$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa File: 016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa (raw, json) Hash identifier: 2nGLkOYRFGvW6CNzOLiGD1d8jBwurCHZBoFTvR9S8JM= Subject key identifier: 31:C8:65:29:26:06:86:F0:30:87:56:AA:F5:81:58:23:61:1B:0C:94 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ED9C73BEC03B63AB71BA09380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 174 IP address blocks: 209.250.114.0/24 maxlen: 24 209.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3b:ec:03:b6:3a:b7:1b:a0:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=da5d0328-2f8c-40f3-915c-a1b9da97643b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:4d:76:1a:1a:24:55:d8:d9:a9:c7:cd:d2: 58:c9:c2:63:69:f6:01:2b:60:0d:8b:1c:e0:da:10: 6d:d1:9f:3b:0d:4d:39:22:05:34:57:71:0a:e9:19: a6:8e:3c:7c:3d:2c:f5:ea:36:2b:75:ec:a5:66:b9: 52:e4:29:8e:b0:f9:af:c8:31:9b:f2:02:76:74:9a: 29:be:f3:01:e6:2f:3f:aa:c1:66:4d:d9:97:b8:b6: 0e:5a:ab:bd:bf:32:17:48:ca:66:c3:f2:75:73:72: 9f:90:bc:e8:94:e2:60:41:22:39:c1:10:dc:bf:e6: 5a:0a:9c:ff:19:75:be:ac:e8:3c:86:c1:ab:a2:f8: 2e:d3:a5:9c:33:3e:ec:58:e6:32:25:66:11:b6:e9: 4d:73:04:ea:1d:91:71:4b:bb:c9:15:ba:13:b5:64: 0d:3a:d3:3d:af:f3:e3:75:ea:ea:33:75:8b:a8:e5: 87:ce:67:dc:82:c0:21:9f:21:5a:f0:c1:a4:a4:96: f4:56:a7:bd:ae:62:f5:d5:6d:3e:0e:81:60:84:df: 90:36:7b:aa:5d:79:e1:aa:84:41:19:a1:13:b7:47: 26:4f:0f:91:fa:9e:e2:5f:4d:47:97:bc:87:96:93: c6:61:5f:7c:99:d2:93:f5:cb:de:a1:0c:72:5d:f6: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:65:29:26:06:86:F0:30:87:56:AA:F5:81:58:23:61:1B:0C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.250.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:eb:c0:0a:c3:2d:c6:61:cb:51:09:fa:2c:1b:b4:13:bd:52: 48:a7:05:31:13:35:7c:54:04:3d:a2:9c:d8:6d:5b:6a:78:02: ba:47:2c:0a:5a:73:2f:e2:0e:d0:24:b1:14:41:d2:86:cf:e8: 54:8f:d6:85:98:9e:a7:a6:1a:d9:81:0a:12:2f:f0:c5:cf:3b: 58:9c:1b:ad:d7:17:29:77:bc:c3:0a:db:13:2d:f1:95:9f:af: ae:1b:8b:e6:ca:c9:43:0a:a2:a4:65:8a:a4:53:a5:7e:30:2e: 2a:25:f6:e7:f8:ed:c1:41:eb:53:66:1d:96:e2:76:bc:bc:fe: dc:96:79:ff:fe:19:be:e8:f0:ba:80:65:20:69:ee:78:2b:59: 41:c0:e0:b9:ed:9e:80:95:2b:23:dc:df:b3:7e:fa:0c:7b:da: 23:a5:0c:7a:e4:a2:f1:59:21:8d:b2:ff:e0:47:2f:4d:21:7c: ac:75:54:79:c8:9f:1b:95:67:ec:a7:2b:07:30:90:0e:f9:f4: 42:13:e0:41:c9:83:fa:d2:0a:cb:87:c8:c1:41:e7:ba:b6:d2: b1:b9:05:e0:1b:be:76:3a:d1:6d:09:e9:09:e1:51:fc:96:24: ac:7d:3b:df:f5:c6:b4:cc:46:b8:82:28:da:9a:f3:23:af:e8: 6f:76:1d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ZxzvsA7Y6txugk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZGE1ZDAzMjgtMmY4Yy00MGYzLTkxNWMtYTFiOWRhOTc2NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk89NdhoaJFXY2anHzdJYycJjafYBK2ANixzg 2hBt0Z87DU05IgU0V3EK6Rmmjjx8PSz16jYrdeylZrlS5CmOsPmvyDGb8gJ2dJop vvMB5i8/qsFmTdmXuLYOWqu9vzIXSMpmw/J1c3KfkLzolOJgQSI5wRDcv+ZaCpz/ GXW+rOg8hsGrovgu06WcMz7sWOYyJWYRtulNcwTqHZFxS7vJFboTtWQNOtM9r/Pj derqM3WLqOWHzmfcgsAhnyFa8MGkpJb0Vqe9rmL11W0+DoFghN+QNnuqXXnhqoRB GaETt0cmTw+R+p7iX01Hl7yHlpPGYV98mdKT9cveoQxyXfZPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHIZSkmBobwMIdWqvWBWCNhGwyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDE2YzQ4YjEtMDhlNy0z ZmIzLTlhN2QtMzA0NmExY2RjMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fpyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrrwArDLcZhy1EJ+iwbtBO9UkinBTETNXxUBD2inNhtW2p4ArpHLApa cy/iDtAksRRB0obP6FSP1oWYnqemGtmBChIv8MXPO1icG63XFyl3vMMK2xMt8ZWf r64bi+bKyUMKoqRliqRTpX4wLiol9uf47cFB61NmHZbidry8/tyWef/+Gb7o8LqA ZSBp7ngrWUHA4LntnoCVKyPc37N++gx72iOlDHrkovFZIY2y/+BHL00hfKx1VHnI nxuVZ+ynKwcwkA759EIT4EHJg/rSCsuHyMFB57q20rG5BeAbvnY60W0J6QnhUfyW JKx9O9/1xrTMRriCKNqa8yOv6G92HTM= -----END CERTIFICATE-----Generated at Tue Aug 25 19:38:06 2026 by rpki-client