$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa File: 4a2880a2-399c-391a-b0ff-17a565b54dce.roa (raw, json) Hash identifier: S3edbS9RAtM66fdsE3qAxenC9aUg60uUZ/HOKYZcn/E= Subject key identifier: 37:3D:FB:A3:54:6C:7A:BD:79:27:98:FB:BB:39:A6:82:BC:21:9E:4A Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584EB8473E74D9F06E40B1350780 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 26554 IP address blocks: 67.59.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:3e:74:d9:f0:6e:40:b1:35:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=f70b1a72-81ab-4de1-b76b-0714383517b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:a6:8d:be:c1:80:ba:47:1d:c2:48:9a:21: be:b4:1b:f9:f2:24:b0:3d:2e:26:57:58:db:b0:41: bb:e8:17:90:66:45:b2:7f:05:c4:bb:60:17:de:72: 53:92:32:d9:45:db:06:35:48:87:5a:29:92:1e:9b: c6:63:5f:62:43:19:01:61:83:55:8d:89:22:d1:79: 1a:ff:f9:dd:80:85:27:e5:f5:19:7a:2d:1d:fb:9f: 41:b3:df:6b:59:0d:d1:08:02:4a:c6:5a:d8:1a:19: d6:8a:c8:bd:9e:07:2d:bc:2b:79:7a:a2:07:67:9d: cd:4e:43:27:01:29:a9:29:38:11:a0:53:16:db:fe: ef:17:9d:f2:bd:8c:b8:43:96:b3:8f:a8:de:01:ca: 28:33:4c:d6:11:07:77:b6:3d:33:d5:e6:06:7d:f6: 8b:1e:36:8f:c0:30:03:92:af:3f:05:78:4b:6b:57: 33:f3:cc:22:52:13:60:bd:4a:99:f2:3d:71:d5:f7: 1d:a8:4a:47:3e:0e:65:6f:2b:8c:04:a2:58:6d:b2: 78:47:a6:62:cc:5c:03:72:9d:b8:07:54:7c:fd:1f: a4:d6:9e:b6:50:58:b6:ef:2b:90:4a:35:ca:e3:67: 99:72:d3:e5:30:5d:a2:64:82:09:2f:2d:4f:ac:95: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3D:FB:A3:54:6C:7A:BD:79:27:98:FB:BB:39:A6:82:BC:21:9E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 67.59.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ad:a8:b7:2e:7a:fb:aa:5f:69:14:9f:16:b0:3f:c7:6d:4a: ae:1d:e3:33:3d:0c:b2:f4:55:52:b4:04:42:61:6c:04:5f:cc: ed:4e:bd:cb:cb:e2:c3:07:38:59:49:56:28:9b:d5:1f:7a:40: e5:9e:78:cf:28:3b:8b:7c:25:b6:1d:b8:75:4c:28:e8:3b:f2: 2c:6d:9d:54:b5:6f:db:05:ec:84:db:9b:f8:d3:6c:1a:76:45: aa:2f:b0:d7:ac:22:a9:e4:ea:28:86:4f:58:8f:57:39:6d:85: ec:f5:8c:a7:46:ae:7f:44:3f:96:4b:13:19:9e:02:4b:91:9f: c0:76:2b:e0:7b:ba:87:08:ed:f5:7e:dd:65:44:d1:b4:bc:ff: ea:ad:14:9b:a7:08:48:2d:df:58:cb:e3:1a:25:6a:9b:f7:c8: 8e:46:ac:8e:f1:62:53:c2:c7:55:de:16:13:13:9d:f8:32:f6: b1:24:d5:03:e9:2b:bd:8a:57:87:cc:38:dd:77:d6:fd:18:26: 84:57:9e:f1:8c:3e:fc:b6:6c:6a:f2:51:f4:e8:d3:4d:15:3f: 34:5a:0d:be:f1:fc:1c:e7:6e:6d:76:6a:da:bd:ed:0f:1c:27: 76:c5:d2:65:3b:ce:1f:de:ea:9e:b7:c0:92:2f:05:06:d8:e0: 5c:de:51:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rz502fBuQLE1B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjcwYjFhNzItODFhYi00ZGUxLWI3NmItMDcxNDM4MzUxN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRymjb7BgLpHHcJImiG+tBv58iSwPS4mV1jb sEG76BeQZkWyfwXEu2AX3nJTkjLZRdsGNUiHWimSHpvGY19iQxkBYYNVjYki0Xka //ndgIUn5fUZei0d+59Bs99rWQ3RCAJKxlrYGhnWisi9ngctvCt5eqIHZ53NTkMn ASmpKTgRoFMW2/7vF53yvYy4Q5azj6jeAcooM0zWEQd3tj0z1eYGffaLHjaPwDAD kq8/BXhLa1cz88wiUhNgvUqZ8j1x1fcdqEpHPg5lbyuMBKJYbbJ4R6ZizFwDcp24 B1R8/R+k1p62UFi27yuQSjXK42eZctPlMF2iZIIJLy1PrJW3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDc9+6NUbHq9eSeY+7s5poK8IZ5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvNGEyODgwYTItMzk5Yy0z OTFhLWIwZmYtMTdhNTY1YjU0ZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQzscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKtqLcuevuqX2kUnxawP8dtSq4d4zM9DLL0VVK0BEJhbARfzO1OvcvL 4sMHOFlJViib1R96QOWeeM8oO4t8JbYduHVMKOg78ixtnVS1b9sF7ITbm/jTbBp2 RaovsNesIqnk6iiGT1iPVzlthez1jKdGrn9EP5ZLExmeAkuRn8B2K+B7uocI7fV+ 3WVE0bS8/+qtFJunCEgt31jL4xolapv3yI5GrI7xYlPCx1XeFhMTnfgy9rEk1QPp K72KV4fMON131v0YJoRXnvGMPvy2bGryUfTo000VPzRaDb7x/Bznbm12atq97Q8c J3bF0mU7zh/e6p63wJIvBQbY4FzeUeY= -----END CERTIFICATE-----Generated at Mon Aug 10 10:17:21 2026 by rpki-client