$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/47f4c96f-a58e-316e-a6a5-76c1c97c591b.roa File: 47f4c96f-a58e-316e-a6a5-76c1c97c591b.roa (raw, json) Hash identifier: 4OzL+JjTRZl3G68xVZrVgprVwtndyB3HVxDmBGptcwg= Subject key identifier: 73:01:6A:C7:2D:14:73:5B:BA:F8:33:5E:B6:CF:7F:2C:79:52:41:97 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584EB765CFA2855C866028A7AD80 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/47f4c96f-a58e-316e-a6a5-76c1c97c591b.roa Signing time: Mon 03 Aug 2026 17:26:35 +0000 ROA not before: Mon 03 Aug 2026 17:26:35 +0000 ROA not after: Sun 01 Nov 2026 18:26:35 +0000 asID: 397373 IP address blocks: 172.102.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b7:65:cf:a2:85:5c:86:60:28:a7:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Aug 3 17:26:35 2026 GMT Not After : Nov 1 18:26:35 2026 GMT Subject: CN=959cc929-d79b-47bd-99ce-50dbc5fbbb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:cd:a9:d9:2b:ff:80:1b:30:54:b0:ca:f8: 78:0c:18:b5:7d:ed:d8:cb:c4:8f:93:dc:26:c3:5f: 5d:34:f1:08:29:9c:88:b0:40:e0:c1:d5:ca:de:e5: 0a:29:95:ba:67:5a:ad:9b:df:ab:47:02:c6:c5:b6: c8:4b:53:ed:97:1a:f3:c9:03:4d:48:6f:4f:24:e7: d6:7e:7a:d1:cc:3e:39:a7:c8:b7:b4:c2:f4:42:be: 03:6e:0f:c2:8e:c1:f4:77:db:2d:6d:6c:4b:7e:c6: 45:b0:a9:3f:4a:db:6f:58:cc:7e:48:3a:ff:8e:76: cc:84:af:3f:c4:99:c5:d6:5a:26:d3:14:20:cf:8c: e0:e7:af:08:c3:be:1f:10:fc:ab:2c:32:37:2c:a3: 78:00:27:4e:bf:b9:61:f3:95:21:77:d8:c9:68:9f: c9:9a:32:73:19:0e:46:71:7c:90:0c:15:68:ac:0a: 42:8f:17:98:e5:d6:11:b4:a1:b4:01:11:08:b8:02: 1a:01:48:66:37:88:1e:97:c9:8d:aa:b7:29:04:fb: a6:42:ee:9d:f0:fb:13:0f:a2:e1:66:3f:57:fc:b8: 2b:91:bc:e8:2b:c5:33:01:9c:bd:d7:af:e6:bc:d9: 11:e4:ab:1e:bc:ff:72:66:00:42:21:7a:6a:22:3a: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:6A:C7:2D:14:73:5B:BA:F8:33:5E:B6:CF:7F:2C:79:52:41:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/47f4c96f-a58e-316e-a6a5-76c1c97c591b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9c:70:90:e9:a0:b0:57:06:b9:ca:aa:cb:f9:03:55:de:91: 82:12:81:73:47:d5:55:4f:15:db:67:e6:75:c7:26:aa:59:48: b0:91:42:9c:0b:bb:e4:8f:76:9c:ee:cc:08:af:1c:f5:77:a4: 26:98:c5:7f:c0:36:50:ed:9e:35:53:ae:de:89:7b:c7:be:81: 11:46:c1:bc:91:83:c0:b1:c8:f6:2b:ec:a3:42:f4:f6:d3:22: 7d:86:87:61:80:2b:43:e1:fe:cf:cc:02:41:ae:c9:0d:af:6f: 2e:d7:39:99:44:b8:88:ba:33:75:81:76:e9:a8:ce:40:da:a1: 3d:00:4f:3a:76:3a:dc:b6:33:e3:a7:25:0e:14:4c:9a:14:c5: de:32:1a:4c:ea:53:f1:2f:2d:bf:8d:d2:f8:98:25:d0:52:c7: 01:e0:59:35:da:23:4d:fd:74:e3:6b:b8:b4:93:a9:86:5b:53: 61:45:3f:1e:71:a6:ec:41:fb:94:85:c4:df:24:28:ec:77:8c: 2b:92:a7:71:aa:ae:e7:46:15:ce:47:fe:10:d5:a0:f6:74:25: 78:61:6f:db:52:bb:ed:64:4d:17:d0:a7:16:2a:46:78:ec:fa: 6a:42:26:1e:b7:64:ff:75:20:00:13:24:0b:02:89:66:86:fa: e3:8d:32:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE63Zc+ihVyGYCinrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDgwMzE3MjYzNVoXDTI2MTEwMTE4MjYzNVowLzEtMCsGA1UEAxMk OTU5Y2M5MjktZDc5Yi00N2JkLTk5Y2UtNTBkYmM1ZmJiYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2fNqdkr/4AbMFSwyvh4DBi1fe3Yy8SPk9wm w19dNPEIKZyIsEDgwdXK3uUKKZW6Z1qtm9+rRwLGxbbIS1PtlxrzyQNNSG9PJOfW fnrRzD45p8i3tML0Qr4Dbg/CjsH0d9stbWxLfsZFsKk/SttvWMx+SDr/jnbMhK8/ xJnF1lom0xQgz4zg568Iw74fEPyrLDI3LKN4ACdOv7lh85Uhd9jJaJ/JmjJzGQ5G cXyQDBVorApCjxeY5dYRtKG0AREIuAIaAUhmN4gel8mNqrcpBPumQu6d8PsTD6Lh Zj9X/LgrkbzoK8UzAZy916/mvNkR5KsevP9yZgBCIXpqIjpKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMBasctFHNbuvgzXrbPfyx5UkGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNDdmNGM5NmYtYTU4ZS0z MTZlLWE2YTUtNzZjMWM5N2M1OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeccJDpoLBXBrnKqsv5A1XekYISgXNH1VVPFdtn5nXHJqpZSLCRQpwL u+SPdpzuzAivHPV3pCaYxX/ANlDtnjVTrt6Je8e+gRFGwbyRg8CxyPYr7KNC9PbT In2Gh2GAK0Ph/s/MAkGuyQ2vby7XOZlEuIi6M3WBdumozkDaoT0ATzp2Oty2M+On JQ4UTJoUxd4yGkzqU/EvLb+N0viYJdBSxwHgWTXaI039dONruLSTqYZbU2FFPx5x puxB+5SFxN8kKOx3jCuSp3GqrudGFc5H/hDVoPZ0JXhhb9tSu+1kTRfQpxYqRnjs +mpCJh63ZP91IAATJAsCiWaG+uONMpY= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:45 2026 by rpki-client