$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa File: ee02f89e-d151-39e0-a655-f74770f9addd.roa (raw, json) Hash identifier: Rahbudc69R3nt02sAWrJpRqLGV4+5R/ogJfDdvZHscc= Subject key identifier: 80:81:8D:99:E4:9C:15:67:CB:30:A6:50:DB:6F:35:62:64:55:18:AF Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584F02421CE0E2414276D9942A80 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31875 IP address blocks: 216.21.216.0/21 maxlen: 24 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1c:e0:e2:41:42:76:d9:94:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=658efa26-94ed-42fc-86e2-c36204b46b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:39:ec:bf:26:42:51:45:11:96:57:d5:dc: f8:64:e8:62:71:fb:af:f2:a8:46:ca:51:8b:86:e5: fc:67:b7:c6:ff:07:8d:9b:e3:f9:3d:37:0f:7c:4c: 3b:f0:28:ee:e1:89:dd:7f:5a:d4:e9:9a:74:63:8e: 31:1f:67:52:72:06:c1:9b:0b:41:3b:af:9b:d9:09: 81:b2:25:d4:34:c8:91:55:0c:35:ed:69:70:9b:f9: 75:4e:4f:11:c6:44:c0:8e:4c:2f:f9:a3:81:96:da: 71:84:d9:13:90:f5:6e:c5:6e:de:d0:a9:bb:85:8e: da:89:98:11:ea:81:e0:67:41:5e:8d:d0:d7:1f:55: 30:7c:a5:6f:54:8f:eb:d5:e2:d2:fb:df:62:fe:c7: 6b:59:bd:15:5a:2b:e7:c4:13:35:46:ae:0e:38:f8: 81:75:c2:80:85:b4:5a:c9:f9:5c:69:09:d1:34:75: 36:0f:90:ea:17:e8:cf:0f:00:8f:21:e0:17:92:17: 4c:45:18:8b:16:a5:df:0b:e0:4b:fe:3f:73:f6:89: dc:a3:34:98:33:f7:b5:df:60:ad:be:e5:ed:fa:b5: 03:04:42:49:ee:d7:39:36:24:35:a8:cf:b3:ae:85: 68:a9:0d:53:dc:d1:7d:76:3b:2d:f9:3f:06:a0:ca: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:81:8D:99:E4:9C:15:67:CB:30:A6:50:DB:6F:35:62:64:55:18:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:da:ee:29:13:6f:80:8c:01:a6:56:35:24:b1:53:05:7c:9e: a4:32:04:9a:f4:2c:e7:ea:cc:e9:0f:47:51:b7:cc:de:fc:4a: cb:58:6a:be:ba:88:9b:1a:44:94:94:2d:22:6d:7a:18:08:d9: b6:5f:8f:73:1a:8f:3b:60:90:66:85:c7:07:4e:92:1f:40:db: c7:8c:8c:0c:28:e0:1d:bd:0d:0f:ad:1a:25:31:4e:31:be:4f: e9:f4:55:5a:e1:58:d7:eb:96:94:d4:26:5a:20:85:57:22:9d: 99:a5:ed:a4:e0:b2:1a:73:0d:e3:36:43:80:ed:cc:6f:2a:86: bd:c1:35:7e:70:ee:4a:e6:51:d5:16:98:4e:a5:33:3c:da:e3: b3:9a:cc:5f:1f:0f:5a:98:f2:23:d3:60:3a:a1:9c:3a:7a:b8: 20:30:07:03:e1:3f:1d:d5:4d:dd:7a:d2:1c:23:42:ee:04:b7: 5d:63:3b:fb:3a:27:63:44:7e:ad:9f:60:b1:71:44:b7:e7:75: 1f:41:d9:c9:e5:4a:c0:5c:52:90:8f:ed:60:4a:dc:43:f5:dd: c7:c7:80:27:a2:59:37:7f:fd:80:df:9d:ca:82:08:b5:0b:91: 75:83:2c:a3:d7:18:39:5a:9d:2e:f0:bd:26:a3:f0:bc:71:62: 4b:a4:f2:c4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8CQhzg4kFCdtmUKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NjU4ZWZhMjYtOTRlZC00MmZjLTg2ZTItYzM2MjA0YjQ2YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9M57L8mQlFFEZZX1dz4ZOhicfuv8qhGylGL huX8Z7fG/weNm+P5PTcPfEw78Cju4Yndf1rU6Zp0Y44xH2dScgbBmwtBO6+b2QmB siXUNMiRVQw17Wlwm/l1Tk8RxkTAjkwv+aOBltpxhNkTkPVuxW7e0Km7hY7aiZgR 6oHgZ0FejdDXH1UwfKVvVI/r1eLS+99i/sdrWb0VWivnxBM1Rq4OOPiBdcKAhbRa yflcaQnRNHU2D5DqF+jPDwCPIeAXkhdMRRiLFqXfC+BL/j9z9oncozSYM/e132Ct vuXt+rUDBEJJ7tc5NiQ1qM+zroVoqQ1T3NF9djst+T8GoMrOgQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFICBjZnknBVnyzCmUNtvNWJkVRivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvZWUwMmY4OWUtZDE1MS0z OWUwLWE2NTUtZjc0NzcwZjlhZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2BXYMA0E AgACMAcDBQAmBOvAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFfa7ikTb4CMAaZWNSSxUwV8nqQyBJr0LOfq zOkPR1G3zN78SstYar66iJsaRJSULSJtehgI2bZfj3MajztgkGaFxwdOkh9A28eM jAwo4B29DQ+tGiUxTjG+T+n0VVrhWNfrlpTUJloghVcinZml7aTgshpzDeM2Q4Dt zG8qhr3BNX5w7krmUdUWmE6lMzza47OazF8fD1qY8iPTYDqhnDp6uCAwBwPhPx3V Td160hwjQu4Et11jO/s6J2NEfq2fYLFxRLfndR9B2cnlSsBcUpCP7WBK3EP13cfH gCeiWTd//YDfncqCCLULkXWDLKPXGDlanS7wvSaj8LxxYkuk8sQ= -----END CERTIFICATE-----Generated at Sun Sep 27 14:48:58 2026 by rpki-client