$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa File: 0867b451-b315-3f3b-bed4-0121ba565f01.roa (raw, json) Hash identifier: LHeL1sBo0xKeLpwm5C9EGE8Ie9Z9vymUZwUyBzXVdKw= Subject key identifier: 67:54:6D:AC:EC:91:A8:31:FF:7A:6F:5D:44:21:A2:DC:B4:31:B2:46 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EA78897FE6A0A79DD4A88DF10 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398420 IP address blocks: 216.246.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:97:fe:6a:0a:79:dd:4a:88:df:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=68f65d5b-9f9c-4645-bb07-d44537297c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:d9:86:a5:bc:b3:1a:81:e2:fa:b0:de:3d: 1b:9b:1c:e2:1a:54:d9:06:79:68:14:d0:7b:42:8e: 4f:ee:37:b6:cd:33:08:2f:85:3d:ad:ed:33:73:8e: 14:f6:0b:c0:6d:4b:8d:14:93:49:9d:87:5a:e8:de: 36:d0:59:40:1e:f3:6c:4b:11:f1:42:d7:17:d7:10: db:95:18:84:f6:e7:37:f7:25:fd:75:35:df:a1:6a: a2:1f:10:b4:b0:27:6b:47:f9:7c:0d:e0:1c:c3:94: d7:38:63:9d:a0:ee:d7:dc:3b:2f:be:b9:3b:d5:6d: 47:43:df:6a:a7:75:84:93:13:44:e4:05:6e:30:ba: 9a:e4:65:2b:6c:9d:d2:92:51:17:f8:00:10:b7:1e: 46:c9:ed:7f:0b:7c:6e:77:32:c1:d0:81:39:78:5b: 02:f8:f8:80:06:60:3f:71:31:e4:56:10:d5:c5:3c: a5:55:ef:e9:7f:f7:b7:c3:7f:f3:d2:37:ff:0a:05: ae:af:7a:7d:54:72:b3:33:9b:f0:92:fe:ad:fd:39: 0a:04:b3:cd:07:99:12:bf:82:a6:76:bd:3c:b8:d3: 70:4c:c9:a9:fa:94:6f:8a:88:fa:1f:75:36:30:14: 73:24:9e:3f:1b:eb:59:40:f4:6d:f6:53:fa:fa:77: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:54:6D:AC:EC:91:A8:31:FF:7A:6F:5D:44:21:A2:DC:B4:31:B2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:36:b8:37:32:12:27:e6:a6:66:85:87:45:52:67:7d:c4:04: a5:ce:96:72:52:3f:22:0f:1a:37:61:b1:1e:ef:74:aa:f1:f9: 7f:e5:af:5b:a9:41:32:37:1c:4b:19:48:dd:96:9e:38:3f:c2: 65:3e:e1:42:a7:19:b8:cb:61:e3:e1:60:b0:a5:6b:f9:6d:92: 1e:e3:93:91:fb:3b:92:f0:c3:59:29:ce:03:28:78:c6:5d:75: ba:8f:b8:61:43:d9:06:84:a7:91:c5:04:7c:e9:a6:3e:ec:f6: ee:20:38:e6:90:68:00:fb:7d:5e:98:b2:52:c2:b4:51:9f:ad: b9:66:f2:57:ea:af:df:b8:d1:df:cd:0c:94:10:25:34:6d:e9: 23:5d:bc:ec:fd:2e:8d:ed:27:a9:78:8b:fc:26:0c:d3:a3:91: ca:4e:f4:48:a9:2b:7b:39:52:0c:c9:5a:e6:77:28:57:23:b8: f0:0b:9c:08:c6:d3:4e:e0:55:43:52:85:fe:a0:c2:b0:6c:88: 2e:b1:7a:db:2b:11:a8:9c:36:96:cc:01:2b:90:20:89:64:9e: 8c:43:39:eb:e7:92:1d:4d:4e:f5:5f:3a:7b:00:1e:7b:15:62: 03:c5:7c:6c:94:05:43:a7:9b:f5:34:b5:70:e0:11:49:34:34: 4a:f5:a5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJf+agp53UqI3xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjhmNjVkNWItOWY5Yy00NjQ1LWJiMDctZDQ0NTM3Mjk3YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpzZhqW8sxqB4vqw3j0bmxziGlTZBnloFNB7 Qo5P7je2zTMIL4U9re0zc44U9gvAbUuNFJNJnYda6N420FlAHvNsSxHxQtcX1xDb lRiE9uc39yX9dTXfoWqiHxC0sCdrR/l8DeAcw5TXOGOdoO7X3Dsvvrk71W1HQ99q p3WEkxNE5AVuMLqa5GUrbJ3SklEX+AAQtx5Gye1/C3xudzLB0IE5eFsC+PiABmA/ cTHkVhDVxTylVe/pf/e3w3/z0jf/CgWur3p9VHKzM5vwkv6t/TkKBLPNB5kSv4Km dr08uNNwTMmp+pRvioj6H3U2MBRzJJ4/G+tZQPRt9lP6+nefIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdUbazskagx/3pvXUQhoty0MbJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMDg2N2I0NTEtYjMxNS0z ZjNiLWJlZDQtMDEyMWJhNTY1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK02uDcyEifmpmaFh0VSZ33EBKXOlnJSPyIPGjdhsR7vdKrx+X/lr1up QTI3HEsZSN2Wnjg/wmU+4UKnGbjLYePhYLCla/ltkh7jk5H7O5Lww1kpzgMoeMZd dbqPuGFD2QaEp5HFBHzppj7s9u4gOOaQaAD7fV6YslLCtFGfrblm8lfqr9+40d/N DJQQJTRt6SNdvOz9Lo3tJ6l4i/wmDNOjkcpO9EipK3s5UgzJWuZ3KFcjuPALnAjG 007gVUNShf6gwrBsiC6xetsrEaicNpbMASuQIIlknoxDOevnkh1NTvVfOnsAHnsV YgPFfGyUBUOnm/U0tXDgEUk0NEr1pfk= -----END CERTIFICATE-----Generated at Wed Aug 26 02:27:15 2026 by rpki-client