$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/d61c991b-64f9-3235-b216-505ad7042389.roa File: d61c991b-64f9-3235-b216-505ad7042389.roa (raw, json) Hash identifier: ovJoDnvRy3JvOqUbURZiTxxipCqHOyWFtVxV4bMI8Mg= Subject key identifier: 95:61:0E:E6:C9:FF:18:62:84:18:5C:68:F9:5A:2A:34:A2:AF:CB:D4 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584EF01CE3F896A409FE34F5AD00 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/d61c991b-64f9-3235-b216-505ad7042389.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 32723 IP address blocks: 216.6.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e3:f8:96:a4:09:fe:34:f5:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=31b40d7d-d285-40b0-ab5e-f82a7ba26158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:12:a3:ff:d6:64:00:01:40:0a:53:9d:8a: e1:a5:7b:b3:04:1e:9f:4f:b6:2d:75:bc:2c:f6:c3: ec:39:be:6e:3e:6e:13:a7:37:1c:7e:e6:37:c1:de: f6:c1:55:f9:bd:77:56:c8:80:78:5b:b3:d2:21:99: b9:e1:96:4c:55:ab:30:c5:f4:8c:2c:97:56:df:0d: e4:d8:36:71:e2:00:ba:ea:5a:77:cd:29:3e:84:79: 51:a9:08:9c:55:78:9d:1e:a7:64:cc:be:e6:6c:a3: 01:50:5f:83:65:7d:9f:29:32:16:70:74:9a:e1:16: 16:66:68:56:62:de:4b:b2:93:54:02:3f:cc:fc:9e: b5:d6:54:e6:4b:7f:39:d4:99:a1:58:2e:40:7d:7e: 25:65:83:9f:c1:8d:c7:89:56:06:f1:e7:99:40:68: 7f:df:06:39:ca:37:c2:72:e1:96:a9:c4:5b:31:b7: 66:31:55:10:84:a3:19:0b:e2:69:19:5a:f7:61:7a: 82:3e:ab:22:55:52:1a:e6:cb:4a:28:47:93:e7:20: 8d:1b:46:cd:7a:27:bb:66:6e:45:0e:5e:e5:18:20: 6a:6f:2a:8e:6f:67:06:91:a3:8c:c8:4a:dc:d8:9a: f5:37:e6:fd:e7:2b:8c:ae:2a:0c:01:99:8d:81:6a: 22:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:0E:E6:C9:FF:18:62:84:18:5C:68:F9:5A:2A:34:A2:AF:CB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/d61c991b-64f9-3235-b216-505ad7042389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv4: 216.6.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:83:4c:7a:7f:99:80:99:dd:bb:07:bc:b6:0d:94:47:3a:fe: 6f:be:db:1f:3f:9e:7d:19:2f:12:56:47:8b:49:ca:bb:43:65: 76:be:28:c1:66:69:65:51:07:1c:e8:1b:8c:af:ad:a1:fc:a2: 38:91:7d:a0:0a:46:a0:27:21:6b:5a:85:b1:df:c5:d5:8c:c7: b2:7c:cc:85:98:ac:cc:0e:79:55:45:00:7a:db:34:5d:29:2c: 29:fc:5a:b8:d7:7a:9c:51:cc:b5:50:8c:50:21:87:f5:d3:14: 70:79:1a:4c:f5:b0:bb:8c:57:46:35:3c:db:8a:e7:57:11:28: 5a:f5:bd:35:6d:ef:c9:ba:f7:b7:f6:a3:f8:92:f2:9b:65:19: 34:e4:7e:14:a9:9a:42:75:59:d0:18:a4:d1:7f:1f:f4:dd:62: fc:2c:a9:4c:51:9e:d0:92:1e:b3:c0:3c:0f:d5:60:89:f1:85: 18:d2:de:ab:c9:9e:2f:12:db:e8:d9:4b:63:5a:20:62:35:c3: ef:96:10:71:79:99:1e:35:6b:2c:45:10:1e:01:09:0c:85:ef: 28:a7:47:1a:a3:c1:65:b5:be:a1:a7:05:b3:9d:ad:05:45:97: d1:5d:16:99:7e:bc:52:bf:d9:8d:0d:b5:9d:89:66:d8:cf:ba: 45:42:d0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHOP4lqQJ/jT1rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MzFiNDBkN2QtZDI4NS00MGIwLWFiNWUtZjgyYTdiYTI2MTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUESo//WZAABQApTnYrhpXuzBB6fT7Ytdbws 9sPsOb5uPm4TpzccfuY3wd72wVX5vXdWyIB4W7PSIZm54ZZMVaswxfSMLJdW3w3k 2DZx4gC66lp3zSk+hHlRqQicVXidHqdkzL7mbKMBUF+DZX2fKTIWcHSa4RYWZmhW Yt5LspNUAj/M/J611lTmS3851JmhWC5AfX4lZYOfwY3HiVYG8eeZQGh/3wY5yjfC cuGWqcRbMbdmMVUQhKMZC+JpGVr3YXqCPqsiVVIa5stKKEeT5yCNG0bNeie7Zm5F Dl7lGCBqbyqOb2cGkaOMyErc2Jr1N+b95yuMrioMAZmNgWoiIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVhDubJ/xhihBhcaPlaKjSir8vUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvZDYxYzk5MWItNjRmOS0z MjM1LWIyMTYtNTA1YWQ3MDQyMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2AaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKDTHp/mYCZ3bsHvLYNlEc6/m++2x8/nn0ZLxJWR4tJyrtDZXa+KMFm aWVRBxzoG4yvraH8ojiRfaAKRqAnIWtahbHfxdWMx7J8zIWYrMwOeVVFAHrbNF0p LCn8WrjXepxRzLVQjFAhh/XTFHB5Gkz1sLuMV0Y1PNuK51cRKFr1vTVt78m697f2 o/iS8ptlGTTkfhSpmkJ1WdAYpNF/H/TdYvwsqUxRntCSHrPAPA/VYInxhRjS3qvJ ni8S2+jZS2NaIGI1w++WEHF5mR41ayxFEB4BCQyF7yinRxqjwWW1vqGnBbOdrQVF l9FdFpl+vFK/2Y0NtZ2JZtjPukVC0CM= -----END CERTIFICATE-----Generated at Tue Oct 13 18:04:10 2026 by rpki-client