$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa File: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (raw, json) Hash identifier: PTLJzt7PvEtFKIOw9z1fl04ktU5LulSccrqcysvoPxg= Subject key identifier: 30:56:75:E9:E9:55:C2:0E:27:4C:A1:2B:63:A2:E5:A4:CB:86:6F:51 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584E6F3A34C08BD756648743D680 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:34:c0:8b:d7:56:64:87:43:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=b3f06196-b50a-4709-8c85-6f97ce24fb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:93:51:7b:0e:56:ff:1f:c9:3d:bf:49:c6: 33:d8:8e:d0:21:68:9d:8d:cc:f8:12:da:94:00:80: a2:53:13:94:18:e3:3c:2a:8b:3a:2b:84:94:62:02: 02:67:d0:f2:4e:e6:45:98:48:e5:2c:85:82:1d:09: 8a:53:5e:9b:94:ad:e9:13:27:bb:35:97:45:2b:85: 10:70:4c:c1:db:f0:92:06:6f:5a:c3:30:68:b6:b7: 0c:27:63:33:0f:79:bc:28:09:82:79:a2:9d:48:5e: 41:1f:aa:ec:f7:cf:9f:a3:9a:4d:83:07:f1:08:42: 2a:75:1c:a3:74:6e:19:39:0b:1e:39:12:27:73:04: c2:fa:a7:bd:eb:b2:57:1d:f6:75:40:46:eb:ea:8e: 44:10:3c:af:a4:45:d0:1e:9d:3e:9c:d6:eb:8a:28: 08:e7:7d:53:90:be:96:b2:82:8c:0f:93:61:53:e2: 99:5f:42:28:f9:0f:d1:02:4e:36:8e:c2:97:87:c3: 10:54:4f:60:f8:9a:64:b3:20:41:19:42:5f:ce:49: 3c:d9:e5:34:d8:a6:17:d4:42:12:13:c6:ac:27:3d: 36:bf:5c:f0:9c:cc:60:6b:fa:bd:0c:c0:b4:60:bb: e3:53:f3:2f:3c:fa:69:a6:1e:67:f6:a3:23:98:6a: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:75:E9:E9:55:C2:0E:27:4C:A1:2B:63:A2:E5:A4:CB:86:6F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:16:21:51:dc:52:46:2d:4f:1c:c1:b7:ce:52:f2:f6:48:70: ce:8d:41:81:f6:d0:e9:ef:11:41:fc:89:f0:a5:1a:c8:a9:d1: de:c8:6d:f0:63:0d:dc:c9:99:b9:91:d3:32:23:0e:3b:72:2b: 20:8c:08:02:93:f2:0c:41:8a:c0:a9:2b:30:4c:2b:74:ca:56: 52:d9:26:6d:0c:7a:28:f3:3e:0d:2b:85:be:23:6c:1c:6d:50: d1:58:c3:53:24:bf:30:63:69:ef:7f:03:10:23:bb:3c:08:46: 30:e1:53:ab:32:ca:84:f6:02:d7:7b:82:e9:a3:32:f3:b6:af: 10:26:4c:c3:a6:33:b2:c7:5a:c3:05:d3:b4:3a:2c:59:ed:93: 14:09:dd:68:96:f0:fc:16:47:f8:bc:5a:33:9d:43:ec:da:1c: a7:50:0f:3c:7b:a1:9d:45:8d:69:68:ce:c2:2f:76:38:e5:4a: bd:1b:aa:de:68:db:7b:c0:ad:33:9b:3b:97:62:1d:67:97:e3: d5:ff:ed:b1:0c:a9:92:fc:b6:b4:bd:cb:a6:51:6c:b7:08:54: a7:93:73:71:52:b0:33:06:e4:1e:86:4e:f3:ff:d4:0b:d2:fd: 24:92:9c:45:1c:bd:3b:4c:8b:59:d1:7f:02:0f:c2:ca:3f:35: ad:26:e3:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjTAi9dWZIdD1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YjNmMDYxOTYtYjUwYS00NzA5LThjODUtNmY5N2NlMjRmYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc2TUXsOVv8fyT2/ScYz2I7QIWidjcz4EtqU AICiUxOUGOM8Kos6K4SUYgICZ9DyTuZFmEjlLIWCHQmKU16blK3pEye7NZdFK4UQ cEzB2/CSBm9awzBotrcMJ2MzD3m8KAmCeaKdSF5BH6rs98+fo5pNgwfxCEIqdRyj dG4ZOQseORIncwTC+qe967JXHfZ1QEbr6o5EEDyvpEXQHp0+nNbriigI531TkL6W soKMD5NhU+KZX0Io+Q/RAk42jsKXh8MQVE9g+JpksyBBGUJfzkk82eU02KYX1EIS E8asJz02v1zwnMxga/q9DMC0YLvjU/MvPPppph5n9qMjmGry3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBWdenpVcIOJ0yhK2Oi5aTLhm9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNDE5MDFmYjktZTg1Mi0z OGZlLTlhNGItMTNhNzg4YzY0NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwWIVHcUkYtTxzBt85S8vZIcM6NQYH20OnvEUH8ifClGsip0d7IbfBj DdzJmbmR0zIjDjtyKyCMCAKT8gxBisCpKzBMK3TKVlLZJm0MeijzPg0rhb4jbBxt UNFYw1MkvzBjae9/AxAjuzwIRjDhU6syyoT2Atd7gumjMvO2rxAmTMOmM7LHWsMF 07Q6LFntkxQJ3WiW8PwWR/i8WjOdQ+zaHKdQDzx7oZ1FjWlozsIvdjjlSr0bqt5o 23vArTObO5diHWeX49X/7bEMqZL8trS9y6ZRbLcIVKeTc3FSsDMG5B6GTvP/1AvS /SSSnEUcvTtMi1nRfwIPwso/Na0m498= -----END CERTIFICATE-----Generated at Fri Jul 24 13:27:55 2026 by rpki-client