$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa File: a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa (raw, json) Hash identifier: wvyJ9qZdhVfHoVaNAAufBtu72Cmx3+7TtBnoz4kVWxY= Subject key identifier: 0C:7B:34:68:99:39:2D:90:89:FC:AB:CE:3C:C7:26:CA:73:95:2F:C1 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EA788981418EFFB95C37A0B30 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398420 IP address blocks: 216.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:98:14:18:ef:fb:95:c3:7a:0b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3910938f-fb4a-4fec-b3b2-91ccbf0fbafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:17:93:49:7a:2e:56:d8:ae:3b:7b:b6:54: c0:3e:3d:5a:39:a7:36:b2:73:21:94:45:06:23:22: 44:ac:46:fe:b0:3a:0a:b0:51:d3:0b:54:7f:66:bb: bd:df:a2:94:10:9b:99:88:c8:29:5a:83:38:d9:f7: 0b:05:f9:07:df:e3:57:5d:1c:dc:97:31:4d:91:c2: e9:9e:24:53:cc:7b:5d:5d:b7:cb:48:d9:70:ee:14: ed:23:ba:24:e5:5f:b6:a2:d0:4d:a9:84:24:1f:1e: 59:58:11:3e:f7:f5:2e:87:18:5c:4b:86:b8:11:83: 5e:b4:57:5c:e0:e3:8c:c0:38:f5:df:a3:ea:a5:20: 76:aa:7a:e0:d8:c8:34:ea:a2:77:1d:cd:b8:f9:3b: 0b:28:34:e8:6c:a1:c1:41:0b:7a:52:10:30:81:dc: e3:1c:a5:27:9d:20:e7:4d:45:d5:30:a0:39:e9:4d: 91:ff:11:49:48:df:9c:fe:1b:9f:35:4e:30:af:80: c2:ce:2d:36:80:62:b5:af:b2:fc:8d:f0:98:c5:30: 05:b5:6e:59:dc:a4:e8:0d:ea:eb:99:14:d7:ca:76: 59:82:90:5b:a2:e2:65:4e:62:dc:fb:c0:09:9d:cf: e1:6c:d8:ec:d5:09:d4:40:1e:89:12:2c:34:15:1b: 78:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:34:68:99:39:2D:90:89:FC:AB:CE:3C:C7:26:CA:73:95:2F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:40:2a:4a:f6:bd:68:29:59:f4:22:be:c4:e2:84:25:55:11: 54:c2:e1:52:90:f7:c0:6a:58:9d:a8:7b:74:cc:7a:12:77:37: 78:e2:24:f6:69:17:d1:6e:c2:4e:38:be:76:5f:cb:06:82:74: 2d:4e:fb:08:c0:2d:fb:bd:b1:f6:4d:e1:e7:e5:15:12:17:c1: 4a:79:be:4d:72:7d:1b:f0:52:b9:fa:39:4d:d2:6c:ff:1b:04: 4d:a8:70:6a:a3:29:bc:ef:a8:40:27:1e:86:a1:af:2c:2c:62: e7:46:29:75:5f:4c:4c:19:dc:ee:34:7f:d1:5a:b4:52:32:b4: 60:d9:d3:19:dd:c2:42:cc:41:4c:a2:5f:2b:1f:63:9f:f9:66: d9:7a:78:9b:85:aa:7e:50:ec:ac:1d:16:76:1a:f4:cf:79:9c: 75:3c:32:76:a9:f8:96:d9:50:49:16:de:51:56:21:cc:b4:04: 93:59:29:78:f7:72:0c:8f:8f:f0:6a:f6:ca:6e:58:21:82:5a: 6c:ff:9b:cd:d5:59:b0:2e:24:b2:86:85:cd:a1:bc:1a:65:e0: dc:51:1a:96:af:5f:08:cd:46:7b:a4:95:62:dc:1b:84:b1:1e: 4e:15:e2:0e:45:83:d7:7b:b7:bb:3d:05:96:68:5d:b0:ea:59: 77:b5:78:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJgUGO/7lcN6CzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzkxMDkzOGYtZmI0YS00ZmVjLWIzYjItOTFjY2JmMGZiYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MQXk0l6LlbYrjt7tlTAPj1aOac2snMhlEUG IyJErEb+sDoKsFHTC1R/Zru936KUEJuZiMgpWoM42fcLBfkH3+NXXRzclzFNkcLp niRTzHtdXbfLSNlw7hTtI7ok5V+2otBNqYQkHx5ZWBE+9/UuhxhcS4a4EYNetFdc 4OOMwDj136PqpSB2qnrg2Mg06qJ3Hc24+TsLKDTobKHBQQt6UhAwgdzjHKUnnSDn TUXVMKA56U2R/xFJSN+c/hufNU4wr4DCzi02gGK1r7L8jfCYxTAFtW5Z3KToDerr mRTXynZZgpBbouJlTmLc+8AJnc/hbNjs1QnUQB6JEiw0FRt4BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx7NGiZOS2QifyrzjzHJspzlS/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYTdhZWZkNGEtNDEyMC0z ZWFmLWJjNjgtYWEyYTBkYTY5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9AKkr2vWgpWfQivsTihCVVEVTC4VKQ98BqWJ2oe3TMehJ3N3jiJPZp F9Fuwk44vnZfywaCdC1O+wjALfu9sfZN4eflFRIXwUp5vk1yfRvwUrn6OU3SbP8b BE2ocGqjKbzvqEAnHoahrywsYudGKXVfTEwZ3O40f9FatFIytGDZ0xndwkLMQUyi XysfY5/5Ztl6eJuFqn5Q7KwdFnYa9M95nHU8Mnap+JbZUEkW3lFWIcy0BJNZKXj3 cgyPj/Bq9spuWCGCWmz/m83VWbAuJLKGhc2hvBpl4NxRGpavXwjNRnuklWLcG4Sx Hk4V4g5Fg9d7t7s9BZZoXbDqWXe1eDQ= -----END CERTIFICATE-----Generated at Wed Aug 26 13:07:13 2026 by rpki-client