$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa File: fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa (raw, json) Hash identifier: bkGP5gtLhKqB0J1zKipDcq2PyKWfitxM7VngidgMipM= Subject key identifier: 7A:14:46:C0:24:95:AF:7A:BB:04:BE:F9:B2:05:C2:0B:EF:7D:74:43 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584F4989769CEDF6C65D0E304D00 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40509 IP address blocks: 37.16.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:76:9c:ed:f6:c6:5d:0e:30:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8fa2e15-c7bf-4d40-a722-7173e9cba60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:24:64:0d:4f:4d:ed:aa:e5:ea:49:9d:c1: 6a:77:b3:61:b2:2f:be:2d:0e:32:88:1b:9b:75:f5: 02:a1:a8:15:e1:19:51:20:69:73:ad:34:c5:4c:7a: 7c:54:ed:16:c1:80:e3:fd:06:e9:aa:4f:5a:ef:82: c0:20:e5:c5:14:44:8c:e8:23:ee:d0:e3:75:28:23: ae:6d:d3:9b:90:29:bd:64:0f:e8:71:ee:8c:fe:79: 8b:91:a2:e6:09:54:2b:0b:b8:a5:5b:8b:04:e8:34: 5d:a6:ff:7f:ac:c5:b0:ef:ce:43:32:a3:0d:60:7d: 49:28:cc:f8:7f:c6:5d:a0:85:79:18:cb:d4:66:6c: eb:61:ba:d5:3e:5c:fa:4a:3c:41:46:46:67:15:05: 11:ad:b5:da:8f:96:44:f1:37:f2:ac:eb:15:66:4a: 95:9e:8a:f9:08:49:1c:2a:4b:05:73:b6:66:8e:af: e7:8c:d3:38:6a:36:98:14:af:33:e4:3f:56:19:83: 11:2a:d3:6e:fc:7e:74:74:82:d1:9f:23:f4:c1:f4: 55:97:e5:5b:50:41:67:be:68:3f:c3:ae:6c:db:ca: 45:7e:71:cd:0f:c9:72:33:0c:99:27:c4:f8:98:9a: 45:97:d6:64:74:f4:c6:5a:00:52:85:92:bd:23:28: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:46:C0:24:95:AF:7A:BB:04:BE:F9:B2:05:C2:0B:EF:7D:74:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 37.16.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c8:91:f7:85:6f:00:e9:cf:72:2e:4d:12:16:99:29:b8:4a: 46:e7:15:16:03:cd:3d:a7:e6:fe:c7:b8:64:43:a8:9d:44:52: d0:93:de:3c:65:e1:a9:bd:1e:90:c0:95:bc:25:1a:7e:d0:46: 17:44:8c:51:9a:39:c0:ee:78:59:54:1a:8f:c4:ef:8c:16:85: 11:e0:f6:3a:32:92:a0:ef:b0:23:93:92:81:87:14:fe:72:22: 59:4a:a7:94:1e:49:14:ee:1b:76:d1:fd:c3:0a:b3:73:fd:21: a1:a9:07:88:bb:d8:b8:76:ec:a4:31:e1:2f:20:a8:48:75:8e: c8:0d:c7:4c:44:3a:81:9d:e4:eb:71:99:9c:3d:1d:21:bb:dc: 54:2b:3b:07:c5:70:09:82:ee:19:28:ee:36:5b:7a:dc:cc:30: 06:bc:50:ba:0f:4f:45:e9:34:2b:5e:7b:83:20:22:91:eb:03: 57:00:ba:f2:7a:b8:2c:e7:6e:55:b9:40:9c:5f:6f:62:72:c1: bf:ea:08:03:90:c7:33:4f:4b:16:57:50:76:45:f1:cf:fc:6a: 2e:c2:ef:44:a4:34:4e:33:af:79:80:a8:b1:2c:4a:fc:07:e1: ca:ee:68:75:8c:52:02:fb:f4:a6:61:d6:aa:2a:77:45:d4:08: 45:30:62:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiXac7fbGXQ4wTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhmYTJlMTUtYzdiZi00ZDQwLWE3MjItNzE3M2U5Y2JhNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXAkZA1PTe2q5epJncFqd7Nhsi++LQ4yiBub dfUCoagV4RlRIGlzrTTFTHp8VO0WwYDj/Qbpqk9a74LAIOXFFESM6CPu0ON1KCOu bdObkCm9ZA/oce6M/nmLkaLmCVQrC7ilW4sE6DRdpv9/rMWw785DMqMNYH1JKMz4 f8ZdoIV5GMvUZmzrYbrVPlz6SjxBRkZnFQURrbXaj5ZE8TfyrOsVZkqVnor5CEkc KksFc7Zmjq/njNM4ajaYFK8z5D9WGYMRKtNu/H50dILRnyP0wfRVl+VbUEFnvmg/ w65s28pFfnHND8lyMwyZJ8T4mJpFl9ZkdPTGWgBShZK9Iyh9jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoURsAkla96uwS++bIFwgvvfXRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZmI3MGI0MWYtYmM3Ny0z Yzc0LThkMWMtMGRhYzBmMmMxYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJRAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfIkfeFbwDpz3IuTRIWmSm4SkbnFRYDzT2n5v7HuGRDqJ1EUtCT3jxl 4am9HpDAlbwlGn7QRhdEjFGaOcDueFlUGo/E74wWhRHg9joykqDvsCOTkoGHFP5y IllKp5QeSRTuG3bR/cMKs3P9IaGpB4i72Lh27KQx4S8gqEh1jsgNx0xEOoGd5Otx mZw9HSG73FQrOwfFcAmC7hko7jZbetzMMAa8ULoPT0XpNCtee4MgIpHrA1cAuvJ6 uCznblW5QJxfb2Jywb/qCAOQxzNPSxZXUHZF8c/8ai7C70SkNE4zr3mAqLEsSvwH 4cruaHWMUgL79KZh1qoqd0XUCEUwYrI= -----END CERTIFICATE-----Generated at Sun Oct 11 16:53:10 2026 by rpki-client