$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa File: 4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa (raw, json) Hash identifier: rK9coS+myZ1AALuR9dkhfW97ViFo+FwgrQ6B1oZRsns= Subject key identifier: 42:23:19:70:97:0F:89:A9:6C:12:23:D4:EA:B6:3F:26:98:29:CC:0D Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584EA787EA0621D0F4FB5DFDB600 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 26967 IP address blocks: 64.136.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:ea:06:21:d0:f4:fb:5d:fd:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d56f1f15-af5c-41af-be83-8f3a9e73513a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:a0:93:e9:f3:dd:23:d2:41:f0:e9:1a:75: ee:89:d2:2a:e0:fe:0f:6e:a6:dc:70:8c:13:9e:18: 1a:b4:a3:e3:bd:34:c1:9a:f2:43:f6:fb:5c:9a:67: 00:6f:10:6e:8c:d2:68:ae:eb:07:88:a4:cd:f4:c2: 77:bf:f4:2c:e8:82:0a:0a:9b:e4:87:55:a8:d7:8b: a9:b2:b8:6e:c9:5e:7d:f6:31:b6:0a:16:76:50:f4: 6a:8d:53:85:83:4d:1f:ef:ef:43:37:57:8c:72:49: a9:84:f5:75:c1:b0:7a:e8:ee:d1:a0:44:0e:35:03: 7e:02:54:29:d1:78:83:e8:1b:e7:1c:ff:cc:2a:6e: d2:ff:29:9f:6e:a0:41:45:98:25:33:6a:c3:42:eb: db:73:78:dd:8b:ec:2b:85:e0:c6:6b:b3:87:b7:fa: 8f:f8:0f:0c:d7:ea:51:b6:f8:de:ea:53:ca:71:cf: c7:59:52:c6:00:6d:2e:4a:93:a6:d9:6a:8c:c7:7c: e3:fd:5c:52:50:2e:6b:00:9c:ce:7e:86:28:87:75: 1b:dc:ef:a7:14:d3:f8:15:74:dd:34:f8:e8:a0:39: a8:d2:ad:6e:de:5a:c1:d4:29:05:30:2f:79:99:d7: 0a:a5:a3:c4:7a:6e:b7:fa:6b:02:06:45:cd:e5:fc: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:23:19:70:97:0F:89:A9:6C:12:23:D4:EA:B6:3F:26:98:29:CC:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cb:3e:91:20:b0:09:95:bd:ed:87:e7:37:75:21:1a:47:ad: a1:71:47:b1:f0:ca:8b:a1:6b:aa:8f:13:17:57:1e:1e:e8:e4: 74:01:99:b8:d2:38:9a:33:41:74:7a:56:ad:1a:71:94:5c:53: 35:fd:e6:70:6c:6e:41:e6:73:2b:d9:47:3f:d4:61:13:b0:d3: 18:73:ba:cb:10:22:76:a9:d0:7f:21:f6:6e:fd:00:d9:f9:16: e3:2b:e6:3a:e8:08:d3:b3:9c:d7:a5:ab:4a:f5:de:80:5e:d7: 25:d5:d8:c4:ea:1b:52:c0:92:9c:c9:08:1c:cd:cf:0f:cf:8b: 27:2c:4d:e9:1c:36:5f:04:59:56:5e:ec:1a:14:31:c3:19:65: 7d:6a:b6:08:08:47:fa:65:ea:2b:65:97:d5:88:9b:54:ce:14: 13:b4:b6:c5:b2:fa:b9:1d:be:8c:2e:9f:21:c0:fc:7d:11:38: 3f:7f:4a:bf:40:87:ed:11:90:77:14:c0:67:16:74:a8:22:f4: 45:66:4d:17:85:42:b1:5f:62:45:93:06:34:e0:32:63:55:c3: 8d:9b:f6:a7:e8:dd:26:aa:8d:83:11:d6:63:2b:40:e1:6e:26: 60:d1:7c:db:0b:69:68:dc:86:d1:53:84:7d:41:a7:5f:0f:49: 89:57:71:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+oGIdD0+139tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDU2ZjFmMTUtYWY1Yy00MWFmLWJlODMtOGYzYTllNzM1MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLOgk+nz3SPSQfDpGnXuidIq4P4PbqbccIwT nhgatKPjvTTBmvJD9vtcmmcAbxBujNJorusHiKTN9MJ3v/Qs6IIKCpvkh1Wo14up srhuyV599jG2ChZ2UPRqjVOFg00f7+9DN1eMckmphPV1wbB66O7RoEQONQN+AlQp 0XiD6BvnHP/MKm7S/ymfbqBBRZglM2rDQuvbc3jdi+wrheDGa7OHt/qP+A8M1+pR tvje6lPKcc/HWVLGAG0uSpOm2WqMx3zj/VxSUC5rAJzOfoYoh3Ub3O+nFNP4FXTd NPjooDmo0q1u3lrB1CkFMC95mdcKpaPEem63+msCBkXN5fwqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIjGXCXD4mpbBIj1Oq2PyaYKcwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNDU4OWU3MmQtZjVmYi0z NjMwLWFiZmYtNmVlZThkMjFkOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArLPpEgsAmVve2H5zd1IRpHraFxR7Hwyouha6qPExdXHh7o5HQBmbjS OJozQXR6Vq0acZRcUzX95nBsbkHmcyvZRz/UYROw0xhzussQInap0H8h9m79ANn5 FuMr5jroCNOznNelq0r13oBe1yXV2MTqG1LAkpzJCBzNzw/PiycsTekcNl8EWVZe 7BoUMcMZZX1qtggIR/pl6itll9WIm1TOFBO0tsWy+rkdvowunyHA/H0ROD9/Sr9A h+0RkHcUwGcWdKgi9EVmTReFQrFfYkWTBjTgMmNVw42b9qfo3SaqjYMR1mMrQOFu JmDRfNsLaWjchtFThH1Bp18PSYlXcRQ= -----END CERTIFICATE-----Generated at Thu Aug 20 23:40:06 2026 by rpki-client