$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa File: ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa (raw, json) Hash identifier: 65mC5cCZTGMLLe8S5gZjoAMIuDW+VH6KtKyiUXFlGQE= Subject key identifier: 86:83:BE:2E:30:05:37:CF:21:8D:BA:CB:B6:BE:5F:44:95:83:6D:C5 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584EA7879938A570969B7A54E280 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21669 IP address blocks: 209.212.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:99:38:a5:70:96:9b:7a:54:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=12e8a5dd-7d31-4b9f-a9e0-f8a688e44deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:0b:5d:55:c7:67:c4:70:96:42:97:f5:9e: 2a:59:c5:07:2c:81:0c:0f:be:b2:77:60:ce:f4:d1: 52:47:eb:c5:1b:0c:d6:07:73:76:8c:6f:f2:8b:f0: 5f:f4:8b:8a:4f:b4:53:61:c1:d3:ed:c7:05:8c:64: 6f:a0:8d:48:12:ba:cc:57:81:7c:96:72:20:d8:35: c3:ba:63:83:ba:73:b5:42:de:36:df:ef:69:ef:8e: 74:8f:28:da:50:07:20:5c:eb:2c:c4:08:80:29:e9: 52:c7:5d:dc:43:76:79:f5:75:11:e6:69:52:34:df: 0c:6e:ce:48:4f:a4:a6:e3:a3:6e:2c:01:8e:2a:14: 68:66:f9:99:90:a9:56:ff:2a:22:2e:79:15:6f:46: cd:f1:67:9c:e8:35:d0:73:84:0e:f2:4f:b8:c9:8a: 5b:83:53:3d:f8:97:fb:e7:25:0d:a8:60:62:ff:fe: 89:32:ed:cf:f5:95:55:00:2e:ac:b0:3d:23:45:e1: 8e:4e:c2:24:7d:be:31:e2:bb:54:ee:9f:d8:e9:3a: 7b:28:81:f7:b8:f6:96:c0:dc:bd:c4:65:eb:02:18: ca:4c:3b:4e:6f:88:03:33:ea:fb:98:1b:60:b4:24: d2:b6:18:9a:e8:ec:01:c7:0d:94:80:92:5b:ad:25: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:BE:2E:30:05:37:CF:21:8D:BA:CB:B6:BE:5F:44:95:83:6D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:72:28:94:7b:f2:0b:42:09:ab:5d:26:84:a7:5b:c8:f6:f4: 03:bd:5e:8b:75:a2:ff:2c:3e:c1:3e:a3:2c:4d:a4:bb:37:08: 09:b3:17:9a:df:90:9a:00:d2:f6:99:13:b3:84:5c:a9:c7:c7: b6:6c:63:93:68:4d:4e:14:c2:1a:75:6a:3e:64:07:44:e1:7f: 63:dd:af:aa:5c:72:da:0f:18:40:99:cd:56:13:5c:6a:ab:75: b1:90:31:35:2e:a8:59:2a:95:88:ff:04:98:0d:11:6f:64:97: 07:a1:40:a1:fb:60:d9:eb:57:8d:91:46:59:ac:4d:1d:f9:ad: d2:27:94:06:ef:bf:08:48:3b:f9:1f:72:e1:7e:0e:21:4b:ef: ca:6d:6e:74:ba:b5:30:7e:fb:d2:88:73:31:23:20:11:55:1d: 27:26:d9:1c:df:c5:52:79:3d:d0:44:91:24:59:56:32:7f:83: c6:63:bf:bc:d7:4a:fb:58:4d:c5:02:c8:87:4f:66:c5:3c:04: e5:a5:71:ae:6d:63:e5:23:6e:a6:93:8f:92:4f:cf:a5:db:00: 81:59:cb:58:37:8f:f6:7c:12:72:f7:30:08:a5:41:af:9c:01: 6e:d8:b4:04:96:53:24:cc:05:97:f9:b4:19:af:7e:f2:bf:82: d0:ed:68:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5k4pXCWm3pU4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTJlOGE1ZGQtN2QzMS00YjlmLWE5ZTAtZjhhNjg4ZTQ0ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlasLXVXHZ8RwlkKX9Z4qWcUHLIEMD76yd2DO 9NFSR+vFGwzWB3N2jG/yi/Bf9IuKT7RTYcHT7ccFjGRvoI1IErrMV4F8lnIg2DXD umODunO1Qt423+9p7450jyjaUAcgXOssxAiAKelSx13cQ3Z59XUR5mlSNN8Mbs5I T6Sm46NuLAGOKhRoZvmZkKlW/yoiLnkVb0bN8Wec6DXQc4QO8k+4yYpbg1M9+Jf7 5yUNqGBi//6JMu3P9ZVVAC6ssD0jReGOTsIkfb4x4rtU7p/Y6Tp7KIH3uPaWwNy9 xGXrAhjKTDtOb4gDM+r7mBtgtCTSthia6OwBxw2UgJJbrSWBHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaDvi4wBTfPIY26y7a+X0SVg23FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvY2E3ZjdjMTYtOGJjZS0z MGEyLWI1ZGUtNjhjZTQ3YThkNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxyKJR78gtCCatdJoSnW8j29AO9Xot1ov8sPsE+oyxNpLs3CAmzF5rf kJoA0vaZE7OEXKnHx7ZsY5NoTU4Uwhp1aj5kB0Thf2Pdr6pcctoPGECZzVYTXGqr dbGQMTUuqFkqlYj/BJgNEW9klwehQKH7YNnrV42RRlmsTR35rdInlAbvvwhIO/kf cuF+DiFL78ptbnS6tTB++9KIczEjIBFVHScm2RzfxVJ5PdBEkSRZVjJ/g8Zjv7zX SvtYTcUCyIdPZsU8BOWlca5tY+UjbqaTj5JPz6XbAIFZy1g3j/Z8EnL3MAilQa+c AW7YtASWUyTMBZf5tBmvfvK/gtDtaJs= -----END CERTIFICATE-----Generated at Mon Aug 31 10:23:32 2026 by rpki-client