$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d0d857ca-f619-398c-bdba-0d973488ac04.roa File: d0d857ca-f619-398c-bdba-0d973488ac04.roa (raw, json) Hash identifier: pSJd0rN1B+a7EKZi5pHZ0Aj9sSQ3hp9G4lwozISQCkg= Subject key identifier: D2:5D:EF:83:D2:EC:8A:C9:BB:35:C9:EA:67:E3:31:57:2E:61:0B:58 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584ED431D7027FBCC1CDB503EF00 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d0d857ca-f619-398c-bdba-0d973488ac04.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 13340 IP address blocks: 216.9.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:d7:02:7f:bc:c1:cd:b5:03:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=15aa3418-97f5-4172-bbc2-239e82be8721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:22:08:21:29:fd:14:18:bc:d4:99:e4:71: e6:2e:21:d2:1c:f7:8f:f0:36:28:4b:ce:54:3a:d7: 67:36:67:71:cc:08:99:73:85:b6:f3:59:25:e2:a0: 70:d7:cf:e5:b3:89:a8:3f:23:5e:03:37:9d:6e:a5: 75:8a:33:17:79:13:1a:ee:2c:e2:71:b9:56:91:c2: 85:2e:a7:f9:32:29:2b:a0:a2:4b:9b:14:d6:67:fa: 4e:2e:cf:f2:b4:f1:12:b9:f1:c3:a9:d9:31:a7:cc: be:03:0d:eb:09:e3:3e:2d:ad:36:84:26:a7:3d:af: a6:3a:da:84:f4:65:cb:c1:0e:19:60:8f:2f:30:dc: 32:ac:03:b1:e0:55:d6:2b:09:13:c5:b3:56:79:da: e1:84:6a:a4:1c:a1:70:7c:20:53:77:07:ac:78:36: 1a:6e:ab:24:84:4b:16:ad:be:f3:d2:f2:13:1e:d2: 39:85:21:19:7f:d4:95:81:ca:b0:73:68:1f:08:42: 3c:31:e5:e2:58:90:a3:fa:64:13:b4:27:67:ad:9b: d3:23:c2:99:d8:8b:75:4a:0a:03:1a:e1:f2:35:5b: 52:19:e1:24:2d:6c:72:71:aa:df:92:f2:8b:c9:5f: 0a:44:ea:eb:ea:71:f8:21:25:66:43:41:ef:d2:31: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5D:EF:83:D2:EC:8A:C9:BB:35:C9:EA:67:E3:31:57:2E:61:0B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d0d857ca-f619-398c-bdba-0d973488ac04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 216.9.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:99:97:fa:3c:38:1e:26:52:51:68:d4:ec:44:d9:86:5c:5c: 34:41:e9:90:42:c0:a1:44:d7:1f:38:97:52:88:2a:92:7a:53: 99:44:40:d4:4b:01:b1:fb:fc:60:53:53:85:d7:c6:fd:b3:92: 95:f7:25:b1:b6:e5:e3:4f:cf:63:ce:f3:b5:13:21:b2:64:ad: e2:a6:45:13:1d:74:e6:b4:d0:9a:38:dc:7f:2f:d4:45:f9:6d: f1:cb:f6:88:a4:88:22:68:42:23:3a:3d:d9:a7:dd:72:9d:a7: e8:98:f2:88:ab:23:ea:29:4f:70:ba:a1:2a:32:43:ce:7a:e0: e6:ec:f0:3e:10:3d:a8:66:47:56:e3:48:fc:a4:f9:15:88:ee: 37:e0:3e:87:81:31:9f:87:06:78:40:9b:90:9c:f6:4a:f8:95: 5e:71:57:a2:3e:ff:ce:7e:e3:30:22:92:fb:2a:0d:94:d2:fb: 55:29:d0:c5:f4:2a:86:7d:e2:b6:d4:24:57:54:68:b2:80:2f: b3:25:ec:c8:17:0b:d5:cb:14:f0:e4:bc:3c:88:9d:a0:1d:c6: 84:fa:0e:91:9c:b3:18:0c:bf:ba:6b:42:90:f5:35:d3:de:db: c0:3e:c8:68:c0:d4:f8:a0:40:da:27:e3:cb:35:26:e0:5f:ef: 68:e6:e5:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMdcCf7zBzbUD7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MTVhYTM0MTgtOTdmNS00MTcyLWJiYzItMjM5ZTgyYmU4NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS4iCCEp/RQYvNSZ5HHmLiHSHPeP8DYoS85U OtdnNmdxzAiZc4W281kl4qBw18/ls4moPyNeAzedbqV1ijMXeRMa7izicblWkcKF Lqf5MikroKJLmxTWZ/pOLs/ytPESufHDqdkxp8y+Aw3rCeM+La02hCanPa+mOtqE 9GXLwQ4ZYI8vMNwyrAOx4FXWKwkTxbNWedrhhGqkHKFwfCBTdweseDYabqskhEsW rb7z0vITHtI5hSEZf9SVgcqwc2gfCEI8MeXiWJCj+mQTtCdnrZvTI8KZ2It1SgoD GuHyNVtSGeEkLWxycarfkvKLyV8KROrr6nH4ISVmQ0Hv0jFRbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJd74PS7IrJuzXJ6mfjMVcuYQtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvZDBkODU3Y2EtZjYxOS0z OThjLWJkYmEtMGQ5NzM0ODhhYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2An4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWZl/o8OB4mUlFo1OxE2YZcXDRB6ZBCwKFE1x84l1KIKpJ6U5lEQNRL AbH7/GBTU4XXxv2zkpX3JbG25eNPz2PO87UTIbJkreKmRRMddOa00Jo43H8v1EX5 bfHL9oikiCJoQiM6Pdmn3XKdp+iY8oirI+opT3C6oSoyQ8564Obs8D4QPahmR1bj SPyk+RWI7jfgPoeBMZ+HBnhAm5Cc9kr4lV5xV6I+/85+4zAikvsqDZTS+1Up0MX0 KoZ94rbUJFdUaLKAL7Ml7MgXC9XLFPDkvDyInaAdxoT6DpGcsxgMv7prQpD1NdPe 28A+yGjA1PigQNon48s1JuBf72jm5Vs= -----END CERTIFICATE-----Generated at Thu Aug 20 23:38:50 2026 by rpki-client