$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa File: 40f3801f-2fad-3546-9954-90e36fe46778.roa (raw, json) Hash identifier: D43dAn3Cz0SvABrwDoYb7wiMNtGTEmism1tFeRwT13c= Subject key identifier: D9:FC:34:68:72:DA:1C:7B:F9:48:F2:F0:77:FE:B6:CC:A9:4A:BB:08 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E842A37F5227A2CD044814B00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 22781 IP address blocks: 108.171.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:37:f5:22:7a:2c:d0:44:81:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=b461f7d5-06cb-4f1a-b827-08c017a58e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:e2:c6:fd:da:9d:d9:90:39:a3:4f:98:a8: f8:d4:41:7c:a7:78:49:16:bf:86:68:a3:41:43:69: 24:b4:b2:db:2b:fa:4a:f3:10:a6:e9:63:52:eb:0a: a8:f8:cd:25:36:f8:e3:4c:65:a0:64:d4:00:53:7b: c9:4f:43:e6:78:a1:31:9f:6e:58:30:93:14:ca:0a: 12:84:96:2f:d7:e3:c9:4a:8b:18:8a:59:1a:03:be: 71:30:07:c9:82:64:55:43:04:c3:b8:4c:55:34:75: fb:a6:e5:0d:57:94:6b:9c:c3:86:dc:4a:61:cf:3c: a6:a4:72:bb:39:8c:4d:a6:ef:e6:ae:95:bc:e7:10: 19:f9:e7:63:be:e6:88:64:d0:38:98:2f:b1:b9:4e: f3:89:52:d8:67:e9:7f:0d:6d:9d:8c:d5:8e:fb:6f: 74:e3:5d:fd:dd:4a:fe:6f:d9:fc:d5:0e:89:16:5e: d7:1c:84:5b:78:e0:08:ab:7e:5a:bc:ec:86:f1:46: 8f:68:0f:89:45:6d:1d:63:d0:59:11:d9:f6:f7:a4: b0:0b:44:30:e2:40:ed:1c:d3:54:75:2f:9c:57:e1: 10:b4:59:df:94:3e:c6:af:09:49:1f:24:5a:9a:c8: 5e:07:49:2f:b4:58:c0:d3:55:d6:a1:65:7e:93:cc: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:34:68:72:DA:1C:7B:F9:48:F2:F0:77:FE:B6:CC:A9:4A:BB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:dc:96:98:3e:c3:ac:6f:90:35:a7:90:f9:49:d1:a9:84:a3: 4e:07:09:2f:de:79:31:3b:bd:e0:9b:11:b7:10:a4:2c:f5:ce: ba:c7:78:af:2f:5a:44:96:21:6b:1b:75:3f:12:f3:3d:67:7c: fe:ff:c2:7f:40:d9:5f:ea:90:6a:49:78:3d:ee:5b:fb:e5:75: 5a:e9:f8:16:89:8b:54:7d:b6:1c:0e:2d:ab:ad:55:30:0b:6b: 1c:4f:d1:6e:f7:af:81:19:89:ff:3b:65:7a:77:a7:01:bd:c8: df:b4:a0:ff:ab:5c:d0:96:48:0e:d5:78:60:4c:2f:c2:1f:bd: d9:e7:06:ca:83:bb:70:c7:95:03:04:7f:e7:51:65:0d:2e:43: cf:b9:11:93:56:e8:ce:ce:2a:fa:61:14:88:03:47:b9:8a:26: 84:a0:3c:0c:93:cc:d3:91:34:7e:49:99:39:e3:72:56:40:ea: 61:c3:2c:43:e6:c2:4e:32:92:93:f7:55:c7:68:84:a2:30:cc: f2:0b:12:98:69:28:d2:0b:d0:70:de:10:a6:f1:b3:f9:cc:75: 7e:df:4f:da:de:0a:26:64:56:e6:b9:93:76:be:ef:af:57:c5: 6c:7e:74:df:7c:0b:6e:98:95:eb:5f:85:9e:46:eb:ab:ce:8b: 3d:2e:8b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjf1Inos0ESBSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk YjQ2MWY3ZDUtMDZjYi00ZjFhLWI4MjctMDhjMDE3YTU4ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrLixv3andmQOaNPmKj41EF8p3hJFr+GaKNB Q2kktLLbK/pK8xCm6WNS6wqo+M0lNvjjTGWgZNQAU3vJT0PmeKExn25YMJMUygoS hJYv1+PJSosYilkaA75xMAfJgmRVQwTDuExVNHX7puUNV5RrnMOG3EphzzympHK7 OYxNpu/mrpW85xAZ+edjvuaIZNA4mC+xuU7ziVLYZ+l/DW2djNWO+29041393Ur+ b9n81Q6JFl7XHIRbeOAIq35avOyG8UaPaA+JRW0dY9BZEdn296SwC0Qw4kDtHNNU dS+cV+EQtFnflD7GrwlJHyRamsheB0kvtFjA01XWoWV+k8yUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn8NGhy2hx7+Ujy8Hf+tsypSrsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDBmMzgwMWYtMmZhZC0z NTQ2LTk5NTQtOTBlMzZmZTQ2Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3clpg+w6xvkDWnkPlJ0amEo04HCS/eeTE7veCbEbcQpCz1zrrHeK8v WkSWIWsbdT8S8z1nfP7/wn9A2V/qkGpJeD3uW/vldVrp+BaJi1R9thwOLautVTAL axxP0W73r4EZif87ZXp3pwG9yN+0oP+rXNCWSA7VeGBML8IfvdnnBsqDu3DHlQME f+dRZQ0uQ8+5EZNW6M7OKvphFIgDR7mKJoSgPAyTzNORNH5JmTnjclZA6mHDLEPm wk4ykpP3VcdohKIwzPILEphpKNIL0HDeEKbxs/nMdX7fT9reCiZkVua5k3a+769X xWx+dN98C26YletfhZ5G66vOiz0uiyE= -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:04 2026 by rpki-client