$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa File: 875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa (raw, json) Hash identifier: T7XBXeHTy1QQ+/pwp+Yyo8ixwPSvu758miQD0nxkh+8= Subject key identifier: 99:76:AA:AF:BC:EF:91:4D:D1:5F:89:DB:E6:84:7E:C0:EC:47:AE:16 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584ED001EFA53A5FED2EA9967580 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 212238 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:ef:a5:3a:5f:ed:2e:a9:96:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=98b71f7f-cc71-4534-83e7-c6dc8f9669d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:4a:0c:0c:07:e8:b5:cf:c0:ab:27:27:9c: 29:77:4a:f4:69:e9:3a:c0:f4:b3:0e:93:55:60:5a: 40:9b:a1:01:4d:58:fe:74:64:cd:67:ae:5c:cd:90: 28:e1:43:30:af:c4:34:ae:5c:14:98:e8:dd:c8:7f: 09:ab:21:33:05:ff:a9:14:9f:98:13:a7:64:9b:e5: df:6e:74:df:46:78:b7:ec:19:bb:a9:90:38:b2:23: b3:26:c7:ec:e4:cf:cf:48:d0:77:2b:82:be:ef:77: e1:34:80:2d:aa:79:e5:f9:d2:0f:69:a4:04:29:52: 2b:54:a7:e7:08:f2:22:ac:14:cf:db:b3:50:6a:47: 1f:44:8c:f6:ca:77:26:ef:4a:88:9a:8d:e3:ba:2c: aa:8d:21:ec:d3:89:04:ed:a8:e2:82:e8:17:3b:4e: 7d:c3:d7:35:5e:29:88:9a:61:e6:3b:3c:a2:fe:21: d4:1f:f7:51:7c:25:c9:1e:54:5f:d3:7a:95:e8:31: e1:6e:d6:89:db:5b:ae:34:92:70:14:1a:37:34:37: 7d:e4:d5:55:6d:33:f0:d2:cb:e4:a3:8c:77:a9:51: f4:91:7a:2d:14:5f:c0:cd:6e:6b:b4:ba:4d:0e:fb: 5a:a7:98:7d:45:1d:6c:d9:7c:1e:4a:cb:a2:d4:52: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:76:AA:AF:BC:EF:91:4D:D1:5F:89:DB:E6:84:7E:C0:EC:47:AE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4e:78:2b:92:bc:6d:46:a4:a1:cb:9b:5c:1b:41:64:19:11: 1b:1f:a0:5e:43:a2:25:af:65:cb:e8:6a:85:42:a9:52:af:d9: 03:0a:48:fb:eb:49:fa:a1:c0:f5:7f:17:e2:3c:9b:6f:5a:c3: 09:74:63:73:08:21:56:b9:0b:00:e6:f6:d4:fb:fc:ee:23:eb: 21:c0:d4:61:e3:c3:6a:bc:bf:d4:1f:0a:5d:e9:17:43:7c:5b: d8:d6:cb:2b:71:17:53:eb:27:f5:a3:cf:46:51:46:1d:be:23: 3d:aa:b9:d7:01:ef:00:62:03:59:d0:ab:f1:db:d6:d9:f4:0d: e5:ff:1b:f2:76:9b:32:16:ae:50:44:c5:36:f4:09:ed:ca:66: 53:8c:ec:12:6a:2d:34:be:da:35:2a:16:a8:86:27:1a:af:9b: c2:77:8d:bb:bf:1d:2d:02:64:48:ae:71:f9:42:78:7c:0b:6d: fc:7e:b0:9a:56:ea:c7:b8:51:96:3d:37:b8:a3:e8:7d:d7:d3: 5a:11:b9:f9:56:69:68:de:b2:5a:8f:27:0a:42:12:be:0c:71: 36:79:5b:c3:66:61:94:ce:ca:50:d6:bf:19:bb:95:44:f5:9f: 95:4f:8b:4f:ce:40:98:f8:ff:87:5d:d3:43:26:10:f0:aa:11: 47:af:04:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAe+lOl/tLqmWdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk OThiNzFmN2YtY2M3MS00NTM0LTgzZTctYzZkYzhmOTY2OWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvepKDAwH6LXPwKsnJ5wpd0r0aek6wPSzDpNV YFpAm6EBTVj+dGTNZ65czZAo4UMwr8Q0rlwUmOjdyH8JqyEzBf+pFJ+YE6dkm+Xf bnTfRni37Bm7qZA4siOzJsfs5M/PSNB3K4K+73fhNIAtqnnl+dIPaaQEKVIrVKfn CPIirBTP27NQakcfRIz2yncm70qImo3juiyqjSHs04kE7ajigugXO059w9c1XimI mmHmOzyi/iHUH/dRfCXJHlRf03qV6DHhbtaJ21uuNJJwFBo3NDd95NVVbTPw0svk o4x3qVH0kXotFF/AzW5rtLpNDvtap5h9RR1s2XweSsui1FI2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl2qq+875FN0V+J2+aEfsDsR64WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODc1ZmI4YmEtY2M5ZC0z ZTgwLWExZDMtYzEwODU0ZGIxNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJOeCuSvG1GpKHLm1wbQWQZERsfoF5DoiWvZcvoaoVCqVKv2QMKSPvr SfqhwPV/F+I8m29awwl0Y3MIIVa5CwDm9tT7/O4j6yHA1GHjw2q8v9QfCl3pF0N8 W9jWyytxF1PrJ/Wjz0ZRRh2+Iz2qudcB7wBiA1nQq/Hb1tn0DeX/G/J2mzIWrlBE xTb0Ce3KZlOM7BJqLTS+2jUqFqiGJxqvm8J3jbu/HS0CZEiucflCeHwLbfx+sJpW 6se4UZY9N7ij6H3X01oRuflWaWjeslqPJwpCEr4McTZ5W8NmYZTOylDWvxm7lUT1 n5VPi0/OQJj4/4dd00MmEPCqEUevBEw= -----END CERTIFICATE-----Generated at Sat Sep 5 03:04:54 2026 by rpki-client