$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa File: d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa (raw, json) Hash identifier: 45gP8CtIUL4RsX89xqSOKJJUlrsZ28dzGK8tthnd6/A= Subject key identifier: 41:F7:42:D9:21:D5:24:DD:4F:F9:12:AF:B9:F3:25:BB:78:0D:A6:E9 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584EA788C3F7249080ABE1FD9590 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11377 IP address blocks: 216.20.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:c3:f7:24:90:80:ab:e1:fd:95:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a3a64409-2bdd-4d44-be38-a6484f11ac40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:21:99:d8:e7:bc:84:ea:c6:81:d6:f9:05: 86:44:dd:58:2a:29:27:ec:e4:69:0a:cf:0e:b9:8e: 79:7d:61:0a:35:74:4f:3e:25:1c:15:dd:bc:db:da: 3f:c2:bc:7c:12:bd:0e:73:b2:db:b1:9a:11:79:c4: b2:2b:e2:fa:7f:08:b9:9e:b6:3c:48:2a:7b:7c:79: 10:81:22:75:c4:d2:9b:5d:e9:ec:4a:6a:ce:95:56: 3a:52:a0:89:2e:0a:22:b8:4b:f5:29:8a:e4:e8:36: 20:c1:be:f8:44:30:21:4e:75:b0:fc:67:e6:e1:03: 87:e3:00:86:dc:13:5e:76:0f:f6:7d:2a:17:4b:c3: e9:33:18:a1:7b:ce:b5:b5:24:12:fc:1e:e0:21:84: 28:bc:2a:3a:5d:7f:4c:6d:a3:79:8e:be:91:91:5b: 5a:34:07:6e:dc:70:a9:31:95:ea:ce:89:9f:82:1b: 83:7c:44:4f:59:ab:60:32:4a:bb:fd:18:bb:b4:f1: 38:3b:d2:d5:b6:1f:de:8a:a1:67:bf:96:e7:d8:1b: e2:96:3a:bb:08:53:51:31:ee:44:6d:96:ef:45:98: a9:4d:e6:14:b0:b3:9d:c9:5c:eb:26:ed:1d:84:e5: 86:b5:2f:bd:6d:ba:e8:75:03:2d:28:4d:bb:58:62: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F7:42:D9:21:D5:24:DD:4F:F9:12:AF:B9:F3:25:BB:78:0D:A6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:dd:65:42:b5:1b:ff:40:36:95:32:7a:7a:6e:14:8b:7d:65: b2:df:89:04:17:3b:00:9f:05:38:a1:74:d2:03:a3:ff:f9:6c: 1b:32:98:3a:2e:58:be:5c:67:0e:9a:60:87:04:c9:22:f6:02: da:2c:0e:9a:77:82:fa:73:8b:03:25:b3:34:73:93:2d:5d:74: 86:60:b2:aa:d7:65:c9:40:d3:ec:d9:47:36:58:93:82:3f:7b: 17:04:f0:84:bd:07:1e:c7:c8:96:19:65:7c:f9:b6:6a:98:61: 1f:28:c7:34:31:f0:c1:61:90:4a:9f:f0:d4:54:77:aa:85:db: 9f:8e:d8:ed:08:6e:d6:71:5a:e2:45:58:96:3f:b0:0c:02:4e: 61:20:94:a5:2a:87:7d:16:90:b5:29:52:8c:a8:43:99:e0:38: 37:3c:02:01:e9:a0:b2:4e:40:82:92:9a:c0:c1:68:ca:cc:5f: 39:dd:56:23:5d:6e:da:4f:30:5e:e2:06:39:28:b4:c2:21:bc: 06:cc:de:04:2e:b8:44:9a:3a:57:49:32:0b:d0:1f:f8:e4:eb: e9:44:a2:cf:97:9d:28:0b:59:23:70:d5:bc:bb:7f:bc:02:c4: 96:d4:43:ac:bc:1a:47:6b:c0:0c:eb:57:fb:aa:1f:67:2b:87: 20:99:48:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niMP3JJCAq+H9lZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTNhNjQ0MDktMmJkZC00ZDQ0LWJlMzgtYTY0ODRmMTFhYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmAhmdjnvITqxoHW+QWGRN1YKikn7ORpCs8O uY55fWEKNXRPPiUcFd2829o/wrx8Er0Oc7LbsZoRecSyK+L6fwi5nrY8SCp7fHkQ gSJ1xNKbXensSmrOlVY6UqCJLgoiuEv1KYrk6DYgwb74RDAhTnWw/Gfm4QOH4wCG 3BNedg/2fSoXS8PpMxihe861tSQS/B7gIYQovCo6XX9MbaN5jr6RkVtaNAdu3HCp MZXqzomfghuDfERPWatgMkq7/Ri7tPE4O9LVth/eiqFnv5bn2Bviljq7CFNRMe5E bZbvRZipTeYUsLOdyVzrJu0dhOWGtS+9bbrodQMtKE27WGLBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH3Qtkh1STdT/kSr7nzJbt4DabpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZDgwZWYwMmItY2VjNi0z N2Q5LWIwYzgtYTc0ODYxZjdlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjdZUK1G/9ANpUyenpuFIt9ZbLfiQQXOwCfBTihdNIDo//5bBsymDou WL5cZw6aYIcEySL2AtosDpp3gvpziwMlszRzky1ddIZgsqrXZclA0+zZRzZYk4I/ excE8IS9Bx7HyJYZZXz5tmqYYR8oxzQx8MFhkEqf8NRUd6qF25+O2O0IbtZxWuJF WJY/sAwCTmEglKUqh30WkLUpUoyoQ5ngODc8AgHpoLJOQIKSmsDBaMrMXzndViNd btpPMF7iBjkotMIhvAbM3gQuuESaOldJMgvQH/jk6+lEos+XnSgLWSNw1by7f7wC xJbUQ6y8GkdrwAzrV/uqH2crhyCZSPI= -----END CERTIFICATE-----Generated at Sat Aug 15 08:41:25 2026 by rpki-client