$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/48e0623c-9889-3890-8bdc-4e3838833694.roa File: 48e0623c-9889-3890-8bdc-4e3838833694.roa (raw, json) Hash identifier: X5Aoha49fVSN0AjrxK7wSvvYi4Nw+XZmvwjs0Pqw/Ns= Subject key identifier: 95:37:69:75:EA:DB:4A:EF:33:5B:28:7F:9F:45:7C:8D:ED:B6:4A:98 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584E779A35A0049DF3C6D2174CE0 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/48e0623c-9889-3890-8bdc-4e3838833694.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 19802 IP address blocks: 216.238.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:35:a0:04:9d:f3:c6:d2:17:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=0d27857b-7a96-4334-96b9-b0e5194179bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:04:de:f2:29:1b:d2:c5:f7:88:32:09:95: 6f:9a:a8:c9:92:04:fd:79:00:45:c1:8e:c7:2f:2e: 2a:c2:88:6a:bd:6f:03:9b:af:bf:0d:c3:01:30:ca: 8e:ca:4c:09:ea:e9:dc:a4:ec:20:aa:72:25:c8:9c: 5b:63:a3:24:9a:7a:7a:01:0e:91:5d:81:55:8d:bb: ba:45:42:a3:f4:d2:ec:9c:65:24:a9:73:10:7d:e7: 6f:f4:76:5c:25:8c:14:59:4a:30:72:04:d4:97:16: 09:c4:8d:14:ab:41:11:c6:1a:07:06:94:2c:d4:ce: 71:e9:3b:4e:6f:4a:dd:36:0b:11:6d:be:5a:00:bc: 6d:78:17:b2:63:5c:46:2c:85:c5:a0:91:d1:ce:57: d3:84:fb:86:b4:c8:07:43:af:96:92:dd:b7:42:cb: 7b:04:1f:10:15:b3:50:6f:a8:7f:69:3c:55:44:0d: f5:fa:aa:5b:54:6c:f3:65:8a:c0:49:6c:b0:77:dd: 06:0e:66:6f:a3:85:64:24:7f:08:cd:e3:ec:43:d1: d8:69:59:7d:8b:4e:a4:ce:d8:bd:b2:54:92:a9:c1: 8a:2c:21:b2:a0:ca:f1:fd:63:a3:e0:ba:14:82:d5: 25:d2:7c:36:e9:86:93:02:fb:73:5b:3c:c8:f0:f7: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:37:69:75:EA:DB:4A:EF:33:5B:28:7F:9F:45:7C:8D:ED:B6:4A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/48e0623c-9889-3890-8bdc-4e3838833694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 216.238.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2c:84:c8:f8:2c:73:06:d7:22:45:15:d5:e6:08:b8:ff:69: e6:00:c2:a7:b7:7d:7d:48:5f:90:6f:fb:54:50:3f:1f:15:a0: 51:bf:93:81:51:1b:90:ea:7e:df:57:1a:f3:f7:78:9f:cd:a7: 34:d9:04:28:79:00:6a:40:cc:04:1d:8c:2b:62:16:4e:b3:8d: 1f:b6:d1:cf:f0:f4:2e:0d:92:42:4f:0a:44:09:bb:4e:2b:b1: 04:9f:54:8a:0e:65:4a:85:fd:f4:69:34:31:c9:15:ac:3d:02: b6:ad:77:c9:9c:70:04:44:69:2f:3b:52:26:fc:35:66:da:f3: a2:27:0d:ac:c4:c8:37:8d:c5:ad:57:2c:85:9a:84:c3:00:86: 0d:52:07:fd:14:87:c8:a5:0e:b3:9a:31:f1:98:41:0b:69:f6: 71:c8:a2:3e:c4:36:68:4d:54:60:6e:8f:14:62:8b:48:54:68: e6:6a:61:4c:a2:4b:25:5a:e3:9d:0b:86:7f:f2:4a:d9:1e:b1: cf:61:b8:13:e1:8d:0a:47:49:3d:ba:ac:ed:a9:76:7c:cb:ea: 8b:5e:4e:fc:f3:1d:8e:82:ea:57:a5:d1:ab:89:83:c2:37:4b: 0d:21:94:19:a6:00:2d:e4:45:e7:d2:9f:21:51:c6:9d:da:35: 4b:d5:49:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mjWgBJ3zxtIXTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MGQyNzg1N2ItN2E5Ni00MzM0LTk2YjktYjBlNTE5NDE3OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgoE3vIpG9LF94gyCZVvmqjJkgT9eQBFwY7H Ly4qwohqvW8Dm6+/DcMBMMqOykwJ6uncpOwgqnIlyJxbY6Mkmnp6AQ6RXYFVjbu6 RUKj9NLsnGUkqXMQfedv9HZcJYwUWUowcgTUlxYJxI0Uq0ERxhoHBpQs1M5x6TtO b0rdNgsRbb5aALxteBeyY1xGLIXFoJHRzlfThPuGtMgHQ6+Wkt23Qst7BB8QFbNQ b6h/aTxVRA31+qpbVGzzZYrASWywd90GDmZvo4VkJH8IzePsQ9HYaVl9i06kzti9 slSSqcGKLCGyoMrx/WOj4LoUgtUl0nw26YaTAvtzWzzI8PdwlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU3aXXq20rvM1sof59FfI3ttkqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvNDhlMDYyM2MtOTg4OS0z ODkwLThiZGMtNGUzODM4ODMzNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8shMj4LHMG1yJFFdXmCLj/aeYAwqe3fX1IX5Bv+1RQPx8VoFG/k4FR G5Dqft9XGvP3eJ/NpzTZBCh5AGpAzAQdjCtiFk6zjR+20c/w9C4NkkJPCkQJu04r sQSfVIoOZUqF/fRpNDHJFaw9Aratd8mccAREaS87Uib8NWba86InDazEyDeNxa1X LIWahMMAhg1SB/0Uh8ilDrOaMfGYQQtp9nHIoj7ENmhNVGBujxRii0hUaOZqYUyi SyVa450Lhn/yStkesc9huBPhjQpHST26rO2pdnzL6oteTvzzHY6C6lel0auJg8I3 Sw0hlBmmAC3kRefSnyFRxp3aNUvVSVc= -----END CERTIFICATE-----Generated at Mon Jul 13 15:05:14 2026 by rpki-client