$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa File: 3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa (raw, json) Hash identifier: is/Nao9PXYwgjrb9IX6ud+dxx48SEw9bJfjXL8BNi9Y= Subject key identifier: 81:16:F2:F3:EC:C9:D9:98:1F:8E:9F:81:26:3C:46:BD:F8:E6:F2:07 Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584E48247C49515DB29BE13DA880 Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 174 IP address blocks: 216.226.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:7c:49:51:5d:b2:9b:e1:3d:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=3ea89560-adfd-4cde-b425-b4dd2f8c0e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:8d:67:91:06:73:5d:b2:0e:62:d2:46:ab: 2c:18:dc:3f:29:2d:25:5e:be:1e:55:9c:95:19:ff: 3c:57:15:4c:60:31:b1:74:e9:5f:19:d8:93:a0:d6: e5:0b:1c:0c:68:84:d3:a8:c5:9b:80:35:1b:78:d9: 65:ef:03:77:7a:de:8b:56:82:b5:71:fb:86:9e:31: 21:62:1a:79:e9:33:df:1f:d8:d6:d3:ee:5d:69:9d: e6:d9:1a:82:c7:53:b8:14:d9:71:ae:96:5f:89:95: 29:76:ba:47:bb:b1:09:df:39:ab:25:50:6c:d6:6a: d0:00:3e:7c:99:8a:61:89:77:9b:d7:52:39:c1:ba: f8:83:48:fd:6c:ed:86:b9:e5:56:10:53:3b:36:47: 6d:2d:87:9a:ae:15:9b:fa:a6:49:45:ab:3b:3d:47: f5:3c:37:d4:4c:18:7a:10:13:09:4b:e3:64:b2:2d: 73:5a:57:be:c7:a3:ab:18:0b:db:35:c3:76:70:d1: 82:4e:fc:f9:2b:41:57:96:6e:64:89:f1:31:97:62: 0e:d8:29:ef:f5:9e:73:f5:3a:46:80:6f:d0:eb:7e: 22:b0:af:2e:2d:3e:59:6d:32:0d:63:ac:0c:c7:4f: 7d:53:1a:14:7d:99:60:45:63:10:60:22:e3:db:b8: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:16:F2:F3:EC:C9:D9:98:1F:8E:9F:81:26:3C:46:BD:F8:E6:F2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: 216.226.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:62:b4:13:e4:74:95:9f:e7:26:27:72:a9:93:5f:9e:8b:2a: 66:6a:5b:b9:81:75:b9:b2:2e:23:4a:28:2e:a7:83:bc:6c:50: 9c:48:c9:b1:d3:87:03:01:a6:e6:50:c8:0b:94:61:16:94:5d: 2b:b8:59:3f:43:52:45:91:d6:5e:da:b2:26:d4:93:02:32:7a: e4:89:49:1d:f3:78:ad:98:2a:4c:86:4c:bf:04:05:70:a5:37: e0:75:f2:f8:9f:57:e2:9c:20:e8:0d:db:7c:fa:1c:d2:94:89: ea:a8:68:d6:77:cb:2b:08:4a:1e:b8:c3:67:17:9d:d8:53:f2: 85:6d:2d:de:b9:b5:29:0e:52:16:9b:f2:1d:79:74:ba:bc:08: 4d:e1:3d:4b:58:6f:e3:ef:d4:d7:52:41:c6:76:ab:9c:e8:62: 25:f3:e6:21:69:a8:05:90:b8:53:e0:e1:0a:5f:4b:93:ad:cd: a6:bd:55:20:a7:09:7f:59:90:e5:a8:61:04:95:26:e7:47:0b: 0c:3e:c8:5d:65:9c:9a:cc:95:8e:b1:e4:5e:60:0e:b3:eb:c8: 7e:5c:79:01:89:e2:20:06:cb:ee:1b:12:9a:a7:8c:2a:30:d5: 8e:90:c1:b5:53:68:e7:6e:d9:37:1d:d8:f6:0f:8c:f2:0d:05: 4b:2a:80:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJHxJUV2ym+E9qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk M2VhODk1NjAtYWRmZC00Y2RlLWI0MjUtYjRkZDJmOGMwZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC2NZ5EGc12yDmLSRqssGNw/KS0lXr4eVZyV Gf88VxVMYDGxdOlfGdiToNblCxwMaITTqMWbgDUbeNll7wN3et6LVoK1cfuGnjEh Yhp56TPfH9jW0+5daZ3m2RqCx1O4FNlxrpZfiZUpdrpHu7EJ3zmrJVBs1mrQAD58 mYphiXeb11I5wbr4g0j9bO2GueVWEFM7NkdtLYearhWb+qZJRas7PUf1PDfUTBh6 EBMJS+Nksi1zWle+x6OrGAvbNcN2cNGCTvz5K0FXlm5kifExl2IO2Cnv9Z5z9TpG gG/Q634isK8uLT5ZbTINY6wMx099UxoUfZlgRWMQYCLj27gr2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEW8vPsydmYH46fgSY8Rr345vIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvMzE0MmViYTQtYzhkNS0z MWE1LWEyNWEtNzhkOTJkY2RiODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5itBPkdJWf5yYncqmTX56LKmZqW7mBdbmyLiNKKC6ng7xsUJxIybHT hwMBpuZQyAuUYRaUXSu4WT9DUkWR1l7asibUkwIyeuSJSR3zeK2YKkyGTL8EBXCl N+B18vifV+KcIOgN23z6HNKUieqoaNZ3yysISh64w2cXndhT8oVtLd65tSkOUhab 8h15dLq8CE3hPUtYb+Pv1NdSQcZ2q5zoYiXz5iFpqAWQuFPg4QpfS5Otzaa9VSCn CX9ZkOWoYQSVJudHCww+yF1lnJrMlY6x5F5gDrPryH5ceQGJ4iAGy+4bEpqnjCow 1Y6QwbVTaOdu2Tcd2PYPjPINBUsqgKs= -----END CERTIFICATE-----Generated at Tue Jun 30 10:20:07 2026 by rpki-client