$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03cec457-53ff-3ad5-a5d8-a4823765201b.roa File: 03cec457-53ff-3ad5-a5d8-a4823765201b.roa (raw, json) Hash identifier: fmEDsdtZqQFya/aYB7EGIcB0FoSAn+FR20h4zldK2iw= Subject key identifier: 64:BF:40:1D:7E:5E:BD:60:32:E8:55:49:65:DA:AB:F7:CD:CE:A8:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0672637278B8CAB504DB1740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03cec457-53ff-3ad5-a5d8-a4823765201b.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 16625 IP address blocks: 184.31.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:63:72:78:b8:ca:b5:04:db:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=4e9769e9-9584-4ef9-81bc-e6af659ab2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:dc:95:29:b8:7b:e0:02:91:75:95:87:1e: 98:79:89:6e:84:54:35:6c:fb:b3:01:df:e6:7e:dc: 2a:9e:59:93:db:1c:fe:f4:01:b4:43:da:db:b2:69: db:3b:21:45:fd:99:68:db:54:56:53:47:7a:99:86: 4f:0e:ca:e4:c6:e7:9b:64:c7:1c:a7:f6:ed:33:20: 9b:e7:81:c3:a0:3c:48:05:31:cb:49:6c:8d:9a:87: 7f:77:94:ce:18:a0:07:1c:34:1b:c5:f7:c0:43:bd: 9b:be:82:8d:e3:69:16:b6:d5:c0:4e:3d:8e:b1:7d: 1e:53:95:a0:ef:d1:2f:c5:a1:4f:48:b4:01:ba:e6: 5e:78:ad:2b:94:56:17:06:da:4b:ad:3d:1d:fb:f1: 2a:6a:11:f4:2e:ce:65:d5:2d:05:1a:90:72:e0:09: 66:fc:24:1d:8b:d7:68:85:71:7f:ab:87:eb:a0:c0: b9:b4:df:cc:d0:d8:2c:2d:e5:ad:00:d3:5c:41:a7: 94:73:e6:8f:24:e9:2e:bb:8a:83:ee:12:cc:01:a1: 75:38:ab:5c:df:2a:34:b1:79:4d:4f:ad:b9:20:be: 1f:5d:30:8b:53:9f:ca:01:5c:77:5b:0f:d2:0c:ee: d3:d1:e1:e1:39:a9:69:c9:73:fa:0d:c0:36:b9:4c: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:40:1D:7E:5E:BD:60:32:E8:55:49:65:DA:AB:F7:CD:CE:A8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03cec457-53ff-3ad5-a5d8-a4823765201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.31.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:81:3a:0c:5d:60:17:03:09:85:e8:11:8d:e3:8e:a5:d3:25: 8d:c3:53:4c:58:6c:5a:8a:be:b0:ba:51:0c:46:04:40:34:24: d9:2e:6d:69:21:c6:39:61:c2:49:39:dc:f4:99:03:cc:f0:98: f8:f4:db:39:0c:47:1a:ae:d5:4e:6d:00:d7:96:d4:9c:e6:78: f4:f6:6b:48:19:68:24:62:44:f0:b1:2c:f6:31:7c:90:da:ab: 2c:0c:7c:91:72:f5:c3:d6:a1:12:1e:dd:e2:61:d3:63:58:ca: b2:b7:e1:c0:98:52:15:df:b1:a5:4d:ef:77:25:40:4e:8c:e5: b5:53:98:f5:3f:68:e0:ea:5f:5e:6d:31:e5:cd:3f:7d:d6:8d: 14:61:ad:dc:74:72:43:e9:c8:a0:fd:db:15:94:7b:01:e5:6f: 37:eb:4d:f7:8e:ce:a1:da:58:76:05:23:ff:ab:85:76:2e:28: e0:5d:90:bc:41:21:04:bf:b5:a2:6b:7c:30:6d:d1:cc:0e:da: 25:d7:4e:9f:3a:22:bd:86:87:ba:b4:7f:ad:9c:19:8d:0a:85: 34:5c:eb:a2:c2:7d:a1:c4:a0:3b:e2:97:d5:a3:36:b3:92:7e: 6f:d2:fc:97:16:46:69:81:46:4d:6f:20:83:d2:74:41:b7:d0: 6f:f0:cb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcmNyeLjKtQTbF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NGU5NzY5ZTktOTU4NC00ZWY5LTgxYmMtZTZhZjY1OWFiMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpDclSm4e+ACkXWVhx6YeYluhFQ1bPuzAd/m ftwqnlmT2xz+9AG0Q9rbsmnbOyFF/Zlo21RWU0d6mYZPDsrkxuebZMccp/btMyCb 54HDoDxIBTHLSWyNmod/d5TOGKAHHDQbxffAQ72bvoKN42kWttXATj2OsX0eU5Wg 79EvxaFPSLQBuuZeeK0rlFYXBtpLrT0d+/EqahH0Ls5l1S0FGpBy4Alm/CQdi9do hXF/q4froMC5tN/M0NgsLeWtANNcQaeUc+aPJOkuu4qD7hLMAaF1OKtc3yo0sXlN T625IL4fXTCLU5/KAVx3Ww/SDO7T0eHhOalpyXP6DcA2uUxbpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS/QB1+Xr1gMuhVSWXaq/fNzqh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNjZWM0NTctNTNmZi0z YWQ1LWE1ZDgtYTQ4MjM3NjUyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuB8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqBOgxdYBcDCYXoEY3jjqXTJY3DU0xYbFqKvrC6UQxGBEA0JNkubWkh xjlhwkk53PSZA8zwmPj02zkMRxqu1U5tANeW1JzmePT2a0gZaCRiRPCxLPYxfJDa qywMfJFy9cPWoRIe3eJh02NYyrK34cCYUhXfsaVN73clQE6M5bVTmPU/aODqX15t MeXNP33WjRRhrdx0ckPpyKD92xWUewHlbzfrTfeOzqHaWHYFI/+rhXYuKOBdkLxB IQS/taJrfDBt0cwO2iXXTp86Ir2Gh7q0f62cGY0KhTRc66LCfaHEoDvil9WjNrOS fm/S/JcWRmmBRk1vIIPSdEG30G/wy7Q= -----END CERTIFICATE-----Generated at Fri Sep 4 22:46:11 2026 by rpki-client