$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa File: 0f0b96ca-620a-3bb2-9bbd-af2144137209.roa (raw, json) Hash identifier: DPOzRpOu+60uWuVQQJeG/ZA50uP8F6wbZ6I7KOGRPBQ= Subject key identifier: 99:BF:1A:FC:A5:A3:6B:2C:83:6C:44:80:D4:CA:AF:21:29:1C:3F:B6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ED9C75001D6F5303430D8BB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16904 IP address blocks: 216.133.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:50:01:d6:f5:30:34:30:d8:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=fc4fb35a-8738-4c1a-9efa-be6923af1c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:a2:2b:28:ef:09:80:6e:a7:1c:0e:63:ba: c3:65:13:36:fa:8e:7e:2a:0d:05:c8:29:99:1d:b2: 0e:32:25:6d:cc:12:2b:f5:c1:47:89:0b:03:19:38: 18:e3:6f:78:b2:74:ae:2b:d9:0e:2e:c6:ad:ff:9b: 1c:54:5f:18:5f:94:e0:60:40:24:ef:61:a2:35:e8: 8d:cb:f8:a5:c4:cc:5c:dd:9c:e1:b0:a1:09:cb:98: 3d:2d:b9:31:50:f7:2f:d2:d5:03:dd:de:22:c9:62: 43:52:e1:7e:34:ef:32:18:e1:d4:2b:49:52:ef:80: 89:ae:29:45:bd:9b:98:06:6c:9c:71:c1:99:e6:4a: 5c:c8:b8:d5:51:eb:b3:d4:f3:b9:3c:6d:6d:42:55: e7:df:8d:dc:91:54:40:03:dc:c1:81:92:fc:c2:1f: be:b5:9c:92:40:05:cf:ed:dc:9b:98:f9:6e:56:fe: 54:e5:b9:7f:1d:fa:ed:db:de:14:91:cf:b5:6c:35: d4:87:f1:a9:3e:ff:cd:c7:b3:ef:b7:0e:dc:d2:86: 06:65:0c:5a:05:dd:93:8e:ec:81:ce:19:57:cb:98: eb:2f:5e:6e:96:58:16:01:4e:b8:23:57:5c:63:45: fe:9d:0a:69:e6:e0:11:21:bc:80:45:39:cb:e7:b5: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BF:1A:FC:A5:A3:6B:2C:83:6C:44:80:D4:CA:AF:21:29:1C:3F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d3:cd:50:30:1b:87:ec:58:c4:1f:d5:97:f6:3b:66:5c:bb: 0a:d3:11:05:7f:b2:9f:4a:37:2e:e7:3b:3f:00:17:93:87:50: 3a:98:20:3b:72:da:a3:fc:63:f8:d4:35:f6:81:24:ec:9d:9f: 87:43:2b:43:9c:ff:11:e1:20:b6:8e:af:14:06:11:06:06:64: 81:8d:f8:c1:8a:e2:00:02:7c:5f:43:a1:c0:21:91:ae:a4:0d: 50:05:3c:b7:89:11:40:8d:a8:2b:11:4c:b8:42:0d:2b:e1:37: f2:ee:a9:fb:98:cb:f7:5b:fb:a1:6b:59:d0:b6:77:14:a2:ed: 5d:53:95:b8:43:75:40:aa:0f:42:66:5f:58:27:60:16:c9:8b: c3:0b:38:2c:4e:99:9d:fd:f7:07:da:2e:98:3b:03:b2:bf:c6: 10:b6:02:9e:d1:9c:6d:f4:4b:3a:a3:04:2e:99:6b:6b:02:f0: 5d:ab:79:f4:0a:b7:90:af:ee:7a:1c:21:4c:42:7e:63:d3:8a: f0:5a:1d:e2:1b:ec:50:92:e5:08:f1:54:bd:97:d5:9d:fe:4e: 81:cc:c6:28:4a:df:7b:15:93:8b:1a:b5:4e:7f:a1:38:06:c6: 81:2f:e7:a3:35:90:c0:a9:65:0f:8f:c0:09:5c:c2:5d:b5:b1: 03:b8:e9:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1AB1vUwNDDYu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZmM0ZmIzNWEtODczOC00YzFhLTllZmEtYmU2OTIzYWYxYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSGiKyjvCYBupxwOY7rDZRM2+o5+Kg0FyCmZ HbIOMiVtzBIr9cFHiQsDGTgY4294snSuK9kOLsat/5scVF8YX5TgYEAk72GiNeiN y/ilxMxc3ZzhsKEJy5g9LbkxUPcv0tUD3d4iyWJDUuF+NO8yGOHUK0lS74CJrilF vZuYBmycccGZ5kpcyLjVUeuz1PO5PG1tQlXn343ckVRAA9zBgZL8wh++tZySQAXP 7dybmPluVv5U5bl/Hfrt294Ukc+1bDXUh/GpPv/Nx7Pvtw7c0oYGZQxaBd2TjuyB zhlXy5jrL15ullgWAU64I1dcY0X+nQpp5uARIbyARTnL57XINQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm/Gvylo2ssg2xEgNTKryEpHD+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGYwYjk2Y2EtNjIwYS0z YmIyLTliYmQtYWYyMTQ0MTM3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErTzVAwG4fsWMQf1Zf2O2ZcuwrTEQV/sp9KNy7nOz8AF5OHUDqYIDty 2qP8Y/jUNfaBJOydn4dDK0Oc/xHhILaOrxQGEQYGZIGN+MGK4gACfF9DocAhka6k DVAFPLeJEUCNqCsRTLhCDSvhN/LuqfuYy/db+6FrWdC2dxSi7V1TlbhDdUCqD0Jm X1gnYBbJi8MLOCxOmZ399wfaLpg7A7K/xhC2Ap7RnG30SzqjBC6Za2sC8F2refQK t5Cv7nocIUxCfmPTivBaHeIb7FCS5QjxVL2X1Z3+ToHMxihK33sVk4satU5/oTgG xoEv56M1kMCpZQ+PwAlcwl21sQO46Sk= -----END CERTIFICATE-----Generated at Wed Aug 26 12:19:33 2026 by rpki-client