$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa File: b1db16d0-d799-3d3f-bd91-72670a42a56f.roa (raw, json) Hash identifier: 0pkW1BHy3KDsMkZEGKvnogSNTYcXo8kt/0dwyJ1EWYM= Subject key identifier: 2B:A2:FD:6A:91:06:18:82:D3:9D:61:38:9F:F3:D3:68:E0:65:A1:58 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EED52023B3A47220BB60C1120 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 6643 IP address blocks: 173.199.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:02:3b:3a:47:22:0b:b6:0c:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=0d06e2d7-1656-4daf-b247-89e8be0a1966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:c5:70:3b:90:c1:65:dd:fa:f1:5a:96:98: 57:2e:0c:8f:40:62:9f:d7:e2:34:8c:26:0d:2d:c8: 88:76:4f:88:6a:c9:72:c9:c2:94:11:94:29:eb:a9: 0b:2c:69:4e:08:3e:4e:f8:5a:2c:28:a6:c0:24:4c: 56:50:a6:14:a1:a6:7c:ad:11:19:5f:b9:6a:2e:a7: 3c:a9:9d:6f:c6:3f:2c:c9:f0:85:95:e4:f4:3e:52: f8:a1:92:91:0f:4f:f1:5c:aa:81:12:4e:82:ee:85: 37:79:70:cf:bd:ca:ff:ec:a4:28:fb:37:e9:a6:58: ed:0f:92:48:eb:58:40:10:a3:93:e5:87:69:ca:68: 6d:84:87:5d:20:46:13:bf:9f:4c:2a:39:6c:d9:47: d8:98:11:79:11:64:4a:e9:f2:19:e6:a8:08:8d:81: 0f:5f:74:d0:6f:58:3d:ba:46:1a:e2:bc:1b:2b:59: 8e:7b:66:49:c8:83:93:e5:60:ce:10:12:eb:f1:2b: 5b:db:66:8a:38:3f:c8:90:06:5f:5e:3e:88:64:5b: a5:0c:93:dd:fb:1b:fc:c1:9e:51:4a:e6:03:b1:0c: 9a:2f:d6:b6:18:02:63:30:e9:a4:ab:3a:75:f2:e6: 13:2c:6c:36:bd:be:dd:ee:75:30:d8:1e:0c:85:bd: 26:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:FD:6A:91:06:18:82:D3:9D:61:38:9F:F3:D3:68:E0:65:A1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:b0:de:8b:06:86:c5:60:fb:c4:16:cf:ed:4f:19:85:bb:da: 05:1d:52:e6:10:61:2d:78:1b:c7:a2:de:a6:a0:38:96:d8:fa: 37:15:2f:37:7d:4a:e6:35:d0:d5:f5:d1:f1:28:64:35:53:9c: f5:74:08:69:b7:b0:b2:81:2c:ad:bf:e3:10:30:2e:fe:f2:cd: 74:76:35:2f:44:ab:93:42:f7:0b:73:d6:60:f0:1c:85:d7:2d: a0:7b:88:f8:c4:de:5f:e8:43:22:c9:0d:f5:c6:69:80:39:f3: 60:e7:a9:3a:50:38:07:2d:31:41:de:ee:d1:db:8e:ad:4f:aa: e5:24:4c:61:61:78:48:b3:51:61:47:c3:9d:83:1a:6f:4f:0c: fc:d8:61:f0:41:2b:ac:c8:ee:9b:84:61:79:fd:81:2a:cb:aa: 73:27:32:c2:95:7e:83:a8:14:bd:11:bf:ae:65:e3:39:d5:35: ad:c0:c8:58:e2:fa:bb:a5:a2:2d:ab:c6:36:14:4e:ca:1f:f8: 99:5a:b5:44:9d:2d:0d:fb:68:d6:63:83:21:34:6d:9a:0f:1e: 64:29:4d:0d:df:a1:05:76:5b:3b:df:1e:93:c8:30:d4:a3:e8: db:e7:b1:a5:47:8e:f0:8b:ab:ec:36:05:2b:b1:09:6f:e4:22: 69:79:00:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgI7OkciC7YMESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MGQwNmUyZDctMTY1Ni00ZGFmLWIyNDctODllOGJlMGExOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkbFcDuQwWXd+vFalphXLgyPQGKf1+I0jCYN LciIdk+IaslyycKUEZQp66kLLGlOCD5O+FosKKbAJExWUKYUoaZ8rREZX7lqLqc8 qZ1vxj8syfCFleT0PlL4oZKRD0/xXKqBEk6C7oU3eXDPvcr/7KQo+zfppljtD5JI 61hAEKOT5YdpymhthIddIEYTv59MKjls2UfYmBF5EWRK6fIZ5qgIjYEPX3TQb1g9 ukYa4rwbK1mOe2ZJyIOT5WDOEBLr8Stb22aKOD/IkAZfXj6IZFulDJPd+xv8wZ5R SuYDsQyaL9a2GAJjMOmkqzp18uYTLGw2vb7d7nUw2B4Mhb0mCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCui/WqRBhiC051hOJ/z02jgZaFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjFkYjE2ZDAtZDc5OS0z ZDNmLWJkOTEtNzI2NzBhNDJhNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmw3osGhsVg+8QWz+1PGYW72gUdUuYQYS14G8ei3qagOJbY+jcVLzd9 SuY10NX10fEoZDVTnPV0CGm3sLKBLK2/4xAwLv7yzXR2NS9Eq5NC9wtz1mDwHIXX LaB7iPjE3l/oQyLJDfXGaYA582DnqTpQOActMUHe7tHbjq1PquUkTGFheEizUWFH w52DGm9PDPzYYfBBK6zI7puEYXn9gSrLqnMnMsKVfoOoFL0Rv65l4znVNa3AyFji +ruloi2rxjYUTsof+JlatUSdLQ37aNZjgyE0bZoPHmQpTQ3foQV2WzvfHpPIMNSj 6NvnsaVHjvCLq+w2BSuxCW/kIml5ABk= -----END CERTIFICATE-----Generated at Sat Aug 29 09:05:48 2026 by rpki-client