$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/647f2045-3bf5-36bd-a1cc-88c8fbc5492f.roa File: 647f2045-3bf5-36bd-a1cc-88c8fbc5492f.roa (raw, json) Hash identifier: 0sEXs+w9wEjOxMSA17BkcXhM54bmAoB+QsWZzW79Pw0= Subject key identifier: 58:99:CE:D7:55:5D:1F:91:5C:86:8C:F5:27:00:14:89:31:6E:F8:3F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F23C24B4F93F0EFA27FB6C040 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/647f2045-3bf5-36bd-a1cc-88c8fbc5492f.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 19211 IP address blocks: 216.132.180.0/22 maxlen: 22 216.132.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:4b:4f:93:f0:ef:a2:7f:b6:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=b0396dcd-a063-48d3-82ad-46a18ebf25b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:24:29:8e:93:fc:84:eb:9d:1f:40:46:5f:37: 93:eb:c4:8c:54:d3:41:ca:e5:db:cc:c6:0a:65:13: ea:cd:46:77:7c:ef:a1:19:7f:33:34:f2:1f:5a:be: 46:2e:4a:a8:98:c0:1f:ec:64:90:56:cd:47:62:8b: 80:3a:f9:59:ab:5d:20:86:04:49:df:5a:7b:16:cd: 22:b5:0a:85:9a:c1:3f:0b:49:87:e0:19:e2:36:fc: e9:5f:b4:f5:fb:c2:a8:0d:8e:cc:7b:15:8a:b8:36: 1b:cc:9b:84:d1:3d:27:d9:74:26:f9:bb:f6:33:2c: a7:c1:e5:3b:80:f6:45:e8:3e:21:6f:42:12:39:87: e0:39:69:cf:07:36:5d:61:31:70:f3:7d:54:e7:80: 90:3a:ac:0e:61:60:1d:8c:16:6d:9c:da:9b:90:48: d9:1c:55:18:d2:ea:04:c6:23:b9:bb:b3:74:83:1e: c6:ff:63:5f:3b:3f:e8:f4:97:8e:3a:ca:12:4c:82: bc:9a:bb:af:11:3b:17:60:12:5b:aa:2c:b4:3e:23: d8:43:2a:79:7d:01:42:81:69:fd:74:f9:7c:97:e9: ac:a6:42:0b:d6:0b:b6:66:6b:26:13:94:31:9d:84: 36:32:65:11:06:5e:d5:e9:a5:87:6a:aa:5b:6d:e1: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:99:CE:D7:55:5D:1F:91:5C:86:8C:F5:27:00:14:89:31:6E:F8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/647f2045-3bf5-36bd-a1cc-88c8fbc5492f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.180.0/22 216.132.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:10:a2:61:9f:5e:b5:ae:aa:a1:c7:f4:65:4a:ac:cb:66: 38:e5:28:bc:eb:82:fd:3d:74:75:30:93:a5:c4:40:b7:d5:b2: 4b:a3:a4:f0:94:f9:76:fe:65:08:d4:e1:a1:d6:eb:0b:8d:37: d6:0d:00:3c:33:3a:12:b7:99:d5:44:55:51:b1:bf:16:b0:3f: b4:8b:44:58:29:11:18:13:79:a0:fb:2f:7c:74:29:a4:38:bd: a8:d1:5b:74:94:4b:26:48:18:f5:75:47:41:2c:eb:8c:06:f1: c0:fc:8d:b7:96:8a:ab:ec:bf:ba:d5:86:36:4a:b7:f4:8d:5f: 8c:3b:cf:c8:15:71:07:4a:2e:6d:5b:bd:0b:d8:ca:38:96:c8: f6:0c:b3:9d:e7:8b:dd:5b:c2:05:bf:e6:39:73:42:79:37:08: 50:cd:57:9d:97:ae:7a:19:62:68:99:52:f0:aa:32:70:d7:9e: b0:17:f4:97:6d:79:01:27:77:b8:14:88:ae:4f:75:da:fb:64: f5:95:63:ed:c3:ae:1a:12:94:85:57:75:f2:ba:35:40:f4:48: 8e:08:15:25:b3:2b:c4:9b:dd:09:c0:1e:da:82:84:4a:4c:3e: aa:ec:58:11:1a:fc:d2:d2:4c:2e:40:c5:aa:64:5c:2c:1d:cf: 1b:37:e7:b2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8jwktPk/Dvon+2wEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YjAzOTZkY2QtYTA2My00OGQzLTgyYWQtNDZhMThlYmYyNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSQpjpP8hOudH0BGXzeT68SMVNNByuXbzMYK ZRPqzUZ3fO+hGX8zNPIfWr5GLkqomMAf7GSQVs1HYouAOvlZq10ghgRJ31p7Fs0i tQqFmsE/C0mH4BniNvzpX7T1+8KoDY7MexWKuDYbzJuE0T0n2XQm+bv2MyynweU7 gPZF6D4hb0ISOYfgOWnPBzZdYTFw831U54CQOqwOYWAdjBZtnNqbkEjZHFUY0uoE xiO5u7N0gx7G/2NfOz/o9JeOOsoSTIK8mruvETsXYBJbqiy0PiPYQyp5fQFCgWn9 dPl8l+mspkIL1gu2ZmsmE5QxnYQ2MmURBl7V6aWHaqpbbeGwIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFiZztdVXR+RXIaM9ScAFIkxbvg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjQ3ZjIwNDUtM2JmNS0z NmJkLWExY2MtODhjOGZiYzU0OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC2IS0AwQC 2IS8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGzPEKJhn161rqqhx/RlSqzLZjjlKLzrgv09dHUwk6XEQLfV skujpPCU+Xb+ZQjU4aHW6wuNN9YNADwzOhK3mdVEVVGxvxawP7SLRFgpERgTeaD7 L3x0KaQ4vajRW3SUSyZIGPV1R0Es64wG8cD8jbeWiqvsv7rVhjZKt/SNX4w7z8gV cQdKLm1bvQvYyjiWyPYMs53ni91bwgW/5jlzQnk3CFDNV52XrnoZYmiZUvCqMnDX nrAX9JdteQEnd7gUiK5Pddr7ZPWVY+3DrhoSlIVXdfK6NUD0SI4IFSWzK8Sb3QnA HtqChEpMPqrsWBEa/NLSTC5AxapkXCwdzxs357I= -----END CERTIFICATE-----Generated at Fri Oct 2 10:18:43 2026 by rpki-client