$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json) Hash identifier: Wvx5u2l0XkvtPf237h1HpjnylxmJKY2wxmkhpwmcadU= Subject key identifier: C1:36:45:E7:C4:06:5B:60:74:E2:BF:98:E0:30:61:F2:B7:7A:C5:6F Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584E6F3A34B4989D9EACD4D5AB60 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 14618 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:34:b4:98:9d:9e:ac:d4:d5:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=35b916f8-9cb6-48fd-b9d2-fefdd9397c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:0d:39:cd:c2:a5:f1:ce:9c:fe:68:73:cb: 3a:06:6d:3c:f0:d6:21:d8:a4:52:37:e9:6d:f2:57: 42:ba:81:b1:43:a3:d2:48:ec:66:dc:8e:94:93:a2: b0:9a:4a:86:be:46:5b:a2:63:2b:0c:c1:97:bc:24: 70:89:23:cb:98:9d:84:f3:52:6f:96:35:ca:bd:c3: e3:f4:46:fd:e6:bd:21:a5:be:24:9b:ba:7a:e4:8b: ee:b1:f6:13:43:17:f4:4e:83:5b:2a:a9:55:e1:c4: 79:4b:26:60:9d:80:d0:51:31:05:d2:59:e1:2b:8e: 6b:51:cd:a1:dd:2d:71:25:76:14:c1:7b:25:f8:d8: 1d:26:1a:7e:3f:c0:15:89:ee:81:c4:a2:da:be:b3: b2:e8:c4:c7:da:93:15:7f:72:6e:02:9f:03:1b:04: e1:f6:4f:27:8e:23:74:90:34:a8:62:7a:c9:87:73: b0:90:6f:db:3d:d2:25:64:88:0c:c1:a1:12:b8:43: 83:1b:f5:82:10:47:9f:0f:74:71:0f:5f:8a:1d:84: a6:ef:21:b2:72:54:31:f0:78:df:f1:ba:bb:46:5c: e0:ad:3a:10:2d:ca:2c:6c:f3:13:3b:6c:6f:25:da: f2:fb:19:4a:83:cb:a9:8e:b7:df:53:6f:d2:d3:9a: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:45:E7:C4:06:5B:60:74:E2:BF:98:E0:30:61:F2:B7:7A:C5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:92:5d:a7:40:85:44:7c:e2:3a:3c:d6:bd:c6:10:ae:6e:19: e5:c8:7c:d1:da:35:37:2b:b0:e1:86:12:43:0b:02:80:92:99: a1:93:5a:11:2b:55:18:10:1a:41:75:f6:67:29:98:19:e9:e2: 08:54:f5:59:a4:27:ba:a8:31:c1:51:07:f2:80:5a:c3:18:a4: af:b3:55:3a:ef:0c:15:72:41:7c:43:2a:db:c5:d7:ed:a2:33: 0f:11:94:ac:ae:f1:b3:ba:a9:f1:f3:be:cc:ad:85:72:94:58: 14:c7:38:a2:3c:eb:af:8f:67:78:9f:5f:42:3d:3d:78:d5:dc: af:10:03:4c:90:b3:95:52:41:cb:8a:54:5d:a2:26:5c:95:89: 22:68:b2:6f:2d:cc:59:0c:58:2c:ea:ec:69:b8:ab:10:3e:51: f6:8a:4c:89:dd:e6:bd:3a:50:d6:75:9e:78:c9:42:f4:dd:bf: dd:4e:86:47:fd:6b:ba:8f:00:98:4f:60:2c:d9:54:24:54:e5: 17:ce:aa:84:d6:53:91:cf:8c:94:47:23:4d:99:6e:18:fc:c6: 9a:02:18:32:9c:7b:01:74:62:f7:f6:e0:1b:5b:0b:85:18:5d: ed:4f:5d:9a:e3:c5:ff:98:61:55:09:d1:95:6c:96:3d:bb:2e: 0b:a6:cf:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjS0mJ2erNTVq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MzViOTE2ZjgtOWNiNi00OGZkLWI5ZDItZmVmZGQ5Mzk3YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ENOc3CpfHOnP5oc8s6Bm088NYh2KRSN+lt 8ldCuoGxQ6PSSOxm3I6Uk6KwmkqGvkZbomMrDMGXvCRwiSPLmJ2E81JvljXKvcPj 9Eb95r0hpb4km7p65IvusfYTQxf0ToNbKqlV4cR5SyZgnYDQUTEF0lnhK45rUc2h 3S1xJXYUwXsl+NgdJhp+P8AVie6BxKLavrOy6MTH2pMVf3JuAp8DGwTh9k8njiN0 kDSoYnrJh3OwkG/bPdIlZIgMwaESuEODG/WCEEefD3RxD1+KHYSm7yGyclQx8Hjf 8bq7RlzgrToQLcosbPMTO2xvJdry+xlKg8upjrffU2/S05ppYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME2RefEBltgdOK/mOAwYfK3esVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACSXadAhUR84jo81r3GEK5uGeXIfNHaNTcrsOGGEkMLAoCSmaGTWhEr VRgQGkF19mcpmBnp4ghU9VmkJ7qoMcFRB/KAWsMYpK+zVTrvDBVyQXxDKtvF1+2i Mw8RlKyu8bO6qfHzvsythXKUWBTHOKI866+PZ3ifX0I9PXjV3K8QA0yQs5VSQcuK VF2iJlyViSJosm8tzFkMWCzq7Gm4qxA+UfaKTInd5r06UNZ1nnjJQvTdv91Ohkf9 a7qPAJhPYCzZVCRU5RfOqoTWU5HPjJRHI02Zbhj8xpoCGDKcewF0Yvf24BtbC4UY Xe1PXZrjxf+YYVUJ0ZVslj27Lgumz9o= -----END CERTIFICATE-----Generated at Fri Jul 24 15:16:57 2026 by rpki-client