$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/0f5eb37d-0715-3678-aaf1-023715a24565.roa File: 0f5eb37d-0715-3678-aaf1-023715a24565.roa (raw, json) Hash identifier: 7tLZJjhAk+18yImPi9VMijIxeuuo5pEZ8Xw8ckOr0ec= Subject key identifier: 18:DB:D7:9A:D1:6D:ED:09:22:02:92:55:B9:90:0F:38:7B:6E:9C:E2 Certificate issuer: /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Certificate serial: 010D0C9F4328584EA7886F1626C3988692157800 Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/0f5eb37d-0715-3678-aaf1-023715a24565.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 18108 IP address blocks: 216.14.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:6f:16:26:c3:98:86:92:15:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=21b23923-b595-48e6-96e4-b732eaadc246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2f:fe:8c:38:7e:26:29:e4:51:b6:16:cc:1e: 13:01:b0:60:bd:f2:df:6f:cd:a1:8a:f1:4d:82:8e: ce:79:98:d0:44:35:d3:76:04:2e:71:f6:48:df:0d: 6d:a3:3d:89:5f:49:1c:ad:9a:12:e2:80:3c:6e:b5: b9:96:71:7e:f8:82:70:e4:05:14:59:a5:2b:86:e5: ff:46:26:97:76:67:8e:3e:6a:f4:ab:be:d7:34:b9: 3a:a7:9d:ef:a0:ef:b1:1d:79:bc:71:48:10:c5:2a: cf:a9:fd:13:63:ce:62:71:57:c2:ae:7d:fd:bc:90: 4d:97:cb:00:2b:65:9c:12:5e:8b:fe:24:98:8d:d4: 1b:3e:0d:38:fc:62:a5:9a:69:11:f6:f5:f2:14:c1: d2:b9:0d:c6:81:7e:0a:5d:13:24:92:48:18:01:8e: 03:1a:50:2b:77:85:6a:0c:de:a4:fb:b2:c0:22:d3: e2:30:75:f1:89:8a:e8:8d:31:fb:e1:2f:b7:cb:9e: 86:23:9c:af:9d:d2:2d:4e:3b:8a:bf:6a:a8:f1:14: ab:0b:46:d3:1b:78:cf:32:3a:d7:ae:df:59:94:96: b0:74:a2:21:4c:ae:23:96:1d:0b:d9:8d:d0:63:7b: ea:ef:8f:60:a3:06:e1:1c:a3:0d:0f:af:f7:d2:a7: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DB:D7:9A:D1:6D:ED:09:22:02:92:55:B9:90:0F:38:7B:6E:9C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/0f5eb37d-0715-3678-aaf1-023715a24565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl X509v3 Authority Key Identifier: keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer sbgp-ipAddrBlock: critical IPv4: 216.14.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8c:be:06:32:06:73:4c:e3:80:23:6b:4d:c6:88:cc:a5:f7: 31:a3:c8:39:33:0d:a2:93:fb:30:42:e3:a6:d6:1e:13:2a:25: 02:f9:bb:45:33:f2:ba:38:25:79:9a:f1:42:1d:08:d1:98:c8: 42:93:a7:2f:b7:0f:10:3e:65:13:14:e5:09:90:80:5a:0b:16: 64:df:52:84:ba:bd:e0:40:d2:53:5b:24:ac:e6:b2:4b:0b:e4: cb:53:f5:54:67:dd:f5:a7:02:24:32:7a:41:78:ee:01:06:6e: aa:ff:26:1b:95:89:ce:e9:d8:0b:80:ad:97:a9:27:81:09:3a: 6a:49:72:9f:78:b6:19:e4:65:a5:c8:aa:45:db:4b:c1:86:64: 37:21:03:a4:01:be:82:fe:ee:3e:bb:ae:b1:ba:c4:cc:de:f7: 8c:b9:62:3d:10:9c:2a:33:86:5a:c2:a3:fe:97:61:04:87:0e: 8e:ca:41:b1:bf:c1:c9:41:08:6a:2b:37:5c:14:f8:e3:17:e9: 25:6f:08:9f:94:16:c1:18:c4:83:62:94:46:32:1e:71:f9:c8: 29:52:99:9c:2c:3e:0b:8c:19:5e:38:eb:f0:3b:9e:26:74:0a: 24:a6:b7:41:9c:d7:4c:6e:ad:b8:bc:cc:64:34:93:5d:30:2d: 30:c7:a5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niG8WJsOYhpIVeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2Ez ZTcyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjFiMjM5MjMtYjU5NS00OGU2LTk2ZTQtYjczMmVhYWRjMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS/+jDh+JinkUbYWzB4TAbBgvfLfb82hivFN go7OeZjQRDXTdgQucfZI3w1toz2JX0kcrZoS4oA8brW5lnF++IJw5AUUWaUrhuX/ RiaXdmeOPmr0q77XNLk6p53voO+xHXm8cUgQxSrPqf0TY85icVfCrn39vJBNl8sA K2WcEl6L/iSYjdQbPg04/GKlmmkR9vXyFMHSuQ3GgX4KXRMkkkgYAY4DGlArd4Vq DN6k+7LAItPiMHXxiYrojTH74S+3y56GI5yvndItTjuKv2qo8RSrC0bTG3jPMjrX rt9ZlJawdKIhTK4jlh0L2Y3QY3vq749gowbhHKMND6/30qccuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjb15rRbe0JIgKSVbmQDzh7bpziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NjFj MGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvMGY1ZWIzN2QtMDcxNS0z Njc4LWFhZjEtMDIzNzE1YTI0NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTYxYzBlYzgtNjRhOS00YzUxLWJk NzctYjI4ZTY5M2EzZTcyLzk2MWMwZWM4LTY0YTktNGM1MS1iZDc3LWIyOGU2OTNh M2U3Mi5jcmwwHwYDVR0jBBgwFoAUgr/tJi5XV5QT3YvMVzRT2EbNguQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhl NjkzYTNlNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2A7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCMvgYyBnNM44Aja03GiMyl9zGjyDkzDaKT+zBC46bWHhMqJQL5u0Uz 8ro4JXma8UIdCNGYyEKTpy+3DxA+ZRMU5QmQgFoLFmTfUoS6veBA0lNbJKzmsksL 5MtT9VRn3fWnAiQyekF47gEGbqr/JhuVic7p2AuArZepJ4EJOmpJcp94thnkZaXI qkXbS8GGZDchA6QBvoL+7j67rrG6xMze94y5Yj0QnCozhlrCo/6XYQSHDo7KQbG/ wclBCGorN1wU+OMX6SVvCJ+UFsEYxINilEYyHnH5yClSmZwsPguMGV446/A7niZ0 CiSmt0Gc10xurbi8zGQ0k10wLTDHpfI= -----END CERTIFICATE-----Generated at Wed Aug 26 02:26:58 2026 by rpki-client