$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa File: 4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa (raw, json) Hash identifier: HgdLu4ANkdbLTR5sGn8LHEFMGUe1YBcfMbyB0zUshp0= Subject key identifier: 37:C6:9B:3E:4D:76:E3:AA:E6:B8:FF:99:9E:68:88:6B:C9:7C:64:C7 Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Certificate serial: 010D0C9F4328584EC371C24A50DD4E9178B11D80 Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 16509 IP address blocks: 216.99.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c2:4a:50:dd:4e:91:78:b1:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=8cacb31c-2ec2-48f1-bbb4-f582c7bf5c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:3c:0e:6a:d4:96:b3:42:44:1a:8a:1b:81: 65:3d:12:3d:07:8f:f1:06:5e:cd:93:c7:e3:07:68: e5:e6:15:43:f3:a8:3f:ea:5f:f7:ed:4b:5c:b0:76: 85:c3:6f:09:fe:47:1e:15:87:9c:58:f8:07:98:7f: 03:b6:16:f9:8d:bc:10:c1:e7:a9:bf:2c:93:3b:48: da:16:18:fa:89:e1:03:f1:d4:05:94:46:87:6c:46: 6d:a5:cb:f3:1c:4d:98:0d:eb:79:56:76:4b:cc:ba: 8e:cb:63:43:40:5a:9f:e2:1e:f9:06:e0:58:e9:6f: 0f:77:94:00:1a:8d:d4:63:be:33:86:af:4d:e4:95: eb:45:d5:a1:3b:34:d4:68:3e:19:1e:b0:3d:5e:4a: 98:d0:6b:2e:cd:c9:cf:44:f8:bf:c1:2c:12:3d:97: 73:38:fa:cd:f6:70:13:cb:e6:48:2f:6b:5c:5f:a9: 0c:cb:8c:f8:71:eb:4e:8f:30:a9:d9:ba:86:70:44: 0d:f0:a6:46:24:ac:cd:0d:62:8e:1e:61:11:ea:bd: f3:67:fd:45:5f:fb:b2:b9:ff:7e:10:4f:c7:a1:75: f1:3a:5f:74:73:9c:74:1d:b2:59:e8:53:93:89:c4: 6f:25:c6:06:fa:c5:8c:40:99:34:fc:c6:5d:46:de: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C6:9B:3E:4D:76:E3:AA:E6:B8:FF:99:9E:68:88:6B:C9:7C:64:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl X509v3 Authority Key Identifier: keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer sbgp-ipAddrBlock: critical IPv4: 216.99.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:28:84:1d:35:60:ec:9e:dd:c7:d6:b2:f8:69:bc:a4:c0:a5: 57:e1:2f:cb:e6:74:4f:27:36:a7:e7:39:39:3a:0d:f4:e4:d5: 29:8b:45:a3:48:43:7a:de:d5:b4:c4:bc:c3:36:e3:b4:79:84: ee:35:e5:4e:55:51:5f:1b:0d:eb:c7:dc:13:64:34:ca:34:9c: 45:ba:03:c1:ca:b1:23:09:9e:b9:0f:ce:d7:1d:46:f3:7c:26: c8:29:dc:85:9c:1b:9e:1d:6a:55:bd:81:0e:fe:9a:b3:28:e4: 38:be:08:e5:c6:25:3a:06:e8:fc:c5:8a:1c:6c:d8:d4:65:08: d6:23:09:19:21:60:5e:3b:a3:9f:33:7c:00:06:d5:ca:5e:81: 6e:43:df:38:da:4d:cf:33:11:d0:56:d6:02:be:33:51:00:06: f5:ea:61:a4:32:c2:8b:8e:59:c4:46:83:ab:b3:13:99:82:a1: d5:11:7d:2a:17:bf:0a:e7:1a:e3:2c:51:10:6f:ba:8a:76:28: 0f:36:3a:62:d9:0d:93:b6:9b:e3:e3:68:5e:14:2e:5f:5d:03: e2:ac:f3:b5:82:8c:8f:3d:a0:82:4f:db:eb:71:4d:cf:84:ec: f3:dc:f8:3c:4f:9a:99:87:6c:ce:74:64:84:e5:8c:f6:9b:49: 7b:60:cb:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccJKUN1OkXixHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3 MzU5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OGNhY2IzMWMtMmVjMi00OGYxLWJiYjQtZjU4MmM3YmY1YzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyc8DmrUlrNCRBqKG4FlPRI9B4/xBl7Nk8fj B2jl5hVD86g/6l/37UtcsHaFw28J/kceFYecWPgHmH8Dthb5jbwQweepvyyTO0ja Fhj6ieED8dQFlEaHbEZtpcvzHE2YDet5VnZLzLqOy2NDQFqf4h75BuBY6W8Pd5QA Go3UY74zhq9N5JXrRdWhOzTUaD4ZHrA9XkqY0GsuzcnPRPi/wSwSPZdzOPrN9nAT y+ZIL2tcX6kMy4z4cetOjzCp2bqGcEQN8KZGJKzNDWKOHmER6r3zZ/1FX/uyuf9+ EE/HoXXxOl90c5x0HbJZ6FOTicRvJcYG+sWMQJk0/MZdRt4f1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfGmz5NduOq5rj/mZ5oiGvJfGTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvNGQ4MzY3ZDQtMTg5OC0z MjBjLWIzZWItNGFhMGUzY2JkY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3 MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3 ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoohB01YOye3cfWsvhpvKTApVfhL8vmdE8nNqfnOTk6DfTk1SmLRaNI Q3re1bTEvMM247R5hO415U5VUV8bDevH3BNkNMo0nEW6A8HKsSMJnrkPztcdRvN8 Jsgp3IWcG54dalW9gQ7+mrMo5Di+COXGJToG6PzFihxs2NRlCNYjCRkhYF47o58z fAAG1cpegW5D3zjaTc8zEdBW1gK+M1EABvXqYaQywouOWcRGg6uzE5mCodURfSoX vwrnGuMsURBvuop2KA82OmLZDZO2m+PjaF4ULl9dA+Ks87WCjI89oIJP2+txTc+E 7PPc+DxPmpmHbM50ZITljPabSXtgyyU= -----END CERTIFICATE-----Generated at Fri Aug 21 00:19:04 2026 by rpki-client