$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/ffe252a7-be82-3840-a7b4-e67a0052924b.roa File: ffe252a7-be82-3840-a7b4-e67a0052924b.roa (raw, json) Hash identifier: yN8NNAo6mVyh4r2BqOMc6VvxgBgmd7H8S6yJxsAtKfY= Subject key identifier: 16:E2:E3:C1:DC:42:E3:C1:FB:49:4F:B1:F9:41:FF:C6:A9:48:A9:0E Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Certificate serial: 010D0C9F4328584EA17A75121C5F374F91B306E0 Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/ffe252a7-be82-3840-a7b4-e67a0052924b.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 70.40.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:75:12:1c:5f:37:4f:91:b3:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=4e8b9837-6602-427c-9ad6-bb4945f258ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:97:90:c8:56:e3:bb:b3:37:4c:e3:22:21: 0e:88:2d:ca:eb:25:47:3f:82:4c:a6:65:36:ed:85: 91:95:d5:04:cc:bb:fe:23:b1:c8:d4:ea:2f:b8:50: d9:53:2b:e0:36:e6:3f:8b:81:b3:2d:b0:24:e2:7e: d1:13:1f:fa:25:89:11:c4:57:c5:bf:c8:9f:fb:0f: 80:05:0c:3e:d7:36:85:01:d3:fa:f9:1e:21:cb:10: d7:9f:d7:3e:54:ca:b2:bc:8c:40:6c:04:f5:0f:ae: a5:0b:52:95:19:d5:35:bb:be:b9:d1:e8:0e:8b:67: 40:18:60:c0:c1:28:81:a2:7c:55:13:76:da:b0:13: 6a:90:1e:ee:1c:98:d8:77:20:14:72:26:f7:70:6a: 5b:5c:30:fe:eb:02:e4:02:eb:53:0d:07:b0:3a:ba: d9:4d:8c:0a:b6:ee:57:b1:65:43:03:74:40:d9:5f: 3c:b3:47:9e:06:8f:ea:01:3a:4c:61:78:8c:0a:e5: d2:2f:e7:46:ad:66:93:b6:7d:fa:48:b6:b0:f6:7e: 34:58:84:b1:1e:85:85:03:ed:e7:8a:13:2a:1e:43: 7b:86:c9:36:33:9c:75:5a:33:b8:cc:8f:d7:80:57: 22:41:e0:5a:dc:79:e4:fa:17:0d:ef:99:08:ed:6f: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:E3:C1:DC:42:E3:C1:FB:49:4F:B1:F9:41:FF:C6:A9:48:A9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/ffe252a7-be82-3840-a7b4-e67a0052924b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl X509v3 Authority Key Identifier: keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer sbgp-ipAddrBlock: critical IPv4: 70.40.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b4:8c:e3:80:ae:0a:54:88:b9:a7:ea:ef:04:fc:34:b8:f4: d3:d5:56:b6:ba:25:ad:5b:e2:21:61:d7:ea:e2:8a:34:90:fc: b9:68:fd:1f:4a:81:cf:c1:32:c5:32:c4:1f:75:1a:c9:3d:d7: 1d:7c:82:eb:65:26:d3:6f:f4:34:d9:37:2d:a1:28:76:86:a8: 00:9e:8a:e8:94:eb:d9:c0:a9:4a:0e:7c:e9:02:b9:2b:fc:00: db:2a:26:01:70:39:e7:3b:a2:f2:a9:ca:0c:50:d7:f4:5a:98: 34:85:60:53:dc:21:d8:a8:dd:5f:14:19:75:a2:1e:cf:6e:61: 00:38:96:4d:f9:2f:38:db:95:49:79:54:5d:3e:b5:a8:e7:34: 2f:93:d6:d9:01:73:6b:c8:61:60:35:46:cd:1b:b4:3e:cf:e4: a6:bd:75:6f:1f:04:30:1c:df:41:14:52:42:6a:83:77:b9:5e: 26:f3:d0:c3:01:7e:b5:e0:0d:85:56:d7:da:7c:b4:9f:11:40: a0:52:ae:c0:3d:0a:88:70:59:26:41:e6:91:f6:ff:eb:0f:1a: 9c:c1:63:81:8d:d0:d7:71:44:e0:ba:d0:ac:9a:c0:ef:b5:1b: 4b:8a:f3:e4:c3:4a:c5:02:6b:db:e8:23:76:d9:56:79:75:7b: e0:33:b2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6henUSHF83T5GzBuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi OTFiMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NGU4Yjk4MzctNjYwMi00MjdjLTlhZDYtYmI0OTQ1ZjI1OGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjSXkMhW47uzN0zjIiEOiC3K6yVHP4JMpmU2 7YWRldUEzLv+I7HI1OovuFDZUyvgNuY/i4GzLbAk4n7REx/6JYkRxFfFv8if+w+A BQw+1zaFAdP6+R4hyxDXn9c+VMqyvIxAbAT1D66lC1KVGdU1u7650egOi2dAGGDA wSiBonxVE3basBNqkB7uHJjYdyAUcib3cGpbXDD+6wLkAutTDQewOrrZTYwKtu5X sWVDA3RA2V88s0eeBo/qATpMYXiMCuXSL+dGrWaTtn36SLaw9n40WISxHoWFA+3n ihMqHkN7hsk2M5x1WjO4zI/XgFciQeBa3Hnk+hcN75kI7W8DNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbi48HcQuPB+0lPsflB/8apSKkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvZmZlMjUyYTctYmU4Mi0z ODQwLWE3YjQtZTY3YTAwNTI5MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0 MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRijAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe0jOOArgpUiLmn6u8E/DS49NPVVra6Ja1b4iFh1+riijSQ/Llo/R9K gc/BMsUyxB91Gsk91x18gutlJtNv9DTZNy2hKHaGqACeiuiU69nAqUoOfOkCuSv8 ANsqJgFwOec7ovKpygxQ1/RamDSFYFPcIdio3V8UGXWiHs9uYQA4lk35LzjblUl5 VF0+tajnNC+T1tkBc2vIYWA1Rs0btD7P5Ka9dW8fBDAc30EUUkJqg3e5Xibz0MMB frXgDYVW19p8tJ8RQKBSrsA9CohwWSZB5pH2/+sPGpzBY4GN0NdxROC60KyawO+1 G0uK8+TDSsUCa9voI3bZVnl1e+AzsgM= -----END CERTIFICATE-----Generated at Fri Sep 4 21:10:10 2026 by rpki-client