$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa File: 9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa (raw, json) Hash identifier: GTwoW/jsTOVIBskYpIJt6rtzGa/12Ly8qEan/B/L2SU= Subject key identifier: 6C:7C:48:FB:BB:33:66:C6:62:4F:5F:59:23:6F:10:29:5F:C1:ED:18 Certificate issuer: /CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Certificate serial: 010D0C9F4328584E8B251402F8D5982E72524180 Authority key identifier: 42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 14430 IP address blocks: 208.68.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:25:14:02:f8:d5:98:2e:72:52:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=74e2c007-9365-4117-812b-5a628e193d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:cc:9b:8f:fd:84:ce:02:49:d4:8e:2b:72: 3f:8f:a0:f0:78:c7:e9:e1:c3:a1:7d:fb:96:8e:54: 0c:f7:7f:f4:e6:af:60:d1:5d:60:7a:7c:76:2f:24: 39:81:2f:53:a5:33:b6:05:3c:bf:eb:a4:74:61:20: 0f:14:3b:13:e3:5d:73:04:5d:2b:ca:f0:f0:ed:cf: 1b:13:59:9d:ce:e7:59:da:51:a2:08:15:8e:b8:64: ba:7c:96:92:c8:d3:f9:4c:5f:70:4b:3a:20:e6:93: b5:f7:82:3a:84:dc:81:10:64:55:c8:5f:2d:d1:9c: 2f:ab:5a:c6:4c:aa:58:1d:dd:0a:88:4e:b1:2e:f7: 62:c9:e5:72:84:36:c5:35:de:06:b1:d6:46:d7:55: 09:cf:d2:17:bd:9f:7c:be:ec:04:60:e6:01:56:86: e2:72:63:bb:50:5a:26:be:f8:30:74:b6:5b:06:75: fe:2a:a2:c9:92:90:4e:e4:9f:a5:77:25:13:3d:02: 26:c6:0d:cd:f1:f4:90:c2:15:64:51:16:6a:d2:89: 23:56:9c:7d:b2:91:49:fb:fe:cc:34:fd:4b:d5:d3: e6:f9:27:0e:98:d6:c6:f4:af:c0:dc:cf:cb:09:56: a1:ae:32:b0:6b:f9:9b:77:97:20:2a:b7:1e:4d:bf: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7C:48:FB:BB:33:66:C6:62:4F:5F:59:23:6F:10:29:5F:C1:ED:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl X509v3 Authority Key Identifier: keyid:42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer sbgp-ipAddrBlock: critical IPv4: 208.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:95:10:18:59:f6:08:fa:52:2a:44:ad:9d:90:27:8f:86:1d: 69:73:28:fa:f5:2e:86:fd:9f:48:5c:4d:ef:71:8e:90:bb:67: b1:2b:69:bd:3e:8e:17:92:2f:14:3d:46:eb:d9:54:b6:43:55: 5e:89:76:70:40:29:72:04:df:78:51:14:45:4a:02:a8:62:fb: 03:9f:09:10:b0:d3:8a:3a:5f:68:23:7b:29:27:a1:cd:35:d0: 12:f2:42:25:90:71:d4:bf:a6:6b:ba:bf:7a:64:ba:cf:cc:d8: 26:d2:99:9b:75:f7:23:d0:f6:54:3e:22:3d:4c:5e:40:f9:d0: 82:23:e3:f8:cb:c2:7a:aa:fc:71:e1:d8:53:e6:2d:a5:59:b1: e1:45:9a:71:ab:e6:61:57:6a:66:34:79:01:7f:c0:bd:5d:2e: d6:04:9a:19:48:7f:ad:de:84:c6:3c:ff:47:0e:02:47:d8:9a: 2b:67:c8:ae:60:22:cc:81:10:b4:3d:5b:fa:b4:f0:54:d4:41: e0:c2:8a:16:6d:b1:c4:a6:04:53:28:bd:8c:74:1d:31:86:74: 23:e8:8e:6e:0f:df:e1:f9:f6:b3:e4:fb:25:da:01:01:87:a5: e0:d3:6f:50:4b:c2:07:08:12:35:94:f1:a3:0c:34:02:52:42: fe:a2:95:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJRQC+NWYLnJSQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzZDBmYzctN2I2Ni00ZTUyLWE5NmUtZTg1ZGFiN2Qy NTY2MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk NzRlMmMwMDctOTM2NS00MTE3LTgxMmItNWE2MjhlMTkzZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtnMm4/9hM4CSdSOK3I/j6DweMfp4cOhffuW jlQM93/05q9g0V1genx2LyQ5gS9TpTO2BTy/66R0YSAPFDsT411zBF0ryvDw7c8b E1mdzudZ2lGiCBWOuGS6fJaSyNP5TF9wSzog5pO194I6hNyBEGRVyF8t0Zwvq1rG TKpYHd0KiE6xLvdiyeVyhDbFNd4GsdZG11UJz9IXvZ98vuwEYOYBVobicmO7UFom vvgwdLZbBnX+KqLJkpBO5J+ldyUTPQImxg3N8fSQwhVkURZq0okjVpx9spFJ+/7M NP1L1dPm+ScOmNbG9K/A3M/LCVahrjKwa/mbd5cgKrceTb/pXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx8SPu7M2bGYk9fWSNvEClfwe0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjNk MGZjNy03YjY2LTRlNTItYTk2ZS1lODVkYWI3ZDI1NjYvOWM2ZjVlMTYtYjVmNy0z MTE1LWJiNDktN2JiYzFlZjE2MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDIzZDBmYzctN2I2Ni00ZTUyLWE5 NmUtZTg1ZGFiN2QyNTY2LzAyM2QwZmM3LTdiNjYtNGU1Mi1hOTZlLWU4NWRhYjdk MjU2Ni5jcmwwHwYDVR0jBBgwFoAUQlPxhq0/cqZwlOjmCmDX4udDSSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjNkMGZjNy03YjY2LTRlNTItYTk2ZS1lODVk YWI3ZDI1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0ER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2VEBhZ9gj6UipErZ2QJ4+GHWlzKPr1Lob9n0hcTe9xjpC7Z7Erab0+ jheSLxQ9RuvZVLZDVV6JdnBAKXIE33hRFEVKAqhi+wOfCRCw04o6X2gjeyknoc01 0BLyQiWQcdS/pmu6v3pkus/M2CbSmZt19yPQ9lQ+Ij1MXkD50IIj4/jLwnqq/HHh 2FPmLaVZseFFmnGr5mFXamY0eQF/wL1dLtYEmhlIf63ehMY8/0cOAkfYmitnyK5g IsyBELQ9W/q08FTUQeDCihZtscSmBFMovYx0HTGGdCPojm4P3+H59rPk+yXaAQGH peDTb1BLwgcIEjWU8aMMNAJSQv6ild4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:13:23 2026 by rpki-client