$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8670e913-153f-34b3-8952-ef8ee3706f75.roa File: 8670e913-153f-34b3-8952-ef8ee3706f75.roa (raw, json) Hash identifier: +m784kL/GWAHJoiv4+4YwwIlO3g2JYFkilgLrn6b/ww= Subject key identifier: 05:96:EB:4A:BC:AE:11:53:62:4A:5A:49:21:73:AB:86:B5:68:CF:E9 Certificate issuer: /CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a Certificate serial: 010D0C9F4328584E92CC927790A041DA88E91420 Authority key identifier: 0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8670e913-153f-34b3-8952-ef8ee3706f75.roa Signing time: Tue 21 Jul 2026 14:48:43 +0000 ROA not before: Tue 21 Jul 2026 14:48:43 +0000 ROA not after: Mon 19 Oct 2026 14:48:43 +0000 asID: 25653 IP address blocks: 216.67.224.0/22 maxlen: 22 216.67.228.0/23 maxlen: 23 216.67.231.0/24 maxlen: 24 216.67.232.0/21 maxlen: 21 216.67.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:cc:92:77:90:a0:41:da:88:e9:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a Validity Not Before: Jul 21 14:48:43 2026 GMT Not After : Oct 19 14:48:43 2026 GMT Subject: CN=365de9d4-a656-4246-bf8e-ddceb8918e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cb:2c:65:c0:6b:e4:5c:0b:9f:cc:59:ec:5b: 06:d3:68:45:8c:f6:ec:ad:e0:b8:41:23:fd:b5:b7: 53:49:25:be:68:6c:82:a7:58:4d:bd:43:fa:f4:81: ec:0d:ff:4b:f8:b5:4d:8f:cf:93:83:24:9e:0e:5d: 4e:46:55:3e:60:07:0e:43:d4:d7:37:dc:47:d3:45: 91:ab:5f:a2:85:ef:42:a1:3c:26:3a:20:7b:98:b4: 82:77:ae:37:26:42:94:cd:aa:70:fd:ba:0f:72:d2: 27:33:41:f8:7e:98:6e:a0:e7:e7:7e:13:27:d6:03: 87:53:fa:63:af:43:9b:62:3a:6c:df:68:e8:15:9e: 7c:df:b5:ed:67:23:86:6b:3b:28:87:f3:bd:64:b5: 8e:50:db:fd:e6:7a:52:6e:cd:f9:e0:a2:bc:1b:4b: 91:e8:01:d7:13:2d:9e:57:d2:af:17:20:2b:8d:3d: b4:cd:4d:f0:32:1b:42:38:46:5b:82:50:b4:e1:59: 62:8b:06:c1:02:b5:14:c7:64:b6:45:4c:61:61:07: a7:d0:f9:22:ba:b7:d7:7c:93:a5:41:40:f1:8d:14: fe:62:8f:bd:87:eb:4c:19:e4:a9:0a:76:0e:d3:03: 6f:de:59:7c:40:d6:58:bd:47:9c:8e:23:76:de:bd: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:96:EB:4A:BC:AE:11:53:62:4A:5A:49:21:73:AB:86:B5:68:CF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8670e913-153f-34b3-8952-ef8ee3706f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl X509v3 Authority Key Identifier: keyid:0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer sbgp-ipAddrBlock: critical IPv4: 216.67.224.0-216.67.229.255 216.67.231.0-216.67.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3f:3d:f0:17:b6:95:e0:f6:96:8e:b1:45:81:95:d8:52:15: 1d:f6:f7:50:62:f0:db:37:57:0f:40:7d:5b:78:a4:95:90:c6: 48:1c:cb:2a:6e:1a:f1:a0:59:82:ec:63:f9:53:d2:7d:51:53: df:86:29:bb:e1:70:73:1a:16:07:c8:14:18:99:9a:11:04:42: 18:c7:d5:a9:4c:81:de:a5:b0:cb:cf:3e:cf:c7:38:74:97:fb: 78:cb:1a:e0:9f:55:be:14:4e:68:58:b7:51:00:44:6d:46:5f: 9e:7f:6a:95:bf:99:91:0a:91:24:82:80:97:54:7d:eb:04:fb: a0:15:cb:f2:4f:52:40:4f:f2:4b:86:d5:31:c1:20:76:10:3e: 95:a5:62:f9:e2:95:2d:da:9c:07:40:53:68:33:fd:12:39:21: c8:03:bf:ad:13:67:31:7b:fc:45:e0:68:88:d0:0d:e4:ef:c1: fb:8c:26:06:5b:35:40:4c:1a:38:ef:7e:94:59:42:f2:e7:a0: 62:7d:7d:74:87:ea:48:e0:1c:fc:dc:01:70:1a:2e:0b:8f:e0: ba:51:fa:ff:3b:66:7a:3b:df:a5:58:6c:c8:c7:1b:03:28:30: 96:56:f1:94:f5:5d:3a:63:82:89:0e:92:d3:53:ca:53:5c:78: 2a:b6:a7:f0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6SzJJ3kKBB2ojpFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1OWMzNmMtMTcxOC00YTQyLWE1YzEtZTNlNjI3NGQ5 NDNhMB4XDTI2MDcyMTE0NDg0M1oXDTI2MTAxOTE0NDg0M1owLzEtMCsGA1UEAxMk MzY1ZGU5ZDQtYTY1Ni00MjQ2LWJmOGUtZGRjZWI4OTE4ZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88ssZcBr5FwLn8xZ7FsG02hFjPbsreC4QSP9 tbdTSSW+aGyCp1hNvUP69IHsDf9L+LVNj8+TgySeDl1ORlU+YAcOQ9TXN9xH00WR q1+ihe9CoTwmOiB7mLSCd643JkKUzapw/boPctInM0H4fphuoOfnfhMn1gOHU/pj r0ObYjps32joFZ5837XtZyOGazsoh/O9ZLWOUNv95npSbs354KK8G0uR6AHXEy2e V9KvFyArjT20zU3wMhtCOEZbglC04VliiwbBArUUx2S2RUxhYQen0PkiurfXfJOl QUDxjRT+Yo+9h+tMGeSpCnYO0wNv3ll8QNZYvUecjiN23r2ZcwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFAWW60q8rhFTYkpaSSFzq4a1aM/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU5 YzM2Yy0xNzE4LTRhNDItYTVjMS1lM2U2Mjc0ZDk0M2EvODY3MGU5MTMtMTUzZi0z NGIzLTg5NTItZWY4ZWUzNzA2Zjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1OWMzNmMtMTcxOC00YTQyLWE1 YzEtZTNlNjI3NGQ5NDNhLzhkNTljMzZjLTE3MTgtNGE0Mi1hNWMxLWUzZTYyNzRk OTQzYS5jcmwwHwYDVR0jBBgwFoAUDeKeZCfSsGc40SANeaVnnq3QosQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU5YzM2Yy0xNzE4LTRhNDItYTVjMS1lM2U2 Mjc0ZDk0M2EuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAXYQ+AD BAHYQ+QwCwMEANhD5wMDAthAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG8/PfAXtpXg9paOsUWBldhSFR32 91Bi8Ns3Vw9AfVt4pJWQxkgcyypuGvGgWYLsY/lT0n1RU9+GKbvhcHMaFgfIFBiZ mhEEQhjH1alMgd6lsMvPPs/HOHSX+3jLGuCfVb4UTmhYt1EARG1GX55/apW/mZEK kSSCgJdUfesE+6AVy/JPUkBP8kuG1THBIHYQPpWlYvnilS3anAdAU2gz/RI5IcgD v60TZzF7/EXgaIjQDeTvwfuMJgZbNUBMGjjvfpRZQvLnoGJ9fXSH6kjgHPzcAXAa LguP4LpR+v87Zno736VYbMjHGwMoMJZW8ZT1XTpjgokOktNTylNceCq2p/A= -----END CERTIFICATE-----Generated at Wed Jul 22 21:53:20 2026 by rpki-client