$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa File: 96377f13-9828-377f-8847-5a9e522ad52d.roa (raw, json) Hash identifier: xs2W8/yfik24ywUwoRmMKErdlZd0uNQvA+VdIHVBQ7w= Subject key identifier: 20:39:8C:DD:FB:E1:5C:92:B5:77:87:C5:FF:40:1B:31:3A:E8:C0:99 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584E5A4A03F516C6A005BABAA380 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 11260 IP address blocks: 216.167.224.0/19 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:03:f5:16:c6:a0:05:ba:ba:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=72d896c7-e814-465e-92f2-9e19f34fbcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:3b:d4:3f:58:32:00:13:f2:fc:17:2f:8d: 59:33:00:79:06:5a:08:22:59:61:87:40:d2:71:39: e5:64:d9:81:f2:f7:ca:f3:3a:69:47:9a:80:a1:b5: 53:f5:0d:67:9e:4c:10:18:76:2e:f9:c0:04:a0:b6: 96:a8:01:91:83:59:2a:7b:ea:84:f9:11:25:2c:5f: 4b:c0:b6:15:b2:1e:c9:53:b1:a3:f0:2e:9b:c3:6b: dd:e9:e3:bb:69:96:ca:84:ed:3f:3c:3f:01:25:68: cb:e6:f7:2a:fd:24:30:0f:75:8e:9f:53:9d:16:40: 5c:32:48:81:a5:79:bb:37:14:63:76:a6:e1:27:8b: 41:02:e8:39:d8:53:e9:b7:41:ec:f4:ba:93:18:08: a7:75:55:7a:32:d4:26:3c:62:77:4c:50:df:1f:d6: 2d:22:63:4b:e0:75:70:c8:75:e6:93:c3:05:95:f0: 14:e0:99:32:8e:23:f2:4e:34:0e:62:c1:04:f0:0a: fc:56:fe:32:8f:43:2f:13:3e:20:06:6f:f9:42:5b: a4:52:f4:44:59:32:f9:2a:69:a4:57:22:16:d2:58: d8:23:c6:66:be:a7:66:5f:ba:fc:87:83:57:2b:e3: e6:c2:97:c0:25:b1:57:97:d6:ee:8b:9c:44:48:dd: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:8C:DD:FB:E1:5C:92:B5:77:87:C5:FF:40:1B:31:3A:E8:C0:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 216.167.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2a:96:96:c0:a7:23:0f:a9:63:f1:43:40:48:6c:c8:ca:86: e6:22:39:66:ba:20:02:67:85:40:e1:f4:60:89:60:92:60:ad: 59:4d:d2:ec:fd:93:8e:59:ab:b7:61:b6:96:e9:f2:a0:43:b8: 81:ad:ea:d7:26:cc:5d:c0:66:45:b3:e6:30:e1:39:2e:a4:6f: 45:cf:6b:b8:30:12:2d:b2:b0:43:f1:36:45:a3:d3:be:fb:cb: 4a:2e:5e:00:67:c7:db:93:22:ff:a1:75:b5:7b:9b:e2:e5:04: 8d:0a:42:6b:f6:90:97:6d:36:b9:de:6a:c4:7a:3a:c4:cb:7f: be:c4:d9:81:00:2f:66:34:f7:31:89:a2:99:f8:7a:52:95:63: 74:ff:6b:91:e0:e4:4f:61:11:77:09:74:fd:dc:9a:bd:2e:c1: 7b:5e:98:db:49:5f:2b:cf:70:8c:bb:b1:c3:c6:8a:b2:72:a4: d3:44:00:94:41:e1:87:52:5a:8b:72:dc:1b:60:de:58:82:0a: a1:8f:76:b5:87:89:04:a2:fa:81:e3:56:5d:15:ee:c3:3d:80: ed:33:4c:da:cd:bb:3a:3c:3f:10:90:89:9e:57:34:93:b1:a0: e0:a4:29:04:8a:1c:21:80:b9:28:6a:4c:08:7f:98:ad:5c:ec: e5:2b:d6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgP1FsagBbq6o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NzJkODk2YzctZTgxNC00NjVlLTkyZjItOWUxOWYzNGZiY2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0w71D9YMgAT8vwXL41ZMwB5BloIIllhh0DS cTnlZNmB8vfK8zppR5qAobVT9Q1nnkwQGHYu+cAEoLaWqAGRg1kqe+qE+RElLF9L wLYVsh7JU7Gj8C6bw2vd6eO7aZbKhO0/PD8BJWjL5vcq/SQwD3WOn1OdFkBcMkiB pXm7NxRjdqbhJ4tBAug52FPpt0Hs9LqTGAindVV6MtQmPGJ3TFDfH9YtImNL4HVw yHXmk8MFlfAU4JkyjiPyTjQOYsEE8Ar8Vv4yj0MvEz4gBm/5QlukUvREWTL5Kmmk VyIW0ljYI8ZmvqdmX7r8h4NXK+PmwpfAJbFXl9bui5xESN00YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA5jN374VyStXeHxf9AGzE66MCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOTYzNzdmMTMtOTgyOC0z NzdmLTg4NDctNWE5ZTUyMmFkNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQqlpbApyMPqWPxQ0BIbMjKhuYiOWa6IAJnhUDh9GCJYJJgrVlN0uz9 k45Zq7dhtpbp8qBDuIGt6tcmzF3AZkWz5jDhOS6kb0XPa7gwEi2ysEPxNkWj0777 y0ouXgBnx9uTIv+hdbV7m+LlBI0KQmv2kJdtNrneasR6OsTLf77E2YEAL2Y09zGJ opn4elKVY3T/a5Hg5E9hEXcJdP3cmr0uwXtemNtJXyvPcIy7scPGirJypNNEAJRB 4YdSWoty3Btg3liCCqGPdrWHiQSi+oHjVl0V7sM9gO0zTNrNuzo8PxCQiZ5XNJOx oOCkKQSKHCGAuShqTAh/mK1c7OUr1ik= -----END CERTIFICATE-----Generated at Wed Jul 22 06:06:03 2026 by rpki-client