$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa File: c5647d32-2348-3ec2-87b8-71c2703da1ff.roa (raw, json) Hash identifier: BfgdmYGO6UUNojFq3wt1T/udviDS7sKFX2IUYrjXXKo= Subject key identifier: 2A:B4:15:26:BD:CF:7A:83:B6:95:D2:17:DE:9E:B2:04:F2:04:5A:36 Certificate issuer: /CN=6c1cacf6-731e-4845-81a0-0e28071dbc9b Certificate serial: 010D0C9F4328584E921F9AB882845CF0EF16EF40 Authority key identifier: 31:E2:4A:2D:9F:C8:7B:E0:6C:C0:F5:21:F4:67:40:69:72:09:DD:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 32270 IP address blocks: 208.65.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:9a:b8:82:84:5c:f0:ef:16:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1cacf6-731e-4845-81a0-0e28071dbc9b Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=6edd64f7-2a47-41c8-9357-49c9bf416d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:0b:aa:42:72:1f:33:4b:1e:39:1a:6c:8a: 80:68:b1:fc:10:63:d6:29:fe:a6:de:c4:42:17:84: 49:70:1a:38:aa:8a:1d:6f:01:93:51:42:7f:cd:9f: 8a:67:4f:ce:8a:27:39:65:cb:9f:49:40:4a:43:51: 35:de:d0:fb:0b:64:88:f4:6a:2d:f5:6e:a4:8f:b0: 48:85:30:6d:f3:a6:18:f8:02:e4:f7:8e:83:a5:9e: e4:d8:9d:c1:70:2f:07:11:27:32:c2:41:6f:0c:3c: b5:6f:ac:b1:7a:b3:c7:c4:b4:ab:c0:cc:61:a4:86: 64:e3:38:97:4e:2e:cc:b3:1f:8e:9b:5b:53:e3:68: f9:55:4f:12:65:6f:3b:c8:8d:9b:1f:ce:a7:c9:6e: 33:51:82:93:b2:57:95:b8:98:ac:b2:d1:78:d7:0a: 34:c6:4b:62:49:4d:62:7c:bd:47:c8:94:87:38:86: fc:c6:33:64:fe:b3:07:78:35:09:c2:bf:c6:51:1c: 50:2e:6d:6b:a5:cf:b4:32:94:07:e8:83:94:07:97: a4:77:36:fb:6d:b1:04:e0:c6:9a:8b:2a:2d:cf:f0: 4b:0b:df:64:ae:4b:c3:cc:46:2e:e4:6a:b0:e2:ef: 82:c8:1d:d5:d5:96:65:3f:c3:9e:07:7c:04:e4:4c: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:15:26:BD:CF:7A:83:B6:95:D2:17:DE:9E:B2:04:F2:04:5A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.crl X509v3 Authority Key Identifier: keyid:31:E2:4A:2D:9F:C8:7B:E0:6C:C0:F5:21:F4:67:40:69:72:09:DD:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer sbgp-ipAddrBlock: critical IPv4: 208.65.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2f:04:8a:55:9a:a9:2e:1f:16:b6:79:1b:b5:d3:0e:22:bf: 32:61:29:0d:84:a1:36:fb:96:53:19:22:1a:10:12:bc:df:e9: 37:e9:0d:d4:62:c4:8f:4c:b7:ce:77:b3:0a:05:c9:d5:ef:15: 38:4f:eb:64:16:fd:aa:8f:98:42:a6:9a:00:f3:a2:c4:95:75: 58:82:40:a9:41:06:79:73:20:85:0c:f8:9e:f7:04:5d:cc:61: 2c:1a:e1:20:93:59:c0:4d:18:65:c1:f4:ce:b4:fb:a0:41:02: ff:8e:4f:fe:24:7f:0e:75:35:77:ed:d1:6a:5e:52:5e:b7:ba: 47:ef:37:28:a1:24:d9:2d:9a:12:60:4b:75:54:de:1e:46:35: 22:22:ec:cf:a8:89:12:e5:f6:cd:1a:d3:37:3a:03:58:c2:75: 41:e9:06:13:27:0b:0e:d3:3c:15:30:9c:59:d6:60:e3:71:e2: 34:1c:c0:97:2f:d4:ec:1d:52:3a:eb:dd:84:c8:05:67:8a:f1: 78:40:1b:cc:3e:f6:25:d1:33:cb:78:ab:3c:0f:97:5b:29:67: 59:76:41:36:93:d6:ea:d6:a0:47:dd:5a:9c:2a:f2:9e:9d:3d: 7f:63:64:ed:11:0b:d1:29:da:6d:c5:5c:70:b6:72:33:ae:98: f7:a3:18:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH5q4goRc8O8W70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMxY2FjZjYtNzMxZS00ODQ1LTgxYTAtMGUyODA3MWRi YzliMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk NmVkZDY0ZjctMmE0Ny00MWM4LTkzNTctNDljOWJmNDE2ZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8ALqkJyHzNLHjkabIqAaLH8EGPWKf6m3sRC F4RJcBo4qoodbwGTUUJ/zZ+KZ0/Oiic5ZcufSUBKQ1E13tD7C2SI9Got9W6kj7BI hTBt86YY+ALk946DpZ7k2J3BcC8HEScywkFvDDy1b6yxerPHxLSrwMxhpIZk4ziX Ti7Msx+Om1tT42j5VU8SZW87yI2bH86nyW4zUYKTsleVuJisstF41wo0xktiSU1i fL1HyJSHOIb8xjNk/rMHeDUJwr/GURxQLm1rpc+0MpQH6IOUB5ekdzb7bbEE4Maa iyotz/BLC99krkvDzEYu5Gqw4u+CyB3V1ZZlP8OeB3wE5EzfbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq0FSa9z3qDtpXSF96esgTyBFo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82YzFj YWNmNi03MzFlLTQ4NDUtODFhMC0wZTI4MDcxZGJjOWIvYzU2NDdkMzItMjM0OC0z ZWMyLTg3YjgtNzFjMjcwM2RhMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmMxY2FjZjYtNzMxZS00ODQ1LTgx YTAtMGUyODA3MWRiYzliLzZjMWNhY2Y2LTczMWUtNDg0NS04MWEwLTBlMjgwNzFk YmM5Yi5jcmwwHwYDVR0jBBgwFoAUMeJKLZ/Ie+BswPUh9GdAaXIJ3cgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82YzFjYWNmNi03MzFlLTQ4NDUtODFhMC0wZTI4 MDcxZGJjOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgvBIpVmqkuHxa2eRu10w4ivzJhKQ2EoTb7llMZIhoQErzf6TfpDdRi xI9Mt853swoFydXvFThP62QW/aqPmEKmmgDzosSVdViCQKlBBnlzIIUM+J73BF3M YSwa4SCTWcBNGGXB9M60+6BBAv+OT/4kfw51NXft0WpeUl63ukfvNyihJNktmhJg S3VU3h5GNSIi7M+oiRLl9s0a0zc6A1jCdUHpBhMnCw7TPBUwnFnWYONx4jQcwJcv 1OwdUjrr3YTIBWeK8XhAG8w+9iXRM8t4qzwPl1spZ1l2QTaT1urWoEfdWpwq8p6d PX9jZO0RC9Ep2m3FXHC2cjOumPejGP0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:13:51 2026 by rpki-client