$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa File: 14cab7a4-9592-3724-82d8-0c2cba745ca8.roa (raw, json) Hash identifier: vwi7GzT7E+LIlvJB3aI/H/KVLVjbIWj6kKeJK9MvnHI= Subject key identifier: 8B:9A:33:4C:4D:28:E7:7C:8F:44:DC:41:70:AC:D0:8E:78:8F:DB:14 Certificate issuer: /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Certificate serial: 010D0C9F4328584F067240274BCF1430CBADB400 Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19318 IP address blocks: 216.219.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:40:27:4b:cf:14:30:cb:ad:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=8e8ba100-f2ed-44b9-8087-5d715d33d625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:4b:d5:48:ef:34:22:47:5e:ff:d3:71:56: 0a:cf:b4:9d:7b:6c:4a:45:da:b1:ce:58:27:dc:7c: 6e:60:57:c5:41:9a:98:3a:3d:88:0d:e7:32:e5:78: 67:f4:fc:90:1f:87:12:30:76:cb:a9:17:29:7e:22: 2b:f7:79:a9:08:92:28:b9:8d:2f:58:d3:1a:e3:c7: 8a:50:b2:c7:81:b5:fa:cd:b9:57:b9:d5:f6:f5:b0: 9e:90:3f:4d:32:31:11:7c:f2:73:dd:dd:b1:90:22: 3f:a5:e7:b5:83:74:fe:fc:70:a3:45:15:12:30:23: c7:1e:cb:97:18:02:5a:63:c5:da:53:0b:81:45:b8: e8:08:6f:f6:21:3b:ab:88:05:7f:ad:cf:1b:cb:1b: e5:a8:3a:13:1b:1c:73:d7:00:73:6a:d4:01:15:22: cb:81:a3:e5:00:5e:0a:98:bd:99:69:86:e2:f1:f2: c6:3d:77:de:94:d6:a0:fd:9e:f2:d3:cb:46:f9:22: 4b:12:06:74:5f:00:0f:0c:99:f4:cc:54:fe:b1:eb: 69:fa:eb:f0:1f:3f:f0:2a:ef:f1:02:2b:23:ec:1a: 83:5c:de:69:aa:74:f4:4b:38:a1:f5:92:a8:31:54: f4:0b:ab:0c:d4:be:47:db:83:f1:fb:38:df:a9:d3: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9A:33:4C:4D:28:E7:7C:8F:44:DC:41:70:AC:D0:8E:78:8F:DB:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl X509v3 Authority Key Identifier: keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer sbgp-ipAddrBlock: critical IPv4: 216.219.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:02:a8:81:1e:d0:bb:b8:f2:31:06:51:26:2b:d5:fd:ad:07: af:34:1b:30:5b:de:84:4a:ad:2d:de:9d:8f:08:30:f2:74:0f: 6a:6c:55:55:52:1b:6f:8b:a2:f7:32:96:df:5b:2c:3a:de:aa: 36:b7:17:71:71:40:dd:f3:cc:85:0b:42:a1:a4:e0:96:8d:ed: ce:6c:e3:e8:56:7b:4a:cb:f3:54:0f:16:ff:40:1a:09:b0:59: 54:32:70:92:48:e3:21:9a:49:e4:a8:c5:18:9e:83:9c:c1:8a: 16:7d:f2:60:dc:10:d7:90:ea:fd:ca:e5:97:81:05:9f:bf:56: 71:33:bf:c6:13:45:92:d6:a4:f1:8b:32:44:63:cf:f3:7c:54: eb:c1:62:17:16:08:fc:10:2f:50:83:36:33:52:5b:39:ae:4c: 67:63:bf:f2:71:70:27:bb:97:be:74:07:06:18:8a:42:8d:7a: a5:59:f1:8b:55:92:a6:b7:65:2f:ba:73:50:02:da:4d:3b:c9: 8f:f6:19:ad:1e:17:91:ef:db:f0:4b:af:8b:f1:34:6f:69:b5: 9f:f0:65:75:d8:c0:24:91:c9:cf:4e:e1:42:29:92:ad:ca:00: ef:ae:99:fc:71:2b:f1:b5:18:18:08:f4:00:02:da:c9:82:58: 2c:85:44:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckAnS88UMMuttAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdhOTYwZTItOWZhOC00Yjc3LTg2MDktNWVlNDI0ZjQ0 MDg3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OGU4YmExMDAtZjJlZC00NGI5LTgwODctNWQ3MTVkMzNkNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirVL1UjvNCJHXv/TcVYKz7Sde2xKRdqxzlgn 3HxuYFfFQZqYOj2IDecy5Xhn9PyQH4cSMHbLqRcpfiIr93mpCJIouY0vWNMa48eK ULLHgbX6zblXudX29bCekD9NMjERfPJz3d2xkCI/pee1g3T+/HCjRRUSMCPHHsuX GAJaY8XaUwuBRbjoCG/2ITuriAV/rc8byxvlqDoTGxxz1wBzatQBFSLLgaPlAF4K mL2ZaYbi8fLGPXfelNag/Z7y08tG+SJLEgZ0XwAPDJn0zFT+setp+uvwHz/wKu/x Aisj7BqDXN5pqnT0Szih9ZKoMVT0C6sM1L5H24Px+zjfqdMB3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuaM0xNKOd8j0TcQXCs0I54j9sUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2E5 NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRmNDQwODcvMTRjYWI3YTQtOTU5Mi0z NzI0LTgyZDgtMGMyY2JhNzQ1Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdhOTYwZTItOWZhOC00Yjc3LTg2 MDktNWVlNDI0ZjQ0MDg3L2Q3YTk2MGUyLTlmYTgtNGI3Ny04NjA5LTVlZTQyNGY0 NDA4Ny5jcmwwHwYDVR0jBBgwFoAUoqbvy0Q6lIUzBRslzIGoSn40Wx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0 MjRmNDQwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NtdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgCqIEe0Lu48jEGUSYr1f2tB680GzBb3oRKrS3enY8IMPJ0D2psVVVS G2+Lovcylt9bLDreqja3F3FxQN3zzIULQqGk4JaN7c5s4+hWe0rL81QPFv9AGgmw WVQycJJI4yGaSeSoxRieg5zBihZ98mDcENeQ6v3K5ZeBBZ+/VnEzv8YTRZLWpPGL MkRjz/N8VOvBYhcWCPwQL1CDNjNSWzmuTGdjv/JxcCe7l750BwYYikKNeqVZ8YtV kqa3ZS+6c1AC2k07yY/2Ga0eF5Hv2/BLr4vxNG9ptZ/wZXXYwCSRyc9O4UIpkq3K AO+umfxxK/G1GBgI9AAC2smCWCyFRMI= -----END CERTIFICATE-----Generated at Fri Sep 11 03:54:16 2026 by rpki-client