$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/212bf11e-b3d9-3478-98f7-910f5122a518.roa File: 212bf11e-b3d9-3478-98f7-910f5122a518.roa (raw, json) Hash identifier: GbP9tapvr8fidxIoUaEl1MiihzIUYlGPXYS8djKSF+s= Subject key identifier: D8:F3:0E:37:D7:EE:34:73:E7:99:56:23:FF:F2:FF:DA:C2:27:5D:72 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584E842A3AAA709A228372EF8AA0 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/212bf11e-b3d9-3478-98f7-910f5122a518.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 216.230.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:3a:aa:70:9a:22:83:72:ef:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=b1e03a47-c0e9-4904-a41f-484bc0597b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c4:26:16:27:18:25:8e:8a:36:78:d1:94:a2: 17:d5:17:3a:fa:b5:89:9f:de:4a:0f:21:52:ba:f8: f1:1d:36:4d:28:e8:16:c5:89:d1:d1:70:d4:fc:1f: 8f:38:80:71:92:4c:94:f6:0d:fa:8a:5f:86:70:f0: f4:0b:ec:fe:5a:56:11:bd:31:b9:29:83:61:46:7d: 4e:75:f8:36:ed:fd:12:b6:ae:44:fe:9c:f6:9c:dd: 0b:d5:6d:2f:c3:f0:51:fa:67:4b:4e:06:fa:96:3b: 1c:36:c3:29:d1:78:21:b6:2e:40:63:f4:00:49:71: a0:3a:b2:c4:7a:c5:77:3a:6c:26:01:02:0a:74:35: f5:9e:6e:94:67:31:8b:b1:2d:bf:95:18:44:cc:a2: 77:51:ad:f5:5b:1c:cb:65:4b:35:5b:76:04:ba:af: fe:26:1d:cc:05:84:1f:b6:74:8c:32:b2:ab:41:42: d8:50:5c:d6:16:13:05:eb:7e:bd:cf:16:29:ba:60: 4f:e5:b5:8d:32:1e:a9:9e:9c:ae:45:0e:21:d5:d4: 33:52:c4:da:da:74:77:4d:8c:bf:02:6a:37:d9:20: 36:5e:f2:74:eb:44:2e:d6:43:7c:63:2e:fb:b0:43: c3:7b:11:3c:f3:ec:1f:be:5b:14:41:1f:b5:a1:42: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:0E:37:D7:EE:34:73:E7:99:56:23:FF:F2:FF:DA:C2:27:5D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/212bf11e-b3d9-3478-98f7-910f5122a518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 216.230.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:18:eb:72:9d:43:d8:54:d5:f9:e8:32:d4:d0:c0:50:8b:70: 52:b4:0a:dc:54:2e:ba:e3:dd:bd:63:2f:53:1b:8e:72:df:f9: 0a:41:47:ff:b0:1b:d5:8e:6a:0c:93:aa:08:6c:06:13:a5:95: 7f:ab:11:65:3a:09:4b:95:f1:54:b3:96:cf:2a:9c:85:1d:c2: 69:1d:79:ac:d5:7c:74:37:d3:f3:22:a3:5b:07:56:ed:51:77: a3:ac:98:7a:dd:6a:a9:b6:bb:b2:af:e1:00:7f:59:96:25:ed: a6:69:7e:59:68:8c:af:fb:d4:d6:45:ad:19:f5:70:49:0b:4e: e1:98:c4:09:5c:aa:9d:66:76:66:0d:fb:65:d1:43:81:21:4c: 27:5d:6b:20:e6:f7:5a:ea:70:04:d1:9d:2a:73:85:07:d0:f7: 4c:4f:4e:5d:e6:58:13:00:65:09:e3:92:28:77:64:2f:f3:79: f5:69:d8:b6:6b:50:6e:3c:49:e5:64:f2:71:af:1e:52:8b:a1: d6:52:ac:53:d2:fd:d7:3f:29:15:e2:7b:60:1c:7d:dc:db:81: 17:04:94:7a:70:3f:0d:52:14:06:5e:c2:12:9d:f3:44:f4:7f: 06:7d:31:78:d3:cb:bd:93:5b:64:f6:ee:3c:a4:38:aa:28:f8: c7:c9:4b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjqqcJoig3LviqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk YjFlMDNhNDctYzBlOS00OTA0LWE0MWYtNDg0YmMwNTk3YjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMQmFicYJY6KNnjRlKIX1Rc6+rWJn95KDyFS uvjxHTZNKOgWxYnR0XDU/B+POIBxkkyU9g36il+GcPD0C+z+WlYRvTG5KYNhRn1O dfg27f0Stq5E/pz2nN0L1W0vw/BR+mdLTgb6ljscNsMp0Xghti5AY/QASXGgOrLE esV3OmwmAQIKdDX1nm6UZzGLsS2/lRhEzKJ3Ua31WxzLZUs1W3YEuq/+Jh3MBYQf tnSMMrKrQULYUFzWFhMF6369zxYpumBP5bWNMh6pnpyuRQ4h1dQzUsTa2nR3TYy/ Amo32SA2XvJ060Qu1kN8Yy77sEPDexE88+wfvlsUQR+1oUICowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjzDjfX7jRz55lWI//y/9rCJ11yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMjEyYmYxMWUtYjNkOS0z NDc4LTk4ZjctOTEwZjUxMjJhNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsY63KdQ9hU1fnoMtTQwFCLcFK0CtxULrrj3b1jL1MbjnLf+QpBR/+w G9WOagyTqghsBhOllX+rEWU6CUuV8VSzls8qnIUdwmkdeazVfHQ30/Mio1sHVu1R d6OsmHrdaqm2u7Kv4QB/WZYl7aZpfllojK/71NZFrRn1cEkLTuGYxAlcqp1mdmYN +2XRQ4EhTCddayDm91rqcATRnSpzhQfQ90xPTl3mWBMAZQnjkih3ZC/zefVp2LZr UG48SeVk8nGvHlKLodZSrFPS/dc/KRXie2AcfdzbgRcElHpwPw1SFAZewhKd80T0 fwZ9MXjTy72TW2T27jykOKoo+MfJS5Q= -----END CERTIFICATE-----Generated at Fri Jul 24 12:27:16 2026 by rpki-client