$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60a804a3-9c9f-3126-af29-6629411135b2.roa File: 60a804a3-9c9f-3126-af29-6629411135b2.roa (raw, json) Hash identifier: xFAFCOrMCkHWpIJVSW7awqaHggz52JqzI+PYLz6+RKY= Subject key identifier: 33:E3:9E:D3:1B:3E:10:62:51:EC:15:87:F1:6E:6B:B2:6C:02:22:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B58668151C4E66D93A980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60a804a3-9c9f-3126-af29-6629411135b2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 67.188.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:58:66:81:51:c4:e6:6d:93:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=1feedcbb-121e-4647-8412-9bd19d1081b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:16:5c:b6:a1:28:39:c5:c0:2f:09:bf:6a: fc:5a:8d:a0:0d:d9:de:eb:e5:59:a5:ee:7d:9b:f5: 68:dc:5e:0b:d7:2f:52:aa:78:f7:01:f2:84:e6:06: 48:da:2e:20:6a:0a:5f:e8:aa:3e:b8:61:f2:ae:9a: a4:69:cd:5b:7a:b6:72:82:12:56:5f:bf:88:e9:c2: 49:98:44:f7:8d:3c:9b:cc:f0:55:13:81:98:68:da: da:4f:20:ce:97:59:d7:dc:2e:fd:7b:bf:1e:67:4b: 5a:8a:80:fc:3d:65:e2:31:29:f3:f3:e1:7a:07:d6: c8:99:fa:71:cd:d9:01:79:cf:68:93:76:50:ce:fc: 6d:2d:a8:7a:ac:2f:a8:02:63:8c:49:66:79:08:6b: 0f:d8:03:ab:0f:a0:5f:09:c1:b5:2a:f1:78:89:cc: c7:ea:a8:1c:3f:16:3a:1b:26:46:2c:71:ee:50:f0: a2:a4:28:17:04:bd:76:93:01:bc:e2:25:4e:ce:3b: 40:93:6b:1f:d1:de:d5:2c:f6:92:bb:81:11:c9:f6: 8a:76:a8:52:28:c0:6a:a4:76:b9:82:59:9b:e2:88: 4e:45:25:25:fa:00:b4:ed:66:50:8f:53:9e:fc:0e: 63:a0:bc:73:6b:68:76:18:2f:f1:29:e1:63:6d:2b: 87:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E3:9E:D3:1B:3E:10:62:51:EC:15:87:F1:6E:6B:B2:6C:02:22:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60a804a3-9c9f-3126-af29-6629411135b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:e5:e5:87:c2:04:17:31:4a:a2:16:6a:1e:8c:58:11:27: 00:24:3f:0a:a4:6f:ce:17:e0:33:68:f0:b9:32:c5:f5:9b:86: 83:59:fa:83:d1:b6:2c:df:49:9a:3c:ac:0f:8c:96:f3:b9:d0: d2:fd:b1:7a:ee:92:36:34:28:88:05:72:23:2f:59:6a:67:39: 65:23:d3:3c:85:f9:97:65:b5:76:17:26:80:16:5b:68:81:db: 3a:76:0a:21:aa:0d:43:dd:37:48:6f:bf:57:59:4a:b6:05:54: 9b:d9:e2:29:13:c9:e3:60:8f:48:15:8f:ba:3e:7a:20:9b:48: 8d:93:75:d1:ea:2d:ba:f2:6e:8a:cf:45:74:44:c9:6d:89:93: 65:fb:e0:5e:a3:fa:61:8f:a9:7f:23:ca:7b:89:ea:36:db:e8: 6c:02:d4:65:fe:f0:c9:a1:6b:36:ba:7e:1f:b1:56:8e:50:7a: 1e:c3:e1:4b:db:2f:b2:81:16:04:84:ec:64:64:2d:0b:a0:20: 77:11:6c:a4:02:36:ac:6b:07:c5:89:7f:54:79:62:ab:76:bc: 14:e4:27:7a:44:db:87:7f:fc:df:2a:e0:16:ff:30:1d:a5:cb: d7:44:e5:67:6f:75:ae:99:b6:f7:53:20:89:4c:a4:34:5d:2f: aa:f4:c7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO1hmgVHE5m2TqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MWZlZWRjYmItMTIxZS00NjQ3LTg0MTItOWJkMTlkMTA4MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolMWXLahKDnFwC8Jv2r8Wo2gDdne6+VZpe59 m/Vo3F4L1y9Sqnj3AfKE5gZI2i4gagpf6Ko+uGHyrpqkac1berZyghJWX7+I6cJJ mET3jTybzPBVE4GYaNraTyDOl1nX3C79e78eZ0taioD8PWXiMSnz8+F6B9bImfpx zdkBec9ok3ZQzvxtLah6rC+oAmOMSWZ5CGsP2AOrD6BfCcG1KvF4iczH6qgcPxY6 GyZGLHHuUPCipCgXBL12kwG84iVOzjtAk2sf0d7VLPaSu4ERyfaKdqhSKMBqpHa5 glmb4ohORSUl+gC07WZQj1Oe/A5joLxza2h2GC/xKeFjbSuHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPjntMbPhBiUewVh/Fua7JsAiLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBhODA0YTMtOWM5Zi0z MTI2LWFmMjktNjYyOTQxMTEzNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOf5eWHwgQXMUqiFmoejFgRJwAkPwqkb84X4DNo8LkyxfWbhoNZ+oPR tizfSZo8rA+MlvO50NL9sXrukjY0KIgFciMvWWpnOWUj0zyF+ZdltXYXJoAWW2iB 2zp2CiGqDUPdN0hvv1dZSrYFVJvZ4ikTyeNgj0gVj7o+eiCbSI2TddHqLbryborP RXREyW2Jk2X74F6j+mGPqX8jynuJ6jbb6GwC1GX+8Mmhaza6fh+xVo5Qeh7D4Uvb L7KBFgSE7GRkLQugIHcRbKQCNqxrB8WJf1R5Yqt2vBTkJ3pE24d//N8q4Bb/MB2l y9dE5Wdvda6ZtvdTIIlMpDRdL6r0x2k= -----END CERTIFICATE-----Generated at Tue Jul 21 20:48:17 2026 by rpki-client