$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b3c803fa-85ae-3863-8071-433b48f6cb42.roa File: b3c803fa-85ae-3863-8071-433b48f6cb42.roa (raw, json) Hash identifier: FLS7s48YkSLp0187KaQ4T+r+9I+XteLuTh6f2eVTf84= Subject key identifier: D8:B5:5F:E6:79:5D:C5:B1:85:74:CE:B0:3C:1D:6F:DD:18:BE:F9:90 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EE38C996A07F8215B40AAB0E0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b3c803fa-85ae-3863-8071-433b48f6cb42.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 21866 IP address blocks: 216.219.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:99:6a:07:f8:21:5b:40:aa:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=c205c381-780a-4186-b2fb-4044db1a383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:35:f3:71:a2:18:70:e5:fd:53:e3:42:f3: 21:2a:e3:76:dd:67:2e:32:d0:a2:d6:c2:cd:6e:1d: 90:be:60:cf:0d:b2:7c:84:2a:a3:65:04:d4:15:69: fc:e2:3c:eb:02:ee:aa:33:73:cf:72:8e:60:e0:12: c3:46:cd:f3:3f:e2:1a:29:ff:e5:8d:08:18:c0:26: db:ae:25:cf:1e:77:2d:7d:a5:30:fd:d9:e5:95:ba: 69:cb:a4:45:8c:ff:ab:13:90:7b:b3:36:77:aa:2d: 71:c3:d8:10:af:8d:96:1f:b1:da:c8:07:26:86:b9: 27:fb:5d:e0:96:c9:a6:3c:4e:4d:34:a5:38:45:ec: be:69:5c:8e:16:eb:3c:80:db:bb:71:45:63:65:be: bb:19:7b:15:9d:a3:41:b6:14:d0:c8:c4:a1:49:47: fa:61:2c:5f:b9:1d:82:57:c7:f4:27:5a:d9:a2:80: 12:dc:e0:8b:d0:ab:0e:ac:6d:98:f6:dd:44:6b:d9: b3:55:a8:79:fa:0f:b5:79:b3:5e:6c:a8:c2:22:f0: 34:28:34:7f:82:bd:45:52:c0:fe:ea:71:dc:05:8e: 0d:ed:44:ac:db:90:e4:b2:bd:bb:16:42:3d:de:51: 22:fe:b6:2d:76:82:a0:66:dc:94:e7:06:05:14:12: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:5F:E6:79:5D:C5:B1:85:74:CE:B0:3C:1D:6F:DD:18:BE:F9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b3c803fa-85ae-3863-8071-433b48f6cb42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.219.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f0:56:60:e1:bc:5a:b3:5a:cd:b1:c3:2f:98:c9:a1:f7:39: 7a:d7:c0:e8:6c:7e:8d:1b:e5:c2:eb:55:0f:ce:bb:aa:35:9b: df:9f:fd:8a:42:43:98:57:57:26:f6:03:a7:2d:e3:da:a7:68: 06:89:cd:1c:19:7b:6b:59:6a:37:36:e9:63:ad:68:57:1e:2f: 40:a1:f1:8a:4b:19:99:01:88:39:07:9d:d6:0c:82:76:ea:06: 0a:1f:d4:04:a2:76:6f:36:84:13:67:2b:f5:19:18:f4:ca:74: 48:5a:76:8d:a0:3c:b4:2e:bc:1a:43:f2:50:b3:aa:1b:97:1f: b7:e5:ca:e4:52:b4:45:c4:d5:66:b3:c9:8c:45:4b:ac:2d:7d: 02:9b:57:80:ee:1b:f6:06:4d:60:02:4e:e0:9d:61:15:d1:c2: 35:66:73:38:7f:02:b1:74:a6:87:c7:81:6e:a8:8e:c2:1a:db: 35:ef:9f:3f:63:dc:a9:76:9d:8f:d1:62:a6:40:bb:d4:03:b1: 3d:cc:b8:c8:96:f8:80:6f:f1:51:67:14:c3:f8:47:d7:78:34: 95:a9:f6:cd:b1:20:a9:09:d0:8c:ce:ca:91:b0:64:b6:b7:aa: a4:09:82:c8:66:cb:c2:9e:13:f2:66:5e:d1:fc:f1:6e:6e:94: b3:a3:0e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJlqB/ghW0CqsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk YzIwNWMzODEtNzgwYS00MTg2LWIyZmItNDA0NGRiMWEzODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Y183GiGHDl/VPjQvMhKuN23WcuMtCi1sLN bh2QvmDPDbJ8hCqjZQTUFWn84jzrAu6qM3PPco5g4BLDRs3zP+IaKf/ljQgYwCbb riXPHnctfaUw/dnllbppy6RFjP+rE5B7szZ3qi1xw9gQr42WH7HayAcmhrkn+13g lsmmPE5NNKU4Rey+aVyOFus8gNu7cUVjZb67GXsVnaNBthTQyMShSUf6YSxfuR2C V8f0J1rZooAS3OCL0KsOrG2Y9t1Ea9mzVah5+g+1ebNebKjCIvA0KDR/gr1FUsD+ 6nHcBY4N7USs25Dksr27FkI93lEi/rYtdoKgZtyU5wYFFBIeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi1X+Z5XcWxhXTOsDwdb90YvvmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjNjODAzZmEtODVhZS0z ODYzLTgwNzEtNDMzYjQ4ZjZjYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrwVmDhvFqzWs2xwy+YyaH3OXrXwOhsfo0b5cLrVQ/Ou6o1m9+f/YpC Q5hXVyb2A6ct49qnaAaJzRwZe2tZajc26WOtaFceL0Ch8YpLGZkBiDkHndYMgnbq Bgof1ASidm82hBNnK/UZGPTKdEhado2gPLQuvBpD8lCzqhuXH7flyuRStEXE1Waz yYxFS6wtfQKbV4DuG/YGTWACTuCdYRXRwjVmczh/ArF0pofHgW6ojsIa2zXvnz9j 3Kl2nY/RYqZAu9QDsT3MuMiW+IBv8VFnFMP4R9d4NJWp9s2xIKkJ0IzOypGwZLa3 qqQJgshmy8KeE/JmXtH88W5ulLOjDjY= -----END CERTIFICATE-----Generated at Mon Sep 28 19:17:05 2026 by rpki-client