$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/399d703a-fdab-3284-b44e-ae7fa23512f0.roa File: 399d703a-fdab-3284-b44e-ae7fa23512f0.roa (raw, json) Hash identifier: uSPDgjeEMsd5upzxwJXYOdUDloqZcHWUpz8bLW+gegw= Subject key identifier: F3:0E:ED:44:19:6F:7B:E4:7C:09:FC:E2:CC:55:F4:9C:C9:FE:81:BE Certificate issuer: /CN=b3f4c5ee-0e47-48c9-8976-165a2de083f4 Certificate serial: 010D0C9F4328584EB2B200C87FDC8788BDA73300 Authority key identifier: 52:DB:90:8E:EB:21:09:42:F9:7C:04:42:FD:EA:70:E4:6F:52:F2:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/399d703a-fdab-3284-b44e-ae7fa23512f0.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 396866 IP address blocks: 67.218.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b2:00:c8:7f:dc:87:88:bd:a7:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3f4c5ee-0e47-48c9-8976-165a2de083f4 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=2afcf470-0281-463a-a42e-aab24842ff9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f0:98:5f:17:af:ba:79:65:78:25:14:ca:56: fb:ab:f6:00:11:5e:fa:32:0a:a3:a9:79:92:7d:b7: c4:18:1d:f9:db:64:b6:6f:55:87:b8:ae:ce:a4:27: 8f:58:c9:df:d2:ae:75:25:07:0e:48:b4:9d:09:b5: 9f:ea:39:2c:e7:7a:79:f7:a1:98:1d:a2:ca:54:ba: 29:42:4b:75:a8:7e:d6:cc:ff:30:ca:76:ec:5c:ba: ee:c2:f7:ec:a2:b7:cf:ac:9d:85:7d:d8:2f:0b:df: 7b:2d:a3:91:b6:bc:fa:46:ff:16:65:6e:85:5a:0a: d5:ed:df:73:88:f3:a7:57:f7:40:3c:9c:cd:6b:f8: bc:7c:6c:2e:e9:e7:27:31:01:41:74:9d:91:b5:30: 05:78:8a:68:bf:2a:4c:6c:5e:8e:b4:e9:71:2d:43: 72:66:72:db:0f:45:1d:18:1b:e9:3c:df:e2:0c:87: dc:1f:c9:a2:7a:99:68:77:44:0a:1c:24:4f:b1:3a: 0c:59:1a:d0:c5:59:99:a8:19:f9:04:1b:b8:9c:71: 02:5a:c7:32:ce:40:22:45:f2:5e:52:18:2e:88:52: 7c:52:e3:c8:da:ec:32:e0:7b:53:e0:f7:7b:c3:3d: be:03:12:10:e0:d2:82:7e:66:c7:83:1d:fc:b4:24: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0E:ED:44:19:6F:7B:E4:7C:09:FC:E2:CC:55:F4:9C:C9:FE:81:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/399d703a-fdab-3284-b44e-ae7fa23512f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.crl X509v3 Authority Key Identifier: keyid:52:DB:90:8E:EB:21:09:42:F9:7C:04:42:FD:EA:70:E4:6F:52:F2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer sbgp-ipAddrBlock: critical IPv4: 67.218.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9d:1d:ba:42:0f:e1:85:b1:5b:2c:43:62:1e:f4:8c:76:5d: f6:c7:5d:5a:aa:b1:e2:60:35:0c:3b:a7:a8:81:ff:a3:e3:ff: 7a:df:34:0f:88:78:76:cf:ce:23:ff:53:c8:b6:1d:7d:4f:ec: 83:ca:8d:e6:97:18:51:23:91:f3:21:c4:71:a1:34:31:16:9d: 0a:47:22:53:0d:5f:d8:cb:20:40:9b:6b:06:72:5c:ff:f5:b2: 5a:68:7d:34:80:5e:f2:6d:72:fe:74:ba:be:ae:eb:65:0f:ad: e2:ae:ea:84:cc:ef:78:9d:6d:1a:1b:a7:e1:7f:40:01:4c:72: 26:b6:a6:ad:e3:e1:49:c0:a0:c2:dc:4f:b0:e1:70:38:0e:c5: cf:87:57:79:0e:8e:53:7b:b0:56:94:94:b5:1c:99:95:3d:18: 38:36:06:8e:2e:73:51:88:40:e8:67:69:16:6b:06:f1:e8:e3: 4e:ce:43:ad:b3:ee:99:d4:eb:6f:ad:2e:bc:bc:da:ff:f5:c7: ae:25:19:08:5e:7c:df:d0:ec:bd:0b:27:52:63:fc:af:ff:d9: 86:5b:63:09:69:00:4e:f8:9e:29:5f:f1:f1:94:32:fb:e6:0b: ac:13:f0:33:be:2a:25:e3:c5:e0:92:2f:94:16:68:9f:3a:58: f9:f8:ff:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysgDIf9yHiL2nMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNmNGM1ZWUtMGU0Ny00OGM5LTg5NzYtMTY1YTJkZTA4 M2Y0MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MmFmY2Y0NzAtMDI4MS00NjNhLWE0MmUtYWFiMjQ4NDJmZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PCYXxevunlleCUUylb7q/YAEV76MgqjqXmS fbfEGB3522S2b1WHuK7OpCePWMnf0q51JQcOSLSdCbWf6jks53p596GYHaLKVLop Qkt1qH7WzP8wynbsXLruwvfsorfPrJ2FfdgvC997LaORtrz6Rv8WZW6FWgrV7d9z iPOnV/dAPJzNa/i8fGwu6ecnMQFBdJ2RtTAFeIpovypMbF6OtOlxLUNyZnLbD0Ud GBvpPN/iDIfcH8mieplod0QKHCRPsToMWRrQxVmZqBn5BBu4nHECWscyzkAiRfJe UhguiFJ8UuPI2uwy4HtT4Pd7wz2+AxIQ4NKCfmbHgx38tCQ2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMO7UQZb3vkfAn84sxV9JzJ/oG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iM2Y0 YzVlZS0wZTQ3LTQ4YzktODk3Ni0xNjVhMmRlMDgzZjQvMzk5ZDcwM2EtZmRhYi0z Mjg0LWI0NGUtYWU3ZmEyMzUxMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjNmNGM1ZWUtMGU0Ny00OGM5LTg5 NzYtMTY1YTJkZTA4M2Y0L2IzZjRjNWVlLTBlNDctNDhjOS04OTc2LTE2NWEyZGUw ODNmNC5jcmwwHwYDVR0jBBgwFoAUUtuQjushCUL5fARC/epw5G9S8tYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iM2Y0YzVlZS0wZTQ3LTQ4YzktODk3Ni0xNjVh MmRlMDgzZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9oHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSdHbpCD+GFsVssQ2Ie9Ix2XfbHXVqqseJgNQw7p6iB/6Pj/3rfNA+I eHbPziP/U8i2HX1P7IPKjeaXGFEjkfMhxHGhNDEWnQpHIlMNX9jLIECbawZyXP/1 slpofTSAXvJtcv50ur6u62UPreKu6oTM73idbRobp+F/QAFMcia2pq3j4UnAoMLc T7DhcDgOxc+HV3kOjlN7sFaUlLUcmZU9GDg2Bo4uc1GIQOhnaRZrBvHo407OQ62z 7pnU62+tLry82v/1x64lGQhefN/Q7L0LJ1Jj/K//2YZbYwlpAE74nilf8fGUMvvm C6wT8DO+KiXjxeCSL5QWaJ86WPn4/44= -----END CERTIFICATE-----Generated at Sat Sep 5 02:32:34 2026 by rpki-client