$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa File: b6e14efa-29c2-321e-91ea-20c36382b1b0.roa (raw, json) Hash identifier: zguVI90oLNIN0d29Rtu1Noch1eln5naTrPZULVXf6Bs= Subject key identifier: B8:54:6A:4A:EF:6E:2B:0E:89:C8:EF:B7:9E:47:34:C6:FF:91:A4:08 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584ECBD1DAB2B6E71E944A6B8800 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 46632 IP address blocks: 216.238.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:da:b2:b6:e7:1e:94:4a:6b:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=59bb4c89-960c-4300-9823-4e8bb382d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e9:63:7d:f9:51:1c:33:55:8a:04:65:43:4f: 2b:32:0b:a5:44:78:4c:42:f6:c1:00:17:de:0f:3d: 1f:de:70:df:45:11:9b:84:13:d9:46:e5:61:b7:d3: 29:66:f6:e4:42:7a:44:93:b6:4b:0b:0d:b4:23:03: ec:78:ad:8d:56:96:b4:9e:62:70:c2:06:79:23:2b: 95:63:87:b4:7c:da:c9:77:b3:d9:b6:35:c1:95:e7: ff:03:8b:9c:74:e5:a7:65:6d:56:9f:5a:7f:a6:2f: 65:6a:05:7b:cc:5b:a6:55:16:8e:ba:ae:9f:fc:d4: b8:3d:43:9b:59:a5:c3:3a:f0:bc:f9:8e:6e:cd:16: d1:30:63:79:d8:c9:13:38:28:03:a5:52:d4:d6:19: 99:35:e9:92:8a:df:59:e7:25:9d:ed:61:e2:3c:a9: ff:b3:35:85:e5:35:1b:72:03:1a:84:84:c7:d6:6a: 48:d6:60:81:72:72:cf:b7:d1:40:03:28:0d:92:e6: 1a:9e:6a:80:3c:ad:cb:e1:ae:df:1a:81:21:2b:8d: fd:c9:e5:54:90:14:2c:77:3c:d7:b6:e1:a8:d1:f9: a5:74:44:d3:99:1f:e3:4c:f6:ef:47:d5:b3:3b:c7: a6:51:09:bd:db:ba:12:d3:48:41:e8:34:ae:b5:d2: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:54:6A:4A:EF:6E:2B:0E:89:C8:EF:B7:9E:47:34:C6:FF:91:A4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:dc:ea:78:c6:7b:2c:ea:2d:b8:df:a0:6f:ee:f9:43:a6:95: f4:90:14:46:83:a8:01:dc:9c:4c:70:55:ec:48:a9:72:0b:26: 61:01:df:40:d8:10:15:5d:15:ce:d3:bc:33:a9:44:62:87:36: 1e:56:fd:f8:1f:81:d2:76:66:42:c5:e2:99:60:8b:d1:31:46: e7:b1:ac:21:6f:05:5c:89:00:3c:23:f4:0d:79:cd:7d:f2:d7: cd:fd:2b:ae:e4:bc:60:0b:f4:6b:26:95:a3:64:0a:ea:c2:e8: 3b:54:64:20:8f:64:22:0a:be:1c:f3:d7:5c:77:a0:e2:d7:ff: 00:8c:b5:8f:be:65:4d:ce:20:a4:e1:3b:e5:8c:fd:22:6e:3e: 2f:56:1b:5c:54:bc:5e:99:3c:ab:32:24:b5:65:76:35:a0:7a: e4:8a:77:09:d6:4f:eb:cb:b1:71:55:0c:de:22:95:af:7a:cf: 3a:67:50:17:cc:c9:52:63:a6:df:8e:5e:36:0a:aa:6b:9d:db: b7:9a:78:35:4f:0d:09:83:7b:df:18:9d:b3:1a:46:1b:2a:b5: ba:31:02:ab:a3:29:42:43:06:0b:5c:b9:0b:f3:d9:ae:c5:d1: 91:01:e5:d0:93:d0:f0:d4:2d:f5:71:a6:f1:1f:34:c3:b6:d0: 9e:8a:8f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dqytucelEpriAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NTliYjRjODktOTYwYy00MzAwLTk4MjMtNGU4YmIzODJkMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeljfflRHDNVigRlQ08rMgulRHhMQvbBABfe Dz0f3nDfRRGbhBPZRuVht9MpZvbkQnpEk7ZLCw20IwPseK2NVpa0nmJwwgZ5IyuV Y4e0fNrJd7PZtjXBlef/A4ucdOWnZW1Wn1p/pi9lagV7zFumVRaOuq6f/NS4PUOb WaXDOvC8+Y5uzRbRMGN52MkTOCgDpVLU1hmZNemSit9Z5yWd7WHiPKn/szWF5TUb cgMahITH1mpI1mCBcnLPt9FAAygNkuYanmqAPK3L4a7fGoEhK439yeVUkBQsdzzX tuGo0fmldETTmR/jTPbvR9WzO8emUQm927oS00hB6DSutdLJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhUakrvbisOicjvt55HNMb/kaQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvYjZlMTRlZmEtMjljMi0z MjFlLTkxZWEtMjBjMzYzODJiMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHc6njGeyzqLbjfoG/u+UOmlfSQFEaDqAHcnExwVexIqXILJmEB30DY EBVdFc7TvDOpRGKHNh5W/fgfgdJ2ZkLF4plgi9ExRuexrCFvBVyJADwj9A15zX3y 1839K67kvGAL9GsmlaNkCurC6DtUZCCPZCIKvhzz11x3oOLX/wCMtY++ZU3OIKTh O+WM/SJuPi9WG1xUvF6ZPKsyJLVldjWgeuSKdwnWT+vLsXFVDN4ila96zzpnUBfM yVJjpt+OXjYKqmud27eaeDVPDQmDe98YnbMaRhsqtboxAqujKUJDBgtcuQvz2a7F 0ZEB5dCT0PDULfVxpvEfNMO20J6Kj9Y= -----END CERTIFICATE-----Generated at Wed Sep 30 04:34:19 2026 by rpki-client