$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa File: b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa (raw, json) Hash identifier: qKc+PhG3/n+a85DN4dsD57EBilLkD9IC1lssOlWX1sc= Subject key identifier: C2:A0:E6:FB:59:4B:45:52:B1:AD:FE:A1:56:E9:0C:BC:EC:E2:B2:8A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ECA6C8B71E59A2159970E9900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 5065 IP address blocks: 216.132.198.0/24 maxlen: 24 216.132.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:8b:71:e5:9a:21:59:97:0e:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=095cd090-d7d9-4f4c-ae9d-e055219069ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:3a:4b:6d:6b:51:c4:1a:9c:d0:5f:68:35: 4c:dc:66:1c:0c:c8:5d:c2:78:37:06:57:5f:4a:c0: 91:9c:62:73:da:15:1d:56:04:c9:7f:5b:ba:db:84: ed:ec:1d:84:52:7f:34:76:5e:3c:21:a3:75:09:54: 43:f0:03:53:0e:1a:64:79:ef:3c:56:0c:38:7d:01: 7f:87:44:4c:15:78:b1:d2:53:ad:e9:07:f6:b1:ae: 27:ff:1e:06:60:8b:07:23:ee:fa:18:43:0f:31:ef: 55:d8:9d:f4:97:22:13:e5:06:f6:20:06:14:75:c7: bb:b6:5b:1c:d5:ce:fd:02:9c:42:ee:d8:d4:6b:80: 50:d2:28:0d:72:7e:30:1e:10:9c:56:b0:5b:89:de: a0:d2:56:45:60:78:b8:8a:73:99:d7:54:a3:28:56: 79:33:55:e8:3d:58:97:ad:41:47:e8:28:26:45:64: 46:ea:a7:c0:55:dd:3f:da:a6:58:81:02:8d:5c:70: 48:00:04:1f:37:90:63:49:b3:c3:8e:2d:85:1a:e2: 26:92:95:3a:76:28:38:5c:fa:7b:3b:30:df:f1:17: 2a:c8:fd:32:78:dd:87:d1:40:74:f0:16:d4:c3:9b: e0:74:bf:e8:3d:5a:a0:96:2b:8b:a0:da:96:57:22: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A0:E6:FB:59:4B:45:52:B1:AD:FE:A1:56:E9:0C:BC:EC:E2:B2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.198.0/24 216.132.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:71:2c:54:34:e1:24:9a:ae:b2:58:a3:9d:6f:7f:ba:ee:f4: f1:e4:59:37:be:56:67:36:dd:29:97:00:97:1f:72:a6:16:4b: 62:79:51:35:77:8a:ee:a9:c4:5e:0d:45:04:0e:bc:a9:8f:9c: 0e:d2:61:17:26:75:ea:ca:34:a3:2a:46:0f:ed:83:9d:f3:59: d2:9f:69:6d:b1:e8:a9:44:a7:01:10:0e:4b:aa:f1:31:ee:08: c7:2b:df:c0:f9:7f:0a:19:b4:09:d3:32:76:45:b6:6a:ca:de: f1:f0:4d:6d:e6:62:b1:8d:99:a4:da:9d:ba:69:0b:77:41:2f: 37:eb:b4:3d:da:47:3c:82:7c:88:00:87:5f:40:34:1a:fa:12: 08:c3:39:25:e0:06:a5:c1:2f:e0:e4:90:cb:e5:d0:d3:c6:9b: 14:cb:f6:7d:42:26:ff:0a:ef:02:9d:d4:44:58:d3:41:3f:d4: 65:bb:d4:f8:aa:b9:0a:7d:ca:d3:ba:a0:8b:97:f4:d1:ea:8b: 49:3a:5e:8e:9e:75:77:fe:e5:38:d1:ef:44:5c:e4:a5:5e:76: 3e:44:1e:20:20:07:71:b8:8f:2c:17:89:db:4b:c8:23:ae:8a: a6:d4:5b:55:55:ad:ac:14:71:fa:33:8e:16:2a:f1:a2:30:b9: 62:07:da:4f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7KbItx5ZohWZcOmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk MDk1Y2QwOTAtZDdkOS00ZjRjLWFlOWQtZTA1NTIxOTA2OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYQ6S21rUcQanNBfaDVM3GYcDMhdwng3Bldf SsCRnGJz2hUdVgTJf1u624Tt7B2EUn80dl48IaN1CVRD8ANTDhpkee88Vgw4fQF/ h0RMFXix0lOt6Qf2sa4n/x4GYIsHI+76GEMPMe9V2J30lyIT5Qb2IAYUdce7tlsc 1c79ApxC7tjUa4BQ0igNcn4wHhCcVrBbid6g0lZFYHi4inOZ11SjKFZ5M1XoPViX rUFH6CgmRWRG6qfAVd0/2qZYgQKNXHBIAAQfN5BjSbPDji2FGuImkpU6dig4XPp7 OzDf8RcqyP0yeN2H0UB08BbUw5vgdL/oPVqgliuLoNqWVyL8OwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMKg5vtZS0VSsa3+oVbpDLzs4rKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY2ZmZlMmYtZTY1My0z N2JmLTk0OTMtMTkxOGNjMjNlM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ITGAwQA 2ITkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGtxLFQ04SSarrJYo51vf7ru9PHkWTe+Vmc23SmXAJcfcqYW S2J5UTV3iu6pxF4NRQQOvKmPnA7SYRcmderKNKMqRg/tg53zWdKfaW2x6KlEpwEQ Dkuq8THuCMcr38D5fwoZtAnTMnZFtmrK3vHwTW3mYrGNmaTanbppC3dBLzfrtD3a RzyCfIgAh19ANBr6EgjDOSXgBqXBL+DkkMvl0NPGmxTL9n1CJv8K7wKd1ERY00E/ 1GW71PiquQp9ytO6oIuX9NHqi0k6Xo6edXf+5TjR70Rc5KVedj5EHiAgB3G4jywX idtLyCOuiqbUW1VVrawUcfozjhYq8aIwuWIH2k8= -----END CERTIFICATE-----Generated at Sat Sep 26 03:54:26 2026 by rpki-client