$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa File: 18393493-e621-3412-b61f-128e8405bd3e.roa (raw, json) Hash identifier: j7wp724pYrANmoghlbLz9alkWRnJSnkW9ItfuOtZX50= Subject key identifier: 5F:A4:8F:45:0F:70:0D:44:FE:95:24:6D:F3:2C:C5:AF:2C:42:A7:E5 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584E6B0A12FB8DBEA5D51D397F00 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 6597 IP address blocks: 208.88.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:12:fb:8d:be:a5:d5:1d:39:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=ab594e00-daca-4db8-ba68-bbecd89fcb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:5d:2a:fa:a7:32:0d:d1:6c:a9:45:f2:f6: 68:29:e8:dd:85:a5:d1:a3:38:4f:55:0b:90:19:c2: 6d:e4:30:11:9a:00:21:18:08:d5:42:ec:b3:84:a3: c8:d3:df:c9:b5:7c:89:8a:4d:73:48:a1:9b:16:ab: f7:2d:80:b3:b6:68:d9:f8:34:b0:41:94:a8:95:50: 6a:06:22:14:28:56:9e:03:80:70:47:21:72:41:c9: 69:88:04:2b:d9:57:d1:8d:e4:ff:38:26:88:b1:11: 79:b5:04:8d:6f:22:a3:6b:42:74:61:04:ca:a6:10: 96:94:40:03:31:54:a4:20:7f:f9:6b:d6:8f:eb:05: b0:87:62:d5:27:53:b6:24:ad:51:a0:9c:31:61:d2: 90:f6:96:78:ff:68:90:1c:4f:ec:f2:39:b6:f1:4e: f2:e9:52:3b:68:54:38:74:a1:e6:c9:46:ac:51:a8: a0:ad:f6:8a:db:d0:a0:da:22:df:48:00:c5:e2:30: 1d:38:26:65:9d:7a:21:9e:02:17:59:4b:1b:23:7c: 6b:58:ea:4f:16:ce:c0:00:b5:f2:d6:ee:58:ae:0d: 65:75:73:b7:a7:3b:35:f7:f1:3d:a6:40:3e:bc:47: 2d:0e:34:fe:32:87:88:b5:24:a0:0a:29:55:52:b6: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A4:8F:45:0F:70:0D:44:FE:95:24:6D:F3:2C:C5:AF:2C:42:A7:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:34:4c:fa:51:2b:53:50:12:db:07:e1:6a:27:8c:3b:a3:f2: 34:ec:cf:55:6e:5c:a3:a0:06:f5:0a:51:f1:02:56:c7:44:33: 4a:9d:5f:74:1c:f6:70:fb:96:8e:11:9f:1e:1c:48:1b:54:64: a3:ea:e4:02:8b:ee:52:ab:74:7f:70:a0:87:cb:cc:24:33:5a: bf:93:5d:e6:23:13:5c:27:64:7f:62:dd:ec:c2:8b:ba:6e:c1: 1e:0d:28:26:71:39:c8:30:59:2f:5e:4d:91:82:f5:1b:b7:c1: 9c:7c:b4:d1:b5:48:35:f0:e6:ed:39:b1:04:ab:6d:dd:92:8d: 18:aa:75:9f:70:42:2f:19:a8:91:38:fa:a0:17:23:e4:2b:c9: 94:ef:84:a5:25:a6:a9:40:ae:3f:c7:aa:d4:2c:ae:22:0c:c0: 26:8f:d4:70:d5:fd:03:b7:b6:8d:d3:c7:3f:aa:21:e4:50:27: 72:b2:49:e4:db:2b:b9:82:14:38:5a:6a:e7:aa:e8:67:81:99: 38:04:5e:7c:86:49:d5:ed:ea:b7:18:9a:9e:f6:d8:ea:e8:9d: a4:f8:48:65:64:be:1e:fb:ac:38:1a:92:b1:f2:66:c8:f9:f5: 36:27:b8:59:29:6e:8f:d1:22:1b:de:70:1a:02:b4:a4:ff:0b: b2:27:e4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChL7jb6l1R05fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YWI1OTRlMDAtZGFjYS00ZGI4LWJhNjgtYmJlY2Q4OWZjYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuZdKvqnMg3RbKlF8vZoKejdhaXRozhPVQuQ GcJt5DARmgAhGAjVQuyzhKPI09/JtXyJik1zSKGbFqv3LYCztmjZ+DSwQZSolVBq BiIUKFaeA4BwRyFyQclpiAQr2VfRjeT/OCaIsRF5tQSNbyKja0J0YQTKphCWlEAD MVSkIH/5a9aP6wWwh2LVJ1O2JK1RoJwxYdKQ9pZ4/2iQHE/s8jm28U7y6VI7aFQ4 dKHmyUasUaigrfaK29Cg2iLfSADF4jAdOCZlnXohngIXWUsbI3xrWOpPFs7AALXy 1u5Yrg1ldXO3pzs19/E9pkA+vEctDjT+MoeItSSgCilVUraIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+kj0UPcA1E/pUkbfMsxa8sQqflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMTgzOTM0OTMtZTYyMS0z NDEyLWI2MWYtMTI4ZTg0MDViZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk0TPpRK1NQEtsH4WonjDuj8jTsz1VuXKOgBvUKUfECVsdEM0qdX3Qc 9nD7lo4Rnx4cSBtUZKPq5AKL7lKrdH9woIfLzCQzWr+TXeYjE1wnZH9i3ezCi7pu wR4NKCZxOcgwWS9eTZGC9Ru3wZx8tNG1SDXw5u05sQSrbd2SjRiqdZ9wQi8ZqJE4 +qAXI+QryZTvhKUlpqlArj/HqtQsriIMwCaP1HDV/QO3to3Txz+qIeRQJ3KySeTb K7mCFDhaaueq6GeBmTgEXnyGSdXt6rcYmp722OronaT4SGVkvh77rDgakrHyZsj5 9TYnuFkpbo/RIhvecBoCtKT/C7In5JU= -----END CERTIFICATE-----Generated at Tue Jul 21 14:11:56 2026 by rpki-client