$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa File: a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json) Hash identifier: +Ge98Z9YsZ/zI6g+H7rAC7HxOOkCfBzEi9bKLWsIFE4= Subject key identifier: AD:EC:5C:03:32:A0:73:CE:D6:10:88:C8:1B:58:6B:88:D8:33:7D:01 Certificate issuer: /CN=70212b19-99d4-4532-a7e0-a5bdbef20170 Certificate serial: 010D0C9F4328584E4AEF38D6CF6BDDB5C1538480 Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 216.147.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:38:d6:cf:6b:dd:b5:c1:53:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=73cd9172-43d8-4250-8114-bfed569931b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:57:df:43:43:73:92:fc:f2:51:e4:15:94: af:42:35:f1:16:6b:f1:d3:ab:68:3d:22:29:b2:dd: 03:d0:7b:5f:09:e4:44:21:58:58:59:d5:38:e0:74: 0a:28:a5:af:10:62:fc:09:59:6a:b6:f4:5c:6e:ba: 65:5d:1c:29:e0:7f:2b:65:87:13:66:95:e6:d8:6a: 64:37:38:96:c3:6b:1e:af:1c:a9:e7:42:b3:e0:75: d6:42:f5:61:df:97:31:03:bd:4a:d0:8d:57:19:90: 9e:8d:4d:15:80:2f:85:6c:83:b2:a1:7e:4f:f2:dc: 7b:5b:08:f7:e5:a1:ce:4d:bb:91:9c:87:a9:a5:67: 99:2c:a0:19:40:38:05:b5:da:5b:53:be:e5:4d:2d: f6:68:43:30:1d:a0:7c:96:f7:5a:ac:8b:14:a2:d5: 24:a2:db:1e:95:e8:84:c5:e9:9f:1a:51:76:26:02: ff:34:0f:8e:35:a8:54:0e:c1:50:d9:fb:49:b1:4e: 45:5d:d6:47:86:a6:ce:f7:80:6c:b5:73:5b:5b:d0: 7c:07:01:ed:75:4b:d0:af:72:e7:b2:c4:0e:a2:b6: 45:25:1d:8d:9f:48:fe:41:c2:07:0b:27:4a:50:73: 3e:74:0b:0f:18:b0:72:71:9f:9d:84:f2:86:32:ca: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EC:5C:03:32:A0:73:CE:D6:10:88:C8:1B:58:6B:88:D8:33:7D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl X509v3 Authority Key Identifier: keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer sbgp-ipAddrBlock: critical IPv4: 216.147.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1a:24:a4:6a:26:5f:91:6c:b0:65:92:0d:2f:a5:77:7b:89: 68:99:f9:ef:28:50:be:4b:ca:93:44:9d:a4:29:05:75:2e:bd: 77:76:89:4b:17:8f:49:17:7b:bc:43:b1:44:47:56:71:d4:58: a7:ba:ef:38:4f:ac:c9:86:ff:18:02:66:43:97:a8:9f:59:bb: 1d:9b:4a:1b:a0:c1:b9:ff:30:34:43:5b:35:01:14:20:80:a4: 52:ad:62:81:dd:f4:d4:c1:5d:02:03:b0:d3:7e:7d:97:49:58: 40:8a:2a:66:7a:0a:3e:3c:57:72:0b:a2:c3:6e:90:eb:4e:10: d8:b1:6a:d8:73:de:10:fa:8f:8c:1f:03:30:58:5c:0b:3b:ae: 47:d5:2d:ab:1f:c0:7b:eb:7a:e0:45:4f:d4:da:74:68:26:74: 17:c2:1d:45:b5:6b:9a:85:c2:1c:9c:5b:12:f9:93:d5:e6:5e: cc:d4:f4:71:06:a3:a8:fe:c0:53:75:62:b4:b2:3f:17:1b:68: 99:cc:d8:23:11:74:7b:17:1b:2d:31:74:00:38:d4:de:9e:07: 7c:47:2e:00:d1:d6:df:ec:9e:cf:29:9a:ed:ea:01:ab:73:02: 0c:df:cd:d5:43:30:ad:a3:06:ea:b5:2b:63:a2:8f:82:5e:45: 6c:b6:fa:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7zjWz2vdtcFThIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAyMTJiMTktOTlkNC00NTMyLWE3ZTAtYTViZGJlZjIw MTcwMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NzNjZDkxNzItNDNkOC00MjUwLTgxMTQtYmZlZDU2OTkzMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOdX30NDc5L88lHkFZSvQjXxFmvx06toPSIp st0D0HtfCeREIVhYWdU44HQKKKWvEGL8CVlqtvRcbrplXRwp4H8rZYcTZpXm2Gpk NziWw2serxyp50Kz4HXWQvVh35cxA71K0I1XGZCejU0VgC+FbIOyoX5P8tx7Wwj3 5aHOTbuRnIeppWeZLKAZQDgFtdpbU77lTS32aEMwHaB8lvdarIsUotUkotseleiE xemfGlF2JgL/NA+ONahUDsFQ2ftJsU5FXdZHhqbO94BstXNbW9B8BwHtdUvQr3Ln ssQOorZFJR2Nn0j+QcIHCydKUHM+dAsPGLBycZ+dhPKGMspfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3sXAMyoHPO1hCIyBtYa4jYM30BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MDIx MmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJkYmVmMjAxNzAvYTFlNjhiYmItNTUzYy0z NDU2LTljYjEtMTA1MDA4YWQyOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzAyMTJiMTktOTlkNC00NTMyLWE3 ZTAtYTViZGJlZjIwMTcwLzcwMjEyYjE5LTk5ZDQtNDUzMi1hN2UwLWE1YmRiZWYy MDE3MC5jcmwwHwYDVR0jBBgwFoAUEDo3ilx+8pj7dD0sbWIEicpkovUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MDIxMmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJk YmVmMjAxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2JMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0aJKRqJl+RbLBlkg0vpXd7iWiZ+e8oUL5LypNEnaQpBXUuvXd2iUsX j0kXe7xDsURHVnHUWKe67zhPrMmG/xgCZkOXqJ9Zux2bShugwbn/MDRDWzUBFCCA pFKtYoHd9NTBXQIDsNN+fZdJWECKKmZ6Cj48V3ILosNukOtOENixathz3hD6j4wf AzBYXAs7rkfVLasfwHvreuBFT9TadGgmdBfCHUW1a5qFwhycWxL5k9XmXszU9HEG o6j+wFN1YrSyPxcbaJnM2CMRdHsXGy0xdAA41N6eB3xHLgDR1t/sns8pmu3qAatz AgzfzdVDMK2jBuq1K2Oij4JeRWy2+qk= -----END CERTIFICATE-----Generated at Mon Jul 6 20:36:28 2026 by rpki-client