$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa File: df917ed4-e5df-3a02-b420-36fbcf4f9511.roa (raw, json) Hash identifier: jmRDj6lX/AD14piibUpE+C1sMV6pJXc7D0JoXga8toA= Subject key identifier: BD:A6:2D:03:7D:21:B1:A8:C1:85:94:8F:04:F4:B5:9C:DD:A5:87:96 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584EC371F8258F534EE39CF6D540 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 33363 IP address blocks: 97.96.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:f8:25:8f:53:4e:e3:9c:f6:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=7d235f5d-0b22-47c0-8d74-497c7d071bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:81:a4:b4:0a:53:62:9f:f6:18:4e:5f:02: 02:9a:1b:99:81:2c:e7:dd:72:66:a5:ee:02:5e:13: 62:68:55:da:61:9a:3e:ba:02:f7:b6:e5:0c:c2:5d: 8e:10:85:37:c8:7f:61:a0:3d:0d:72:1c:2a:71:70: e9:29:0d:6b:2e:d3:07:4c:b3:ab:91:28:f9:20:0c: 4c:41:57:88:7f:a9:6d:09:ef:42:28:89:9e:94:eb: 66:74:b0:dd:33:ac:c7:df:01:1e:bd:ae:8c:ce:93: 7e:55:ac:a6:b2:3e:90:5c:22:bf:de:43:f5:0b:6d: f8:20:33:b9:73:aa:60:98:91:98:01:03:1e:f8:4a: 19:36:92:3c:ce:ab:fd:05:65:40:75:a6:d7:a2:37: e2:27:44:c7:24:20:a1:e6:1f:d1:3a:86:93:56:54: 36:b9:98:ee:74:28:1b:df:40:95:2c:e0:93:0b:1e: fb:28:83:35:69:c2:11:de:6f:58:1f:be:a5:12:83: d3:e1:3d:64:8d:23:ff:f9:93:fb:89:4e:11:37:8a: 15:e0:4c:3f:c3:2e:e2:91:ef:99:ae:89:fd:09:b9: 9f:76:91:06:03:b8:22:8b:a6:67:b3:c1:af:d1:d2: 6a:90:7f:b2:8f:31:87:31:14:38:ff:d4:81:77:9d: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A6:2D:03:7D:21:B1:A8:C1:85:94:8F:04:F4:B5:9C:DD:A5:87:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 97.96.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6b:43:cd:a9:43:02:4b:dc:95:34:ad:51:cb:e4:37:6c:9f: 64:78:d2:40:9d:0a:c7:c4:a1:b1:32:eb:82:65:b7:b3:3b:71: fc:52:3c:d3:ae:58:4e:72:74:10:cd:f4:15:2e:02:ba:fa:40: b5:f5:64:dd:8d:e8:ab:c5:66:56:22:61:f7:d3:3a:01:1c:57: d3:6d:e3:8c:a2:47:f9:c5:19:04:06:ff:f2:24:0d:9a:eb:7e: 93:6e:8e:f1:97:da:39:45:89:6c:7b:94:57:a7:fe:7a:5d:58: b1:04:02:67:d5:ad:4c:e0:26:3a:ab:79:b9:f4:93:aa:0e:a3: 66:e6:2e:4c:02:13:93:5f:1f:6e:58:aa:11:36:57:cc:53:0b: 67:fb:4c:5a:6e:b4:24:b0:c4:33:39:0f:81:3a:75:55:62:01: 55:d1:d0:9e:d3:e3:82:ac:e7:aa:89:a5:1d:aa:96:3c:58:98: f8:04:21:7d:ea:4d:48:a9:d9:62:aa:cf:24:2e:0c:3d:08:90: 4b:29:4b:94:03:7a:7d:0f:6f:1b:94:59:c5:da:09:42:52:56: b9:86:b2:c9:80:f7:4c:09:bb:b5:55:69:32:a2:05:8e:b1:1f: 87:14:a6:75:17:1f:1b:0c:83:7a:09:44:8a:76:96:bf:46:a5: 72:09:af:25 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7Dcfglj1NO45z21UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk N2QyMzVmNWQtMGIyMi00N2MwLThkNzQtNDk3YzdkMDcxYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWCBpLQKU2Kf9hhOXwICmhuZgSzn3XJmpe4C XhNiaFXaYZo+ugL3tuUMwl2OEIU3yH9hoD0NchwqcXDpKQ1rLtMHTLOrkSj5IAxM QVeIf6ltCe9CKImelOtmdLDdM6zH3wEeva6MzpN+Vaymsj6QXCK/3kP1C234IDO5 c6pgmJGYAQMe+EoZNpI8zqv9BWVAdabXojfiJ0THJCCh5h/ROoaTVlQ2uZjudCgb 30CVLOCTCx77KIM1acIR3m9YH76lEoPT4T1kjSP/+ZP7iU4RN4oV4Ew/wy7ike+Z ron9CbmfdpEGA7gii6Zns8Gv0dJqkH+yjzGHMRQ4/9SBd51RTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL2mLQN9IbGowYWUjwT0tZzdpYeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGY5MTdlZDQtZTVkZi0z YTAyLWI0MjAtMzZmYmNmNGY5NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYWAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASWtDzalDAkvclTStUcvkN2yfZHjSQJ0Kx8ShsTLrgmW3sztx/FI8065Y TnJ0EM30FS4CuvpAtfVk3Y3oq8VmViJh99M6ARxX023jjKJH+cUZBAb/8iQNmut+ k26O8ZfaOUWJbHuUV6f+el1YsQQCZ9WtTOAmOqt5ufSTqg6jZuYuTAITk18fbliq ETZXzFMLZ/tMWm60JLDEMzkPgTp1VWIBVdHQntPjgqznqomlHaqWPFiY+AQhfepN SKnZYqrPJC4MPQiQSylLlAN6fQ9vG5RZxdoJQlJWuYayyYD3TAm7tVVpMqIFjrEf hxSmdRcfGwyDeglEinaWv0alcgmvJQ== -----END CERTIFICATE-----Generated at Sat Sep 5 13:24:29 2026 by rpki-client