a:a5:6f:94:e3:b6:96:0b:ed:56:01:45:70: d5:f2:2c:c6:49:43:ea:a8:9b:9b:5c:23:22:5e:f3: 36:d1:e2:21:e9:eb:32:08:47:e5:f2:f1:c3:11:dd: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C9:F6:B9:6C:72:5E:79:C1:B9:FA:BD:8A:2E:FA:FB:EF:AE:CD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl X509v3 Authority Key Identifier: keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer sbgp-ipAddrBlock: critical IPv4: 216.150.32.0-216.150.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c6:73:03:9d:b6:99:3e:92:b7:88:5d:dc:8f:4c:4a:f9:67: 40:3b:90:6d:e5:26:60:97:dd:df:9c:d2:25:e2:62:25:0d:96: 07:5c:52:76:5e:af:35:d6:12:dc:07:ed:91:bf:a4:41:73:b4: ef:77:fd:04:84:bd:54:26:bb:ba:9d:18:54:8e:e3:49:09:10: 3d:29:aa:c9:bc:96:32:f7:60:a3:12:22:f1:37:f5:07:03:e9: f4:1b:9a:80:f3:da:65:a1:1e:d4:1c:e2:a6:48:ee:f4:d5:09: b9:0d:5f:9f:08:1b:1f:2e:79:86:a4:29:be:e9:56:c0:e9:7b: 89:89:7d:e7:75:8f:15:cf:6a:b8:53:84:c6:fd:01:f5:4f:18: a7:10:b3:c5:94:85:f3:75:66:14:da:d9:61:6e:34:34:75:e7: c9:fc:c2:87:55:94:81:30:d2:dd:0b:9e:43:4f:72:45:a1:3d: 78:5c:19:69:2d:a5:fd:35:6f:93:76:dc:8e:00:fc:57:16:a4: 87:c5:30:be:db:0a:3d:2c:2f:1c:f0:c5:73:df:e2:ca:e0:13: 52:89:6d:bb:f3:d4:df:5d:e3:e9:e7:7a:be:33:43:da:ca:e6: 99:2b:43:17:6f:94:93:9d:0d:dc:ed:e2:99:8a:ed:8c:01:0d: 02:3e:86:37 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5rChF0spIppWePlpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZlOGE5NDItNWFjMi00MWU4LWFhODktN2RkY2ZkMGJi NmFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ODFjZGEzOWYtYjI2YS00NGJiLWFlZmMtZGY5NGFjOGVjMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvtFLqMsWQym+pGSOOOSGB11rnYYsBE987Z1 hJAVr0R447HVWPMmxyDpQlm4tVpEnheCbaAzTCmG1zdYiaG8NnHtRl3DFJaQN4tN 3nftGLHy9xBkzG/3QKd7L2dOhpbTZL9roPmRiJA4/q+d11EHCyXwgmbzi9GtHzse a/NkW9XQ3xcd2XEtKld9d+9AOgIW3A9zZbEyRZ9HjgYAz7zKi/Jkw93+jVWL4sAy FJM5QLG+HpfD1kAYWU7XW2w+i0lGnSG4r3oU4J0cayB+beQRx6l07yqlb5TjtpYL 7VYBRXDV8izGSUPqqJubXCMiXvM20eIh6esyCEfl8vHDEd0taQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP3J9rlscl55wbn6vYou+vvvrs3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4 YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRjZmQwYmI2YWQvMzQwMWU3NGYtYTkzNi0z ODNhLTk1YmUtYzU3MTk2MTVkOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWZlOGE5NDItNWFjMi00MWU4LWFh ODktN2RkY2ZkMGJiNmFkL2FmZThhOTQyLTVhYzItNDFlOC1hYTg5LTdkZGNmZDBi YjZhZC5jcmwwHwYDVR0jBBgwFoAUX9vLCQSsI6jASrDynFopVAP/iRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRj ZmQwYmI2YWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXYliAD BADYliowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJ8ZzA522mT6St4hd3I9MSvlnQDuQbeUmYJfd35zSJeJi JQ2WB1xSdl6vNdYS3Aftkb+kQXO073f9BIS9VCa7up0YVI7jSQkQPSmqybyWMvdg oxIi8Tf1BwPp9BuagPPaZaEe1Bzipkju9NUJuQ1fnwgbHy55hqQpvulWwOl7iYl9 53WPFc9quFOExv0B9U8YpxCzxZSF83VmFNrZYW40NHXnyfzCh1WUgTDS3QueQ09y RaE9eFwZaS2l/TVvk3bcjgD8Vxakh8UwvtsKPSwvHPDFc9/iyuATUoltu/PU313j 6ed6vjND2srmmStDF2+Uk50N3O3imYrtjAENAj6GNw== -----END CERTIFICATE-----Generated at Tue Jul 21 05:41:27 2026 by rpki-client