$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa File: e21aefd6-472c-3930-aa58-debd99be2072.roa (raw, json) Hash identifier: 5T01DBVC/pmHWBha+2lTcBkN9enzJ6VLOgt9lISuW64= Subject key identifier: 21:9D:DC:BD:85:CA:C4:2D:62:3F:A5:6C:F3:EB:8B:B3:A2:3B:A6:1E Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584F480D3AF12483C887751A3400 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 395035 IP address blocks: 216.150.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3a:f1:24:83:c8:87:75:1a:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=121019ae-040c-4599-b439-40c78568ef06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:dd:9d:3f:f7:3f:cc:f9:f7:6c:72:7f:8d: 7a:d2:c3:85:4d:96:ca:2e:e8:f5:72:c5:96:74:f8: fd:08:72:66:47:10:d0:27:f4:00:e5:eb:b8:23:67: 97:a8:75:19:fd:8e:3c:be:cb:cc:3c:91:f9:3e:a0: f4:e4:38:a7:18:ef:f2:da:8a:d4:ba:17:c8:12:e4: fa:34:d2:0f:53:58:de:50:be:1c:14:8d:f6:00:c4: 1f:ac:73:4e:83:4f:21:fe:30:fd:f1:d2:bb:13:7d: 39:8b:8a:d7:10:95:5e:0d:26:94:37:42:e1:da:2e: 96:49:4a:2d:3c:8c:f4:19:81:e3:54:0c:cc:11:92: b4:f6:1f:8a:91:a7:d8:ce:ad:69:99:53:7f:16:04: 29:d3:50:8d:58:cd:b3:38:0c:c8:e2:30:25:2d:ae: e0:66:ca:5f:38:21:62:63:b6:4f:da:b8:ce:c1:05: 1c:3c:bb:f1:fc:4a:65:dc:f6:d1:e5:af:62:cd:57: dd:93:a1:c3:ff:96:46:ba:1f:43:dd:d4:ed:97:fe: 1e:0e:2f:bd:7d:aa:ac:55:6a:fd:73:fc:91:4e:4b: eb:99:31:68:a9:89:59:10:0b:26:88:ee:87:1a:39: ba:2e:2c:db:38:c9:84:5a:27:4d:a0:8d:c9:ce:ba: 9e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9D:DC:BD:85:CA:C4:2D:62:3F:A5:6C:F3:EB:8B:B3:A2:3B:A6:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 216.150.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a5:1b:1a:ff:cb:ef:80:d7:d1:d3:ed:52:37:41:fa:f3:63: 27:4f:4a:65:7f:e8:5b:72:03:2a:df:1d:c4:5a:6c:97:59:7f: 9a:c3:93:7d:2c:4f:1f:de:69:09:35:04:d4:21:c4:29:43:7d: d4:af:09:f1:38:95:94:aa:09:66:cd:f7:bd:47:05:98:9e:ab: 5e:35:b2:ba:31:2f:70:54:27:8e:fa:26:a4:f7:ff:82:f8:5f: 4e:90:a4:6e:8c:06:ff:9f:78:2a:e3:43:df:0f:e9:c9:a8:80: 1a:ab:18:d4:b3:43:6b:ce:ff:21:08:8f:af:da:8f:cb:e0:a9: dc:d3:82:25:a7:5e:cb:5f:8d:c0:24:1c:19:52:90:df:89:93: 3f:f1:76:77:12:b6:ce:f9:9d:bb:7a:32:64:ff:e5:7c:cf:6f: 39:53:b9:a9:d5:71:9d:49:5a:bc:69:73:4f:c7:ca:cc:1d:e0: 51:9f:cf:01:e2:69:51:d3:87:5f:c2:88:c6:26:04:ea:07:2e: 99:e4:64:80:6f:07:e5:56:35:ed:49:0b:fa:17:d4:2f:3d:a2: 58:c5:d1:b5:4a:95:a6:f0:44:77:ed:a5:eb:8f:e5:ea:e5:87: ae:15:04:e9:dd:d7:6d:c7:0e:82:b3:00:c4:bf:cf:d6:c6:79: 79:1d:8e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTrxJIPIh3UaNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTIxMDE5YWUtMDQwYy00NTk5LWI0MzktNDBjNzg1NjhlZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsTdnT/3P8z592xyf4160sOFTZbKLuj1csWW dPj9CHJmRxDQJ/QA5eu4I2eXqHUZ/Y48vsvMPJH5PqD05DinGO/y2orUuhfIEuT6 NNIPU1jeUL4cFI32AMQfrHNOg08h/jD98dK7E305i4rXEJVeDSaUN0Lh2i6WSUot PIz0GYHjVAzMEZK09h+KkafYzq1pmVN/FgQp01CNWM2zOAzI4jAlLa7gZspfOCFi Y7ZP2rjOwQUcPLvx/Epl3PbR5a9izVfdk6HD/5ZGuh9D3dTtl/4eDi+9faqsVWr9 c/yRTkvrmTFoqYlZEAsmiO6HGjm6LizbOMmEWidNoI3Jzrqe6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGd3L2FysQtYj+lbPPri7OiO6YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZTIxYWVmZDYtNDcyYy0z OTMwLWFhNTgtZGViZDk5YmUyMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2JYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGClGxr/y++A19HT7VI3QfrzYydPSmV/6FtyAyrfHcRabJdZf5rDk30s Tx/eaQk1BNQhxClDfdSvCfE4lZSqCWbN971HBZieq141sroxL3BUJ476JqT3/4L4 X06QpG6MBv+feCrjQ98P6cmogBqrGNSzQ2vO/yEIj6/aj8vgqdzTgiWnXstfjcAk HBlSkN+Jkz/xdncSts75nbt6MmT/5XzPbzlTuanVcZ1JWrxpc0/Hyswd4FGfzwHi aVHTh1/CiMYmBOoHLpnkZIBvB+VWNe1JC/oX1C89oljF0bVKlabwRHftpeuP5erl h64VBOnd123HDoKzAMS/z9bGeXkdjlY= -----END CERTIFICATE-----Generated at Mon Oct 5 16:18:49 2026 by rpki-client