$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/4a78b0ce-2698-3555-a653-2c367e283873.roa File: 4a78b0ce-2698-3555-a653-2c367e283873.roa (raw, json) Hash identifier: Tl7x74PGJyPjjahdaTI24YYuGX8OvUWILbPrhhzwOgE= Subject key identifier: 64:99:24:D8:93:D1:C5:08:3F:0F:F2:1F:D2:A2:91:85:AE:0F:DA:36 Certificate issuer: /CN=d6619d2f-459f-4901-8dc8-d9fa81f76e59 Certificate serial: 010D0C9F4328584E6E9702DF465A11B208AE7200 Authority key identifier: C3:21:56:02:77:A0:F4:B8:DC:2C:23:04:A8:6A:DF:BC:F5:9E:C9:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/4a78b0ce-2698-3555-a653-2c367e283873.roa Signing time: Wed 08 Jul 2026 15:31:42 +0000 ROA not before: Wed 08 Jul 2026 15:31:42 +0000 ROA not after: Tue 06 Oct 2026 15:31:42 +0000 asID: 33069 IP address blocks: 74.112.240.0/22 maxlen: 24 199.15.120.0/22 maxlen: 24 2604:3a00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/d6619d2f-459f-4901-8dc8-d9fa81f76e59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/d6619d2f-459f-4901-8dc8-d9fa81f76e59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:97:02:df:46:5a:11:b2:08:ae:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6619d2f-459f-4901-8dc8-d9fa81f76e59 Validity Not Before: Jul 8 15:31:42 2026 GMT Not After : Oct 6 15:31:42 2026 GMT Subject: CN=9b484ff7-b5e5-4d39-81a1-085fbe3a8d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:92:c9:33:3c:ad:80:3a:23:cb:e5:41:da: 9a:63:cd:ac:ea:41:bf:7f:8e:e4:4b:02:25:27:14: 43:73:c1:f8:06:f7:fa:12:f1:f3:73:02:47:46:ab: 0a:3b:b5:f3:91:f6:97:91:19:54:5b:0e:b6:30:9a: 3c:a5:b2:bb:9d:af:97:ff:3f:3c:0b:05:77:5d:78: a0:9a:5a:01:a1:08:7c:21:64:f6:9a:c9:23:07:0f: 08:b4:bc:89:fa:37:53:b8:92:69:0a:17:aa:6f:e8: 30:6f:8c:18:53:f4:2a:a2:dd:3a:de:24:41:54:ac: d0:3f:1d:da:06:1a:25:fb:3d:46:c5:ed:e9:c5:75: 3a:fb:dc:7d:6f:a3:c6:dd:f4:47:b5:0d:34:d4:a3: c0:d4:86:bc:34:a5:9d:d3:6a:f9:81:51:3f:41:b8: ef:cd:7b:03:42:b1:79:c3:11:b9:44:4a:be:ad:45: 23:a9:25:a6:f9:ee:ae:0d:98:45:d8:a7:ac:9a:8c: 1f:b8:51:b3:ca:d8:ba:e0:0d:31:e9:d0:4a:25:b8: 98:20:fb:83:27:e4:f0:7c:08:a3:73:af:cd:e2:59: 17:2c:9c:f1:c7:1f:86:62:88:18:47:e7:4d:54:db: 4c:84:d6:dc:a2:1f:59:27:73:33:15:d4:08:41:94: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:24:D8:93:D1:C5:08:3F:0F:F2:1F:D2:A2:91:85:AE:0F:DA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/4a78b0ce-2698-3555-a653-2c367e283873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/d6619d2f-459f-4901-8dc8-d9fa81f76e59.crl X509v3 Authority Key Identifier: keyid:C3:21:56:02:77:A0:F4:B8:DC:2C:23:04:A8:6A:DF:BC:F5:9E:C9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59.cer sbgp-ipAddrBlock: critical IPv4: 74.112.240.0/22 199.15.120.0/22 IPv6: 2604:3a00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b9:12:7f:47:e2:c2:19:36:44:21:6c:b7:cf:40:62:16:db: 72:1a:05:28:2a:59:19:38:49:01:ba:c4:44:28:d8:c7:75:83: 57:02:97:3a:27:b5:1e:be:b6:f0:f2:a4:2c:a7:8d:66:72:b8: 4e:ff:10:7e:e5:ce:a0:49:ab:b8:e9:cf:e7:7a:90:ba:07:94: ae:9d:1d:19:5d:fa:f6:9d:13:41:d6:d8:2e:1c:de:e2:2e:6c: d6:6c:26:ba:9b:37:a5:d3:0c:e6:91:e2:32:14:dd:36:01:4b: 7e:04:20:01:bd:28:6f:ee:9f:f7:7a:a2:4c:7c:73:62:c2:39: d5:df:a7:c8:bd:e3:9e:b3:a7:9e:63:a3:cb:93:17:e6:5c:f8: fe:fb:2d:87:cd:3b:c9:08:8f:4a:c7:4f:bd:9c:24:9f:2c:a9: 12:c5:43:66:c2:4f:07:bf:3e:85:bc:98:44:59:5a:f9:8f:d0: 7e:95:b6:19:9c:a8:8a:a1:9f:fa:cb:ad:7b:0c:df:84:fa:8a: d9:35:38:ed:1b:fc:ae:8a:ec:c7:5a:57:25:d4:10:db:01:c5: 1b:97:d0:10:56:ae:63:3b:71:61:dd:2e:90:71:12:bb:d7:b1: be:b4:cb:e3:f6:1d:d1:75:1d:cb:ed:c5:29:11:8a:74:87:1d: d9:bf:d0:25 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE5ulwLfRloRsgiucgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY2MTlkMmYtNDU5Zi00OTAxLThkYzgtZDlmYTgxZjc2 ZTU5MB4XDTI2MDcwODE1MzE0MloXDTI2MTAwNjE1MzE0MlowLzEtMCsGA1UEAxMk OWI0ODRmZjctYjVlNS00ZDM5LTgxYTEtMDg1ZmJlM2E4ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogqSyTM8rYA6I8vlQdqaY82s6kG/f47kSwIl JxRDc8H4Bvf6EvHzcwJHRqsKO7XzkfaXkRlUWw62MJo8pbK7na+X/z88CwV3XXig mloBoQh8IWT2mskjBw8ItLyJ+jdTuJJpCheqb+gwb4wYU/Qqot063iRBVKzQPx3a Bhol+z1Gxe3pxXU6+9x9b6PG3fRHtQ001KPA1Ia8NKWd02r5gVE/QbjvzXsDQrF5 wxG5REq+rUUjqSWm+e6uDZhF2KesmowfuFGzyti64A0x6dBKJbiYIPuDJ+TwfAij c6/N4lkXLJzxxx+GYogYR+dNVNtMhNbcoh9ZJ3MzFdQIQZQpTQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFGSZJNiT0cUIPw/yH9KikYWuD9o2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kNjYx OWQyZi00NTlmLTQ5MDEtOGRjOC1kOWZhODFmNzZlNTkvNGE3OGIwY2UtMjY5OC0z NTU1LWE2NTMtMmMzNjdlMjgzODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDY2MTlkMmYtNDU5Zi00OTAxLThk YzgtZDlmYTgxZjc2ZTU5L2Q2NjE5ZDJmLTQ1OWYtNDkwMS04ZGM4LWQ5ZmE4MWY3 NmU1OS5jcmwwHwYDVR0jBBgwFoAUwyFWAneg9LjcLCMEqGrfvPWeyWgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kNjYxOWQyZi00NTlmLTQ5MDEtOGRjOC1kOWZh ODFmNzZlNTkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCSnDwAwQC xw94MA0EAgACMAcDBQAmBDoAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEm5En9H4sIZNkQhbLfPQGIW23Ia BSgqWRk4SQG6xEQo2Md1g1cClzontR6+tvDypCynjWZyuE7/EH7lzqBJq7jpz+d6 kLoHlK6dHRld+vadE0HW2C4c3uIubNZsJrqbN6XTDOaR4jIU3TYBS34EIAG9KG/u n/d6okx8c2LCOdXfp8i9456zp55jo8uTF+Zc+P77LYfNO8kIj0rHT72cJJ8sqRLF Q2bCTwe/PoW8mERZWvmP0H6VthmcqIqhn/rLrXsM34T6itk1OO0b/K6K7MdaVyXU ENsBxRuX0BBWrmM7cWHdLpBxErvXsb60y+P2HdF1HcvtxSkRinSHHdm/0CU= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:04 2026 by rpki-client