$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: 7AqtBOAHaDtZXrABsgQA14rXYcwUDCrIi+UfRVcIHBo= Subject key identifier: D8:47:8F:48:1C:FD:E3:41:D8:59:36:04:FC:A0:D9:E0:7F:6B:B0:CD Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584EA8EC3FD1C722C8A6CCB86300 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:3f:d1:c7:22:c8:a6:cc:b8:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=d8e1bc42-f24d-470b-b1f8-004459b74597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b9:d9:01:18:7f:a4:15:ce:53:d4:19:20:af: 49:e6:ed:a6:14:29:7b:f8:6f:f1:93:30:51:22:ea: 2c:97:00:47:d8:2e:f6:48:26:09:12:e9:86:d4:94: af:bd:85:58:b2:b1:aa:4a:45:87:b7:2e:42:dd:ca: f3:4a:bf:50:4d:d0:45:41:1d:1f:c6:b5:4f:0b:4b: b6:f7:59:cb:02:04:60:41:15:86:e0:82:25:13:b6: 1f:c6:ef:c9:0b:ab:5e:cf:50:f0:cb:d1:5d:20:dd: d9:ac:50:62:66:47:32:63:e0:be:d8:5a:e4:76:5f: c8:84:5b:f6:e6:5f:3a:0b:b1:38:71:e7:71:0c:6e: aa:0a:94:c8:d4:26:5f:fc:dc:33:a7:41:66:58:c8: 82:6c:93:90:95:ba:41:ef:75:5a:79:37:45:54:60: 4c:18:13:da:74:b1:58:57:a1:52:31:02:8a:7b:47: 8e:d0:f2:1c:d9:5d:a6:dd:51:01:9d:20:63:36:56: 83:3b:3c:d7:09:04:84:e5:9c:21:46:0f:86:bd:72: 42:72:f7:1a:d4:a8:d5:b5:da:c8:64:11:aa:5d:59: 46:c9:b4:c9:0b:53:4a:7f:fd:58:a8:1b:d4:95:f2: 2f:8c:02:3e:77:2b:f4:f9:3a:a0:6d:6f:81:e1:56: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:47:8F:48:1C:FD:E3:41:D8:59:36:04:FC:A0:D9:E0:7F:6B:B0:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c2:6d:0b:0e:c0:e7:8d:85:db:09:ce:bc:9e:26:88:12:30: 90:17:0a:0a:3e:56:71:ed:e3:fd:76:8c:ed:f3:f6:4e:dd:4a: 15:da:f1:7f:14:c9:09:78:7b:4f:5b:e5:50:66:2b:a2:08:ad: c0:c9:9f:96:3b:ce:37:10:f8:0e:52:8f:22:cd:7a:9d:41:7d: 2e:dc:2b:9d:fd:3f:6c:14:ec:e8:7b:7f:ad:89:8c:d8:44:26: c6:5a:92:b9:da:bf:0c:bb:bc:5f:2b:db:1b:4e:45:40:7c:70: 68:37:05:72:44:32:59:dc:16:97:43:72:1d:a5:63:80:d8:1e: ca:6a:88:9e:c8:6c:84:37:1f:6e:9b:4e:65:7d:9e:f6:2f:ad: b1:61:36:ea:b2:03:de:4f:72:7e:ec:e1:12:5a:e6:ff:59:96: 9b:40:2a:ba:0e:b7:d6:39:f1:02:e3:04:9f:15:b0:a0:53:24: a2:98:78:46:73:74:19:e5:27:45:b7:3d:fe:c7:00:e8:ae:51: 6b:df:db:e2:00:35:25:44:a5:d5:9a:2c:e1:d5:72:fa:a9:73: 2a:f8:76:3c:8c:17:ba:0a:9d:b2:11:97:d3:d0:a9:3e:bf:84: dd:95:27:5b:1f:5c:2a:64:04:52:8a:3a:04:87:a5:ef:88:ca: ce:8c:1a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7D/RxyLIpsy4YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk ZDhlMWJjNDItZjI0ZC00NzBiLWIxZjgtMDA0NDU5Yjc0NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7nZARh/pBXOU9QZIK9J5u2mFCl7+G/xkzBR IuoslwBH2C72SCYJEumG1JSvvYVYsrGqSkWHty5C3crzSr9QTdBFQR0fxrVPC0u2 91nLAgRgQRWG4IIlE7Yfxu/JC6tez1Dwy9FdIN3ZrFBiZkcyY+C+2Frkdl/IhFv2 5l86C7E4cedxDG6qCpTI1CZf/Nwzp0FmWMiCbJOQlbpB73VaeTdFVGBMGBPadLFY V6FSMQKKe0eO0PIc2V2m3VEBnSBjNlaDOzzXCQSE5ZwhRg+GvXJCcvca1KjVtdrI ZBGqXVlGybTJC1NKf/1YqBvUlfIvjAI+dyv0+TqgbW+B4VaXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhHj0gc/eNB2Fk2BPyg2eB/a7DNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATCbQsOwOeNhdsJzryeJogSMJAXCgo+VnHt4/12jO3z9k7dShXa8X8U yQl4e09b5VBmK6IIrcDJn5Y7zjcQ+A5SjyLNep1BfS7cK539P2wU7Oh7f62JjNhE JsZakrnavwy7vF8r2xtORUB8cGg3BXJEMlncFpdDch2lY4DYHspqiJ7IbIQ3H26b TmV9nvYvrbFhNuqyA95Pcn7s4RJa5v9ZlptAKroOt9Y58QLjBJ8VsKBTJKKYeEZz dBnlJ0W3Pf7HAOiuUWvf2+IANSVEpdWaLOHVcvqpcyr4djyMF7oKnbIRl9PQqT6/ hN2VJ1sfXCpkBFKKOgSHpe+Iys6MGmU= -----END CERTIFICATE-----Generated at Thu Aug 20 00:04:44 2026 by rpki-client