$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589b83f3-5813-3f13-9cf9-14f747288319.roa File: 589b83f3-5813-3f13-9cf9-14f747288319.roa (raw, json) Hash identifier: 3RuYbVfK3OAUoooNptveC1atjGOO36kv2HqQzmrU5Go= Subject key identifier: 6F:50:74:AC:B6:76:CB:7C:2A:55:27:6A:E9:AF:5B:2A:80:DC:98:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3BD8D68E53F34314F41E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589b83f3-5813-3f13-9cf9-14f747288319.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33659 IP address blocks: 174.166.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:d8:d6:8e:53:f3:43:14:f4:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=73808f1c-f74e-4b44-8b8b-e0473fee8cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:55:1b:0b:a6:c6:3a:61:27:9a:d6:11:db: cf:b1:9d:4e:0b:d0:d5:84:c7:bb:62:66:92:fb:9d: cb:46:76:e3:69:46:c2:85:17:9c:60:e4:d4:37:23: ec:1c:76:82:e0:57:af:68:67:98:42:bc:22:da:dd: fe:02:50:e3:57:03:05:89:74:ef:a2:92:dc:29:fd: 8a:af:d2:15:13:3f:fe:1e:fb:fb:c2:8e:b7:72:66: b1:26:01:a8:06:c5:86:0e:14:a8:43:44:9b:bc:18: 78:4f:d3:00:36:bb:8b:f5:e5:e5:08:30:a9:87:80: 7c:e9:e6:f0:9f:f5:0f:0a:89:30:27:c0:c6:e0:54: 24:0d:b9:7a:f7:27:95:6d:6c:a3:a3:2e:82:b8:2e: e4:5c:1d:ea:3b:79:cb:6e:57:2d:7f:14:b7:b9:b6: bf:0b:63:5b:44:12:e7:5f:05:f3:56:b7:00:c5:9e: 59:15:77:d9:57:d4:ce:53:64:fb:7a:32:d3:b2:79: 76:49:4a:f7:c3:c3:1e:9b:78:2a:89:07:76:2d:f1: a9:90:dd:82:4c:f9:e7:6f:3c:ec:bf:4a:25:9c:3c: 72:1f:02:72:fb:89:14:a4:f5:ac:f3:cb:7b:7e:05: 39:b5:28:5c:7d:f1:6a:82:25:da:20:2f:af:37:fa: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:50:74:AC:B6:76:CB:7C:2A:55:27:6A:E9:AF:5B:2A:80:DC:98:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589b83f3-5813-3f13-9cf9-14f747288319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.166.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4e:42:51:4a:aa:f3:b6:66:59:a4:e6:2c:9d:71:12:cf:fa: 13:54:95:82:1f:5a:c9:a7:8d:6a:7c:75:fb:df:4c:8b:30:2e: 3c:8b:d0:4a:36:3b:3c:98:dc:10:6d:f2:27:23:16:0d:16:e7: b9:78:bd:f5:b8:99:b5:e1:c2:b2:48:6c:ff:f5:f3:85:57:b9: 23:cc:1b:fd:34:cc:2f:ca:62:18:ff:5a:fe:d2:c8:3f:a4:87: d8:df:74:34:e2:f7:51:dc:0d:93:08:37:a2:a6:7a:18:59:e1: 0b:62:64:6f:f2:87:59:61:ff:a0:95:e3:03:77:34:f9:32:a6: 81:6e:1e:bd:90:cd:04:4f:26:15:fc:de:5a:d8:e8:59:41:9d: 06:cc:b6:6a:32:f0:77:04:a8:a4:3a:e8:ac:9e:c4:22:60:8a: ed:8e:7f:3a:a5:84:ea:fe:f0:5b:34:71:3e:40:e1:18:d2:97: 4d:5c:23:7f:94:51:e4:e8:ff:84:da:2d:30:4a:79:e5:de:f2: 3d:c8:57:d1:03:a4:6d:6e:b5:88:ac:b2:52:51:bb:f3:dd:87: 3a:49:4a:bd:0d:14:e6:26:26:ab:cc:b4:6e:09:fb:45:93:fa: d2:dc:c0:bd:f9:9b:45:68:0d:25:e6:b8:53:0c:ba:83:ce:6e: ad:0d:69:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO9jWjlPzQxT0HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NzM4MDhmMWMtZjc0ZS00YjQ0LThiOGItZTA0NzNmZWU4Y2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZhVGwumxjphJ5rWEdvPsZ1OC9DVhMe7YmaS +53LRnbjaUbChRecYOTUNyPsHHaC4FevaGeYQrwi2t3+AlDjVwMFiXTvopLcKf2K r9IVEz/+Hvv7wo63cmaxJgGoBsWGDhSoQ0SbvBh4T9MANruL9eXlCDCph4B86ebw n/UPCokwJ8DG4FQkDbl69yeVbWyjoy6CuC7kXB3qO3nLblctfxS3uba/C2NbRBLn XwXzVrcAxZ5ZFXfZV9TOU2T7ejLTsnl2SUr3w8Mem3gqiQd2LfGpkN2CTPnnbzzs v0olnDxyHwJy+4kUpPWs88t7fgU5tShcffFqgiXaIC+vN/oiawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9QdKy2dst8KlUnaumvWyqA3JjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg5YjgzZjMtNTgxMy0z ZjEzLTljZjktMTRmNzQ3Mjg4MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZOQlFKqvO2Zlmk5iydcRLP+hNUlYIfWsmnjWp8dfvfTIswLjyL0Eo2 OzyY3BBt8icjFg0W57l4vfW4mbXhwrJIbP/184VXuSPMG/00zC/KYhj/Wv7SyD+k h9jfdDTi91HcDZMIN6KmehhZ4QtiZG/yh1lh/6CV4wN3NPkypoFuHr2QzQRPJhX8 3lrY6FlBnQbMtmoy8HcEqKQ66KyexCJgiu2OfzqlhOr+8Fs0cT5A4RjSl01cI3+U UeTo/4TaLTBKeeXe8j3IV9EDpG1utYisslJRu/PdhzpJSr0NFOYmJqvMtG4J+0WT +tLcwL35m0VoDSXmuFMMuoPObq0NaUM= -----END CERTIFICATE-----Generated at Tue Jul 21 21:47:00 2026 by rpki-client