$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa File: 3b7be4db-845a-366c-83ad-948a2fb50b9e.roa (raw, json) Hash identifier: IsRnD9lM/iUKcKBfIx7q+k8uqbNwYOcUWpUVfhf0nY4= Subject key identifier: 8D:67:57:30:23:A5:75:2C:BF:DB:30:A7:7A:0D:70:CC:E1:EA:CF:E6 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584E54B4927E91624CF489D57080 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 20454 IP address blocks: 69.160.46.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:92:7e:91:62:4c:f4:89:d5:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=3d056b94-ed89-441f-8bcf-f5e6eb0a667d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:27:fb:52:09:31:11:98:89:38:da:92:8f:88: 7f:a9:8b:92:74:f3:9e:bf:e6:4f:73:36:a3:73:73: 7c:7a:e0:72:f7:c3:58:26:d3:2a:6b:09:2a:8f:44: 41:73:a1:e4:4d:6c:cb:d6:a7:08:db:80:b0:fe:7f: 45:53:cd:dc:d6:6b:f7:54:a3:11:22:2b:4b:e7:0f: 97:e9:26:41:77:9e:24:d1:af:f3:fd:4e:00:e5:97: c2:58:1a:30:a8:6a:28:39:75:91:2b:3f:12:6b:1a: 72:ce:76:9b:af:d9:8c:b2:ff:15:7e:b4:70:0b:64: 6b:90:b6:df:94:94:0e:30:03:af:ec:1f:82:4d:2a: 69:fb:e6:ef:48:17:4c:f7:14:b9:d1:96:f5:4d:4d: 2d:f5:75:1d:8e:4e:2f:96:4c:fa:60:39:8a:49:2a: 44:a9:42:58:6c:18:25:7e:93:a8:75:25:c6:88:46: 18:8e:56:36:cd:85:34:5a:55:59:f7:e6:3d:b4:aa: cb:cf:0c:c1:bc:42:cd:01:1e:67:47:c1:97:19:5e: 70:9b:54:54:b5:5c:bf:b4:d1:1c:a0:d9:c2:e7:2d: f3:58:66:39:70:5e:13:a2:4b:74:c7:4b:65:a7:31: 51:cf:d7:68:99:bd:91:2f:d7:25:c5:68:a3:45:73: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:67:57:30:23:A5:75:2C:BF:DB:30:A7:7A:0D:70:CC:E1:EA:CF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:30:c2:3c:21:a5:f1:f8:a2:e1:ed:a6:b4:f2:37:83:d6:34: 1e:89:f6:7d:07:12:e1:82:fc:be:0e:76:a3:b2:51:e5:76:e2: 31:24:9c:2f:52:29:a9:1d:df:8d:0c:95:47:33:66:68:ff:4a: 14:6b:22:9a:50:06:c6:6d:4c:72:18:9e:8c:1b:f3:23:8b:6d: f7:e9:e3:82:26:43:b9:3d:dd:8b:93:57:7c:ca:45:51:2d:0d: 73:0a:92:34:02:16:2a:11:b0:f9:47:48:92:bd:85:54:09:0c: cb:bf:6c:dc:65:2e:60:65:33:d2:41:0f:b1:f7:7f:98:02:3b: 0b:ba:8e:e9:9d:f0:f5:e4:ad:f1:f7:ee:f3:7a:4c:9d:30:98: 4b:1b:1f:f5:f1:58:e5:2d:53:63:c9:9c:5d:ed:ef:16:7c:cf: f7:87:9c:6f:fa:2e:90:ee:1f:08:3f:99:59:60:bc:36:9b:24: 69:56:dd:a0:bb:4a:7f:fe:98:55:7c:a1:75:2c:e0:e2:46:6d: 8d:9d:ad:44:cd:05:22:a2:b6:2f:59:f1:60:12:80:16:b4:5a: ec:8b:d2:9b:68:01:e5:9b:85:e1:23:38:6e:17:c2:af:b5:7a: 7d:f1:0a:f6:10:4f:b7:e0:41:cd:2e:5d:40:23:02:c6:ed:6b: 1d:7e:75:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJJ+kWJM9InVcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk M2QwNTZiOTQtZWQ4OS00NDFmLThiY2YtZjVlNmViMGE2NjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Cf7UgkxEZiJONqSj4h/qYuSdPOev+ZPczaj c3N8euBy98NYJtMqawkqj0RBc6HkTWzL1qcI24Cw/n9FU83c1mv3VKMRIitL5w+X 6SZBd54k0a/z/U4A5ZfCWBowqGooOXWRKz8Saxpyznabr9mMsv8VfrRwC2RrkLbf lJQOMAOv7B+CTSpp++bvSBdM9xS50Zb1TU0t9XUdjk4vlkz6YDmKSSpEqUJYbBgl fpOodSXGiEYYjlY2zYU0WlVZ9+Y9tKrLzwzBvELNAR5nR8GXGV5wm1RUtVy/tNEc oNnC5y3zWGY5cF4Tokt0x0tlpzFRz9domb2RL9clxWijRXOaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1nVzAjpXUsv9swp3oNcMzh6s/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvM2I3YmU0ZGItODQ1YS0z NjZjLTgzYWQtOTQ4YTJmYjUwYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRaAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUwwjwhpfH4ouHtprTyN4PWNB6J9n0HEuGC/L4OdqOyUeV24jEknC9S Kakd340MlUczZmj/ShRrIppQBsZtTHIYnowb8yOLbffp44ImQ7k93YuTV3zKRVEt DXMKkjQCFioRsPlHSJK9hVQJDMu/bNxlLmBlM9JBD7H3f5gCOwu6jumd8PXkrfH3 7vN6TJ0wmEsbH/XxWOUtU2PJnF3t7xZ8z/eHnG/6LpDuHwg/mVlgvDabJGlW3aC7 Sn/+mFV8oXUs4OJGbY2drUTNBSKiti9Z8WASgBa0WuyL0ptoAeWbheEjOG4Xwq+1 en3xCvYQT7fgQc0uXUAjAsbtax1+dcU= -----END CERTIFICATE-----Generated at Tue Jul 7 11:51:53 2026 by rpki-client