$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa File: e21f367a-40c1-3c90-b30a-ec98806099f3.roa (raw, json) Hash identifier: 1seIH2RwInjnGz34UkXsxZF9+CvqGsK6CBiAxQJ9sck= Subject key identifier: C3:E8:32:11:8B:CF:DD:43:37:CA:82:87:BD:F2:4B:04:F3:E9:CA:42 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E482491E799091F58AF399808 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 16696 IP address blocks: 216.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:91:e7:99:09:1f:58:af:39:98:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=44aa8e8e-ad06-4dc7-87a0-620d71ec3b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:dd:f8:bd:1f:04:07:a9:31:05:8b:15:e2: f4:de:0d:46:6d:cf:8d:e3:c8:af:9f:46:7c:ac:9e: cc:0c:57:f0:da:04:2c:c7:a4:e2:db:53:97:a9:b5: 4c:b5:72:74:64:35:b3:cc:29:d3:f5:8c:53:72:fb: 2d:7e:20:22:42:e4:f7:cb:db:a0:ca:fa:5b:aa:c7: 3e:06:d6:fe:97:69:2b:c0:34:84:a8:31:62:20:45: 9a:04:63:73:45:d7:be:d6:f4:69:0d:8e:63:c2:5f: 66:5e:9b:4c:7a:b8:a3:9c:65:97:28:55:bf:e2:1e: 06:90:18:20:c7:46:1a:4e:51:0e:a2:a3:08:8d:17: f9:79:9d:88:2a:73:d7:e8:0f:df:49:72:f2:81:ff: 3b:25:72:83:89:44:76:03:af:a5:41:25:b7:ac:60: db:61:43:bc:f1:d9:b9:22:1e:c1:9d:24:e4:4e:b7: 0d:2f:a6:2d:db:f1:7b:74:3b:c8:3d:30:35:f7:90: 30:22:cb:6b:22:3f:2e:c8:ec:f2:bb:7b:28:fb:e5: b3:f9:2b:43:fb:f4:a2:49:f4:9d:02:07:c5:a1:f3: cb:63:66:a9:c5:55:55:39:45:54:c1:b5:53:77:cd: 97:7e:49:23:c9:dd:97:48:ac:9f:3e:73:82:31:fe: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:32:11:8B:CF:DD:43:37:CA:82:87:BD:F2:4B:04:F3:E9:CA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a4:b9:a1:c3:9b:70:48:81:9b:2c:33:36:38:cc:b4:37:31: 0c:26:86:4a:ac:52:4d:2c:2d:5e:f5:aa:f2:9b:48:39:02:ea: b1:d1:d2:d1:aa:99:12:8a:ca:03:30:35:f1:46:df:27:85:b4: 14:e1:e2:81:0e:82:09:5a:88:66:6a:1a:c3:de:76:23:fc:7c: d6:40:8e:69:23:b4:a8:ab:c2:8b:4a:22:2e:93:c9:56:a9:5d: 72:6f:a2:4e:ce:5f:62:39:13:ab:1d:62:00:d1:14:cc:a5:84: a0:e1:17:d1:b1:fb:b9:f6:0d:8e:cc:ed:ea:43:79:a7:67:b0: 04:c2:1d:0b:e0:3e:8f:f0:3f:6a:de:08:fa:79:65:a0:6f:ed: a8:4e:0d:12:8a:7f:23:f4:81:9d:1e:ae:4b:59:a2:f0:34:a5: 36:f4:e8:24:1f:48:e4:d7:81:7a:ea:9c:64:c8:55:9c:5a:c8: 32:cc:3d:46:d1:f3:0a:18:33:4f:0b:e9:df:b0:3a:7b:16:12: 74:d1:c9:e8:e5:c8:2d:ff:6e:bd:e1:52:1e:17:cc:f6:11:f7: c6:3f:d0:08:85:93:96:6e:15:18:92:5d:11:7c:2c:68:6f:df: 62:60:54:c8:9c:4d:ca:85:e9:63:2b:10:9e:d0:be:05:27:47: 44:99:fd:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJHnmQkfWK85mAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk NDRhYThlOGUtYWQwNi00ZGM3LTg3YTAtNjIwZDcxZWMzYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvrd+L0fBAepMQWLFeL03g1Gbc+N48ivn0Z8 rJ7MDFfw2gQsx6Ti21OXqbVMtXJ0ZDWzzCnT9YxTcvstfiAiQuT3y9ugyvpbqsc+ Btb+l2krwDSEqDFiIEWaBGNzRde+1vRpDY5jwl9mXptMerijnGWXKFW/4h4GkBgg x0YaTlEOoqMIjRf5eZ2IKnPX6A/fSXLygf87JXKDiUR2A6+lQSW3rGDbYUO88dm5 Ih7BnSTkTrcNL6Yt2/F7dDvIPTA195AwIstrIj8uyOzyu3so++Wz+StD+/SiSfSd AgfFofPLY2apxVVVOUVUwbVTd82Xfkkjyd2XSKyfPnOCMf4/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPoMhGLz91DN8qCh73ySwTz6cpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTIxZjM2N2EtNDBjMS0z YzkwLWIzMGEtZWM5ODgwNjA5OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKkuaHDm3BIgZssMzY4zLQ3MQwmhkqsUk0sLV71qvKbSDkC6rHR0tGq mRKKygMwNfFG3yeFtBTh4oEOgglaiGZqGsPediP8fNZAjmkjtKirwotKIi6TyVap XXJvok7OX2I5E6sdYgDRFMylhKDhF9Gx+7n2DY7M7epDeadnsATCHQvgPo/wP2re CPp5ZaBv7ahODRKKfyP0gZ0erktZovA0pTb06CQfSOTXgXrqnGTIVZxayDLMPUbR 8woYM08L6d+wOnsWEnTRyejlyC3/br3hUh4XzPYR98Y/0AiFk5ZuFRiSXRF8LGhv 32JgVMicTcqF6WMrEJ7QvgUnR0SZ/XM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:03 2026 by rpki-client