$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/65aa0603-9a2a-3987-a41b-e097ebfb3676.roa File: 65aa0603-9a2a-3987-a41b-e097ebfb3676.roa (raw, json) Hash identifier: r3Nt2thPeB+X7Ix65KQodljE86Aonb3w2fOzo7grmSI= Subject key identifier: D8:B8:49:2A:BA:52:A8:D2:E3:5F:83:BB:78:AC:6B:BA:D4:63:6B:61 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584E709F7BA9763AFD7FFB676A80 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/65aa0603-9a2a-3987-a41b-e097ebfb3676.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 15296 IP address blocks: 199.216.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:7b:a9:76:3a:fd:7f:fb:67:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=7cecdaed-5753-4a47-9c2b-e60879d9f713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2a:57:4e:a6:13:31:b1:0d:70:62:be:6c:12: dd:06:37:75:bd:89:5a:26:f7:44:74:af:73:e7:ee: a6:9d:ff:99:5e:16:a5:d5:99:d7:ca:51:a9:4e:5a: 24:65:b4:b1:99:99:64:39:40:6d:82:f1:f1:1f:22: c5:65:b9:c9:5e:4b:e8:41:60:e8:29:1a:10:88:1f: 6e:2a:41:54:d5:f1:03:c4:95:ec:c1:06:ab:98:70: 9a:10:c7:d2:f7:62:4c:67:65:5a:03:51:8b:a1:d4: 78:1d:19:9f:ac:cc:d6:36:4b:b1:fd:0d:66:67:f4: bb:2f:e7:ca:42:fe:23:40:8d:a2:f3:29:b3:11:94: 03:b7:8e:da:05:20:5e:61:9d:29:d3:22:48:ea:e1: 0b:a0:61:68:02:ad:2d:31:2c:5d:18:f5:af:30:20: 01:30:77:dd:1a:fb:b9:62:3d:f5:7a:bf:0a:36:77: 48:21:e1:df:94:45:2f:a0:35:d9:18:89:4c:ba:8d: 34:b5:5e:72:5b:a9:1d:26:d6:88:3c:23:85:e5:94: 5c:ec:81:a7:33:d6:48:7c:fe:c9:04:55:28:15:fe: 80:b1:89:0e:8f:7c:0c:f8:9a:0a:dc:1a:f5:cc:a2: 57:2d:94:ce:49:86:aa:e7:49:11:5b:ce:34:f2:58: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:49:2A:BA:52:A8:D2:E3:5F:83:BB:78:AC:6B:BA:D4:63:6B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/65aa0603-9a2a-3987-a41b-e097ebfb3676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a9:b7:ef:31:d9:8f:ef:d3:9b:9a:d8:f9:87:0b:56:6f:2c: 2e:ac:08:a8:e4:8a:fb:dc:ea:37:39:3e:ae:b4:47:20:79:4c: 0f:99:1b:f2:c8:64:fd:ba:f5:7d:c7:bc:31:1f:6b:1e:3d:8d: 36:2e:8a:bf:d4:aa:c2:1a:97:49:d4:06:66:b6:5d:43:d1:51: b2:1a:60:46:66:f3:e0:f8:d0:2e:5d:27:e4:99:d7:57:e6:6f: ff:37:60:4c:f5:87:07:79:7f:80:a8:90:d0:82:9f:c3:2f:81: 6d:cd:d2:f0:82:84:a6:f9:a8:76:bb:6b:d9:de:5a:37:f9:24: bb:63:9e:7c:6f:fc:f2:e5:4f:5a:e1:a4:7e:0d:c5:d9:51:85: f5:8b:4b:fa:5b:42:a7:3a:78:6f:94:07:9b:e5:a3:f9:18:35: 92:5d:0e:e1:f0:0a:44:ed:bb:53:d6:73:64:8f:89:c1:b1:d1: f3:dd:88:1c:d9:c0:0d:0f:ea:4a:c6:84:6c:97:a5:fa:db:bb: 9c:4b:25:67:2b:82:18:b0:e5:8b:7d:24:cc:29:bb:cf:04:e5: 3e:3f:2c:10:00:ab:47:8c:85:c3:4f:6b:a5:39:d3:14:98:60: 0a:54:75:2c:15:28:5c:0b:09:b9:4c:b3:e0:12:49:64:8a:18: f6:f1:34:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3updjr9f/tnaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk N2NlY2RhZWQtNTc1My00YTQ3LTljMmItZTYwODc5ZDlmNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSpXTqYTMbENcGK+bBLdBjd1vYlaJvdEdK9z 5+6mnf+ZXhal1ZnXylGpTlokZbSxmZlkOUBtgvHxHyLFZbnJXkvoQWDoKRoQiB9u KkFU1fEDxJXswQarmHCaEMfS92JMZ2VaA1GLodR4HRmfrMzWNkux/Q1mZ/S7L+fK Qv4jQI2i8ymzEZQDt47aBSBeYZ0p0yJI6uELoGFoAq0tMSxdGPWvMCABMHfdGvu5 Yj31er8KNndIIeHflEUvoDXZGIlMuo00tV5yW6kdJtaIPCOF5ZRc7IGnM9ZIfP7J BFUoFf6AsYkOj3wM+JoK3Br1zKJXLZTOSYaq50kRW8408ljnywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi4SSq6UqjS41+Du3isa7rUY2thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvNjVhYTA2MDMtOWEyYS0z OTg3LWE0MWItZTA5N2ViZmIzNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAept+8x2Y/v05ua2PmHC1ZvLC6sCKjkivvc6jc5Pq60RyB5TA+ZG/LI ZP269X3HvDEfax49jTYuir/UqsIal0nUBma2XUPRUbIaYEZm8+D40C5dJ+SZ11fm b/83YEz1hwd5f4CokNCCn8MvgW3N0vCChKb5qHa7a9neWjf5JLtjnnxv/PLlT1rh pH4NxdlRhfWLS/pbQqc6eG+UB5vlo/kYNZJdDuHwCkTtu1PWc2SPicGx0fPdiBzZ wA0P6krGhGyXpfrbu5xLJWcrghiw5Yt9JMwpu88E5T4/LBAAq0eMhcNPa6U50xSY YApUdSwVKFwLCblMs+ASSWSKGPbxNB8= -----END CERTIFICATE-----Generated at Tue Jul 21 15:56:35 2026 by rpki-client