$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa File: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (raw, json) Hash identifier: k6kdRXLm/6aRTitennD/Ymw1zwmseDgargfZJNYRu1E= Subject key identifier: 3B:A4:51:8B:B5:EB:62:04:1D:3A:42:9A:B2:48:5B:84:85:40:6A:90 Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584EEA874FD37DC76CBFF2CD5620 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 7127 IP address blocks: 192.214.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4f:d3:7d:c7:6c:bf:f2:cd:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=1abf0c6e-c34d-4e13-8dc7-e9066f1b677c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:a1:e0:6d:53:19:e1:e7:75:7f:b8:00:aa: e3:25:e5:c0:9f:fa:71:6f:fd:04:bc:64:3c:8a:d0: 16:9d:5d:50:60:eb:ee:c4:24:07:2c:6c:f3:cb:82: 67:f5:d9:b5:0e:86:a8:0b:96:18:cd:d5:0c:7e:21: da:e7:2f:c0:7d:c0:cf:ec:7b:7b:b3:4c:85:76:e7: 1d:9f:05:92:76:f9:f0:e9:3d:72:fd:7f:b5:76:7c: c5:25:10:ec:c0:fb:7a:db:65:ac:72:2a:7b:47:a0: ca:cd:7e:bf:81:ce:4a:5a:03:89:f7:42:89:fe:8d: b5:0c:c9:c0:bb:40:2a:ad:de:b2:16:4d:9f:76:e5: da:e6:e6:a4:92:bf:5b:48:4c:4b:16:d5:1f:f2:5b: e5:7c:4d:ef:6f:e9:a7:b7:79:38:db:42:0b:ad:d5: 46:39:bb:ea:e4:ba:14:ab:63:36:31:da:1e:49:f0: 55:40:9d:af:69:3f:4d:c6:57:0f:37:c7:cd:60:92: 38:92:be:b3:00:95:50:19:72:46:e8:29:ae:56:ee: b5:ee:fc:d5:48:4d:29:d5:4a:22:bd:04:78:a7:29: 45:d9:8d:38:d0:b9:4f:83:ac:47:63:87:b8:ef:7f: ce:54:43:7a:ff:ec:e8:e9:3f:cd:dd:f6:34:48:4b: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A4:51:8B:B5:EB:62:04:1D:3A:42:9A:B2:48:5B:84:85:40:6A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: 192.214.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:58:7d:6c:4f:db:14:56:d6:2f:fc:a3:2f:ab:bc:44:9e:36: c2:05:41:75:29:fd:0a:86:ed:8e:7c:f4:72:2a:d2:99:f3:d9: 8d:39:3b:75:ce:5c:d3:27:92:0b:2c:b0:e2:7b:77:9e:7d:50: 5a:ce:bb:1c:c7:33:22:48:83:dc:d8:5b:55:76:15:a0:bd:60: 02:90:9c:da:a4:6d:1f:39:b7:7e:50:88:f5:17:a7:86:e6:f4: d0:e4:95:ec:78:86:db:50:16:84:a1:bf:05:1a:48:93:0d:a3: 38:fb:0b:bf:9e:4e:67:9c:4d:05:05:cc:fa:72:be:12:ef:23: bb:3e:c2:bc:68:3e:a0:5b:31:1f:f1:c7:c7:7a:e5:36:d6:a2: f0:4e:05:a5:70:3e:41:b4:f1:7d:93:eb:94:1c:0c:2f:70:39: f0:e7:4e:e6:f9:65:88:0b:1f:7b:66:13:52:99:23:83:87:3d: 0f:4f:7b:81:0a:13:7a:c4:25:34:01:d4:6b:a3:7d:0e:17:88: 03:ab:f9:e8:ff:80:16:69:f6:cd:e2:d1:b9:d9:11:13:4e:8e: f0:d6:17:e9:ba:19:94:4b:18:32:bf:ed:97:07:55:5b:e4:70: 8f:7b:22:41:b8:7c:c5:18:af:48:c3:4c:2a:b3:59:bf:38:7c: 22:0f:51:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0/Tfcdsv/LNViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MWFiZjBjNmUtYzM0ZC00ZTEzLThkYzctZTkwNjZmMWI2NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jah4G1TGeHndX+4AKrjJeXAn/pxb/0EvGQ8 itAWnV1QYOvuxCQHLGzzy4Jn9dm1DoaoC5YYzdUMfiHa5y/AfcDP7Ht7s0yFducd nwWSdvnw6T1y/X+1dnzFJRDswPt622Wscip7R6DKzX6/gc5KWgOJ90KJ/o21DMnA u0Aqrd6yFk2fduXa5uakkr9bSExLFtUf8lvlfE3vb+mnt3k420ILrdVGObvq5LoU q2M2MdoeSfBVQJ2vaT9NxlcPN8fNYJI4kr6zAJVQGXJG6CmuVu617vzVSE0p1Uoi vQR4pylF2Y040LlPg6xHY4e473/OVEN6/+zo6T/N3fY0SEuaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDukUYu162IEHTpCmrJIW4SFQGqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvNjYyNGI5OTgtMTNlMC0z YTRkLWFhYzktNDAzN2EzNGJmZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwNYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZYfWxP2xRW1i/8oy+rvESeNsIFQXUp/QqG7Y589HIq0pnz2Y05O3XO XNMnkgsssOJ7d559UFrOuxzHMyJIg9zYW1V2FaC9YAKQnNqkbR85t35QiPUXp4bm 9NDklex4httQFoShvwUaSJMNozj7C7+eTmecTQUFzPpyvhLvI7s+wrxoPqBbMR/x x8d65TbWovBOBaVwPkG08X2T65QcDC9wOfDnTub5ZYgLH3tmE1KZI4OHPQ9Pe4EK E3rEJTQB1GujfQ4XiAOr+ej/gBZp9s3i0bnZERNOjvDWF+m6GZRLGDK/7ZcHVVvk cI97IkG4fMUYr0jDTCqzWb84fCIPUcY= -----END CERTIFICATE-----Generated at Sat Aug 22 19:37:15 2026 by rpki-client