$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/43a348bf-5796-3aec-b604-808fadc7f47b.roa File: 43a348bf-5796-3aec-b604-808fadc7f47b.roa (raw, json) Hash identifier: 6D58le07yBHVyUDuhDyueV+xr3iOFd8RH7F7rCUaAhM= Subject key identifier: F1:DB:67:64:20:9B:E6:2A:FB:2B:70:60:90:B2:CD:1A:C2:AD:3D:EC Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Certificate serial: 010D0C9F4328584EBA949EB59FB5B0A4A5AF0E40 Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/43a348bf-5796-3aec-b604-808fadc7f47b.roa Signing time: Tue 04 Aug 2026 20:48:19 +0000 ROA not before: Tue 04 Aug 2026 20:48:19 +0000 ROA not after: Mon 02 Nov 2026 21:48:19 +0000 asID: 40933 IP address blocks: 216.220.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:94:9e:b5:9f:b5:b0:a4:a5:af:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Validity Not Before: Aug 4 20:48:19 2026 GMT Not After : Nov 2 21:48:19 2026 GMT Subject: CN=bf048fa1-62d2-46c7-b885-93b755a8d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:16:44:e4:43:40:69:f7:20:33:5f:11:a4:e1: 2c:17:fb:e5:cd:94:49:33:84:2f:fa:66:2e:35:43: dc:21:14:02:d6:ad:9a:07:b7:b5:5f:da:02:06:b2: 48:10:e6:45:cd:e1:f3:c8:03:28:a6:2e:87:dd:60: 8e:a1:bd:55:99:03:4f:af:1a:c9:fd:0f:d5:ec:f7: b9:e6:5f:95:42:df:70:23:7f:b2:8f:8f:e8:cf:e6: 38:8e:d2:17:6c:2d:3f:26:80:d5:e6:aa:c3:c5:7b: 09:e0:17:17:1f:56:b2:9c:e5:c2:6f:ab:49:a0:ea: 99:8d:5d:ce:f1:5e:64:0a:e0:4c:aa:92:8e:28:34: 30:75:5c:b9:85:11:0e:0e:31:72:23:f0:f3:e7:ad: 7e:23:5e:14:ec:e7:57:d6:0a:40:a2:39:e8:d9:7c: 54:f6:07:0a:34:10:63:e2:2c:de:75:e0:f6:01:32: 8d:f4:27:1a:f0:f6:b2:57:ba:29:bd:1b:6c:0e:65: 31:7e:c3:f8:34:8f:fa:b7:c3:20:03:2b:6e:73:25: 00:d2:4c:53:4e:ff:37:4f:97:20:70:57:06:85:6f: 93:2f:b1:82:ed:a7:99:db:2e:7f:3e:02:0f:fa:ea: 25:d3:43:37:d5:97:28:75:92:fd:48:14:7b:75:f6: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:67:64:20:9B:E6:2A:FB:2B:70:60:90:B2:CD:1A:C2:AD:3D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/43a348bf-5796-3aec-b604-808fadc7f47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl X509v3 Authority Key Identifier: keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer sbgp-ipAddrBlock: critical IPv4: 216.220.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b1:11:f9:c1:7e:73:d9:ec:6a:5b:6d:20:6d:1b:47:e0:e0: 83:e3:6e:06:9e:09:1b:64:37:da:ee:ed:e7:c1:93:7e:a3:77: 41:14:7e:74:65:cf:8d:66:f5:d3:69:a0:fa:65:af:a3:2e:c2: 15:fe:41:02:55:1b:a7:da:8d:58:60:4b:74:3a:d8:b3:59:3d: 18:76:0d:d1:80:61:2e:0e:af:e7:81:7a:c5:54:94:ae:93:f7: 20:db:de:3a:ae:37:29:a4:23:74:7a:ab:39:bc:64:c5:ef:8f: b3:ca:37:e3:d0:d6:4a:47:85:00:cd:4c:f2:ad:5c:cc:33:17: c2:bb:8f:5b:7d:d4:59:b5:81:98:40:bc:a1:e7:13:36:5f:b8: 8f:a4:64:fd:9b:7d:46:c4:21:7f:65:45:f1:23:23:c3:b4:9b: a5:cf:c0:51:0f:92:b1:c2:4c:da:08:85:89:e0:95:18:e2:c8: aa:49:f4:d1:29:60:99:cf:6a:2d:38:32:ca:0b:be:88:21:f3: 96:dc:11:46:4a:6a:0b:af:12:fe:a9:b8:cb:b9:88:9a:53:66: 84:bd:b0:de:5a:af:59:77:3d:ec:68:39:76:96:fd:15:68:60: 1a:91:6d:94:e6:2c:3f:02:e9:99:12:6d:b9:8a:ee:15:fe:8a: b0:18:a8:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66lJ61n7WwpKWvDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh ZWNkMB4XDTI2MDgwNDIwNDgxOVoXDTI2MTEwMjIxNDgxOVowLzEtMCsGA1UEAxMk YmYwNDhmYTEtNjJkMi00NmM3LWI4ODUtOTNiNzU1YThkNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBZE5ENAafcgM18RpOEsF/vlzZRJM4Qv+mYu NUPcIRQC1q2aB7e1X9oCBrJIEOZFzeHzyAMopi6H3WCOob1VmQNPrxrJ/Q/V7Pe5 5l+VQt9wI3+yj4/oz+Y4jtIXbC0/JoDV5qrDxXsJ4BcXH1aynOXCb6tJoOqZjV3O 8V5kCuBMqpKOKDQwdVy5hREODjFyI/Dz561+I14U7OdX1gpAojno2XxU9gcKNBBj 4izedeD2ATKN9Cca8PayV7opvRtsDmUxfsP4NI/6t8MgAytucyUA0kxTTv83T5cg cFcGhW+TL7GC7aeZ2y5/PgIP+uol00M31ZcodZL9SBR7dfbs8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHbZ2Qgm+Yq+ytwYJCyzRrCrT3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5 ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvNDNhMzQ4YmYtNTc5Ni0z YWVjLWI2MDQtODA4ZmFkYzdmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1 YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWxEfnBfnPZ7GpbbSBtG0fg4IPjbgaeCRtkN9ru7efBk36jd0EUfnRl z41m9dNpoPplr6MuwhX+QQJVG6fajVhgS3Q62LNZPRh2DdGAYS4Or+eBesVUlK6T 9yDb3jquNymkI3R6qzm8ZMXvj7PKN+PQ1kpHhQDNTPKtXMwzF8K7j1t91Fm1gZhA vKHnEzZfuI+kZP2bfUbEIX9lRfEjI8O0m6XPwFEPkrHCTNoIhYnglRjiyKpJ9NEp YJnPai04MsoLvogh85bcEUZKaguvEv6puMu5iJpTZoS9sN5ar1l3PexoOXaW/RVo YBqRbZTmLD8C6ZkSbbmK7hX+irAYqPw= -----END CERTIFICATE-----Generated at Wed Aug 26 17:29:26 2026 by rpki-client