$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa File: 9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (raw, json) Hash identifier: e9FrOCOx3c0jMajAef34aD1hsPD2wbzSZvsAnVzjPak= Subject key identifier: 74:43:13:96:BB:4C:D6:42:31:A8:CF:1A:4B:4E:89:50:B0:1F:A5:2E Certificate issuer: /CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Certificate serial: 010D0C9F4328584EA78869930AB671B512F1B9C0 Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7896 IP address blocks: 144.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:69:93:0a:b6:71:b5:12:f1:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ac5afe24-2e8d-4332-92b7-cdf63db72c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:34:c9:59:28:a1:c6:3d:b7:fa:57:2d:75: d3:ff:6a:0d:a5:ff:b5:bf:ad:53:66:23:37:76:3b: d8:65:e8:d1:22:58:d4:71:68:9f:bb:79:09:66:41: b3:b8:79:ac:8c:f6:c0:e5:60:30:f0:15:1e:30:f8: 7a:0c:44:4f:59:9d:93:d9:78:0d:77:5d:b3:09:ab: 9a:19:67:45:9b:86:07:a3:36:84:23:f7:4b:1c:66: 99:7c:ec:a2:8c:ec:6b:c4:1f:de:da:db:fc:88:db: ca:83:9f:f3:a1:45:26:c4:7b:77:5b:3c:d5:1b:2c: 4b:ed:b9:51:0c:77:0c:64:87:4e:95:e2:4c:0c:78: 71:16:1d:7e:d3:88:fc:47:fb:ab:e7:db:5f:24:4c: ee:0b:ab:cd:5a:37:91:ba:7e:9f:d5:a4:a0:57:9e: 1a:69:09:92:a7:ec:98:d4:70:13:a3:fb:f0:b0:05: 30:60:f7:cd:fc:eb:27:e9:30:c7:0b:f8:d6:c4:e1: 52:f4:69:42:46:e4:00:46:09:08:e2:26:dc:22:37: 67:17:d2:0e:b5:c9:8b:d9:ef:aa:7e:c6:e6:86:fa: 35:0e:af:8e:31:10:95:0f:a5:77:26:e4:c6:3e:83: b8:dd:a5:40:0b:fd:6f:83:9d:7c:7c:a5:e3:f2:e0: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:13:96:BB:4C:D6:42:31:A8:CF:1A:4B:4E:89:50:B0:1F:A5:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl X509v3 Authority Key Identifier: keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer sbgp-ipAddrBlock: critical IPv4: 144.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c8:e0:6d:3e:6c:4c:74:3a:48:e9:61:f4:02:4a:53:39:00: e8:4e:43:7b:96:d1:82:4a:90:0a:9b:9a:2d:c7:01:b2:be:f2: 80:17:ee:3d:4d:8d:7f:f0:b2:85:ca:f6:6f:91:32:fb:1a:32: 2d:9c:8b:07:2e:58:38:c0:57:4a:d0:0c:56:ef:f6:d0:98:dd: 20:cf:1c:dc:3e:f1:8f:82:2f:a6:ce:90:50:cd:90:e0:0b:2f: 81:d6:bd:e0:bb:21:8b:b9:87:2e:73:f8:12:66:63:95:90:44: 5b:e8:18:12:5d:65:2a:8d:c5:03:a3:03:a4:fc:e5:7c:7a:ac: b5:d4:5e:e1:1a:40:e1:4f:6e:7a:61:28:51:1d:96:6c:c4:7e: a2:47:c1:86:81:0f:f6:8c:3d:d9:0a:79:05:50:36:28:29:a9: c1:0c:22:18:e4:d3:ec:9f:f5:ec:b9:2c:e0:18:fd:c6:cc:dc: c3:5a:83:e4:b8:5b:43:99:47:67:e4:87:f6:34:68:74:f9:7b: 40:3d:0b:bc:47:96:72:fb:82:7b:dc:00:ee:1e:0d:5c:f6:1c: 17:d2:f8:44:cb:59:96:b8:f4:6f:45:24:44:6c:72:4d:48:b3: 02:8c:d3:b7:0f:a9:62:77:5a:fc:9c:98:f2:3e:3f:86:63:69: b3:06:94:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6niGmTCrZxtRLxucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdmODQ5OWItMjQ1Ni00YmU4LWJhZDktY2VkNDM0MTk4 ZmEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWM1YWZlMjQtMmU4ZC00MzMyLTkyYjctY2RmNjNkYjcyYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC00yVkoocY9t/pXLXXT/2oNpf+1v61TZiM3 djvYZejRIljUcWifu3kJZkGzuHmsjPbA5WAw8BUeMPh6DERPWZ2T2XgNd12zCaua GWdFm4YHozaEI/dLHGaZfOyijOxrxB/e2tv8iNvKg5/zoUUmxHt3WzzVGyxL7blR DHcMZIdOleJMDHhxFh1+04j8R/ur59tfJEzuC6vNWjeRun6f1aSgV54aaQmSp+yY 1HATo/vwsAUwYPfN/Osn6TDHC/jWxOFS9GlCRuQARgkI4ibcIjdnF9IOtcmL2e+q fsbmhvo1Dq+OMRCVD6V3JuTGPoO43aVAC/1vg518fKXj8uBzewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHRDE5a7TNZCMajPGktOiVCwH6UuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4 NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0MzQxOThmYTAvOWRlYWZhN2MtZTk3NC0z ZmNiLWJkNmItMTRmMmEwYjY2YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjdmODQ5OWItMjQ1Ni00YmU4LWJh ZDktY2VkNDM0MTk4ZmEwL2Y3Zjg0OTliLTI0NTYtNGJlOC1iYWQ5LWNlZDQzNDE5 OGZhMC5jcmwwHwYDVR0jBBgwFoAUNY08X4pzlnRC8WBNZVfaIPilZJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0 MzQxOThmYTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMsjgbT5sTHQ6SOlh9AJKUzkA6E5De5bRgkqQCpuaLccBsr7ygBfuPU2N f/Cyhcr2b5Ey+xoyLZyLBy5YOMBXStAMVu/20JjdIM8c3D7xj4Ivps6QUM2Q4Asv gda94Lshi7mHLnP4EmZjlZBEW+gYEl1lKo3FA6MDpPzlfHqstdRe4RpA4U9uemEo UR2WbMR+okfBhoEP9ow92Qp5BVA2KCmpwQwiGOTT7J/17Lks4Bj9xszcw1qD5Lhb Q5lHZ+SH9jRodPl7QD0LvEeWcvuCe9wA7h4NXPYcF9L4RMtZlrj0b0UkRGxyTUiz AozTtw+pYnda/JyY8j4/hmNpswaUbA== -----END CERTIFICATE-----Generated at Thu Aug 27 18:26:51 2026 by rpki-client