$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa File: 0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa (raw, json) Hash identifier: Vfpq+UmQQbV+WQvJXWMLNzWqOUMX8MBGW3Yo/D0DpCw= Subject key identifier: 40:E1:C1:3E:F0:DE:27:CD:21:F9:2C:F6:AE:BA:94:3F:0A:C0:5E:17 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584EF87CBDD712F5D34E17FF0778 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 394111 IP address blocks: 216.213.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bd:d7:12:f5:d3:4e:17:ff:07:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=dd10b62b-0eda-482d-bf4e-48c62f8e8ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:55:db:f7:0f:fa:c2:9a:f3:21:e2:39:56: 9b:55:ea:bb:f3:d2:ad:eb:c3:42:6b:a4:c3:d6:46: 0b:84:42:39:28:7f:f7:05:82:08:dc:0c:77:ad:ec: 9b:29:33:20:b2:ae:91:df:c5:22:28:b7:f8:f9:de: 3c:50:c0:80:07:8a:7b:7b:38:50:14:8f:9b:7b:53: 79:49:62:c4:e6:96:38:0b:fe:cb:75:1e:42:f9:43: 43:02:c3:ff:d3:ee:49:53:f6:ee:7b:8c:9d:ab:5e: e0:19:5d:40:6b:9f:42:77:d4:18:a9:26:c7:86:07: 68:17:22:84:17:6f:b8:3c:18:15:8d:15:f3:a2:4e: 44:9f:25:c2:74:7d:7d:07:a1:5f:9f:a5:19:3f:a0: 22:a1:59:4e:8e:29:5c:a6:de:2e:c9:de:e0:b7:c4: c3:6c:e8:70:fb:40:76:10:b7:03:5e:ca:14:37:f7: bc:61:db:30:23:f0:47:1f:54:93:f9:fc:cc:e5:d2: 17:eb:c1:c9:f4:e4:70:27:ad:87:df:ee:95:b4:08: 0f:d0:fb:ef:11:ff:72:6e:9a:fe:b2:50:51:30:b2: fb:43:b9:2e:f1:9a:94:00:75:56:b2:94:b6:85:94: 6c:e4:d7:5c:5c:de:11:0e:a1:30:7d:99:dc:e8:86: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E1:C1:3E:F0:DE:27:CD:21:F9:2C:F6:AE:BA:94:3F:0A:C0:5E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 216.213.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b7:5b:2b:3d:83:fd:de:b3:6a:e9:be:04:86:8b:ab:25:37: cf:e1:8e:78:73:04:71:76:ed:66:57:50:de:2e:73:31:f3:62: e0:eb:3b:8b:ce:d5:a7:06:f4:38:73:42:e9:57:d8:b8:2f:f9: 6e:5d:bc:07:cf:28:9f:64:a1:e7:88:2d:ee:3c:bc:37:68:9d: bf:5a:2e:df:81:c1:08:7e:0f:c6:5b:09:c9:97:e1:4e:6b:24: a9:c3:4b:1e:9b:14:d7:6e:9f:14:e6:63:fb:f0:ca:8a:6f:6e: 16:33:10:4c:a1:a4:66:5f:72:6a:5b:ac:5a:b0:c3:a2:af:c6: ba:b5:d0:a6:56:37:23:d7:6f:46:75:22:99:a7:7e:fd:7a:2d: c9:7c:ac:76:2b:13:0c:24:6d:0a:32:16:51:53:5e:85:16:2a: 29:07:a0:05:a0:af:17:55:fc:c2:cb:d9:f4:26:6e:63:82:2b: 58:b0:e1:a1:30:55:bb:76:f9:ed:80:06:b7:a7:f1:0b:1c:5d: 7a:b2:59:d3:1e:8f:63:47:fe:36:c7:2e:94:8c:b2:94:cf:f2: 9d:4a:5e:0d:62:df:08:ca:95:04:ef:a6:2c:04:16:b5:2b:88: f3:08:a0:a1:12:08:df:90:da:a3:46:62:10:ae:5b:72:fb:0d: ff:ca:3e:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL3XEvXTThf/B3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZGQxMGI2MmItMGVkYS00ODJkLWJmNGUtNDhjNjJmOGU4ZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKZV2/cP+sKa8yHiOVabVeq789Kt68NCa6TD 1kYLhEI5KH/3BYII3Ax3reybKTMgsq6R38UiKLf4+d48UMCAB4p7ezhQFI+be1N5 SWLE5pY4C/7LdR5C+UNDAsP/0+5JU/bue4ydq17gGV1Aa59Cd9QYqSbHhgdoFyKE F2+4PBgVjRXzok5EnyXCdH19B6Ffn6UZP6AioVlOjilcpt4uyd7gt8TDbOhw+0B2 ELcDXsoUN/e8YdswI/BHH1ST+fzM5dIX68HJ9ORwJ62H3+6VtAgP0PvvEf9ybpr+ slBRMLL7Q7ku8ZqUAHVWspS2hZRs5NdcXN4RDqEwfZnc6IaXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDhwT7w3ifNIfks9q66lD8KwF4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMGVkMTQ2OWYtZGUzMC0z YTIzLWIwZDQtNzYxY2MxMTg2YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2NUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS3Wys9g/3es2rpvgSGi6slN8/hjnhzBHF27WZXUN4uczHzYuDrO4vO 1acG9DhzQulX2Lgv+W5dvAfPKJ9koeeILe48vDdonb9aLt+BwQh+D8ZbCcmX4U5r JKnDSx6bFNdunxTmY/vwyopvbhYzEEyhpGZfcmpbrFqww6Kvxrq10KZWNyPXb0Z1 Ipmnfv16Lcl8rHYrEwwkbQoyFlFTXoUWKikHoAWgrxdV/MLL2fQmbmOCK1iw4aEw Vbt2+e2ABren8QscXXqyWdMej2NH/jbHLpSMspTP8p1KXg1i3wjKlQTvpiwEFrUr iPMIoKESCN+Q2qNGYhCuW3L7Df/KPm8= -----END CERTIFICATE-----Generated at Sat Sep 26 10:52:13 2026 by rpki-client