$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa File: a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa (raw, json) Hash identifier: ZaRSnwELo3dBJAjRTqJE77GLYKIz0IInHOYOANmlBBQ= Subject key identifier: 71:48:37:ED:81:11:B8:D0:F2:12:68:F9:B1:29:51:9C:DE:AE:48:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ECBD1E6077891F9385959D500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 6079 IP address blocks: 216.132.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e6:07:78:91:f9:38:59:59:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=427a3215-7450-4189-b63e-7ab760c12761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:d9:2f:cb:52:ef:00:4d:09:27:42:f6:c9: a9:4c:98:66:37:ac:87:aa:54:f4:41:a5:a1:be:c4: 65:60:a1:7a:d4:8d:db:8d:aa:9d:96:fd:27:73:d8: 46:ab:e4:34:82:b8:27:23:6e:c4:0c:e8:f3:4d:63: 0b:2e:e2:55:9e:3b:89:21:8c:b9:9b:17:a8:3d:c5: 26:bd:de:e7:2b:50:b9:ee:df:51:ed:cf:7b:0f:14: 4e:b3:56:64:c5:79:23:97:69:b8:b8:a1:d0:ee:c4: 97:61:95:fd:67:89:05:d4:47:81:22:1b:8e:41:c4: ac:9e:c3:34:5a:47:8e:54:90:56:4d:ea:77:2c:87: f1:3e:19:08:fc:47:1d:55:e7:5b:d8:8e:b1:33:84: 7b:9c:e7:3a:a3:77:80:9a:73:7b:38:c6:a2:ae:61: 48:f9:ba:81:c8:54:a1:26:5a:c1:99:1e:73:96:69: 38:82:b9:32:20:bd:07:6b:44:70:7b:ea:60:b1:18: ca:c1:b8:6f:77:f2:de:c5:72:27:44:69:fd:cf:38: c3:ef:ac:d2:43:7a:b2:cd:7d:05:82:64:78:7a:b8: f8:75:36:66:7c:4c:e5:ce:a1:f9:3c:1c:a9:73:75: 99:4b:07:8b:28:41:81:96:7c:3b:13:3f:d7:71:14: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:37:ED:81:11:B8:D0:F2:12:68:F9:B1:29:51:9C:DE:AE:48:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:02:8b:3c:b7:3a:e5:58:ce:a5:34:8b:c4:6b:bb:38:aa:8d: 02:9b:38:8a:5f:f7:e8:7a:32:52:13:5c:3e:83:b6:68:04:4f: d1:32:88:ef:c0:ac:d3:0b:b2:cb:ca:8f:da:82:e5:4e:be:8c: 88:fa:73:5e:84:c8:4c:94:c3:19:2a:ad:b3:9e:40:0a:eb:3e: 18:4a:d0:ad:c5:bf:f8:36:da:29:31:45:ae:85:d6:e3:d0:8c: 8b:88:7c:c7:0d:a5:6d:09:31:a0:fe:a1:78:db:b6:ba:60:fc: 90:68:6f:5f:a4:75:97:17:37:ae:6c:db:52:d7:5e:3a:5e:e7: 8d:a8:ea:17:7f:41:41:ac:5e:a0:ac:f5:54:19:5f:64:42:f4: 97:b8:1e:74:e0:55:28:79:a8:95:c4:be:c1:5f:90:a6:d4:c5: d6:67:58:a0:b1:b8:17:fe:0f:c6:13:5e:94:a1:76:31:02:4e: c5:c5:f9:f1:f8:a4:6d:3a:58:ed:ea:93:2a:ff:5c:e5:08:0f: 9b:a9:b9:f1:31:f6:d7:09:b8:0a:d7:c3:a2:d0:7c:df:17:38: ac:c2:6b:7e:28:2e:02:37:0a:61:ee:b5:4b:1f:0f:47:39:23: 84:cb:9f:30:75:10:fb:5d:80:ef:6d:5a:c5:57:dd:fa:37:40: 88:9a:02:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eYHeJH5OFlZ1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NDI3YTMyMTUtNzQ1MC00MTg5LWI2M2UtN2FiNzYwYzEyNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVfZL8tS7wBNCSdC9smpTJhmN6yHqlT0QaWh vsRlYKF61I3bjaqdlv0nc9hGq+Q0grgnI27EDOjzTWMLLuJVnjuJIYy5mxeoPcUm vd7nK1C57t9R7c97DxROs1ZkxXkjl2m4uKHQ7sSXYZX9Z4kF1EeBIhuOQcSsnsM0 WkeOVJBWTep3LIfxPhkI/EcdVedb2I6xM4R7nOc6o3eAmnN7OMairmFI+bqByFSh JlrBmR5zlmk4grkyIL0Ha0Rwe+pgsRjKwbhvd/LexXInRGn9zzjD76zSQ3qyzX0F gmR4erj4dTZmfEzlzqH5PBypc3WZSweLKEGBlnw7Ez/XcRSatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFIN+2BEbjQ8hJo+bEpUZzerkgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTAwNzZiMjEtNmExNy0z NzI1LWIyN2EtYTljMTVmZjNlMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2ISIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoCizy3OuVYzqU0i8RruziqjQKbOIpf9+h6MlITXD6DtmgET9EyiO/A rNMLssvKj9qC5U6+jIj6c16EyEyUwxkqrbOeQArrPhhK0K3Fv/g22ikxRa6F1uPQ jIuIfMcNpW0JMaD+oXjbtrpg/JBob1+kdZcXN65s21LXXjpe542o6hd/QUGsXqCs 9VQZX2RC9Je4HnTgVSh5qJXEvsFfkKbUxdZnWKCxuBf+D8YTXpShdjECTsXF+fH4 pG06WO3qkyr/XOUID5upufEx9tcJuArXw6LQfN8XOKzCa34oLgI3CmHutUsfD0c5 I4TLnzB1EPtdgO9tWsVX3fo3QIiaApo= -----END CERTIFICATE-----Generated at Mon Sep 28 21:57:57 2026 by rpki-client