$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/2f915aac-b8d7-3ed9-9177-3309ddbd3328.roa File: 2f915aac-b8d7-3ed9-9177-3309ddbd3328.roa (raw, json) Hash identifier: cSHm/tC39zbI4Z8WMXOQPohfSOzlm1UL1CsDQaAnLrU= Subject key identifier: D1:B5:37:44:CF:E6:4E:42:39:51:3C:DB:DB:A1:92:20:F7:28:63:DC Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584DE2EA3ED57D6BF4C8E3C77C50 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/2f915aac-b8d7-3ed9-9177-3309ddbd3328.roa Signing time: Tue 19 May 2026 14:46:14 +0000 ROA not before: Tue 19 May 2026 14:46:14 +0000 ROA not after: Mon 17 Aug 2026 14:46:14 +0000 asID: 199550 IP address blocks: 216.170.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:ea:3e:d5:7d:6b:f4:c8:e3:c7:7c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: May 19 14:46:14 2026 GMT Not After : Aug 17 14:46:14 2026 GMT Subject: CN=29a2b174-c7d2-4619-855f-ecafb73c4a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:6a:cf:a5:19:a7:06:01:7c:fc:dd:3d:17: 59:f2:30:a0:e1:b1:af:20:95:0e:38:0c:f6:53:20: 5c:bf:37:27:17:6a:80:8f:1f:0e:72:7e:52:c6:f9: 9a:c9:74:26:56:ac:13:02:a9:e8:78:47:4e:fb:65: 67:14:7f:43:ff:1e:99:80:a5:d1:e6:2f:52:73:ad: 97:3c:11:b1:90:ac:3e:31:59:67:4b:f5:4a:fd:06: 6e:cc:0b:08:d9:e2:b0:fb:cb:93:ea:04:9d:38:d4: 6a:81:f2:29:92:7b:82:1e:40:c7:46:e2:96:66:87: a9:ec:23:9f:0f:d9:c7:99:a8:82:91:cd:20:0a:2e: 6b:5b:91:f5:01:57:ca:c4:78:5c:32:c6:eb:4c:28: 2f:ae:92:01:37:d9:2c:f0:d6:1f:83:18:1a:73:52: 26:11:3f:68:31:59:03:6f:bb:d8:c4:86:eb:d9:8a: dd:af:b3:0a:7e:2d:cb:f0:43:f7:2c:f1:06:c0:9e: 39:a0:b9:12:38:a8:bb:76:9b:d1:5e:b4:65:47:aa: 96:42:fe:bf:ac:18:7f:b1:5e:c6:10:52:8e:77:70: 0d:7c:9e:74:00:8b:27:b6:f0:9f:e2:68:78:a1:19: 34:34:e0:63:be:0e:13:38:5e:d2:ad:ea:fd:e5:ed: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:37:44:CF:E6:4E:42:39:51:3C:DB:DB:A1:92:20:F7:28:63:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/2f915aac-b8d7-3ed9-9177-3309ddbd3328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 216.170.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3d:ee:6a:6e:08:0d:53:2b:e0:24:39:c0:40:da:65:99:41: 6b:bb:2f:57:cb:a6:f5:31:69:6e:cc:22:14:5c:38:44:1b:fb: 29:80:7f:4e:7c:e2:26:95:ae:f9:56:a1:74:d1:5b:42:b6:41: e6:c1:f0:6c:8b:d8:93:e0:fd:53:85:73:39:73:b5:a6:88:70: 75:83:63:d9:8e:4b:39:c1:c2:e0:9c:9e:a8:cb:64:17:ed:ac: 4f:6c:ee:fb:de:f6:18:98:f8:24:22:66:f2:88:da:e6:22:45: a4:a6:b0:56:e5:50:78:93:f8:9f:91:d8:9f:1f:01:6d:75:c7: 85:e5:2f:4d:61:a3:fc:3a:06:82:57:78:b5:6f:fb:96:65:01: fd:69:51:00:f7:0c:0c:a8:fc:36:0a:85:51:b4:74:08:87:3c: 4f:52:4c:c1:3c:60:14:69:3e:02:33:37:94:8a:26:98:82:fc: 81:87:ca:d3:4c:61:2e:eb:e7:85:9f:da:6f:f7:09:f5:9d:1e: 12:c2:57:f5:c4:4f:62:d1:9a:3f:6d:44:35:1a:0d:af:cf:dd: 11:8c:6c:04:98:17:e4:ac:66:68:02:83:51:4b:ce:3d:60:06: d4:be:0e:9a:14:b8:0c:a8:31:c7:35:25:02:7d:10:8c:a9:ed: 54:75:d6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3i6j7VfWv0yOPHfFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI2MDUxOTE0NDYxNFoXDTI2MDgxNzE0NDYxNFowLzEtMCsGA1UEAxMk MjlhMmIxNzQtYzdkMi00NjE5LTg1NWYtZWNhZmI3M2M0YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNlqz6UZpwYBfPzdPRdZ8jCg4bGvIJUOOAz2 UyBcvzcnF2qAjx8Ocn5SxvmayXQmVqwTAqnoeEdO+2VnFH9D/x6ZgKXR5i9Sc62X PBGxkKw+MVlnS/VK/QZuzAsI2eKw+8uT6gSdONRqgfIpknuCHkDHRuKWZoep7COf D9nHmaiCkc0gCi5rW5H1AVfKxHhcMsbrTCgvrpIBN9ks8NYfgxgac1ImET9oMVkD b7vYxIbr2Yrdr7MKfi3L8EP3LPEGwJ45oLkSOKi7dpvRXrRlR6qWQv6/rBh/sV7G EFKOd3ANfJ50AIsntvCf4mh4oRk0NOBjvg4TOF7Srer95e1hbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG1N0TP5k5COVE829uhkiD3KGPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvMmY5MTVhYWMtYjhkNy0z ZWQ5LTkxNzctMzMwOWRkYmQzMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY97mpuCA1TK+AkOcBA2mWZQWu7L1fLpvUxaW7MIhRcOEQb+ymAf058 4iaVrvlWoXTRW0K2QebB8GyL2JPg/VOFczlztaaIcHWDY9mOSznBwuCcnqjLZBft rE9s7vve9hiY+CQiZvKI2uYiRaSmsFblUHiT+J+R2J8fAW11x4XlL01ho/w6BoJX eLVv+5ZlAf1pUQD3DAyo/DYKhVG0dAiHPE9STME8YBRpPgIzN5SKJpiC/IGHytNM YS7r54Wf2m/3CfWdHhLCV/XET2LRmj9tRDUaDa/P3RGMbASYF+SsZmgCg1FLzj1g BtS+DpoUuAyoMcc1JQJ9EIyp7VR11iY= -----END CERTIFICATE-----Generated at Wed Jun 3 08:45:34 2026 by rpki-client