$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae60f6d4-1e1e-3976-add1-896836401671.roa File: ae60f6d4-1e1e-3976-add1-896836401671.roa (raw, json) Hash identifier: R7yKY7MOz3RhqKhW1kAMyS8DG2MYSQnWIDtvikZk8L8= Subject key identifier: 4C:DC:7C:7D:7A:67:28:8A:3E:93:40:89:97:9B:85:4C:8F:4B:95:C0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F0AA2345DFDF263F817F76F60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae60f6d4-1e1e-3976-add1-896836401671.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 979 IP address blocks: 216.167.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:34:5d:fd:f2:63:f8:17:f7:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=c401e6fd-0ac9-4f80-b3b1-7d6e02dd5fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:d8:b6:7a:d9:d1:b9:b1:23:1b:a3:53:99: 86:b4:53:ad:b8:47:1c:1b:d8:ce:41:89:cd:ad:f4: 21:bd:e0:0d:39:6a:17:93:16:75:89:52:e9:2c:a9: 7b:8b:ea:80:db:03:b5:08:cd:f9:48:2a:a8:54:26: 9c:8b:f5:fd:33:46:89:48:92:1d:9e:dc:2e:08:f8: de:a9:fe:ec:d5:d8:18:1c:14:19:4f:f1:2b:c8:eb: 98:20:52:64:5d:e3:be:5b:c0:3a:3d:2d:e9:39:83: 7d:a3:bb:e5:ac:4d:a1:19:24:8e:c2:4e:8a:bf:45: 39:67:89:19:12:c8:1d:7a:b6:3f:90:8d:c1:b0:c2: 23:ed:20:d3:6f:78:54:81:5f:c3:d7:e4:ff:52:da: 2f:f1:ca:f0:fa:93:11:af:f0:7a:26:9b:50:d7:c1: cf:f5:c1:d2:58:11:02:e0:27:62:7f:e6:13:f8:8b: 06:77:d8:c5:32:c7:54:bd:80:bb:76:95:a4:6e:cd: 5c:46:71:54:6d:59:0a:0d:83:a4:88:b4:9b:54:a6: 44:0c:6d:0e:1c:04:8a:1a:cd:c2:e4:8f:b7:31:91: 76:70:9f:0c:43:4f:82:21:db:2b:c2:53:88:70:50: 22:24:c3:08:76:e2:94:00:09:ce:f9:02:f5:c6:1f: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DC:7C:7D:7A:67:28:8A:3E:93:40:89:97:9B:85:4C:8F:4B:95:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae60f6d4-1e1e-3976-add1-896836401671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 216.167.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:28:75:b9:2d:06:7c:cc:c7:c3:99:c6:b3:3d:94:a4:95:e0: 23:9b:27:fb:7e:34:d6:c0:f8:67:c6:96:ec:63:5a:61:10:fd: 06:32:3f:29:b8:05:4b:c9:ca:51:09:b3:b1:ce:9e:41:49:e7: 9b:d1:f0:e1:9f:df:b6:a7:3d:34:e5:3a:5d:c0:47:d0:89:86: b5:da:7e:fc:45:f1:be:0b:86:b3:ce:7d:e6:7e:c2:f7:0b:81: 0f:6f:ab:e8:3b:52:b0:81:b2:53:7c:cd:12:34:ad:d8:e4:d8: e4:52:88:f3:89:9d:16:dc:76:06:9b:b3:94:a8:40:48:76:fe: e3:e8:fb:d1:8d:c5:25:b0:34:d2:8d:93:67:39:90:a3:c1:36: 07:bb:09:7f:28:c0:b1:3a:38:9a:74:91:a8:29:1a:e5:26:c6: 3d:33:38:31:17:6b:b2:e1:e7:03:f7:d9:7c:81:5b:34:c2:9a: e5:67:be:28:18:4f:1e:d3:2f:4d:bd:c6:bc:2b:ba:63:63:1c: a2:51:ff:86:07:74:b7:72:ea:6e:1e:05:98:e0:67:7e:28:7f: f7:e7:b1:b2:43:16:c8:23:84:04:39:da:9d:5d:dc:a1:fe:67: b3:9b:e5:46:25:07:8f:dd:5d:c5:ae:ee:72:82:57:d8:ca:8a: 40:e0:9a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KojRd/fJj+Bf3b2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk YzQwMWU2ZmQtMGFjOS00ZjgwLWIzYjEtN2Q2ZTAyZGQ1ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDDYtnrZ0bmxIxujU5mGtFOtuEccG9jOQYnN rfQhveANOWoXkxZ1iVLpLKl7i+qA2wO1CM35SCqoVCaci/X9M0aJSJIdntwuCPje qf7s1dgYHBQZT/EryOuYIFJkXeO+W8A6PS3pOYN9o7vlrE2hGSSOwk6Kv0U5Z4kZ EsgderY/kI3BsMIj7SDTb3hUgV/D1+T/Utov8crw+pMRr/B6JptQ18HP9cHSWBEC 4Cdif+YT+IsGd9jFMsdUvYC7dpWkbs1cRnFUbVkKDYOkiLSbVKZEDG0OHASKGs3C 5I+3MZF2cJ8MQ0+CIdsrwlOIcFAiJMMIduKUAAnO+QL1xh8oewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzcfH16ZyiKPpNAiZebhUyPS5XAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWU2MGY2ZDQtMWUxZS0z OTc2LWFkZDEtODk2ODM2NDAxNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2KcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYodbktBnzMx8OZxrM9lKSV4CObJ/t+NNbA+GfGluxjWmEQ/QYyPym4 BUvJylEJs7HOnkFJ55vR8OGf37anPTTlOl3AR9CJhrXafvxF8b4LhrPOfeZ+wvcL gQ9vq+g7UrCBslN8zRI0rdjk2ORSiPOJnRbcdgabs5SoQEh2/uPo+9GNxSWwNNKN k2c5kKPBNge7CX8owLE6OJp0kagpGuUmxj0zODEXa7Lh5wP32XyBWzTCmuVnvigY Tx7TL029xrwrumNjHKJR/4YHdLdy6m4eBZjgZ34of/fnsbJDFsgjhAQ52p1d3KH+ Z7Ob5UYlB4/dXcWu7nKCV9jKikDgmp4= -----END CERTIFICATE-----Generated at Sat Sep 19 11:48:37 2026 by rpki-client