$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa File: a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa (raw, json) Hash identifier: aFJOkqop3ZneEh2N8xTujB1Rzm+2AUyiVCfA5f3toEw= Subject key identifier: CB:C1:D5:5B:F4:7E:CF:B3:E3:75:0F:43:A9:C8:FC:BA:2B:CD:A3:81 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584E54B4925AC27509DF21E7F820 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 20454 IP address blocks: 69.160.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:92:5a:c2:75:09:df:21:e7:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=799765da-1d24-43c9-8b5b-663524119f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:64:0c:86:1c:eb:ff:07:5c:10:f1:6e:cc: e4:75:f0:6f:58:45:74:0a:1c:af:f8:6a:ee:df:29: 74:9c:b0:dc:ec:a3:7b:e7:77:96:03:55:ba:a9:a6: ae:04:b1:da:d1:32:6d:b0:04:bf:2d:00:0e:ca:05: 26:cb:af:a0:69:87:a0:a2:a1:1a:81:22:db:5f:d8: db:9c:7e:98:21:ca:e7:7c:dd:d3:b2:a7:4f:67:19: ff:85:d1:0a:05:d6:c4:2a:24:29:d7:0c:3b:51:9f: c6:db:9a:8a:59:dc:f5:c7:57:df:1e:89:42:2b:0f: ac:59:36:41:ed:38:6b:54:00:41:4b:2b:24:38:6a: 93:2c:8c:0a:94:35:1d:92:c7:27:f7:99:26:38:51: a2:91:60:ef:c4:d1:b2:7f:65:fc:0f:d8:5d:81:5b: 76:45:e3:0c:a9:52:db:13:22:04:bc:42:87:39:b9: 9e:25:d9:cc:b8:ec:a4:9b:d9:13:cf:f8:be:21:f6: f5:31:e6:e2:6d:74:be:ad:59:25:48:7e:64:e9:3a: fe:fb:27:0f:d1:2b:49:6a:19:e0:ba:87:3f:d9:24: 48:a1:6b:b8:73:3d:98:48:36:d1:46:ee:a5:32:bb: d0:af:7e:1f:d5:82:c4:8c:57:f8:8d:c6:01:be:f8: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:D5:5B:F4:7E:CF:B3:E3:75:0F:43:A9:C8:FC:BA:2B:CD:A3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e6:cd:6c:c9:02:9c:13:60:2a:c4:8b:e0:40:7b:e3:f7:7f: 96:66:9e:53:8b:45:1b:80:b8:e0:4f:ee:e0:c9:e8:c3:98:ea: 64:b6:da:49:82:1b:26:60:5f:40:46:2c:f0:53:24:2f:3e:2f: 50:f5:70:65:29:59:21:9c:c9:1e:ae:eb:f0:8e:b0:8c:19:c0: 68:ac:35:8b:4d:17:39:bb:f7:e3:03:a5:70:1b:94:18:01:1c: 8e:53:ac:88:5d:dd:b6:3f:42:d0:16:7f:29:f2:63:60:2f:8f: bc:49:59:f6:60:c8:45:f5:08:65:a2:0a:9b:a5:d5:69:b4:13: 1f:37:81:cb:a3:5a:73:e4:d1:5b:e7:fc:c5:1f:d1:50:d4:99: 78:be:c8:2c:3e:fe:0c:8a:2c:9e:87:82:56:39:42:0f:e8:fa: 64:f0:39:8b:de:cd:12:8b:73:7e:0c:d1:de:35:45:38:f4:f8: e8:f6:c5:d3:db:83:e4:08:d8:ff:48:02:7b:39:4c:0a:07:2f: 3e:d6:25:42:b3:9d:0a:c7:c5:e5:57:29:9f:20:73:4b:7c:ad: d1:f2:9c:4a:7a:c9:9f:f0:99:52:43:a9:b8:10:5e:e9:47:b8: 4a:a1:31:f5:ec:17:b8:cd:0c:80:ba:95:f1:5d:5a:06:c6:5c: 12:c7:ac:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJJawnUJ3yHn+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk Nzk5NzY1ZGEtMWQyNC00M2M5LThiNWItNjYzNTI0MTE5ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXVkDIYc6/8HXBDxbszkdfBvWEV0Chyv+Gru 3yl0nLDc7KN753eWA1W6qaauBLHa0TJtsAS/LQAOygUmy6+gaYegoqEagSLbX9jb nH6YIcrnfN3TsqdPZxn/hdEKBdbEKiQp1ww7UZ/G25qKWdz1x1ffHolCKw+sWTZB 7ThrVABBSyskOGqTLIwKlDUdkscn95kmOFGikWDvxNGyf2X8D9hdgVt2ReMMqVLb EyIEvEKHObmeJdnMuOykm9kTz/i+Ifb1MebibXS+rVklSH5k6Tr++ycP0StJahng uoc/2SRIoWu4cz2YSDbRRu6lMrvQr34f1YLEjFf4jcYBvviq9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvB1Vv0fs+z43UPQ6nI/LorzaOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvYTBlZTcwYTktOGEzNC0z ODE1LWJmNWEtNGM5ZTA2NDFlZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRaAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELmzWzJApwTYCrEi+BAe+P3f5ZmnlOLRRuAuOBP7uDJ6MOY6mS22kmC GyZgX0BGLPBTJC8+L1D1cGUpWSGcyR6u6/COsIwZwGisNYtNFzm79+MDpXAblBgB HI5TrIhd3bY/QtAWfynyY2Avj7xJWfZgyEX1CGWiCpul1Wm0Ex83gcujWnPk0Vvn /MUf0VDUmXi+yCw+/gyKLJ6HglY5Qg/o+mTwOYvezRKLc34M0d41RTj0+Oj2xdPb g+QI2P9IAns5TAoHLz7WJUKznQrHxeVXKZ8gc0t8rdHynEp6yZ/wmVJDqbgQXulH uEqhMfXsF7jNDIC6lfFdWgbGXBLHrLg= -----END CERTIFICATE-----Generated at Tue Jul 7 11:53:18 2026 by rpki-client