$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa File: 970cd30d-74be-33f9-a710-baa0ae6de29e.roa (raw, json) Hash identifier: 5s/g2QNBH266AuVGQwooKaAiFhdvh/AP2u5puuZ+5F8= Subject key identifier: 11:B7:34:6A:8E:56:26:26:B1:AB:BB:38:E6:E1:A1:69:03:B8:60:FD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E3E5F2F562D74F1739799AE80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 21859 IP address blocks: 216.132.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:2f:56:2d:74:f1:73:97:99:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=b96b63f8-150b-40e9-8d30-a5a9c9480d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:57:79:df:96:c7:9c:67:5d:c5:57:dc:fa: b4:83:34:5e:bf:7c:91:b2:80:ef:b3:dc:2a:78:3f: 72:b1:90:81:89:90:76:0b:69:d4:ca:17:5d:5e:d1: e7:e7:ff:58:77:a8:d7:d3:0e:6b:11:cc:04:6d:94: 24:2f:de:86:1f:23:18:2f:86:08:61:e4:45:29:fc: 1c:cc:fd:42:08:1c:f6:ff:04:8b:72:b9:8c:3c:d2: 26:d4:28:0b:25:c9:ae:c3:85:a1:48:0c:a7:38:40: 09:64:97:7c:89:06:0d:2d:e0:3a:a1:d5:34:56:ce: 14:6a:cd:3a:56:30:df:7d:8e:b6:b4:a0:6c:9a:77: e8:b9:7c:6d:71:b6:ac:2c:43:f7:bb:10:55:59:31: 13:43:b8:8c:c1:88:b1:18:e3:fb:17:e8:57:38:fd: d2:9f:7f:fa:7b:32:79:11:65:26:c7:bc:08:c6:ec: e3:51:42:b2:9c:9e:68:86:5c:ad:47:35:4d:b4:15: 03:33:dd:d2:3d:44:03:5e:3e:c7:8b:fa:7a:8b:fe: f3:7b:fc:a0:dd:2d:a3:95:ba:6a:37:82:ea:02:6f: aa:eb:cc:a6:99:00:4b:d7:a6:dd:75:13:ef:2a:5c: ff:a7:38:c9:1f:2e:43:e0:57:8d:1d:87:82:bb:ae: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B7:34:6A:8E:56:26:26:B1:AB:BB:38:E6:E1:A1:69:03:B8:60:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0b:32:2f:6c:a2:a7:d8:4b:ac:04:ac:99:88:c3:3c:51:67: 1a:4c:cd:61:20:1f:aa:86:ab:09:ea:0a:89:75:82:31:d6:06: 46:11:fe:c7:6f:42:13:a5:30:94:42:05:d2:3c:be:4e:8c:56: 0a:16:b9:cf:db:e4:85:33:8f:ec:b3:90:65:c9:d3:b9:c3:30: 4a:bc:72:1c:a9:1d:46:d3:b0:a6:e3:29:e8:fe:f9:c8:b3:43: d4:75:cc:4a:53:cb:28:66:62:07:31:5f:7a:05:38:1e:88:f3: da:96:ed:be:5c:47:04:b7:02:89:ed:3c:29:f2:d2:13:63:07: a7:3c:69:70:22:e6:f0:3c:e1:03:0f:59:26:71:6a:d3:99:69: 3e:e8:b4:94:48:d8:7e:3c:8b:ba:e4:cb:07:48:d0:a1:a0:c2: d9:07:4e:1b:a2:0c:fe:01:ec:9a:09:f1:65:a2:da:14:42:da: cd:6f:4c:1d:3e:f4:76:41:65:03:d0:72:c5:2b:da:a9:97:a7: 47:17:11:78:62:cd:01:77:b1:f3:d5:9c:61:48:a1:72:78:1d: 0c:16:65:a1:ea:2a:c2:57:a9:16:cd:35:bb:7f:98:ff:6b:d1: 31:fc:36:f0:74:da:60:12:b0:06:28:4c:f5:6a:63:2e:2b:34: 28:33:8b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xy9WLXTxc5eZroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk Yjk2YjYzZjgtMTUwYi00MGU5LThkMzAtYTVhOWM5NDgwZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWZXed+Wx5xnXcVX3Pq0gzRev3yRsoDvs9wq eD9ysZCBiZB2C2nUyhddXtHn5/9Yd6jX0w5rEcwEbZQkL96GHyMYL4YIYeRFKfwc zP1CCBz2/wSLcrmMPNIm1CgLJcmuw4WhSAynOEAJZJd8iQYNLeA6odU0Vs4Uas06 VjDffY62tKBsmnfouXxtcbasLEP3uxBVWTETQ7iMwYixGOP7F+hXOP3Sn3/6ezJ5 EWUmx7wIxuzjUUKynJ5ohlytRzVNtBUDM93SPUQDXj7Hi/p6i/7ze/yg3S2jlbpq N4LqAm+q68ymmQBL16bddRPvKlz/pzjJHy5D4FeNHYeCu66/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG3NGqOViYmsau7OObhoWkDuGD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTcwY2QzMGQtNzRiZS0z M2Y5LWE3MTAtYmFhMGFlNmRlMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsLMi9soqfYS6wErJmIwzxRZxpMzWEgH6qGqwnqCol1gjHWBkYR/sdv QhOlMJRCBdI8vk6MVgoWuc/b5IUzj+yzkGXJ07nDMEq8chypHUbTsKbjKej++ciz Q9R1zEpTyyhmYgcxX3oFOB6I89qW7b5cRwS3AontPCny0hNjB6c8aXAi5vA84QMP WSZxatOZaT7otJRI2H48i7rkywdI0KGgwtkHThuiDP4B7JoJ8WWi2hRC2s1vTB0+ 9HZBZQPQcsUr2qmXp0cXEXhizQF3sfPVnGFIoXJ4HQwWZaHqKsJXqRbNNbt/mP9r 0TH8NvB02mASsAYoTPVqYy4rNCgzixM= -----END CERTIFICATE-----Generated at Fri Jul 10 13:50:43 2026 by rpki-client