$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa File: 3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa (raw, json) Hash identifier: QKHQ6otcCJmNB0qT4bZ27+aqCfF3dqTZOu1pFrArYZ0= Subject key identifier: 3C:50:C5:18:A8:46:20:B9:46:46:5D:DB:3E:84:DB:E4:B6:06:D0:0C Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E9A7FBE8B6974F40D53AA8B80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 62651 IP address blocks: 216.131.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:be:8b:69:74:f4:0d:53:aa:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=395c4f3e-fbf8-4235-8812-34e0ee608083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:5f:5f:93:ac:eb:88:44:20:ac:05:de:b8: 51:0d:a2:a9:10:0a:c8:cf:ca:48:90:0e:b2:b5:96: 00:68:da:28:22:e9:b1:6b:02:61:59:22:99:2a:37: 4f:dc:08:87:34:91:c1:b1:53:d9:a8:1a:e1:34:52: cb:cd:66:4a:cf:49:86:e6:cb:ab:90:4d:c3:c5:05: 7c:e7:37:cc:46:c8:c0:24:4b:de:99:08:65:6c:c0: 3a:e5:5b:d0:72:85:42:da:ee:52:b7:bf:7f:3f:c7: 92:54:28:db:0c:20:40:91:54:7c:f9:4b:b6:96:68: 73:a6:7d:ba:e9:2a:94:ad:cb:b8:11:f6:4e:c1:cb: 12:eb:a2:aa:bd:dd:8b:da:08:6d:38:b6:13:f1:0b: 6c:69:81:25:3a:47:12:7c:7c:ea:44:5c:10:89:c4: 6b:48:c7:d7:47:82:31:f1:9e:10:8f:1f:79:11:1b: 8a:43:a3:fd:14:23:3c:0c:54:c1:53:d3:40:d0:87: 95:74:cb:bb:ed:8d:26:49:93:78:8d:d8:85:f6:c8: eb:f1:ee:c9:7f:f5:e4:fd:ad:b3:97:04:7b:fc:2e: 78:a8:87:4b:ba:60:c1:2a:46:e5:bf:05:5e:74:63: ce:f0:a9:59:77:ff:68:bd:55:bd:2c:c2:59:94:f3: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:50:C5:18:A8:46:20:B9:46:46:5D:DB:3E:84:DB:E4:B6:06:D0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7a:66:5e:ce:b7:5b:9e:bc:e1:f1:12:32:b3:af:e4:5a:71: 42:2b:32:5c:f7:c7:74:94:95:bc:71:3d:07:4f:31:a6:7c:27: ec:3c:f4:d7:7a:9d:17:06:b2:52:f0:a7:2e:a8:f3:e0:db:00: 2b:aa:83:2e:8e:1a:72:52:e4:13:e2:2b:36:58:e5:73:d0:62: ce:62:ce:30:c6:32:dc:5d:01:fc:04:f6:64:97:0e:55:36:d2: 01:93:03:39:3f:ee:32:62:53:22:93:31:a2:cc:2c:e0:0d:fc: 91:db:bf:53:a7:f4:e0:a3:d7:a5:ad:dd:d7:c9:8f:53:7f:a2: 6b:77:25:dd:8e:5f:06:ab:12:0b:a5:3e:38:09:a9:e6:dd:a4: ec:56:fe:39:b6:66:16:5f:2d:9e:d9:35:22:5a:ff:fa:7b:81: 56:2c:72:9c:e1:8c:8f:e6:86:22:4c:cc:59:61:1d:70:29:ef: 4c:e8:e3:91:03:10:7a:25:14:d6:4a:b6:30:d0:c9:94:17:6c: d3:f8:10:81:3f:9b:c2:fc:4b:59:55:98:86:e4:24:3c:33:1c: a9:7e:dc:bf:76:bd:74:f9:2d:1d:6b:e1:15:ca:4d:4b:38:d4: 3a:9a:bd:0f:bc:af:d6:24:8f:50:45:3c:03:9a:ea:b2:e1:90: 9f:9f:47:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af76LaXT0DVOqi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk Mzk1YzRmM2UtZmJmOC00MjM1LTg4MTItMzRlMGVlNjA4MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHVfX5Os64hEIKwF3rhRDaKpEArIz8pIkA6y tZYAaNooIumxawJhWSKZKjdP3AiHNJHBsVPZqBrhNFLLzWZKz0mG5surkE3DxQV8 5zfMRsjAJEvemQhlbMA65VvQcoVC2u5St79/P8eSVCjbDCBAkVR8+Uu2lmhzpn26 6SqUrcu4EfZOwcsS66Kqvd2L2ghtOLYT8QtsaYElOkcSfHzqRFwQicRrSMfXR4Ix 8Z4Qjx95ERuKQ6P9FCM8DFTBU9NA0IeVdMu77Y0mSZN4jdiF9sjr8e7Jf/Xk/a2z lwR7/C54qIdLumDBKkblvwVedGPO8KlZd/9ovVW9LMJZlPPeCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxQxRioRiC5RkZd2z6E2+S2BtAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2YzYWU5YzUtN2NhYi0z NWU3LWE3NmYtNGY3OTJjY2I3NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE96Zl7Ot1uevOHxEjKzr+RacUIrMlz3x3SUlbxxPQdPMaZ8J+w89Nd6 nRcGslLwpy6o8+DbACuqgy6OGnJS5BPiKzZY5XPQYs5izjDGMtxdAfwE9mSXDlU2 0gGTAzk/7jJiUyKTMaLMLOAN/JHbv1On9OCj16Wt3dfJj1N/omt3Jd2OXwarEgul PjgJqebdpOxW/jm2ZhZfLZ7ZNSJa//p7gVYscpzhjI/mhiJMzFlhHXAp70zo45ED EHolFNZKtjDQyZQXbNP4EIE/m8L8S1lVmIbkJDwzHKl+3L92vXT5LR1r4RXKTUs4 1DqavQ+8r9Ykj1BFPAOa6rLhkJ+fRxE= -----END CERTIFICATE-----Generated at Fri Jul 24 16:28:26 2026 by rpki-client