$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa File: 5c98cdaf-5127-33d6-825c-2ee7692727b6.roa (raw, json) Hash identifier: iBb42ZHLgRJM9FMMBP+wb4pN1i329hvsYVA0f0jajNA= Subject key identifier: 96:AF:9B:C6:61:10:3B:5F:BE:82:E4:94:69:44:B0:71:36:FF:C8:F2 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584E7634C83DA5BDC84A07298100 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 33208 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:c8:3d:a5:bd:c8:4a:07:29:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=f17f4e32-339e-455f-b7b2-f88e326a2640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:85:5f:74:23:be:cf:25:f2:2a:f9:95:be: d0:cd:1c:2d:d1:49:b1:ad:4b:80:8a:19:5a:48:d1: 17:5a:9f:0d:47:54:d6:50:28:2a:57:5f:a1:7a:c7: a8:fb:c1:09:51:4a:18:81:84:8a:da:35:3d:97:48: 58:40:15:60:df:76:cd:0c:c3:d4:bf:40:5f:60:ca: 56:1e:37:30:09:7e:02:71:72:45:33:f1:c0:04:48: 40:19:96:d3:28:56:3d:cc:66:ca:fe:e1:df:61:35: c9:83:c3:c3:8b:d3:05:3a:dd:e1:3c:21:48:02:62: 42:73:5c:d4:ba:b4:5d:8f:81:ab:8b:33:49:30:0b: 33:48:a8:e0:1b:7e:c9:30:ba:40:25:a7:6f:0a:b4: 03:13:53:6b:05:ab:a5:42:dd:b6:3a:f8:c1:a7:d5: 9d:77:f7:88:45:40:08:d9:a6:c8:a7:77:c4:3e:a7: 6b:cd:b9:cb:5f:8c:e1:c3:76:90:bb:11:64:d2:58: 6f:6d:d8:68:aa:05:31:b9:b2:73:df:d5:90:4a:8c: f5:ed:e1:0c:b5:69:79:f5:bc:de:4a:ea:c9:60:52: 9b:ea:75:35:13:5a:1a:e6:21:7c:c6:02:11:cb:f8: 7e:98:3d:7d:04:05:0c:54:ad:15:6a:42:4e:2f:4f: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AF:9B:C6:61:10:3B:5F:BE:82:E4:94:69:44:B0:71:36:FF:C8:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:77:28:e7:5b:26:32:87:b1:75:93:88:4a:0c:bc:be:31:61: 6a:76:1e:3d:e1:49:ff:e4:e5:1b:56:e2:62:3b:3e:f5:41:2a: b3:60:0d:af:f6:87:dd:3b:8a:03:48:d0:36:6f:7d:f1:32:2f: f5:25:ee:ea:b4:46:a1:12:6f:86:00:97:e0:2a:90:7b:7e:03: 56:da:ba:3b:35:66:10:8e:eb:2d:0a:9c:b5:65:16:dd:00:dc: fb:51:00:ea:bf:e5:00:d9:4b:53:66:cf:c0:c2:c1:69:95:88: 4e:6b:13:b6:60:d0:8e:30:2b:ac:a3:5e:3a:c7:3b:06:c5:e3: ff:4e:af:bd:ba:64:bf:0e:6a:00:e6:84:73:ce:00:64:55:9b: 7a:64:11:83:99:09:66:02:2a:dd:1b:f0:83:83:2d:ee:38:19: 08:e6:42:80:8e:eb:ee:b6:19:1d:b7:97:7a:db:7e:5b:d1:07: 73:ed:31:e8:68:f5:59:29:6e:e1:a4:9a:4f:e1:13:3c:bc:56: 74:2f:81:02:15:c6:1c:94:ef:f8:77:b7:d7:1a:1f:20:96:ab: 89:5b:77:00:1c:d7:3d:b4:94:d1:7d:e6:4a:f1:1f:35:44:ab: 16:30:a2:76:e1:15:4f:86:ee:eb:90:ea:5e:ba:8c:37:dd:cb: 43:86:64:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NMg9pb3ISgcpgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjE3ZjRlMzItMzM5ZS00NTVmLWI3YjItZjg4ZTMyNmEyNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A+FX3Qjvs8l8ir5lb7QzRwt0UmxrUuAihla SNEXWp8NR1TWUCgqV1+heseo+8EJUUoYgYSK2jU9l0hYQBVg33bNDMPUv0BfYMpW HjcwCX4CcXJFM/HABEhAGZbTKFY9zGbK/uHfYTXJg8PDi9MFOt3hPCFIAmJCc1zU urRdj4GrizNJMAszSKjgG37JMLpAJadvCrQDE1NrBaulQt22OvjBp9Wdd/eIRUAI 2abIp3fEPqdrzbnLX4zhw3aQuxFk0lhvbdhoqgUxubJz39WQSoz17eEMtWl59bze SurJYFKb6nU1E1oa5iF8xgIRy/h+mD19BAUMVK0VakJOL08P0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJavm8ZhEDtfvoLklGlEsHE2/8jyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWM5OGNkYWYtNTEyNy0z M2Q2LTgyNWMtMmVlNzY5MjcyN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ3KOdbJjKHsXWTiEoMvL4xYWp2Hj3hSf/k5RtW4mI7PvVBKrNgDa/2 h907igNI0DZvffEyL/Ul7uq0RqESb4YAl+AqkHt+A1baujs1ZhCO6y0KnLVlFt0A 3PtRAOq/5QDZS1Nmz8DCwWmViE5rE7Zg0I4wK6yjXjrHOwbF4/9Or726ZL8OagDm hHPOAGRVm3pkEYOZCWYCKt0b8IODLe44GQjmQoCO6+62GR23l3rbflvRB3PtMeho 9VkpbuGkmk/hEzy8VnQvgQIVxhyU7/h3t9caHyCWq4lbdwAc1z20lNF95krxHzVE qxYwonbhFU+G7uuQ6l66jDfdy0OGZEA= -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:34 2026 by rpki-client