$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9ace0c2-ae4e-339e-9919-934198e27f03.roa File: d9ace0c2-ae4e-339e-9919-934198e27f03.roa (raw, json) Hash identifier: hQ+u0vp+EMnoQNh6Fl49hsSDPBNxgJ68TwzB2RDkjV4= Subject key identifier: 06:F6:BE:28:0B:F1:39:3D:ED:E4:C4:69:46:A0:45:8C:37:AD:35:88 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F03A777BE02010F2144EC65A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9ace0c2-ae4e-339e-9919-934198e27f03.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 3741 IP address blocks: 216.133.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:77:be:02:01:0f:21:44:ec:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=bf5e4ae3-70d8-4ed7-8d98-dc30586545a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:7d:28:cc:18:f4:f5:36:25:08:6f:25:49: 18:0d:c8:3a:62:85:69:95:41:af:ff:87:e0:d2:1f: 70:be:20:25:99:e3:64:f2:bc:58:b2:92:1d:52:1d: 3a:09:47:71:f8:a4:45:95:61:81:8a:5d:6a:c0:2c: 05:12:f0:94:26:07:a7:29:e1:07:a6:cc:f7:4d:5e: 11:f5:b0:30:7b:b6:19:9a:a2:5e:a3:9d:cf:38:4a: cd:45:b0:db:bf:58:d5:15:f2:00:9e:d8:b7:a1:79: 35:9c:fe:aa:49:7e:3b:73:01:ed:61:04:a3:b7:63: 04:83:f4:41:07:07:e7:e8:89:b5:48:d4:7d:b6:40: 72:c7:e0:97:ba:71:11:33:4a:d1:08:94:bc:8a:a3: 6f:79:bb:72:3b:88:a4:2c:f7:dc:78:d6:91:c1:04: ac:41:3d:c7:74:ac:a7:dd:a7:e4:91:f1:56:78:4e: 5f:f7:51:8e:5c:48:e9:cd:c8:de:55:6d:a1:64:b1: 30:23:2c:60:11:48:13:fd:e4:9b:70:94:fb:f8:41: aa:a6:51:f4:f1:7e:52:19:0d:73:81:23:85:63:f8: f5:6c:d6:ae:df:30:84:2b:4f:fc:15:3d:4d:41:1e: af:8e:a1:46:ad:60:31:85:71:42:e2:40:77:f0:d4: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:BE:28:0B:F1:39:3D:ED:E4:C4:69:46:A0:45:8C:37:AD:35:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9ace0c2-ae4e-339e-9919-934198e27f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:42:93:48:ca:08:8a:2f:91:70:78:d0:d3:29:0a:13:fa:0c: 78:8c:63:bd:f1:e3:7c:e1:85:42:de:80:16:20:6c:ff:be:4b: d8:3b:79:1e:32:74:7c:b0:8b:aa:7a:10:e7:2a:c1:72:5c:b2: 51:1e:67:33:30:ff:ec:39:87:b9:d3:a3:bf:c5:b0:ca:a6:0e: 30:07:fa:b4:b4:fd:a5:c6:b9:95:6d:a3:b0:a2:64:a5:3d:fb: 9d:d2:c7:14:ff:35:65:58:1d:35:e0:79:77:f3:0d:6b:96:a3: 66:d6:61:c9:d3:c8:e0:cd:54:9b:08:7f:c7:0b:da:fa:ec:02: e0:b4:af:e0:d7:0c:f4:cb:a7:7f:fb:24:91:1b:93:f6:51:47: ce:fb:93:c1:b3:17:05:d7:0c:f3:14:75:9a:fa:3b:ef:2e:a4: 0b:d0:f6:36:a4:74:f1:e6:1e:82:2b:74:e2:77:6f:41:c7:4d: c6:19:fc:6c:05:c2:60:43:a3:ce:07:4f:fa:c9:b7:00:de:62: 25:06:4a:18:9a:c4:09:ef:70:23:d0:aa:5a:da:8f:49:c4:16: dd:80:f6:8a:25:61:fc:74:8a:f7:3b:ea:62:e5:17:1d:41:7f: 64:53:41:b7:7a:71:d7:04:bc:67:45:cd:ec:69:2b:69:ef:f1: 4a:d1:78:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3e+AgEPIUTsZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmY1ZTRhZTMtNzBkOC00ZWQ3LThkOTgtZGMzMDU4NjU0NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZ9KMwY9PU2JQhvJUkYDcg6YoVplUGv/4fg 0h9wviAlmeNk8rxYspIdUh06CUdx+KRFlWGBil1qwCwFEvCUJgenKeEHpsz3TV4R 9bAwe7YZmqJeo53POErNRbDbv1jVFfIAnti3oXk1nP6qSX47cwHtYQSjt2MEg/RB Bwfn6Im1SNR9tkByx+CXunERM0rRCJS8iqNvebtyO4ikLPfceNaRwQSsQT3HdKyn 3afkkfFWeE5f91GOXEjpzcjeVW2hZLEwIyxgEUgT/eSbcJT7+EGqplH08X5SGQ1z gSOFY/j1bNau3zCEK0/8FT1NQR6vjqFGrWAxhXFC4kB38NTH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAb2vigL8Tk97eTEaUagRYw3rTWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDlhY2UwYzItYWU0ZS0z MzllLTk5MTktOTM0MTk4ZTI3ZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJCk0jKCIovkXB40NMpChP6DHiMY73x43zhhULegBYgbP++S9g7eR4y dHywi6p6EOcqwXJcslEeZzMw/+w5h7nTo7/FsMqmDjAH+rS0/aXGuZVto7CiZKU9 +53SxxT/NWVYHTXgeXfzDWuWo2bWYcnTyODNVJsIf8cL2vrsAuC0r+DXDPTLp3/7 JJEbk/ZRR877k8GzFwXXDPMUdZr6O+8upAvQ9jakdPHmHoIrdOJ3b0HHTcYZ/GwF wmBDo84HT/rJtwDeYiUGShiaxAnvcCPQqlraj0nEFt2A9oolYfx0ivc76mLlFx1B f2RTQbd6cdcEvGdFzexpK2nv8UrReNs= -----END CERTIFICATE-----Generated at Tue Oct 6 13:59:17 2026 by rpki-client