$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa File: 5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa (raw, json) Hash identifier: s0QdsIMnUOsy6aWmx717rNn0ifuUffIjbGLvX4DBd2k= Subject key identifier: 93:E3:CB:46:D7:CE:33:07:80:FE:A6:BF:68:37:FB:7C:F2:C9:76:3D Certificate issuer: /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Certificate serial: 010D0C9F4328584ED6FC81FD14649ADDB800B4E0 Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa Signing time: Sat 15 Aug 2026 01:00:12 +0000 ROA not before: Sat 15 Aug 2026 01:00:12 +0000 ROA not after: Fri 13 Nov 2026 02:00:12 +0000 asID: 55189 IP address blocks: 216.38.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:fc:81:fd:14:64:9a:dd:b8:00:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Validity Not Before: Aug 15 01:00:12 2026 GMT Not After : Nov 13 02:00:12 2026 GMT Subject: CN=a0f6b5e8-6f24-48c0-86a9-4ec1b1956ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:f7:a9:69:40:9a:7c:08:9f:85:3f:00:db: a4:fb:45:6d:73:b5:fe:0f:4a:d9:3c:9f:ed:13:70: 80:39:de:1b:fa:2a:d9:a9:a9:00:22:49:b7:cb:db: de:01:08:21:0d:2a:5f:0d:08:82:67:a6:62:07:fe: 3e:98:2c:ca:cd:d2:f4:15:26:cc:96:56:66:5e:38: 8c:a2:ba:0f:25:da:41:e2:c8:3d:22:8b:cb:d8:f2: f9:b2:de:57:06:c7:6b:5e:a0:3a:42:12:1c:a3:48: 22:3d:11:e5:81:b0:c9:f8:1c:70:54:5d:49:57:0a: a1:46:23:47:c7:8f:c3:06:5b:01:9c:18:a8:72:63: 30:84:69:38:46:16:58:f7:43:97:cd:dd:58:c6:14: f9:13:3c:de:9f:d8:3c:8c:01:71:a7:32:22:a3:db: ee:31:ec:22:57:0a:70:f6:62:b6:ad:ca:28:ea:53: 64:fc:a3:de:66:30:16:7b:a4:dd:ac:11:79:1b:dc: bf:d3:af:4e:87:61:97:2e:f6:74:56:2f:9b:5e:8d: ab:67:0c:7c:17:bd:f6:89:2f:27:cd:c0:90:74:9c: ba:74:2b:29:7c:80:3a:b7:f4:fb:c6:ff:e3:42:59: ab:3a:78:69:00:66:78:5b:0f:72:c6:c1:c8:af:8a: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:CB:46:D7:CE:33:07:80:FE:A6:BF:68:37:FB:7C:F2:C9:76:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/5b4b2eb3-de3d-310c-94c8-1c932df3c668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl X509v3 Authority Key Identifier: keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer sbgp-ipAddrBlock: critical IPv4: 216.38.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:52:fd:d6:11:71:fe:59:3f:34:6b:ba:98:f5:a2:1a:df:45: 8d:b2:20:0b:43:84:a1:f8:9a:e3:d1:74:dd:84:dc:8a:9f:0b: 23:dc:2f:4e:53:70:f3:f9:17:91:a4:42:9f:57:2a:e7:c7:5c: cc:50:84:fe:38:5f:b0:b8:82:02:89:76:87:30:02:45:de:d0: 10:36:46:d9:45:d6:84:94:c3:5e:31:7f:96:f5:88:22:21:82: 0c:b9:3f:40:fe:0c:78:8a:e6:1c:36:81:37:d1:ba:d1:1f:b5: 21:7c:d2:40:12:67:6c:28:f6:04:1f:83:e0:27:12:02:04:02: 53:52:77:49:09:de:05:bb:00:ea:c4:87:3c:fd:7f:d7:73:2d: 92:69:36:d9:77:10:a3:fe:e6:b9:d9:a8:40:a2:1b:db:5c:25: e6:29:83:ef:b7:c5:11:8a:b7:5e:c3:1a:fb:1b:a7:e1:5e:87: 91:29:09:9c:1a:79:3f:23:ab:48:36:28:84:39:b3:d1:90:ec: f4:a0:e3:d0:89:3a:be:75:80:89:1e:a7:aa:79:79:0f:6c:b6: b0:f2:b4:b1:24:59:ab:d1:f3:38:ed:27:5c:5e:f2:09:31:08: 1b:4e:d3:b2:f0:f6:ff:1e:e6:7d:2e:9a:cf:5d:1d:62:f1:92: 44:59:08:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7W/IH9FGSa3bgAtOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi MDQ5MB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk YTBmNmI1ZTgtNmYyNC00OGMwLTg2YTktNGVjMWIxOTU2ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02b3qWlAmnwIn4U/ANuk+0Vtc7X+D0rZPJ/t E3CAOd4b+irZqakAIkm3y9veAQghDSpfDQiCZ6ZiB/4+mCzKzdL0FSbMllZmXjiM oroPJdpB4sg9IovL2PL5st5XBsdrXqA6QhIco0giPRHlgbDJ+BxwVF1JVwqhRiNH x4/DBlsBnBiocmMwhGk4RhZY90OXzd1YxhT5Ezzen9g8jAFxpzIio9vuMewiVwpw 9mK2rcoo6lNk/KPeZjAWe6TdrBF5G9y/069Oh2GXLvZ0Vi+bXo2rZwx8F732iS8n zcCQdJy6dCspfIA6t/T7xv/jQlmrOnhpAGZ4Ww9yxsHIr4oWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPjy0bXzjMHgP6mv2g3+3zyyXY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvNWI0YjJlYjMtZGUzZC0z MTBjLTk0YzgtMWM5MzJkZjNjNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRS/dYRcf5ZPzRrupj1ohrfRY2yIAtDhKH4muPRdN2E3IqfCyPcL05T cPP5F5GkQp9XKufHXMxQhP44X7C4ggKJdocwAkXe0BA2RtlF1oSUw14xf5b1iCIh ggy5P0D+DHiK5hw2gTfRutEftSF80kASZ2wo9gQfg+AnEgIEAlNSd0kJ3gW7AOrE hzz9f9dzLZJpNtl3EKP+5rnZqECiG9tcJeYpg++3xRGKt17DGvsbp+Feh5EpCZwa eT8jq0g2KIQ5s9GQ7PSg49CJOr51gIkep6p5eQ9strDytLEkWavR8zjtJ1xe8gkx CBtO07Lw9v8e5n0ums9dHWLxkkRZCKA= -----END CERTIFICATE-----Generated at Tue Sep 15 16:27:00 2026 by rpki-client